JP4320012B2 - PC client software authentication system and PC client software authentication method - Google Patents

Description

  The present invention relates to a personal computer (hereinafter abbreviated as PC) client software authentication system, and more particularly to an authentication system for PC client software capable of cooperating with a mobile terminal.

When authentication is performed in order to receive a specific service in PC client software operating on a PC, authentication is performed using the user ID and password by inputting a user ID and password unique to the normal user. Further, when user authentication is performed on a mobile terminal such as a mobile phone, a one-time password used for user authentication on the network is generated for the mobile terminal based on the user identifier (patent) Reference 1).
JP 2004-171056 A

  However, the user authentication in the PC client software and the user authentication performed in the mobile terminal are completely different, and the present situation is that they cannot perform the same user authentication in cooperation with each other. On the other hand, in recent years, there is a demand for receiving services that can be used on a mobile terminal even on a PC, and there is a request for using PC user software for secure user authentication performed on the mobile terminal.

  The present invention has been made in view of the above points, and PC client software authentication that can perform the same authentication as authentication performed on a mobile terminal from PC client software by linking the mobile terminal and PC client software. An object is to provide a system and a PC client software authentication method.

  The PC client software authentication system of the present invention includes a first database storing first related information in which a user's mobile phone number and password are associated, and PC client software in which the user's mobile phone number and password are securely registered. A PC software management device on a mobile communication network, and a mobile phone number and a user ID associated with each other, the first conversion means for converting the sent password into a mobile phone number based on the first related information A mobile communication network comprising: a second database storing second related information; and second conversion means for converting a mobile phone number sent from a PC software management server into a user ID based on the second related information On a network outside the mobile communication network, comprising a device and a specifying means for specifying a user of the user ID using the user ID Characterized by comprising a service provider device.

  According to this configuration, authentication is performed using a mobile phone number that is embedded in the PC client software and cannot be tampered with. Thus, since the mobile phone number is embedded in the PC client software, that is, the mobile phone number is securely registered in the PC client software, so-called “spoofing” by a third party becomes impossible. In addition, since the user ID associated with the mobile phone number is sent to the service provider, user authentication can be performed on the CP server side in the same manner as the mobile phone, thereby identifying the user. Further, since authentication is automatically performed by starting the PC client software, the user does not need a special operation for authentication. Furthermore, there is no need to store a user ID or password. As described above, according to the present system and method, the same authentication as that performed on the mobile terminal can be performed from the PC client software by linking the mobile terminal and the PC client software. In this case, it is possible to improve user convenience while ensuring security.

  In the PC client software authentication system of the present invention, it is preferable that the second conversion means converts a mobile phone number sent from a mobile terminal into a user ID based on the second related information.

  In the PC client software authentication system of the present invention, password issuing means for issuing a password corresponding to the sent mobile phone number, and the password issuing means based on the mobile phone number and the password sent from the PC client software It is preferable to comprise a password generation device comprising first authentication means for authenticating whether or not the password is issued in (1). According to this configuration, the mobile phone number can be securely registered in the PC client software.

  In the PC client software authentication system of the present invention, it is preferable that the PC software management device has a second authentication unit for authenticating a password sent from the PC client software based on the first related information.

  In the PC client software authentication system of the present invention, it is preferable that the first conversion means converts the mobile terminal identification information sent from the PC client software into PC identification information.

  The PC client software authentication method of the present invention includes a step of sending the password from a PC client software in which a user's mobile phone number and password are securely registered to a PC software management device on a mobile communication network; A step of converting a password into a mobile phone number using first related information in which a user's mobile phone number and password are associated; a step of sending the converted mobile phone number to a mobile communication network device; and the mobile communication In the network device, using the second related information associating the mobile phone number with the user ID, converting the sent mobile phone number into a user ID; and the user ID on a network outside the mobile communication network Sending to the service provider device, and in the service provider device, using the user ID, the user I Characterized by comprising the step of identifying the user of the.

  According to this method, authentication is performed using a mobile phone number that is embedded in the PC client software and cannot be falsified. Thus, since the mobile phone number is embedded in the PC client software, that is, the mobile phone number is securely registered in the PC client software, so-called “spoofing” by a third party becomes impossible. In addition, since the user ID associated with the mobile phone number is sent to the service provider, user authentication can be performed on the CP server side in the same manner as the mobile phone, thereby identifying the user. Further, since authentication is automatically performed by starting the PC client software, the user does not need a special operation for authentication. Furthermore, there is no need to store a user ID or password. As described above, according to the present system and method, the same authentication as that performed on the mobile terminal can be performed from the PC client software by linking the mobile terminal and the PC client software. In this case, it is possible to improve user convenience while ensuring security.

  In the PC client software authentication method of the present invention, a step of sending a mobile phone number from a mobile terminal to a password generation device, a step of issuing a password corresponding to the mobile phone number in the password generation device, and the mobile phone A step of inputting the number and the password into the PC client software, a step of sending the mobile phone number and the password from the PC client software to the password generation device, and a password sent by the password generation device. Preferably, the method includes a step of authenticating whether the password is valid, and a step of embedding the password in the PC client software when the transmitted password is an issued password. According to this method, the password and the mobile phone number can be securely registered in the PC client software.

  In the PC client software authentication method of the present invention, it is preferable that the PC software management apparatus includes a step of authenticating a password sent from the PC client software based on the first related information.

  The PC client software authentication method of the present invention preferably includes a step of converting the mobile terminal identification information sent from the PC client software into PC identification information.

  The PC client software authentication system of the present invention sends a password from the PC client software in which the user's mobile phone number and password are securely registered to the PC software management device on the mobile communication network, and the PC software management device carries the password. Convert the phone number to the mobile communication network device and convert the mobile phone number to the user ID in the mobile communication network device and provide the user ID on the network outside the mobile communication network Authentication is performed at the mobile terminal even from the PC client software by linking the mobile terminal and the PC client software, since the user of the user ID is specified using the user ID at the service provider apparatus. The same authentication can be performed.

  The present inventors can specify a user on the service provider side by sending a user ID corresponding to each mobile terminal to the service provider, thereby ensuring security in service provision. Pay attention to, and securely register the mobile phone number and password in the PC client software beforehand, and when receiving service provision from the PC client software, convert the password to the user ID via the mobile phone number, By sending it to the provider, it was found that the same authentication as that performed by the mobile terminal can be performed from the PC client software, and the present invention has been achieved.

  That is, the gist of the present invention is that a password is sent from a PC client software in which a user's mobile phone number and password are securely registered to a PC software management device on a mobile communication network, and the password is stored in the PC software management device. And the mobile phone number is sent to the mobile communication network device. In the mobile communication network device, the mobile phone number is converted into a user ID and the user ID is converted to a service provider device on a network outside the mobile communication network. Authentication performed by the mobile terminal even from the PC client software by linking the mobile terminal and the PC client software by identifying the user of the user ID using the user ID in the service provider device. It is to perform the same authentication.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.
FIG. 1 is a diagram showing a schematic configuration of a PC client software authentication system according to an embodiment of the present invention. The system shown in FIG. 1 is connected to a mobile terminal 1 which is a user terminal, a mobile communication network center 6 connected to the mobile terminal 1 via a core network 2 which is a mobile communication network, and a mobile communication center 6. The one-time password generation server 3 and the PC software management server 4, the back-end system 5 of the PC software management server 4, the service server 7 connected to the mobile communication network center 6, the mobile terminal 1 and the Internet 8. It is mainly composed of other terminal devices connected via such a network, such as a personal computer (PC) 9 and a content provider server 10.

  In the system having such a configuration, a mobile phone number is sent from the mobile terminal 1 to the one-time password generation server 3, and a password corresponding to the mobile phone number is issued in the one-time password generation server 3. After the mobile phone number and password are input to the PC client software, the mobile phone number and password are sent from the PC client software to the one-time password generation server 3, and the password sent from the PC client software is sent to the one-time password generation server 3. Authenticate whether it is an issued password, and if the password sent from the PC client software is the issued password, securely register the password in the PC client software (embed the password in the PC client software) .

  In the system having such a configuration, a password is sent from the PC client software in which the user's mobile phone number and password are embedded to the PC software management server 4, and the PC software management server 4 supports the user's password. To the mobile communication network center 6, which converts the mobile phone number into a corresponding user ID and converts the user ID into a content provider on the Internet 8. The data is sent to a server (hereinafter abbreviated as “CP server”) 10, and the user of the user ID is specified using the user ID in the CP server 10.

  FIG. 2 is a schematic block diagram showing a one-time password generation server used in the PC client software authentication system according to the embodiment of the present invention. The one-time password generation server 3, which is a password generation device, includes a control unit 31 that controls the entire device, a transmission / reception unit 32 that transmits and receives information such as passwords and mobile phone numbers, and a user who has sent a mobile phone number. Sent from the PC client software using the password issuing unit 33 for issuing the password, the storage unit 34 storing the related information in which the user's mobile phone number and the password are associated, and the password issued by the password issuing unit 33. It is mainly composed of an authentication unit 35 that authenticates the received password.

  The control unit 31 instructs the transmission / reception unit 32 to transmit / receive, instructs the password issuing unit 33 to issue a password, instructs the authentication unit 35 to perform authentication, and is stored in the database 34. The management table that associates the mobile phone number with the one-time password is managed.

  The transmission / reception unit 32 receives the mobile phone number and the one-time password, which are portable identification data, and transmits the issued one-time password and the authentication result of the one-time password. The transmission / reception unit 32 also transmits / receives various other data.

  The password issuing unit 33 issues a one-time password to the mobile phone number acquired via the transmission / reception unit 32. The issued one-time password is registered in the database 34 as related information in combination with the mobile phone number.

  The authentication unit 35 performs authentication by comparing the related information stored in the database 34 with related information that is a combination of a one-time password and a mobile phone number sent from the PC client software. The authentication unit 35 sends the authentication result to the control unit 31, and the control unit 31 instructs the transmission / reception unit 32 to send it to the PC software management server 4.

  FIG. 3 is a schematic block diagram showing a PC software management server used in the PC client software authentication system according to the embodiment of the present invention. A PC software management server 4 that is a PC software management device includes a control unit 41 that controls the entire device, a transmission / reception unit 42 that transmits and receives information such as a one-time password and a mobile phone number, and a one-time corresponding to PC client software. An authentication unit 43 that performs authentication using a password, a database 44 that stores related information that associates PC client software with a one-time password, and converts the one-time password into a corresponding mobile phone number, or portable identification data Is mainly composed of a setting unit 45 that changes the PC identification data to PC identification data.

  The control unit 41 instructs the transmission / reception unit 42 to perform transmission / reception, instructs the authentication unit 43 to perform authentication, and stores the database 44 in association with the user, the mobile phone number, and the one-time password. Manage tables.

  The transmission / reception unit 42 transmits / receives a mobile phone number, a one-time password, and / or PC identification data that are mobile identification data, and transmits / receives authentication results, as well as various data.

  The authentication unit 43 authenticates the one-time password associated with the PC client software. Further, the authentication unit 43 sends the authentication result to the control unit 41. If the authentication result is NG, the control unit 41 instructs the transmission / reception unit 42 to send to the PC client software, and the authentication result is OK. If it is, an instruction to send information such as a mobile phone number corresponding to the one-time password to the back-end system is issued.

  The database 44 stores related information that associates the PC client software and the one-time password for each user. This related information is managed as a management table as shown in FIG. In the management table shown in FIG. 4, a mobile phone number and a one-time password are associated with each user.

  The setting unit 45 refers to the management table stored in the database 44 and converts the one-time password sent from the PC client software into a corresponding mobile phone number. The setting unit 45 sends the mobile phone number to the control unit 41, and the control unit 41 instructs the transmission / reception unit 42 to send the mobile phone number to the mobile communication network center 6.

  FIG. 5 is a schematic block diagram showing a mobile communication network center used in the PC client software authentication system according to an embodiment of the present invention. A mobile communication network center 6 that is a device for mobile communication network includes a control unit 61 that controls the entire device, a transmission / reception unit 62 that transmits and receives information such as a mobile phone number and a user ID, and a mobile phone number and a user ID. It is mainly composed of a database 63 that stores related information that is associated, and a conversion unit 64 that converts a mobile phone number into a user ID corresponding to the mobile phone number. The mobile communication network center 6 is connected to another terminal device such as a personal computer (PC) via a network such as the Internet, and has a gateway function for connecting the mobile communication network and a network such as the Internet. Specifically, it has an information distribution function, a mail transmission / reception function, a mail storage function, a contract customer management function, an information provider management function, and an information fee billing function.

  The control unit 61 instructs the transmission / reception unit 62 to transmit / receive, instructs the conversion unit 64 to convert the mobile phone number into a user ID, and stores the mobile phone number and user stored in the database 63. A management table that associates IDs is managed.

  The transmission / reception unit 62 transmits a mobile phone number, which is portable identification data, to the service server 7 and transmits a user ID to the CP server 10. The transmission / reception unit 62 transmits / receives various data to / from the mobile terminal 1, the service server 7, and / or the CP server 10.

  The database 63 stores related information in which a mobile phone number as portable identification data is associated with a user ID as user identification information. This related information is managed as a management table as shown in FIG. 6, for example. In the management table shown in FIG. 6, the mobile phone number is associated with the user ID.

  The conversion unit 64 refers to the management table stored in the database 63 and converts the mobile phone number sent from the mobile terminal 1 or the PC software management server 4 into a corresponding user ID. The conversion unit 64 sends the converted user ID to the control unit 61, and the control unit 61 instructs the transmission / reception unit 62 to send the user ID to the CP server 10. The conversion unit 64 sends the mobile phone number to the control unit 61, and the control unit 61 instructs the transmission / reception unit 62 to send the mobile phone number to the service server 7.

  FIG. 7 is a schematic block diagram showing a CP server used in the PC client software authentication system according to the embodiment of the present invention. The CP server 10 that is a service provider device includes a control unit 1001 that controls the entire device, a transmission / reception unit 1002 that transmits and receives information such as a user ID, and a database 1003 that stores related information that associates a user with a user ID. And a determination unit 1004 for determining whether or not the user ID is a registered user.

  The control unit 1001 instructs the transmission / reception unit 1002 to transmit / receive, instructs the determination unit 1004 to determine the user ID, and stores the association between the user and the user ID stored in the database 1003. Manage information.

  The transmission / reception unit 1002 receives the user ID from the mobile communication network center 6. The transmission / reception unit 1002 transmits / receives various data to / from the mobile terminal 1.

  The database 1003 stores related information that associates a user with a user ID that is user identification information. This related information is managed as a management table (not shown), for example.

  The discriminating unit 1004 discriminates whether or not the user ID sent from the mobile communication network center 6 is a user ID registered in advance based on related information that associates the user and the user ID stored in the database 1003. To do. Further, the determination unit 1004 sends the determination result to the control unit 1001, and when the determination result is OK, the control unit 1001 instructs the transmission / reception unit 1002 to send various contents to the PC 9. In addition, when the determination result is OK, the determination unit 1004 instructs the transmission / reception unit 1002 to transmit the determination result to the mobile communication network center 6.

  In the PC client software authentication system having the above configuration, the one-time password is sent to the PC software management server 4 from the PC client software in which the user's mobile phone number and one-time password are embedded. Using the related information that associates the mobile phone number with the password, the one-time password is converted into a mobile phone number, and the converted mobile phone number is sent to the mobile communication network center 6. Using the related information that associates the user ID with the user ID, the sent mobile phone number is converted into a user ID, and the user ID is sent to the CP server 10. Is identified.

  When the one-time password and the mobile phone number are securely registered in the PC client software, the mobile phone number is sent from the mobile terminal 1 to the password generation server 3, and the password generation server 3 receives the one-time password corresponding to the mobile phone number. The mobile phone number and the one-time password are input to the PC client software, and the mobile phone number and the one-time password are sent from the PC client software to the one-time password generation server 3. Authenticates that the password is a one-time password issued. If the sent one-time password is an issued one-time password, the one-time password and mobile phone number are securely registered in the PC client software, that is, the one-time password and mobile phone number are embedded in the PC client software. . As a method of embedding the one-time password and the mobile phone number in the PC client software, a method that can be normally performed by those skilled in the art can be used, and there is no particular limitation.

  In such a PC client software authentication system and method, authentication is performed using a mobile phone number that is embedded in the PC client software and cannot be tampered with. Thus, since the mobile phone number is embedded in the PC client software, that is, the mobile phone number is securely registered in the PC client software, so-called “spoofing” by a third party becomes impossible. In addition, since the user ID associated with the mobile phone number is sent to the CP server (service provider), the user authentication can be performed on the CP server side in the same manner as the mobile phone, thereby identifying the user. Become. Further, since authentication is automatically performed by starting the PC client software, the user does not need a special operation for authentication. Furthermore, there is no need to store a user ID or password. As described above, according to the present system and method, the same authentication as that performed on the mobile terminal can be performed from the PC client software by linking the mobile terminal and the PC client software. In this case, it is possible to improve user convenience while ensuring security.

  Next, the PC client software authentication method of the present invention will be described with reference to FIG. FIG. 8 is a sequence diagram showing an example of one-time password embedding in the PC client software authentication method according to the embodiment of the present invention.

  First, a mobile phone number and a one-time password (product key) are securely registered in the PC client software. A mobile phone number is sent from the mobile terminal 1 to the one-time password generation server 3 (ST101). In the one-time password generation server 3, the mobile phone number is acquired via the transmission / reception unit 32, and the control unit 31 instructs the password issuing unit 33 to issue a one-time password (ST102). Next, the control unit 31 gives an instruction to send the issued one-time password to the mobile terminal 1, and sends the one-time password to the mobile terminal 1 via the transmission / reception unit 32 (ST103). At this time, the one-time password generation server 3 stores the transmitted mobile phone number and the issued one-time password in the database 34 in association with each other. The mobile terminal 1 acquires a one-time password and stores it in a memory. The one-time password is displayed on the display unit using a native function installed in the mobile terminal 1.

  Next, when installing the PC client software on the PC 9, the user of the mobile terminal 1 inputs the one-time password and the mobile phone number on the initial registration screen (ST104). This one-time password and mobile phone number are sent to the PC software management server 4 via the Internet 8 (ST105). In the PC software management server 4, an instruction to acquire the one-time password and the mobile phone number via the transmission / reception unit 42 and the control unit 41 sends the one-time password and the mobile phone number to the transmission / reception unit 42 to the one-time password generation server 3. Then, the one-time password and the mobile phone number are sent to the one-time password generation server 3 via the transmission / reception unit 42 (ST106). At this time, the one-time password and the mobile phone number are stored in a memory or the like.

  In the one-time password generation server 3, the authentication unit 35 performs authentication by comparing the sent one-time password with the related information (one-time password) stored in the database 34 (ST107). If the authentication in the authentication unit 35 is OK, the control unit 31 instructs the transmission / reception unit 32 to send the authentication result to the PC software management server 4, and the authentication result is sent to the PC software management server 4 (ST108).

  In the PC software management server 4, upon receiving the authentication result, the control unit 41 registers the one-time password and mobile phone number stored in the memory in the database 44 (ST109), and sends an authentication result to the PC 9 I do. If the mobile phone number to be registered in the database 44 has already been registered, the one-time password and mobile phone number are overwritten. As a result, the previously registered PC client software can be invalidated in this system.

  The authentication result is sent to the PC 9 via the Internet 8 (ST110). In the PC 9, the one-time password and mobile phone number input to the PC client software are embedded in the PC client software (ST111).

  Here, the authentication of the one-time password when there is an old PC client software registered before and a newly registered client software will be described. FIG. 9 is a sequence diagram showing an example of one-time password authentication in the PC client software authentication method according to the embodiment of the present invention.

  The back-end system 5 is accessed using the old PC client software registered previously (ST201). At this time, the old PC client software sends the one-time password registered previously to the PC software management server 4 (ST201). Therefore, a request to the back-end system and a one-time password are sent to the PC software management server 4 via the Internet 8.

  In the PC software management server 4, a one-time password is acquired via the transmission / reception unit 42, and the control unit 41 authenticates the authentication unit 43 by comparing the one-time password with the one-time password stored in the database 44. (ST202). Since the one-time password of the old PC client software is used, the authentication is NG. The control unit 41 instructs the transmission / reception unit 42 to send the authentication result to the old PC client software, and the authentication result is sent to the old PC client software via the Internet 8 (ST203).

  Next, the back-end system 5 is accessed using the newly registered new PC client software (ST204). At this time, the new PC client software sends the one-time password when newly registered to the PC software management server 4 (ST204). Therefore, a request to the back-end system and a one-time password are sent to the PC software management server 4 via the Internet 8.

  In the PC software management server 4, a one-time password is acquired via the transmission / reception unit 42, and the control unit 41 authenticates the authentication unit 43 by comparing the one-time password with the one-time password stored in the database 44. (ST205). Since the one-time password of the new PC client software is used, the authentication is OK. The setting unit 45 refers to the management table stored in the database 44 and converts the one-time password into a corresponding mobile phone number. Then, the control unit 41 instructs the transmission / reception unit 42 to send a request to the back-end system and the mobile phone number to the back-end system 5. As a result, the request to the back-end system and its mobile phone number are sent to the back-end system 5 (ST206).

  The back-end system 5 has a management table in which mobile phone numbers and user names are associated in advance. Therefore, in the back-end system 5, the user name is specified from the acquired mobile phone number with reference to the management table. Then, the data is customized for the specified user (processing for the request is performed) (ST207). The customized data is sent as a processing result from the back-end system 5 to the PC software management server 4 (ST208), and further sent from the PC software management server 4 to the new PC client software via the Internet 8 (ST209).

  As described above, when the one-time password corresponding to the old PC client software is already registered, the one-time password and the mobile phone number are overwritten when the new PC client software is registered. The customized data cannot be received even if the one-time password corresponding to the old PC client software is used, and the customized data can be received only when the one-time password corresponding to the new PC client software is used.

  As described above, by securely registering the one-time password and the mobile phone number in the PC client software, the mobile terminal and the PC client software can be linked, and various services can be developed. Specifically, services that can be provided to the mobile terminal 1 can be developed on the Internet. For example, when electronic money managed on a server is used, this system can be used as a personal authentication method.

  Here, a case where electronic money is used on i-mode (registered trademark) will be described. FIG. 10 is a sequence diagram for explaining service provision using the PC client software authentication method according to the embodiment of the present invention. When site information for i-mode (registered trademark) is sent from the CP server 10 to the mobile terminal 1 via the Internet 8 and the core network 2, the mobile terminal 1 displays the site information using a native function on the screen. (ST301).

  In the mobile terminal 1, the user confirms the site information and intends to pay for the site information with electronic money. For example, the user purchases a product provided by the CP, and the product price is paid with the electronic money. When paying, mobile terminal 1 transmits the mobile phone number to mobile communication network center 6 via core network 2 (ST302).

  In the mobile communication network center 6, the mobile phone number is acquired via the transmission / reception unit 62. The control unit 61 instructs the conversion unit 64 to convert the acquired mobile phone number into a corresponding user ID. Conversion unit 64 refers to the management table (FIG. 6) stored in database 63 and converts the mobile phone number into a user ID (ST303). The control unit 61 gives an instruction to send the converted user ID to the CP server 10. As a result, the user ID is transmitted from the transmission / reception unit 62 to the CP server 10 via the Internet 8 (ST305). Further, the control unit 61 instructs to send the mobile phone number to the electronic money server which is the service server 7. Thereby, the mobile phone number is sent from the transmitting / receiving unit 62 to the electronic money server (ST304).

  In the CP server 10, the determination unit 1004 determines whether the sent user ID is a registered user ID, and if it is a registered user ID, confirms the distribution of the payment value corresponding to the product price. (ST306). The control unit 1001 instructs the mobile communication network center 6 to send a payment value distribution confirmation as a result report. As a result, a confirmation result (OK) is sent from the transmitting / receiving unit 1002 to the mobile communication network center 6 via the Internet (ST307).

  In the mobile communication network center 6, the control unit 61 gives an instruction to send the received confirmation result to the electronic money server. Thereby, the confirmation result (OK) is sent to the electronic money server (ST308). Next, in the electronic money server, the electronic money corresponding to the commodity price is subtracted from the electronic money stored by the user with respect to the user corresponding to the transmitted mobile phone number (ST309).

  Next, a case where electronic money is used on the Internet will be described. FIG. 11 is a sequence diagram for explaining service provision using the PC client software authentication method according to the embodiment of the present invention. When the site information for PC is sent from the CP server 10 to the PC 9 via the Internet 8, the PC 9 displays the site information on the screen (ST401).

  At PC9, the user confirms the site information and wants to pay for the site information with electronic money. For example, the user purchases a product provided by CP and pays the product price with electronic money. Then, the PC 9 transmits the one-time password embedded in the PC client software to the PC software management server 4 via the Internet 8 (ST402).

  In the PC software management server 4, a one-time password is acquired via the transmission / reception unit 42. The control unit 41 instructs the setting unit 45 to convert the acquired one-time password into a corresponding mobile phone number. Setting unit 45 refers to the management table (FIG. 4) stored in database 44 and converts the one-time password into a mobile phone number (ST403). The control unit 41 instructs to send the converted mobile phone number to the mobile communication network center 6. Thereby, the mobile phone number is sent from the transmitting / receiving unit 42 to the mobile communication network center 6 (ST404).

  In the mobile communication network center 6, as in the case of access from a mobile terminal, a mobile phone number is acquired via the transmission / reception unit 62, and the mobile phone number is converted into a user ID (ST405). Then, the user ID is sent from the transmission / reception unit 62 to the CP server 10 via the Internet (ST407). In addition, the mobile phone number is sent from the transmitting / receiving unit 62 to the electronic money server (ST406).

  In the CP server 10, as in the case of access from a mobile terminal, it is determined whether the sent user ID is a registered user ID, and if it is a registered user ID, it corresponds to the commodity price. Distribution of payment value is confirmed (ST408). Then, the confirmation result (OK) is sent from the transmission / reception unit 1002 to the mobile communication network center 6 via the Internet 8 (ST409).

  The mobile communication network center 6 sends a confirmation result (OK) to the electronic money server as in the case of access from a mobile terminal (ST410). Next, in the electronic money server, the electronic money corresponding to the commodity price is subtracted from the electronic money stored by the user for the user corresponding to the sent mobile phone number (ST411).

  As described above, according to the method according to the present embodiment, whether the access is from the mobile terminal 1 or the access from the PC 9, the mobile communication network center, the service server 7, and the CP server 10 are connected. The processing procedure is the same. Therefore, the existing infrastructure of the mobile terminal 1 can be used for access from the PC 9. As a result, a system that can only be provided on the mobile terminal service until now can be used on the Internet, and the convenience of the user is improved. Also, for CP, the number of sites that can support stems that can be provided on the mobile terminal service can be increased. Furthermore, since authentication is performed using a mobile phone number that cannot be tampered with that is embedded in the PC client software, the user can receive the service from the PC 9 with peace of mind.

  In the above description, the case of purchasing a product using electronic money is described. However, the present invention is not limited to this, and the present invention is such that the user answers a CP questionnaire and the CP server is the same as above. The present invention can also be applied to the case where electronic money is given to a user by performing authentication using an ID. Furthermore, in the above description, the case where electronic money is used as the payment value is explained. However, the CP server authenticates using the user ID in the same manner as above without subtracting the electronic money in the electronic money server. The present invention can also be applied to the case where payment is made for the product price with the payment system.

  Next, in the PC client software authentication system of the present invention, a case where a site registered as a menu on the mobile terminal 1 is viewed on the PC 9 will be described. FIG. 11 is a sequence diagram for explaining another service provision using the PC client software authentication method according to the embodiment of the present invention.

  When the user browses the site on PC 9, PC 9 transmits the one-time password embedded in the PC client software to PC software management server 4 via Internet 8 (ST501). In the PC software management server 4, a one-time password is acquired via the transmission / reception unit 42. The control unit 41 instructs the setting unit 45 to convert the acquired one-time password into a corresponding mobile phone number. Setting unit 45 refers to the management table (FIG. 4) stored in database 44 and converts the one-time password into a mobile phone number (ST502). The control unit 41 instructs to send the converted mobile phone number to the mobile communication network center 6. Thereby, the mobile phone number is transmitted from the transmitting / receiving unit 42 to the mobile communication network center 6 (ST503).

  In the mobile communication network center 6, the mobile phone number is acquired via the transmission / reception unit 62. The control unit 61 determines that the access is from the PC 9 by acquiring the mobile phone number, and issues an instruction to send a menu page for the PC to the PC 9 via the transmission / reception unit 62. Thereby, the menu page for PC is sent from the transmission / reception unit 62 to the PC 9 via the Internet 8 (ST504). In PC 9, the acquired menu page for PC is displayed on the screen (ST505).

  When the user selects a site to be browsed from the menu screen on PC 9, PC 9 transmits the one-time password embedded in the PC client software to PC software management server 4 via Internet 8 (ST506). In the PC software management server 4, a one-time password is acquired via the transmission / reception unit 42. The control unit 41 instructs the setting unit 45 to convert the acquired one-time password into a corresponding mobile phone number. Setting unit 45 refers to the management table (FIG. 4) stored in database 44 and converts the one-time password into a mobile phone number (ST507). The control unit 41 instructs to send the converted mobile phone number to the mobile communication network center 6. Thereby, the mobile phone number is sent from the transmitting / receiving unit 42 to the mobile communication network center 6 (ST508).

  In the mobile communication network center 6, the mobile phone number is acquired via the transmission / reception unit 62. The control unit 61 instructs the conversion unit 64 to convert the acquired mobile phone number into a corresponding user ID. Conversion section 64 refers to the management table (FIG. 6) stored in database 63 and converts the mobile phone number into a user ID (ST509). The control unit 61 gives an instruction to send the converted user ID to the CP server 10. Thereby, the user ID is sent from the transmission / reception unit 62 to the CP server 10 via the Internet 8 (ST510).

  In the CP server 10, the determination unit 1004 determines whether the transmitted user ID is a registered user ID (ST511). If it is a registered user ID, the control unit 1001 instructs the PC 9 to send a site page for PC. Thereby, the site page for PC is sent from the transmission / reception unit 1002 to the PC 9 via the Internet 8 (ST512). The PC 9 displays the acquired PC site page on the screen (ST513).

  As described above, according to the method according to the present embodiment, it is possible to browse the site in the menu registered in the mobile terminal 1 by accessing from the PC 9. In this case, since the CP side performs authentication using the mobile phone number embedded in the PC client software, it is not necessary to manage the user ID independently. In addition, the user can receive services that can be received on the mobile terminal 1 also on the PC 9. Furthermore, it is possible for the user to browse relatively large images and moving images, print out on paper, and the like, which are difficult on the mobile terminal 1.

  The PC client software authentication system of the present invention can be applied to various service provisions in addition to the services described above. For example, user authentication can be performed using a mobile phone number, and an application for a mobile terminal such as an i-appli (registered trademark) can be downloaded on the PC 9. In this case, it is necessary to mount an emulator for operating an application in the PC client software. Thereby, it becomes possible to perform the same application, for example, a game etc. with the mobile terminal 1 and PC9. Therefore, the user can execute the same application while at home or going out. In this system, there is no function added to the CP side.

  Furthermore, in the PC client software authentication system of the present invention, user authentication can be performed using a mobile phone number, and live content such as V Live (registered trademark) can be viewed on the PC 9 or can be used for Internet telephone calls. Examples of the payment method in this case include a method of paying with the payment value on the mobile terminal as described above, a method of paying with a payment system, and the like.

  In the PC client software authentication system of the present invention, authentication is performed by sending the user ID to the CP side by access from the PC 9. In this case, the CP side may not be able to determine whether the access is from the mobile terminal 1 or from the PC 9. For this reason, it is desirable to inform the CP side that the access is from the mobile terminal 1. In such a case, it is conceivable to use a user agent or use an identification flag. Here, a case where a user agent is used will be described.

  FIG. 13 is a sequence diagram for explaining an access destination determination method in service provision using the PC client software authentication method according to an embodiment of the present invention. In FIG. 13, when accessing from the mobile terminal 1 (X), the user agent (for example, DoCoMo / 2.0), which is portable identification data, is directly sent to the service server 7 or CP server via the mobile communication network center 6. Send to 10.

  On the other hand, when accessing from the PC 9 (Y), a user agent which is PC identification data that cannot be changed is set, and this user agent is sent to the PC software management server 4 and moved from the PC software management server 4 The data is sent to the service server 7 and the CP server 10 via the communication network center 6. In this case, if the PC client software performs HTTP communication with its own browser, a user agent (for example, DoCoMo / 1.0PCSoft), which is PC identification data used on the mobile terminal, is used. If HTTP communication is performed in cooperation with Internet Explorer or the like, a user agent (for example, Mozilla / 4.0 (compatible; MSIE 6.0)) shared between the mobile terminal and the PC is used.

  When the user agent is disguised and accessed as a mobile terminal (Z), the PC software management server 4 uses the PC identification data for the user agent (for example, DoCoMo / 2.0) that is portable identification data. The user agent (for example, DoCoMo / 1.0PCSoft) is converted, and this user agent is sent from the PC software management server 4 to the service server 7 and the CP server 10 via the mobile communication network center 6.

  When content is downloaded to the mobile terminal 1, copyright protection is relatively easy. However, when content is downloaded to the PC 9, copyright protection is difficult because copy is easy. As described above, by determining whether the access is from the mobile terminal 1 or from the PC 9, in the case of the access from the PC 9, it is possible to restrict the download of the content, thereby strengthening the copyright protection. It becomes possible.

  The present invention is not limited to the embodiment described above, and can be implemented with various modifications. For example, the procedure and block configuration in the above-described embodiment are not limited to this, and can be appropriately changed and implemented without departing from the scope of the present invention.

It is a figure which shows schematic structure of the PC client software authentication system which concerns on one embodiment of this invention. It is a schematic block diagram which shows the one time password production | generation server used for the PC client software authentication system which concerns on one embodiment of this invention. It is a schematic block diagram which shows the PC software management server used for the PC client software authentication system which concerns on one embodiment of this invention. It is a figure which shows the management table in the PC software management server used for the PC client software authentication system which concerns on one embodiment of this invention. It is a schematic block diagram which shows the mobile communication network center used for the PC client software authentication system which concerns on one embodiment of this invention. It is a figure which shows the management table in the mobile communication network center used for the PC client software authentication system which concerns on one embodiment of this invention. It is a schematic block diagram which shows CP server used for the PC client software authentication system which concerns on one embodiment of this invention. It is a sequence diagram which shows an example of the one-time password embedding in the PC client software authentication method which concerns on one embodiment of this invention. It is a sequence diagram which shows an example of the one-time password authentication in the PC client software authentication method which concerns on one embodiment of this invention. It is a sequence diagram for demonstrating service provision using the PC client software authentication method which concerns on one embodiment of this invention. It is a sequence diagram for demonstrating service provision using the PC client software authentication method which concerns on one embodiment of this invention. It is a sequence diagram for demonstrating the other example of the service provision using the PC client software authentication method which concerns on one embodiment of this invention. It is a sequence diagram for demonstrating the determination method of the access destination in the service provision using the PC client software authentication method which concerns on one embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Mobile terminal 2 Core network 3 One-time password generation server 4 PC software management server 5 Back-end system 6 Mobile communication network center 7 Service server 8 Internet 9 PC
DESCRIPTION OF SYMBOLS 10 Content provider server 31,41,61,1001 Control part 32,42,62,1002 Transmission / reception part 33 Password issuing part 34,44,63,1003 Database 35,43 Authentication part 45 Setting part 64 Conversion part 1004 Discrimination part

Claims (9)

A first database storing first related information in which a user's mobile phone number and password are associated, and a password sent from PC client software in which the user's mobile phone number and password are securely registered are the first related information. A PC software management device on a mobile communication network, comprising: a first conversion means for converting to a mobile phone number based on
A second database that stores second related information that associates a mobile phone number and a user ID, and a second conversion that converts a mobile phone number sent from a PC software management server into a user ID based on the second related information A device for a mobile communication network comprising:
A service provider device on a network outside the mobile communication network, comprising a specifying means for specifying a user of the user ID using the user ID;
A PC client software authentication system comprising:   2. The PC client software authentication system according to claim 1, wherein the second conversion means converts a mobile phone number sent from a mobile terminal into a user ID based on the second related information.   A password issuing unit that issues a password corresponding to the sent mobile phone number, and authenticating whether the password is issued by the password issuing unit based on the mobile phone number and the password sent from the PC client software The PC client software authentication system according to claim 1, further comprising a password generation device including first authentication means.   The said PC software management apparatus has a 2nd authentication means to authenticate the password sent from PC client software based on the said 1st relevant information, The Claim 1 characterized by the above-mentioned. PC client software authentication system.   5. The PC client software authentication according to claim 1, wherein the first conversion unit converts the mobile terminal identification information sent from the PC client software into PC identification information. 6. system.   A step of sending the password from the PC client software in which the user's mobile phone number and password are securely registered to the PC software management device on the mobile communication network; and the user's mobile phone number and password in the PC software management device. A step of converting a password into a mobile phone number using the associated first related information; a step of sending the converted mobile phone number to a mobile communication network device; and a mobile phone number and a user in the mobile communication network device. Using the second related information associated with the ID, converting the sent mobile phone number into a user ID, sending the user ID to a service provider device on a network outside the mobile communication network, The service provider device comprises a step of identifying a user of the user ID using the user ID. PC client software authentication method according to claim.   A step of sending a mobile phone number from the mobile terminal to the password generation device; a step of issuing a password corresponding to the mobile phone number in the password generation device; and the input of the mobile phone number and the password to the PC client software A step of sending the mobile phone number and the password from the PC client software to the password generation device, a step of authenticating whether the transmitted password is an issued password in the password generation device, 7. The PC client software authentication method according to claim 6, further comprising the step of securely registering the mobile phone number and password in the PC client software when the password is an issued password.   8. The PC client software authentication method according to claim 6, further comprising the step of authenticating a password sent from the PC client software based on the first related information in the PC software management apparatus.   9. The PC client software authentication method according to claim 6, further comprising a step of converting the mobile terminal identification information sent from the PC client software into PC identification information.

Images