WO2009096234A1 - Communication terminal, server device, authentication method, and authentication system - Google Patents

Abstract

An authentication system (100) capable of performing personal authentication control with less burden on the user to securely obtain information managed in a server by using communication terminals such as portable telephones provided with a communication function and a telephone conversation function. The authentication system (100) includes a telephone line network management server (122) for connecting or disconnecting the line between a certain device and another device connected to a public line network in response to a request of the certain device connected thereto, an intra-company management server (110) for performing personal authentication to the user on the public line network and providing service for returning the results of the authentication in accordance with the results of the authentication processing and the data corresponding to the request, and the communication terminals (120A, 120B, 120C) for establishing and managing a session for receiving the service of the intra-company management server (110).

Description

Communication terminal, server device, authentication method, and authentication system

The present invention relates to an authentication system, and more particularly to a communication device, a server device, an authentication method, and an authentication system in which a user of a terminal device is personally authenticated and a server device provides a service to a legitimate user.

In recent years, mobile terminals represented by mobile phones have not only a call function for making calls with other telephones, but also a function for sending and receiving e-mail, and access to the Internet, which has been made public on the network. A communication function represented by a function for browsing existing digital contents is incorporated.

移動 Mobile terminals incorporating such communication functions are used for private use. For example, it is used to transmit and receive e-mails and to exchange and exchange information with friends and acquaintances. It is also used to obtain information by accessing the Internet.

In addition, such mobile terminals are also used for business (public) applications for use in corporate / organizational activities. For example, by sending and receiving e-mail between a business trip destination and an in-house office, a person on a business trip reports the situation at the business trip destination, or a person in the in-house office sends an instruction content to a business traveler. It is used to communicate to. It is also used by a person on a business trip to obtain information managed by an in-house server via the Internet.

However, in order to realize this business use with a system including a terminal and a server, information managed by an in-house server without requiring a troublesome operation no matter where the person on a business trip is located, etc. It is necessary to cope with two contradictory requests, a request from the terminal user who wants to obtain the password and a request from the management operator who wants to prevent information stored in the in-house server from unauthorized access.

Generally, in order to protect information, a personal authentication technique for authenticating a user who is valid for the terminal and the system is used.

Various personal authentication techniques have been known, including password authentication, which has been known for a long time and is most popular. One of them that has recently attracted attention is biometric authentication. Password authentication is a technique for enabling each user to use a terminal and a system by inputting an alphanumeric character string of several digits preset by each user. Biometrics authentication reads information indicating the physical characteristics of a user (hereinafter, information indicating this characteristic is referred to as “biological information”), such as fingerprint authentication and voice (voice print) authentication, and is registered in advance. This is a technique for making it possible for a user to use a terminal and a system in comparison with what has been provided.

Patent Document 1 and Patent Document 1 are related to a terminal and a system to which biometrics authentication based on a voice authentication method is applied to a mobile phone having a call function for performing a voice call with another person as a basic function via a telephone line network. 2 is disclosed.

The user authentication system disclosed in Patent Document 1 is connected to a mobile phone via a mobile phone and a PSTN (Public Switching Telephone Number) network for voice communication, and the user's voice transmitted from the mobile phone. On the other hand, a voice authentication server for performing voice authentication processing and generating and storing a password if the person who uttered the voice is an authorized user and notifying the mobile phone of the password by voice And a mobile phone via an IP (Internet Protocol) network and a voice authentication server via a specific line, providing a network service for the portal site to the mobile phone and requesting the service from the mobile phone Enter the password to the mobile phone. Requesting the entered password and a application server for inquiring whether to match the password stored in the voice authentication server to the voice authentication server.

The above user authentication system performs personal authentication by the following operations.

The user of the mobile phone connects the mobile phone to the voice authentication server via the PSTN network, and transmits the user's voice to the voice authentication server. The voice authentication server performs voice authentication processing on the voice. As a result of the voice authentication process, if the person who uttered the voice is an authorized user, the voice authentication server generates and stores a password, and further notifies the mobile phone of the password by voice. The user accesses the application server from the mobile phone via the IP network, and requests a service provided by the application server. The application server requests the mobile phone to input a password, and inquires of the voice authentication server whether or not the input password is valid. If the input password matches the password stored in the voice authentication server, the application server provides a service to the mobile phone.

The mobile phone described in Patent Literature 2 learns that the user's voice can be identified based on the voice during the call that the user makes when the call is started by the mobile phone. When electronic shopping and online shopping are performed by the mobile phone, authentication is performed as to whether or not the voice of the person speaking to the mobile phone at that time matches the voice of the user.
JP 2003-233595 A JP 2006-17936 A

However, the following problems have been pointed out in the techniques disclosed in Patent Document 1 and Patent Document 2.

(1) In the technique described in Patent Document 1, the terminal for accessing the application server is limited to only a mobile phone. Here, considering that the technology described in Patent Document 1 is applied to business use, a terminal for accessing a server is registered and managed not only in a mobile phone but rather in a company including a mobile phone. In addition, it is preferable to carry out the operation through a notebook PC (Personal Computer) that can be taken out of the office and a PC used by employees in the office. This is because, in business applications, a server that transmits and receives large-size data that cannot be handled by a mobile phone and data that can be viewed only on a dedicated PC may be used. Moreover, it is because it can be used in combination with a system that can be used only within the company, such as a system for managing the attendance status of employees.

In Patent Document 1, it is necessary to input the password notified by the voice authentication server when the mobile phone accesses the application server. The biggest drawback of password authentication is that the user forgets the password set and registered. The situation where the password cannot be remembered is likely to occur even with the password set by itself. Moreover, it is very difficult for a human to memorize a password mechanically issued by the voice authentication server (hereinafter, the mechanically issued password is referred to as a passcode).

If you use the system in the office, you can deal with it by writing down the passcode on a piece of paper, putting the paper in a desk drawer and locking it. However, when using the system at a business trip destination, it is necessary to be careful not to lose or stolen written paper as well as a mobile phone for browsing internal information. If one of the cellular phone and paper is lost, the system cannot be used. If you lose your phone and paper as a set, it's no different than saying to the person who got the set "Stealing internal information", and the worst situation may occur. . Considering them, when the system described in Patent Document 1 is used for business purposes, the user cannot make any careless mistakes, and the user's mental load increases.

(2) In Patent Document 2, authentication information for identifying a voice uttered by a user during a call is stored in a mobile phone, and when using the authentication information, a communication service such as online shopping, and a communication function, By comparing with the input voice, it is authenticated whether or not the user is a legitimate person.

Here, considering that the technique described in Patent Document 2 is applied to business use, the process of storing authentication information during a call is for obtaining permission to obtain in-house information from a mobile phone at a business trip destination. This corresponds to the registration process. However, in business applications, it is preferable to have the in-house server manage the authentication information and have the in-house server perform the registration process, rather than having the mobile phone perform such registration processing. This is because information handled for business use is usually related to confidential matters in the company, and it is necessary not only for those who are on business trips but also for those who are in the office to know and manage the location of that information. Because there is. For example, an urgent business trip or the like may occur in a situation where registration processing is not performed, and the necessity of using the system may arise at the business trip destination. In such a case, if you do not obtain the official permission of the person at the office in the company, you can let the person on the business trip freely perform the registration process and allow it to a malicious business traveler. Because there is a possibility that confidential matters may be leaked without knowing the person in the office in the company, it is not possible to cope with a business use request for preventing information from unauthorized access.

Patent Document 2 exemplifies authentication information input when using a communication function and a communication service. However, if the communication service can be used without speaking, it is unlikely that the user will speak. The technique described in Patent Document 2 is not always required for a communication service that can be used without inputting voice.

Furthermore, when using on business trips for business purposes, it may be necessary to use communication services on trains and buses. However, if voice authentication is performed in such a place, voice authentication is inconvenienced by other passengers, and it is a violation of manners, unlike the use of a normal mobile phone. In addition, when a mobile phone is used in a crowded place, there is a high possibility that noise other than the user's voice is mixed in the voice of the mobile phone. Therefore, it can be said that the technique described in Patent Document 2 is difficult to apply for business purposes.

Furthermore, in business use, especially when personal authentication is performed to enable downloading and browsing information managed on an in-house server on a business trip, not only when the information is obtained but also after that However, it is necessary to consider whether the user of the mobile phone is an authorized person. For example, there is a possibility that the mobile phone may be left in a state where information is obtained from the server and displayed, and the user may be changed during that time. In such a case, it is necessary to confirm whether the user at that time is a regular user.

Also, considering the communication function as a main component, it is necessary to consider the case of receiving an incoming call for a call while browsing information obtained from a server, for example. Conventionally, the communication function is terminated simultaneously with the start of the call function, and the information that has been browsed is erased. Even users who have been authenticated as legitimate users and confirmed to continue browsing the information need to download the information again through the server authentication process after the call function ends to obtain the necessary information. . That is very annoying for the user.

Therefore, an object of the present invention is to provide a communication terminal, a server device, an authentication method, and an authentication system for performing personal authentication control with less load on the user.

Another object of the present invention is to provide a communication terminal, a server device, an authentication method, and an authentication system that can perform personal authentication suitable for business use, which is personal authentication with less burden on the user. is there.

The server device according to the first aspect of the present invention is a server device connected to a communication terminal via a network. A server device is associated with an identifier of a communication terminal, a storage device that stores information for biometric authentication of the user of the communication terminal and a result of the biometric authentication, a communication device connected to a network, While receiving biological information from an arbitrary communication terminal via a communication device, the received biological information is associated with the identifier of the communication terminal that has transmitted the biological information and is stored in the storage device By repeatedly authenticating the received biometric information by comparison with the information for authentication, and in association with the identifier of the communication terminal that transmitted the biometric information, the result of biometric authentication is repeatedly stored in the storage device In response to receiving an authentication request based on the result of biometric authentication from the biometric authentication means and a communication terminal via the communication device, the communication terminal is associated with the identifier of the communication terminal. Stored in the storage device Te and a transmitting means for transmitting the result of biometric authentication.

The information for the biometric authentication of the user and the result of the biometric authentication are stored in the storage device. While receiving the biometric information from the communication terminal, the biometric authentication unit authenticates the biometric information by comparing with the biometric information stored in the storage device, and stores the result in the storage device. Repeat that. In response to receiving the authentication request from the communication terminal, the biometric authentication result transmitting means transmits the authentication result stored in the storage device to the communication terminal.

When another person whose biometric information is not stored in the storage device uses the communication terminal, the biometric information is transmitted to the server device and biometric authentication is performed, but there is almost no possibility of being authenticated as a legitimate user by biometric authentication. . Even if a legitimate user uses and succeeds in authentication, even if the communication terminal is left unattended or taken away and a third party starts using it halfway, authentication using biometric information Is repeatedly performed, the authentication by the biometric authentication means is not successful, and the result is repeatedly stored. That is, even if an authentication request based on the result of biometric authentication is transmitted from a communication terminal used by a third party, information indicating that the authentication result is unsuccessful is returned. Therefore, even if a communication terminal is left or stolen and a third party performs an operation that requires authentication illegally, the authentication fails. That is, the mental load is reduced for a legitimate user. As a result, it is possible to provide a server device for performing personal authentication control with less user load.

Preferably, the storage device further stores a password in association with the identifier of the communication terminal. The server device further stores the password included in the authentication request in association with the identifier of the arbitrary communication terminal in response to receiving the authentication request by the password from the other communication terminal via the communication device. Password authentication means for authenticating a password authentication request by comparison with a password stored in the apparatus and transmitting the authentication result to another communication terminal is included.

The storage device further stores the password, and the password authentication means performs authentication using the password. Since the server device uses both password authentication and biometric authentication, even if the user of the communication terminal forgets the password, the user of the communication terminal can authenticate the server device with biometric information. It is. Further, depending on the situation, an appropriate one of biometric authentication and password authentication can be used, which is suitable for business use. There is no need for the user to write down the password on paper, reducing the load on the user. As a result, it is possible to provide a server device capable of performing personal authentication suitable for business use, which is personal authentication with a low load on the user.

More preferably, the authentication request received by the password authenticating means is for requesting authentication by a password and requesting delivery of predetermined data to the server device. The server device further includes means for transmitting predetermined data to another communication terminal together with the authentication result of the password in response to the successful authentication by the password authentication means.

More preferably, the authentication request received by the transmitting means is for requesting an authentication result by biometric authentication and requesting delivery of predetermined data to the server device. The transmission means receives an authentication request from a communication terminal via a communication device, and responds to the result of authentication by the biometric authentication means for the authentication request that the communication terminal The means for transmitting the result of biometric authentication stored in the storage device in association with the identifier of the authentication and the authentication request by the biometric authentication means for receiving the authentication request from a certain communication terminal and the authentication request being successful In response, a means for transmitting a result of biometric authentication and predetermined data stored in a storage device in association with an identifier of the certain communication terminal to a certain communication terminal is included.

More preferably, the biological information is voice information of the user.

By using voice information transmitted and received between communication terminals by a call function such as a telephone as information for biometric authentication, authentication regarding use of the communication terminal having a call function can be performed with the voice information in the server. it can. Since the biometric authentication is performed in the server while the user uses a normal function called a call function, the user does not need to be particularly aware of the authentication using the biometric information. As a result, it is possible to provide a server device for performing personal authentication control with less user load.

More preferably, the biometric information is user fingerprint information.

The communication terminal according to the second aspect of the present invention is a communication terminal connected to the server device via a network. The communication terminal includes a communication device connected to the network, a biological information transmission unit for continuously transmitting the biological information of the user of the communication terminal to a predetermined server device via the communication device, and a biological information transmission unit Can be connected even during transmission of biometric information, and in response to the connection, to obtain a result of biometric authentication based on the biometric information transmitted by the biometric information transmitting means to the server device via the communication device A first authentication request transmitting means for transmitting an authentication request, and a first authentication result for receiving a result of the authentication request transmitted by the first authentication request transmitting means from the server device via the communication device; Receiving means.

The biometric information transmitting means continuously transmits the biometric information to the server apparatus, and the first authentication requesting means transmits the biometric information even while the biometric information transmitting means is transmitting the biometric information to the server apparatus. An authentication request based on the biometric information transmitted by the means is transmitted to the server device. The first authentication result receiving unit receives the result of the authentication request from the server device.

When another person who is not a legitimate user uses the communication terminal, the biometric information of the other person is transmitted to the server device, and biometric authentication is performed by the server device, but it is possible that another person can be authenticated as a legitimate user by the biometric authentication. There is almost no sex. Even if a legitimate user uses and succeeds in authentication, even if the communication terminal is left unused or stolen and another person starts using it, the communication terminal continues to the server device. The biometric information is transmitted to and the authentication result based on the transmitted biometric information is returned. Therefore, even if the communication terminal is left or stolen and another person tries to perform an operation that requires authentication illegally, the authentication fails. That is, the mental load is reduced for a legitimate user. As a result, it is possible to provide a communication terminal for performing personal authentication control with less user load.

Preferably, the communication terminal further includes a second authentication request unit for transmitting an authentication request based on a password including a password input by the user to the server device via the communication device, and a server via the communication device. Second authentication result receiving means for receiving the result of the authentication request transmitted from the apparatus by the second authentication requesting means.

The second authentication request means transmits an authentication request using a password, and the second authentication result receiving means receives the authentication result of the authentication request transmitted by the second authentication request means. Therefore, if password authentication and biometric authentication are used in combination, the user of the communication terminal can use the appropriate one of biometric authentication and password authentication according to the situation, which is suitable for business use. is there. As a result, it is possible to provide a communication terminal capable of performing personal authentication suitable for business use, which is personal authentication with a low load on the user.

More preferably, the second authentication requesting means includes means for requesting delivery of predetermined data to the server device via the communication device and transmitting an authentication request for requesting authentication using a password. The second authentication result receiving unit receives predetermined data from the server device together with the authentication result based on the password when the authentication result based on the password corresponding to the authentication request transmitted by the transmitting unit indicates successful authentication. The communication terminal further includes display means for displaying predetermined data to the user in response to the fact that the authentication result by the password received by the second authentication result receiving means indicates that the authentication is successful. Including.

More preferably, the first authentication request transmitting means can be connected even while the biological information transmitting means is transmitting the biological information, and in response to the connection, the first authentication request transmitting means transmits predetermined data to the server device via the communication device. And means for transmitting an authentication request for requesting a result of biometric authentication based on the biometric information transmitted by the biometric information transmitting means. When the result of biometric authentication with respect to the authentication request transmitted by the means for transmitting indicates successful authentication, the first authentication result receiving unit sends predetermined data together with the result of biometric authentication to the server via the communication device. Receive from the device. The communication terminal further includes display means for displaying predetermined data to the user in response to an operation by the user when the result of biometric authentication received by the first authentication result receiving means indicates successful authentication. including.

More preferably, the biological information is voice information of the user.

More preferably, the biometric information is user fingerprint information.

The authentication system according to the third aspect of the present invention is an authentication system in which a server device and a communication terminal are connected via a network. The server device associates with the identifier of the communication terminal, stores information for biometric authentication of the user of the communication terminal and the result of the biometric authentication, a communication device connected to the network, and communication While receiving the biometric information from the communication terminal via the device, by comparing the received biometric information with the information for biometric authentication stored in the storage device in association with the identifier of the communication terminal, The biometric authentication means for repeatedly authenticating the received biometric information, associating it with the identifier of the communication terminal and repeatedly storing the biometric authentication result in the storage device, and the authentication request from the communication terminal based on the biometric authentication result In response to receiving the biometric authentication result transmitting means for transmitting the biometric authentication result stored in the storage device in association with the identifier of the communication terminal to the communication terminal. . The communication terminal includes a communication device that communicates with the server device via the network, and a biometric information transmission unit that continuously transmits the biometric information of the user of the communication terminal to the server device via the communication device of the communication terminal. In order to obtain a result of biometric authentication based on the biometric information transmitted by the biometric information transmitting means to the server device in response to the connection, the biometric information transmitting means can be connected even while the biometric information transmitting means is transmitting biometric information. First authentication request transmitting means for transmitting an authentication request; and first authentication result receiving means for receiving the result of the authentication request transmitted by the first authentication request transmitting means from the server device. .

An authentication method according to a fourth aspect of the present invention relates to a server device connected to a network, a communication terminal connected to the network, and information for voice authentication of the user in association with a user identifier. And a storage device that stores the result of the voice authentication. The server device includes data transmission means for transmitting predetermined data to the communication terminal in response to a distribution request for the predetermined data transmitted from the communication terminal. The communication terminal transmits a distribution request for predetermined data to the server device, and receives data from the server device according to the distribution request and predetermined data received by the data reception unit. Display means for displaying to the user of the communication terminal and telephone communication means for outputting the voice information of the user are included. In the authentication method, the voice information output by the telephone communication means is acquired, and while the voice information of the user is acquired in the acquiring step, the acquired voice information is associated with the user identifier. The voice authentication step for authenticating the acquired voice information by comparison with the information for voice authentication stored in the storage device, and according to the authentication result in the voice authentication step, the predetermined data to the user by the display means Enabling or disabling the display.

According to this authentication method, when the user is making a voice call, the voice information is acquired, and the user is authenticated by comparing with the information for voice authentication stored in the storage means. Using this voice authentication result, whether or not the predetermined data received by the data receiving means of the communication terminal is displayed to the user by the display means is enabled or disabled. Therefore, it is possible to reduce the load imposed on the user for authentication. As a result, it is possible to provide an authentication method for performing personal authentication control with less load on the user.

As described above, according to the present invention, when another person whose biometric information is not stored in the storage device uses the communication terminal, the biometric information is transmitted to the server device and biometric authentication is performed. There is little possibility of being authenticated as a person. Even if a legitimate user uses and succeeds in authentication, even if the communication terminal is left unattended or taken away and a third party starts using it halfway, authentication using biometric information Is repeatedly performed, the authentication by the biometric authentication means is not successful, and the result is repeatedly stored. That is, even if an authentication request based on the result of biometric authentication is transmitted from a communication terminal used by a third party, information indicating that the authentication result is unsuccessful is returned. Therefore, even if a communication terminal is left or stolen and a third party performs an operation that requires authentication illegally, the authentication fails. That is, the mental load is reduced for a legitimate user. As a result, it is possible to provide a server device, a communication terminal, an authentication system, and an authentication method for performing personal authentication control with less user load.

It is a figure which shows the network environment of the authentication system which concerns on embodiment of this invention. It is a figure which shows the external appearance structure of 120 A of communication terminals shown in FIG. It is a block diagram of the communication terminal 120A shown in FIG. It is a block diagram of the in-house management server 110 shown in FIG. It is a figure which shows the structure of service user DB118 shown in FIG. It is a figure which shows the structure of terminal DB192 shown in FIG. It is a figure which shows the structure of the packet which 120 A of communication terminals transmit / receive at the time of the user authentication by a password. It is a figure which shows the structure of the packet which 120 A of communication terminals transmit / receive at the time of the user authentication by voice recognition. It is a figure which shows the structure of the packet which communication terminal 120A transmits / receives at the time of user re-authentication by a password. It is a figure which shows the structure of the packet which communication terminal 120A transmits / receives at the time of user re-authentication by voice recognition. It is a flowchart which shows the control structure of the computer program which implement | achieves the function of the communication terminal 120A. It is a flowchart which shows the control structure of the computer program which implement | achieves the function of the communication terminal 120A. It is a flowchart which shows the control structure of the computer program which implement | achieves the function of the telephone line network management server. It is a flowchart which shows the control structure of the computer program which implement | achieves the function of the speech recognition part 182. It is a flowchart which shows the control structure of the computer program which implement | achieves the function of the authentication part 184. It is a figure which shows the detailed flow of step 456 shown in FIG. It is a figure which shows the detailed flow of step 454 shown in FIG. It is a figure for demonstrating operation | movement of the user who is using the authentication system 100 which concerns on embodiment of this invention, and what is displayed on the display 132 at that time.

Explanation of symbols

100 authentication system, 102 base station, 104 communication line network, 106 telephone line network, 108 Internet, 110 internal management server, 112 internal LAN, 114 mail server, 116 employee send / receive mail storage, 118 service user DB, 120 (120A , 120B, 120C) Communication terminal, 122 Telephone network management server, 140 Telephone communication device, 142 Data communication device, 148 Voice input / output device, 150 Control unit, 152 Display device, 154 Operation device, 156 Storage device, 158 Identifier storage , 160 internal variable storage unit, 162 user name storage unit, 180 control unit, 182 voice recognition unit, 184 authentication unit, 186 first communication device, 188 second communication device, 190 storage device, 192 terminal DB, 194 received Rubaffa, 196 voice information buffer, 198 the third communication device, 200 server ID storage unit

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description of the embodiments, the same parts are denoted by the same reference numerals. Their functions and names are also the same. Therefore, detailed description thereof will not be repeated.

[Network environment]
FIG. 1 is a diagram showing a simplified configuration of an authentication system 100 according to an embodiment of the present invention. Referring to FIG. 1, an authentication system 100 according to the present embodiment is for a company having an in-house LAN 112, and includes an employee transmission / reception mail storage unit 116 for storing an email for employees. Are connected to the employee transmission / reception mail storage unit 116 and the in-house LAN 112, and manage the emails stored in the employee transmission / reception mail storage unit 116, as well as employee email accounts, transmission / reception of emails between accounts and external accounts. A mail server 114.

The authentication system 100 is further connected to a telephone line network 106, the Internet 108, and a communication line network 104, and an apparatus connected to a public line network including the telephone line network 106, the Internet 108, and the communication line network 104. The telephone line network management server 122 for connecting or disconnecting a line between the certain apparatus and another apparatus connected to the public line network is included.

The authentication system 100 further includes a base station 102 that is connected to the telephone line network management server 122 via the communication line network 104 and transmits / receives data communicated by the communication line network 104 by radio waves.

The authentication system 100 is further connected to the in-house LAN 112, the Internet 108, and the telephone network management server 122, and the user on the public network that requests access to the mail server 114 via the Internet 108 is notified to the user. And an in-house management server 110 that provides a service for returning an authentication result and data corresponding to the request according to the result of the authentication process.

The authentication system 100 is further connected to the telephone line network management server 122 via the base station 102 and the communication line network 104, has a call function and a communication function, and grants access permission to the mail server 114 to the in-house management server 110. Communication terminals 120A, 120B, and 120C for requesting, receiving an authentication result and data corresponding to the request from the internal management server 110, and establishing and managing a session for receiving the service of the internal management server 110 including.

The authentication system 100 further includes an identifier of the in-house management server 110 on the public line network, an identifier of the communication terminal 120 on the public line network that can use the mail acquisition service provided by the in-house management server 110, and Service user DB 118 for associating and storing.

[Configuration of Communication Terminal 120A]
(External configuration of communication terminal 120A)
FIG. 2 is a plan view showing an external configuration of the communication terminal 120A. Referring to FIG. 2, communication terminal 120 </ b> A is a mobile phone, and includes a housing 130 having a flat rectangular parallelepiped shape, a display 132 disposed on the upper half of the top surface of housing 130, and a display on display 132. A cursor key 134 which is a key operated when moving the cursor up, down, left and right, a function key 136 which is a key operated when a user executes a predetermined specific function, and a telephone number And a numeric keypad 138 which is a key operated when inputting an access code such as an e-mail address and characters, etc., and an in-call mail which is arranged on the side of the housing 130 and is operated by a user when acquiring mail during a call A reception button 131.

(Functional configuration of communication terminal 120A)
FIG. 3 is a block diagram showing a functional configuration of communication terminal 120A. Referring to FIG. 3, communication terminal 120 </ b> A is between control unit 150 that is essentially a computer that controls the control center of communication terminal 120 </ b> A, and another communication terminal that is connected to control unit 150. A telephone communication device 140 for performing voice wireless communication with the other communication terminal during a call, and a data communication device for performing wireless data communication with the other communication terminal and the in-house management server 110 142, an operation device 154 used when the user operates the communication terminal 120A, a display device 152, a voice input / output device 148, and a storage device 156 for storing various information.

Each of the telephone communication device 140 and the data communication device 142 includes an antenna, an RF (Radio Frequency) unit, a modulation unit, a demodulation unit, and the like which are not shown. The operation device 154 includes a cursor key 134, a function key 136, a numeric keypad 138, a call mail reception button 131, and the like shown in FIG. The display device 152 includes the display 132 shown in FIG. The voice input / output device 148 includes a microphone, a voice input data processing unit, a speaker, a voice output data processing unit, and the like.

The storage device 156 has an identifier storage unit 158 for storing the identifier of the communication terminal 120A on the public line network, and an internal variable for storing variables used internally by a program for realizing the function of the control unit 150. A storage unit 160 and a user name storage unit 162 for storing the user name of the communication terminal 120 are included.

The identifier storage unit 158 includes an area for storing a telephone ID that is a telephone number of the communication terminal 120A and a communication ID that is a mac address of the communication terminal 120A.

The internal variable storage unit 160 requests a service to the internal management server 110 from the communication terminal 120A, and returns an authentication result indicating that the user is a valid user. A variable ST for storing either the start time or the session update time, a variable PV for storing the effective time width of the session, and a predetermined identifier for indicating the state of the mail acquisition method An area for storing a variable MS for storage is included.

The variable MS stores one of -1, 0, and 1. When the communication terminal 120A acquires mail and does not display the content of the mail on the display 132, the value of the variable MS is set to -1. When the communication terminal 120A is not acquiring mail, the value of the variable MS is set to 0. When the communication terminal 120A is in a state of acquiring mail and displaying the content of the mail on the display 132, the value of the variable MS is set to 1.

In the present embodiment, it is assumed that the communication terminal 120B and the communication terminal 120C have the same configuration as the communication terminal 120A.

[Functional configuration of in-house management server 110]
FIG. 4 is a block diagram showing a functional configuration of the in-house management server 110. Referring to FIG. 4, the in-house management server 110 is a telephone via the Internet 108 that is connected to the control unit 180 and a control unit 180 that is essentially a computer that controls the control center of the in-house management server 110. Connected to the network management server 122 and connected to the first communication device 186 and the telephone network management server 122 for communicating data with other communication terminals, the communication terminal 120 is connected to the other communication terminals. Is connected to the mail server 114 via the second communication device 188 for receiving voice from the communication terminal 120 and the in-house LAN 112, and communicates mail data with the mail server 114. The third communication device 198 to perform, the mail received from the mail server 114, and the in-house management server 110 on the public line network. And a storage device 190 for storing an identifier or the like for.

(Configuration of storage device 190)
The storage device 190 is used for communication of a server ID storage unit 200 for storing a Mac address for identifying the internal management server 110 on the public line network, and a communication terminal 120 that can use a service provided by the internal management server 110. Received by the terminal DB 192 for storing information related to the ID and the authorized user, the received mail buffer 194 for temporarily storing mail received from the mail server 114 via the in-house LAN 112, and the second communication device 188 An audio information buffer 196 for temporarily storing the feature amount of the audio data is included.

(Configuration of control unit 180)
The control unit 180 determines whether or not the voice data received by the second communication device 188 belongs to a legitimate user, and stores the determination result in the terminal DB 192 as an authentication result; The personal authentication process is performed with reference to the terminal DB 192 for the packet requesting the service from the communication terminal 120 received via the first communication device 186, and the authentication result and the received mail buffer are determined according to the processing result. And an authentication unit 184 for returning the data stored in 194 to the communication terminal 120 as a destination.

[Configuration of Service User DB 118]
FIG. 5 is a diagram showing the configuration of the service user DB 118 shown in FIG. Referring to FIG. 5, service user DB 118 includes a telephone ID string for storing the telephone number of communication terminal 120, a communication ID string for storing the MAC address of communication terminal 120, and communication terminal 120. And a server ID column for storing a Mac address of a server including the in-house management server 110 that provides the service.

Each record in the service user DB 118 indicates that the communication terminal identified by the telephone ID string and the communication ID string can receive the service provided by the server identified by the server ID string. Hereinafter, a communication terminal having a telephone ID and a communication ID in the service user DB 118 is referred to as a “service use terminal”.

Suppose the name of the internal management server 110 is “● Company-Osaka head office server”. Each of the records in the first to third lines indicates that each communication terminal is a service using terminal that can receive the service provided by the in-house management server 110. A server named “●● company-Tokyo head office server” has the same configuration as the in-house management server 110 and is a server (not shown). Similarly, the record in the fourth row is a service use terminal that allows the communication terminal identified by the telephone ID column and the communication ID column to receive the service provided by “●● Company-Tokyo head office server”. Indicates that

[Configuration of terminal DB 192]
FIG. 6 is a diagram showing the configuration of the terminal DB 192 shown in FIG. Referring to FIG. 6, terminal DB 192 is stored in a communication ID column for storing a MAC address of a communication terminal that can receive a service provided by in-house management server 110, and a communication ID column. A user name string for storing a user name of each communication terminal, a password string for storing a password determined by each user, and a feature amount of voice data of each user As a result of the processing by the voice authentication data string and the voice recognition unit 182 shown in FIG. 4, 1 is determined to be a valid user, and 0 is determined to be not a valid user. And a voice authentication status string for storing.

[Packet configuration]
FIGS. 7 to 10 are diagrams showing configurations of a packet for requesting mail acquisition transmitted from the communication terminal 120 to the internal management server 110 and a packet returned by the internal management server 110 in response to the packet. It is.

The packet transmitted from the communication terminal 120 includes a “password authentication packet” for requesting acquisition of an email by password authentication and a new email in order to acquire a new email. In addition, there is a “voice authentication packet” for requesting acquisition of mail by voice authentication. In the packet transmitted from the communication terminal 120, when the communication terminal 120 has acquired a new mail but cannot be viewed due to the expiration of the session, the contents of the mail can be viewed by password authentication. When the user obtains a “password re-authentication packet” and the communication terminal 120 obtains a new mail but cannot be viewed because the session has expired, voice authentication is used. There is a “voice re-authentication packet” for the user to request that the contents of the mail be viewable.

FIG. 7A shows the configuration of the password authentication packet 181. Referring to FIG. 7A, password authentication packet 181 is based on the user name of communication terminal 120, the password input by the user when password authentication packet 181 is transmitted, and the communication ID of communication terminal 120. Become. FIG. 7B is a diagram showing a configuration of a packet 183 for replying to the password authentication packet. Referring to FIG. 7B, a packet 183 includes an authentication result for storing an identifier for determining whether or not the user is a valid user, and a header (mail No. 1) in which the mail subject is stored. The header (mail No. n) and the text (mail No. 1) to the text (mail No. n) where the text of the mail is stored.

When it is determined that the user is a valid user, 1 is stored in the authentication result, and when it is determined that the user is not a valid user, 0 is stored in the authentication result.

FIG. 8A is a diagram showing a configuration of the voice authentication packet 185. Referring to FIG. 8A, voice authentication packet 185 includes a user name of communication terminal 120 and a communication terminal 120 communication ID. FIG. 8B is a diagram showing the configuration of a packet 187 for replying to the voice authentication packet 185. Referring to FIG. 8B, the configuration of packet 187 is the same as the configuration of packet 183 shown in FIG.

FIG. 9A is a diagram showing a configuration of the password re-authentication packet 189. Referring to FIG. 9A, the configuration of password re-authentication packet 189 is the same as the configuration of packet 181 shown in FIG. FIG. 9B is a diagram showing a configuration of a packet 191 for replying to the password re-authentication packet 189. Referring to FIG. 9B, packet 191 includes an authentication result. What is stored in the authentication result is the same as the authentication result shown in FIG.

FIG. 10A is a diagram showing the configuration of the voice re-authentication packet 193. Referring to FIG. 10A, the configuration of voice re-authentication packet 193 is the same as the configuration of packet 185 shown in FIG. FIG. 10B is a diagram showing a configuration of a packet 195 for replying to the voice re-authentication packet 193. Referring to FIG. 10B, the configuration of packet 195 is the same as the configuration of packet 191 shown in FIG. 9B.

Software configuration
(Software configuration of communication terminal 120A)
11 and 12 are flowcharts showing a control structure of a program executed by the communication terminal 120A. The control unit 150, which is substantially a computer, executes this program, thereby realizing the function of the communication terminal 120A.

Referring to FIG. 11, in this program, step 200 for substituting 0 for variable MS, and after step 200, whether a call instruction for a call has been received from another terminal connected on the public line network. Step 202 for branching the control flow according to the determination result, and when the determination result in Step 202 is NO, in order for the user of the communication terminal 120A to make a call with another terminal, It is determined whether or not a call instruction has been issued to another terminal, and if the determination result in step 206 is NO in step 206 for branching the control flow according to the determination result, the user makes a communication terminal 120A. Step 210 for determining whether or not an instruction for acquiring mail is issued and branching the control flow according to the determination result is included.

The program further includes a step 220 for displaying a password input screen on the display 132 when the determination result in step 210 is YES, a step 242 for waiting after the step 220 for the password input by the user to be completed, In step 242, when the user finishes inputting the password, the user name, password, and communication ID are stored in the user name storage unit 162, the password input by the user, And a step 230 of generating a password authentication packet 181 as a communication ID stored in the identifier storage unit 158 and transmitting the packet to the internal management server 110 as a destination.

An example of the password input screen is shown in FIG. Referring to FIG. 18, password input screen 570 used in this embodiment includes a text box 572 for allowing user 550 to input a password, and a communication terminal indicating that password input by user 550 has been completed. And a button 574 for notifying 120A.

The program further waits until receiving a packet 183 for returning the password authentication packet 181 from the in-house management server 110 after step 230, and when receiving the packet 183 in step 244, Determining whether the value of the authentication result of the packet 183 is 1 and branching the flow of control according to the determination result 226. If the determination result in step 226 is NO, the control returns to step 220.

The program further stores the mail data attached to the packet 183 in the storage device 156 when the determination result in step 226 is YES, and after step 234, assigns the current time to the variable ST. Step 236, after step 236, step 238 for substituting 1 for the variable MS, and after step 238, the mail data stored in step 234 is displayed on the display 132, and control is returned to step 202. 240 Including.

In the present embodiment, an example of a mail browsing screen used for displaying mail data in step 240 is shown in FIG. Referring to FIG. 18, mail browsing screen 580 includes a display area 582 for displaying the contents of mail and a button 584 for deleting mail browsing screen 580 from display 132.

The program further determines whether or not the variable MS is 0 when the determination result of step 210 is NO, and branches the control flow according to the determination result, and the determination result of step 212 is NO In this case, it is determined whether or not there is an instruction from the user to end the display of the mail data, and step 214 for branching the flow of control according to the determination result, and the determination result in step 214 is YES In this case, step 218 for deleting the mail data displayed on the display 132, and step 200A for substituting 0 for the variable MS after step 218 and returning control to step 202 are included. If the determination result at step 212 is YES, the control returns to step 202.

The program further determines whether or not the time width obtained by subtracting the time of the variable ST from the current time is larger than the time width of the variable PV when the determination result in step 214 is NO, and according to the determination result. Step 216 for branching the control flow and Step 220A for displaying the password input screen 570 on the display 132 when the decision result in Step 216 is YES, and after Step 220A, until the password input by the user is completed In steps 242A and 242A for waiting, when the user finishes inputting the password, the user name, password, and communication ID are stored in the user name storage unit 162, respectively. And the communication ID stored in the identifier storage unit 158 It generates a password re-authentication packet 189, and a step 224 of transmitting the internal management server 110 as a destination. If the determination result in step 216 is NO, the control returns to step 202.

The program further waits until receiving a packet 191 for replying the password re-authentication packet 189 from the internal management server 110 after step 224, and when receiving the packet 191 in step 246, A step 226A for determining whether or not the value of the authentication result of the packet 191 is 1, and branching the flow of control according to the determination result. If the determination result of step 226A is NO, control returns to step 220A, and if the determination result of step 226A is YES, control proceeds to step 236.

Referring to FIG. 12, when the determination result in step 202 is YES, this program further notifies step 270 that the user has received an incoming call, and waits until the user responds after step 270. And step 272 that places the communication terminal 120A in an off-hook state when the user responds in step 272.

The program further includes a step 276 for performing processing for calling another terminal when the determination result in step 206 is YES, and a step 278 for waiting until the other terminal responds after step 276.

This program is further executed after step 274 if there is a response in step 272 or after step 278 if there is a response in step 278, and is either one of the other terminals or users. Step 280 for determining whether or not an instruction for disconnecting the line for a call has been issued, and branching the control flow according to the determination result. If the determination result in Step 280 is NO, the variable MS is 0. Whether the user has pressed the mail receiving button 131 during a call when the determination result in step 212A and the determination result in step 212A are YES. And step 290 for branching the flow of control according to the determination result. If the determination result in step 290 is NO, the control returns to step 280.

The program further stores the user name and communication ID stored in the user name storage unit 162 and the communication stored in the identifier storage unit 158 when the determination result in step 290 is YES. Step 294 for generating voice authentication packet 185 as an ID for use and transmission to destination in-house management server 110, and step for waiting until receiving packet 187 for replying voice authentication packet 185 after step 294 In step 244A and step 244A, when a reply packet 187 is received, it is determined whether or not the value of the authentication result of the packet 187 is 1, and the flow of control is branched according to the determination result. Including.

The program further stores the mail data attached to the packet 187 in the storage device 156 when the determination result in step 226B is YES, and after step 234A, assigns the current time to the variable ST. Step 236A, and after step 236A, assign −1 to the variable MS and return control to step 280.

This program further deletes the mail data displayed on the display 132 when the determination result in step 226B is NO, and causes the voice input / output device 148 to output an error sound. And 200B for substituting 0 for the variable MS and returning the control to step 280.

The program further determines whether or not the time width obtained by subtracting the time of the variable ST from the current time is larger than the time width of the variable PV when the determination result in step 212A is NO, and according to the determination result. Step 216A for diverting the flow of control and when the determination result in step 216A is YES, the user name and the communication ID are stored in the user name storage unit 162 and the user name and identifier storage unit, respectively. The voice re-authentication packet 193 is generated as the communication ID stored in 158 and transmitted to the internal management server 110 as the destination. After step 296, the voice re-authentication packet 193 is sent from the internal management server 110. Step 246A which waits until receiving a packet 195 for replying. If the determination result at step 216A is NO, the control returns to step 280.

In step 246A, this program further determines whether the value of the authentication result of the packet 195 is 1 when the packet 195 for reply is received, and branches the control flow according to the determination result. Step 226C and Step 236B in which the current time is substituted into the variable ST and the control is returned to Step 280 when the determination result in Step 226C is YES. If the determination result at step 226C is NO, the control proceeds to step 308.

The program further determines whether or not the value of the variable MS is −1 when the determination result at step 280 is YES, and branches the control flow according to the determination result. If the determination result is YES, step 240A for displaying the mail data stored in step 234 on the display 132, and step 238A for substituting 1 for the variable MS after step 240A and returning control to step 202 Including. If the determination result at step 282 is NO, the control returns to step 202.

(Software configuration of telephone line network management server 122)
FIG. 13 is a flowchart showing a control structure of a program executed by telephone line network management server 122. The function of the telephone network management server 122 is realized by executing this program by a control unit (not shown) of the telephone network management server 122, which is substantially a computer.

Referring to FIG. 13, it is assumed that a plurality of terminals can be connected to the public line. Whether this program has a call instruction from one communication terminal (referred to as “calling side”) on the public line network to another communication terminal (referred to as “calling side”). Step 350 for branching the control flow according to the determination result, Step 360 for calling the communication terminal on the called side when the determination result in Step 350 is YES, In step 362 waiting until a response is received from the call side communication terminal, and in step 362, if there is a response, referring to the service user DB 118, the call side communication terminal and the call side communication terminal It is determined whether or not any of the telephone ID and the communication ID exists in the service user DB 118, and the determination result of step 364 for branching the control flow according to the determination result is as follows. In the case of ES, a step 366 for transmitting the communication ID of the service using terminal to the server identified by the server ID string corresponding to the service using terminal and connecting a line between the service using terminal and the server; If the determination result of 364 is NO, the process is executed after step 364, or after step 366 if the determination result of step 364 is YES, and the calling communication terminal and the called communication terminal Connecting the line for the other call and returning control to step 350.

This program is further connected between the calling communication terminal and the called communication terminal from either the calling or called communication terminal when the determination result in step 350 is NO. Step 352 for branching the control flow according to the determination result, and if the determination result in Step 352 is YES, refer to the service user DB 118. Then, it is determined whether the telephone ID and the communication ID of any one of the calling communication terminal and the called communication terminal exist in the service user DB 118, and the flow of control is determined according to the determination result. When branching step 364A and the determination result in step 364A are YES, the line between the service use terminal and the server identified by the server ID string corresponding to the service use terminal is disconnected. When the determination result of step 356 and step 364A is NO, the process is executed after step 364A, or when the determination result of step 364A is YES, the process is executed after step 356. And 358 for disconnecting the line with the communication terminal on the side.

(Software configuration of in-house management server 110)
14 to 17 are flowcharts showing the control structure of the program executed by the in-house management server 110. FIG. The control unit 180, which is substantially a computer, executes this program, thereby realizing the function of the in-house management server 110.

<Software Configuration of Voice Recognition Unit 182>
FIG. 14 is a flowchart showing a control structure of a program for realizing the function of the voice recognition unit 182 that is activated simultaneously with the activation of the in-house management server 110.

Referring to FIG. 14, this program waits until voice data is received from the line via second communication device 188, and after receiving voice data in step 400, this program refers to terminal DB 192. Step 402 for searching for a record corresponding to the communication ID received from the telephone line network management server 122, and Step 404 for updating the record by substituting 0 for the voice authentication status of the searched record after Step 402. After step 404, the feature amount of the voice data is extracted and stored in the voice information buffer 196. After step 406, the feature amount stored in the voice information buffer 196 is searched. The voice authentication data of the recorded record is checked to determine whether or not the voice characteristics of the two match. If the determination result of step 408 branches the control flow according to the step 408 and the determination result of step 408 is YES, 1 is substituted into the voice authentication state of the retrieved record, and the step 410 is updated, and the determination of step 408 If the result is NO, whether or not the line with the communication terminal 120 has been disconnected after Step 404A in which 0 is substituted for the voice authentication status of the retrieved record and the record is updated, and Step 410 or Step 404A. If the determination result in step 412 for branching the control flow according to the determination result and the determination result in step 412 is YES, 0 is assigned to the voice authentication state of the retrieved record, and the record is updated. Step 404B which returns control to Step 400. If the determination result at step 412 is NO, the control returns to step 406.

<Software Configuration of Authentication Unit 184>
15 to 17 are flowcharts showing a control structure of a program that realizes the function of the authentication unit 184, which is started at the same time when the in-house management server 110 is started. Referring to FIG. 15, the program waits until one of the packets 181, 185, 189 and 193 requesting service from the communication terminal 120 is received by the first communication device 186, and If a packet is received in step 458, it is determined whether the packet is a password authentication packet 181 or a password re-authentication packet 189, and the flow of control branches according to the determination result; If the determination result in step 450 is NO, it is determined whether the packet is the voice authentication packet 185 or the voice re-authentication packet 193, and the flow of control branches according to the determination result; If the determination result in step 450 is YES, the password for the received packet Authentication processing is performed, a reply packet destined for the communication terminal 120 is transmitted, and control returns to step 458. If the determination result in step 452 is YES, voice authentication is performed on the received packet. Step 456 is performed, in which a reply packet addressed to the communication terminal 120 is transmitted, and the control returns to Step 458.

FIG. 16 is a diagram showing a detailed flow of step 456 of FIG. Referring to FIG. 16, this routine refers to terminal DB 192 to search for a record matching the communication ID of the received packet, and after step 470, the voice authentication state of the record is 1. If the packet received in step 458 is a voice authentication packet when the determination result in step 472 is NO and the determination result in step 472 is NO, authentication is performed. A reply packet 187 (FIG. 8B) in which the result is 0, the mail data part is empty data, and a reply packet 195 (FIG. 10B) in which the authentication result is 0 otherwise. And step 474 which exits from this routine.

This routine further determines whether or not the received packet is a voice re-authentication packet when the determination result in step 472 is YES, and branches the flow of control according to the determination result. If the determination result of 476 is YES, a reply packet 195 with an authentication result of 1 is generated and transmitted with the communication terminal 120 as the destination. Step 478 exiting this routine, and the determination result of step 476 is NO In this case, the mail data for the user name of the received packet is acquired from the mail server 114 via the in-house LAN 112, and the received data is stored in the received mail buffer 194. After step 480 For the reply with the authentication result set to 1 and the data stored in the received mail buffer 194 attached It generates a packet 187, and transmits the communication terminal 120 as a destination, and a step 482 which exits this routine.

FIG. 17 is a diagram showing a detailed flow of step 454 in FIG. Referring to FIG. 17, this routine refers to terminal DB 192 to search for a record that matches the communication ID of the received packet, and after step 500, the received packet password and the record password And step 502 for branching the control flow according to the determination result, and if the determination result in step 502 is NO, the packet received in step 458 is the password authentication packet 181. If the authentication result is 0, the reply packet 183 (FIG. 7B) with the mail data portion as empty data is returned, and if it is the password re-authentication packet 189, the reply packet with the authentication result 0 is set. 191 each generated and transmitted with terminal 120 as the destination, and exiting this routine 508

This routine further determines whether or not the received packet is a password re-authentication packet when the determination result in step 502 is YES, and branches the control flow according to the determination result to step 504 and step 504. When the determination result of 504 is YES, a reply packet 191 with the authentication result set to 1 is generated and transmitted with the communication terminal 120 as the destination. Step 506 exiting this routine, and the determination result of step 504 is NO. In this case, the mail data for the user name of the received packet is acquired from the mail server 114 via the in-house LAN 112, and the received data is stored in the received mail buffer 194. Data that is executed and the authentication result is 1 and is stored in the received mail buffer 194 Generates a packet 183 for subjected reply, it transmits the communication terminal 120 as a destination, and a step 512 exiting the routine.

[Operation]
Referring to FIGS. 1 to 17, the authentication system according to the present embodiment having the above-described configuration operates as follows. Prior to this, the identifier storage unit 158 of the communication terminal 120A stores the telephone number and mac address of the communication terminal 120A, the user name storage unit 162 stores the name of the user of the communication terminal 120A, and the internal variable storage unit 160. It is assumed that the effective time width of the session is stored in advance in each variable PV. In the server ID storage unit 200 of the in-house management server 110, the Mac address of the in-house management server 110 is stored in advance. It is assumed that the service user DB 118 has a record having a telephone ID, a communication ID, and a server ID for each service using terminal.

When the communication terminal 120A is activated, the communication terminal 120A initializes the variable MS (step 200 shown in FIG. 11).

Hereinafter, (1) the user 550 receives a mail during a call and browses the mail after the call ends, and (2) the user 550 receives a mail when the call is not performed, and the mail is browsed. The operation of this system will be described by taking two cases as examples.

(1) Mail reception during a call and mail browsing after a call Here, it is assumed that the user 550 issues a call instruction for a call to another terminal. When the user 550 performs a call instruction operation for making a call with another communication terminal on the communication terminal 120A (step 206 shown in FIG. 11), the communication terminal 120A calls the other terminal (FIG. 12). Step 276 shown in FIG. 12), and waits until another terminal responds (Step 278 shown in FIG. 12).

Upon receiving a call instruction from communication terminal 120A (step 350 shown in FIG. 13), telephone line network management server 122 calls another communication terminal (step 360 shown in FIG. 13), and a response from the other communication terminal is received. It waits until there is (step 362 shown in FIG. 13). When there is a response from another communication terminal, the telephone network management server 122 determines whether the telephone ID and the communication ID of either the communication terminal 120A or the other communication terminal exist in the service user DB 118. Is determined (step 364 shown in FIG. 13). Here, it is assumed that only the communication terminal 120A is a service using terminal. In this case, the telephone network management server 122 confirms that the telephone ID and communication ID of the communication terminal 120A exist in the service user DB 118, and sets the communication ID of the communication terminal 120A to the in-house management server 110. To connect the line between the communication terminal 120A and the in-house management server 110. The telephone line network management server 122 connects the line between the communication terminal 120A and another communication terminal (step 368 shown in FIG. 13).

When another communication terminal receives a call instruction from the communication terminal 120A and responds to the instruction, the user 550 of the communication terminal 120A starts a call with the other communication terminal.

As described above, what the user 550 of the communication terminal 120A speaks by telephone is transmitted not only to the communication terminal of the other party but also to the internal management server 110. The voice recognition unit 182 of the in-house management server 110 stands by until voice is received from the communication terminal 120A (step 400 shown in FIG. 14), and when voice is received, the telephone line network management is performed with reference to the terminal DB 192. A record corresponding to the communication ID received from the server 122 is searched (step 402 shown in FIG. 14), and the voice authentication state of the record is initialized to 0 (voice authentication NG) (step 404 shown in FIG. 14). Further, the voice recognition unit 182 continuously extracts the feature amount of the received voice and stores it in the voice information buffer 196 (step 406 shown in FIG. 14), and stores the stored feature amount in the record searched in step 402. 14 is compared with the feature quantity stored as the voice authentication data, and it is determined whether or not the user 550 who has emitted the voice received in step 400 is a legitimate user (step 408 shown in FIG. 14). ). If it is determined that the user 550 is a valid user, the voice recognition unit 182 writes “1” (voice authentication OK) in the voice authentication status field of the corresponding record in the terminal DB 192 (shown in FIG. 14). Steps 410 and 404A). If not, the voice recognition unit 182 writes “0” (voice authentication NO) in the voice authentication status field of the corresponding record in the terminal DB 192. The voice recognition unit 182 repeats the processes of steps 406 to 412 and 404A described above until the line with the communication terminal 120A is disconnected (step 412 shown in FIG. 14). Therefore, if the voice authentication status field of the record corresponding to the communication terminal 120A in the terminal DB 192 is “1”, the user currently on the call is a valid user, and if “0”, the valid user is valid. It can be determined that the user is not a user.

During a call, for example, when a request is received from the other party of the call to “see mail”, the user may receive mail while continuing the call. In the present embodiment, in order to avoid intentionally interrupting the call and performing the mail receiving operation, the user 550 can press the button 131 during the call to receive the mail during the call. Hereinafter, it is assumed that the user 550 presses the button 131 during a call. In this case, the communication terminal 120A generates a voice authentication packet 185, transmits it to the in-house management server 110 (step 294 shown in FIG. 12), and waits until a reply packet is received from the in-house management server 110 ( Step 244A shown in FIG.

The authentication unit 184 of the in-house management server 110 stands by until a packet requesting a service from the communication terminal 120 is received (step 458 shown in FIG. 15). When the voice authentication packet 185 is received from the communication terminal 120A, It is determined whether the received packet is a password authentication packet, a password reauthentication packet, a voice authentication packet, or a voice reauthentication packet (steps 450 and 452 shown in FIG. 15). Since the received packet is the voice authentication packet 185, the authentication unit 184 refers to the terminal DB 192 and searches for a record that matches the communication ID of the received packet 185 (step 470 shown in FIG. 16). The authentication unit 184 determines whether or not “1” (voice authentication OK) is stored in the voice authentication status field of the retrieved record (step 472 shown in FIG. 16).

When “0” (voice authentication NG) is stored in the voice authentication status field of the retrieved record, the authentication unit 184 sets the authentication result to “0” (voice authentication NG) and the mail data portion as empty data. A reply packet 187 is generated, and the packet 187 is transmitted to the communication terminal 120A (step 474 shown in FIG. 16). When the communication terminal 120A receives the packet 187, the communication terminal 120A outputs an error sound (step 308 shown in FIG. 12), and the variable MS is “0” (a state where the communication terminal 120A has not acquired mail). Is substituted (step 200B shown in FIG. 12).

Here, it is assumed that the user 550 is a valid user of the communication terminal 120A, and therefore the voice authentication status field is “1”. In this case, the authentication unit 184 acquires the mail data from the mail server 114 and stores it in the received mail buffer 194 (step 510 shown in FIG. 17), and the authentication result and the mail stored in the received mail buffer 194 are stored. A reply packet 183 including data is transmitted to communication terminal 120A (step 474 shown in FIG. 16). The authentication result of this packet is “1” (voice authentication is OK), and the data stored in the received mail buffer 194 is stored in the mail data portion.

When the communication terminal 120A receives the packet 187, the communication terminal 120A stores the mail data of the packet 187 in the storage device 156 (step 234A shown in FIG. 12), and sets the session valid time (shown in FIG. 12). Step 236A). The communication terminal 120A further assigns “−1” (indicating a state in which a mail is acquired and the content of the mail is not displayed on the display 132) to the variable MS (step 238 shown in FIG. 12).

After step 238, while the user 550 is talking, the communication terminal 120A always checks whether or not the valid time of the session has expired (step 216A shown in FIG. 12). As shown in the image 558, when the valid time of the session expires during a call, the communication terminal 120A generates a sound re-authentication packet 193 and transmits the packet 193 to the in-house management server 110 (step shown in FIG. 12). 296), and waits until a reply packet is received from the in-house management server 110 (step 246A shown in FIG. 12).

When receiving the voice authentication packet 193 from the communication terminal 120A, the authentication unit 184 of the in-house management server 110 refers to the terminal DB 192 and searches for a record that matches the communication ID of the received packet 193 (shown in FIG. 16). Step 470). The authentication unit 184 determines whether or not “1” (voice authentication OK) is stored in the voice authentication status field of the retrieved record (step 472 shown in FIG. 16).

When “0” (voice authentication NG) is stored in the voice authentication state field, the authentication unit 184 generates a reply packet 195 with the authentication result “0” (voice authentication NG), and the communication terminal It transmits to 120A (step 474 shown in FIG. 16). When the communication terminal 120A receives the packet 193, the communication terminal 120A outputs an error sound (step 308 shown in FIG. 12) and “0” in the variable MS (a state in which the communication terminal 120A has not acquired mail). Is substituted (step 200B shown in FIG. 12).

In step 472, when “1” (voice authentication OK) is stored in the voice authentication status field of the retrieved record, the authentication unit 184 returns the authentication result as “1” (voice authentication OK). A packet 193 is generated and transmitted to the communication terminal 120A (step 478 shown in FIG. 16). When communication terminal 120A acquires packet 193, communication terminal 120A resets the valid time of the session (step 236B shown in FIG. 12).

When the user of the communication terminal 120A gives an instruction to disconnect the line after making a call in this way, the telephone line network management server 122 (step 352 shown in FIG. 13), the communication terminal 120A and other communication terminals It is determined whether or not any telephone ID and communication ID exist in the service user DB 118 (step 364A shown in FIG. 13). In this example, since only the communication terminal 120A is a service using terminal, after confirming that the telephone ID and communication ID of this communication terminal exist in the service user DB 118, the telephone network management server 122 The line between the terminal 120A and the in-house management server 110 is disconnected (step 356 shown in FIG. 13), and the line between the communication terminal 120A and another communication terminal is also disconnected (step 358 shown in FIG. 13). The operation of the telephone network management server 122 when the user of another communication terminal ends the call is the same.

After the call with the reception of mail ends, this system operates as follows. The communication terminal 120A determines whether or not the variable MS is “−1” (a state where the mail is acquired and the content of the mail is not displayed on the display 132) (step 282 shown in FIG. 12). In this example, the value of the variable MS is “−1”, and the communication terminal 120A displays the mail browsing screen 580 on the display 132, and displays the content of the received mail data in the display area 582 (FIG. 12). Step 240A). The communication terminal 120A substitutes “1” (a mail is acquired and the content of the mail is displayed on the display 132) for the variable MS (step 238A shown in FIG. 12).

Since the mail browsing screen 580 is displayed in this way, the user does not need to perform mail receiving processing again or perform special processing for displaying the mail browsing screen 580.

Even after displaying the mail browsing screen 580 after the call is finished, the communication terminal 120A determines whether or not the valid time of the session has expired (after NO in steps 202, 206, 210, and 212 in FIG. 11, In step 214). Until the valid time of the session expires (NO in step 214), communication terminal 120A continues to display the mail browsing screen.

On the other hand, when the valid time of the session expires while displaying the mail browsing screen 580 after the call is finished (YES in step 214), the communication terminal 120A displays the password input screen 570 on the display 132 so as to hide the mail browsing screen. (Step 220A shown in FIG. 11), and waits until the user 550 inputs the password and presses the button 574 (Step 242 shown in FIG. 11). When the user 550 inputs a password and presses the button 574, the communication terminal 120A generates a password re-authentication packet 189 and transmits it to the in-house management server 110. The communication terminal 120A waits until a reply packet is received from the in-house management server 110 (step 246 shown in FIG. 11).

When receiving the voice authentication packet 185 from the communication terminal 120A, the authentication unit 184 of the in-house management server 110 searches the terminal DB 192 for a record that matches the communication ID of the received packet 185 (shown in FIG. 17). Step 500). The authentication unit 184 determines whether or not the password of the packet 185 matches the password of the retrieved record (step 502 shown in FIG. 17).

If the passwords match, the authentication unit 184 generates a reply packet 187 with the authentication result “0” (voice authentication NG), and transmits the packet 187 to the communication terminal 120A (step 508 shown in FIG. 17). ). When the communication terminal 120A receives the packet 187, the communication terminal 120A displays the password input screen 570 again on the display 132 (step 220A shown in FIG. 11).

On the other hand, if the passwords match in step 502, the authentication unit 184 generates a reply packet 187 with the authentication result “1” (voice authentication OK) and transmits it to the communication terminal 120A (shown in FIG. 17). Step 506). When the communication terminal 120A receives the packet 187, the communication terminal 120A resets the valid time of the session (step 236 shown in FIG. 11), and “1” (mail is acquired and the content of the mail is displayed on the variable MS. 11 is substituted (step 238 shown in FIG. 11), the password input screen 570 is deleted, the mail browsing screen 580 is displayed on the display 132, and the received mail data is displayed in the display area 582. Is displayed (step 240 shown in FIG. 11).

If the user 550 presses the button 584 in the mail browsing screen 580 after the call ends during the session valid time, the communication terminal 120A deletes the mail browsing screen 580 displayed on the display 132. (Step 218 shown in FIG. 11), “0” (the state where the communication terminal 120A has not acquired mail) is substituted for the variable MS (Step 200A shown in FIG. 11).

That is, when an e-mail is received during a call, an e-mail browsing screen 580 is displayed when the call ends, so that the user can check the contents of the e-mail. If the valid time expires while the mail browsing screen 580 is displayed, the password input screen 570 is displayed and the mail cannot be viewed. If the user inputs a correct password, the valid time is reset, the password input screen 570 is deleted, and the user can confirm the contents of the mail again. Since the mail browsing screen 580 is not displayed unless the correct password is entered, even if this communication terminal is left somewhere after the expiration of the valid time, it is not possible for an unauthorized user to view the contents of the mail. You can't do it without knowing.

(2) When mail is received and the mail is browsed during a non-call When the user 550 gives an instruction for acquiring mail to the communication terminal 120A during a non-call (step 210 shown in FIG. 11). The communication terminal 120A displays the password input screen 570 on the display 132 (step 220 shown in FIG. 11). The communication terminal 120A waits until the user 550 inputs a password and performs an operation of pressing the button 574 (step 242 shown in FIG. 11). When the user 550 inputs a password and presses the button 574, the communication terminal 120A generates a password authentication packet 181 and transmits it to the in-house management server 110. The communication terminal 120A waits until a reply packet is received from the in-house management server 110 (step 244 shown in FIG. 11).

When the internal management server 110 receives the packet 181 transmitted from the communication terminal 120A, the authentication unit 184 refers to the terminal DB 192 and searches for a record that matches the communication ID of the received packet 181 (see FIG. 17). Step 500), it is determined whether or not the password of the packet 181 matches the password of the retrieved record (Step 502 shown in FIG. 17).

If the passwords do not match in step 502, the authentication unit 184 generates a reply packet 183 with the authentication result “0” (voice authentication NG) and the mail data portion as empty data, and transmits the packet to the communication terminal 120A. (Step 508 shown in FIG. 17). When receiving the packet 183, the communication terminal 120A returns to Step 220 and displays the password input screen 570 on the display 132 again.

If the passwords match in step 502, the authentication unit 184 acquires the mail data from the mail server 114, stores it in the received mail buffer 194 (step 510 shown in FIG. 17), and the authentication result is “1” (voice). Authentication OK), a reply packet 183 whose mail data part is data stored in the received mail buffer 194 is generated and transmitted to the communication terminal 120A (step 512 shown in FIG. 17).

When the communication terminal 120A acquires the packet 183, the mail data of the packet 183 is stored in the storage device 156 (step 234 shown in FIG. 11), and the session valid time is set (step 236 shown in FIG. 11). The communication terminal 120A substitutes “1” (a mail is acquired and the content of the mail is displayed on the display 132) for the variable MS (step 238 shown in FIG. 11), and the mail browsing screen 580 is displayed. It is displayed on the display 132 (step 240 shown in FIG. 11). In the display area 582 in the mail browsing screen 580, mail data stored in the storage device 156 is displayed.

In other words, in this case, unless the user enters the correct password, mail cannot be received. If the user inputs the correct password when receiving the mail, the mail is displayed. However, the password entry screen is displayed when the valid time of the session expires, and the mail browsing screen is not displayed unless the correct password is entered. If the user enters the correct password, the mail browsing screen is displayed again, and the user can check the contents of the mail.

Therefore, even if a legitimate user receives an e-mail and leaves the cell phone screen with the e-mail browsing screen displayed, the person who does not know the password will check the e-mail content after the effective time has elapsed. I can't do that.

When the user 550 presses the button 584 in the mail browsing screen 580 while the mail browsing screen 580 is displayed, the communication terminal 120A deletes the mail browsing screen 580 displayed on the display 132 ( Step 218 shown in FIG. 11), “0” (the state where the communication terminal 120A has not acquired mail) is substituted for the variable MS (step 200A shown in FIG. 11). Since a password is required to display the mail browsing screen 580, a person who does not know the password cannot browse the contents of the mail.

Note that if the user performs a process to start a call while the mail browsing screen is displayed, the voice authentication during the call is performed again, so the mail is sent again when the call ends. A browsing screen is displayed and you do not need to re-enter your password at that time. However, after this, when the valid time of the session expires, the password must be entered.

The operation of the system according to this embodiment has been described above by taking two typical cases as examples. From the above description and the initial configuration, the operation of the system otherwise will be apparent to those skilled in the art.

[Effects of the present embodiment]
As is clear from the above description, by using the authentication system 100 according to the present embodiment, the user causes the authentication system 100 to perform voice authentication at the time of a call, and the password to the authentication system 100 at times other than the time of a call. Allow authentication. Therefore, even if the user forgets the password, it can be authenticated by voice. This eliminates the need for the user to write down the password on paper. Even if the user loses the communication terminal 120A or is stolen at a business trip destination, the person who obtains the communication terminal 120A can know the password set by the legitimate user. Therefore, the probability of successful password authentication is extremely low. In addition, when the user is not a legitimate user, there is almost no probability that the voice user is recognized as a legitimate user. Therefore, even if the content of the mail managed in the mail server 114 is an internal confidential matter, it is not viewed by outsiders, and the mental burden on the legitimate user compared with the prior art is Get smaller.

In addition, when the communication terminal 120A is used at a business trip destination, the user can appropriately determine whether password authentication or voice authentication should be requested according to the situation. For example, if the place where calling on the communication terminal 120A is a violation of manners, such as in a train or bus, the user may use password authentication. Also, the user may use password authentication even in a place where there is a high possibility that noise other than the user's voice is mixed.

Further, even if the mail data is left displayed on the communication terminal 120A, the communication terminal 120A erases the displayed mail data from the display 132 and uses the input of the password if the effective time of the session has passed. To the person. Therefore, even if a person who is not a legitimate user obtains the communication terminal 120 </ b> A left with the mail data displayed, the person can view the mail data after the effective time of the session has passed. Can be prevented.

Furthermore, even if the call function is started while the mail data is being displayed, the content of the mail is not erased from the display 132, and if the session is valid, the user can continue after the call function is terminated. There is no need to enter the password again. Therefore, since it is possible to view the mail without performing the authentication process every time the call function is terminated, the troublesomeness for the user is reduced as compared with the conventional case.

[Modification]
In the above-described embodiment, the service provided by the in-house management server 110 is to send in-house mail. However, the present invention is not limited to such an embodiment, and in addition to a service for managing the attendance status of employees by allowing a business traveler to input actual working hours and transportation expenses from a communication terminal at a business trip destination. It may be a service for sending and receiving data related to confidential matters in the company such as confidential materials.

In the above embodiment, the communication terminal 120 is a mobile phone, but the present invention is not limited to such an embodiment, and PHS (Personal Handyphone System), PDA (Personal Digital Assistant), etc. It may be a personal portable information terminal, or a desktop or notebook PC.

Furthermore, in the above embodiment, voice authentication is performed during a call. However, the present invention is not limited to such an embodiment, and may be anything as long as information relating to a human living body is input and authentication is performed. For example, in addition to a method in which a fingerprint sensor is installed in the communication terminal 120A and a user's fingerprint is input for authentication, a camera is installed in the communication terminal 120A and a face image or an eyeball iris is input for authentication. The method may be a method of reading and authenticating the vein pattern of the palm of the user.

The embodiment disclosed this time is merely an example, and the present invention is not limited to the embodiment described above. The scope of the present invention is indicated by each claim in the claims after taking into account the description of the detailed description of the invention, and all modifications within the meaning and scope equivalent to the wording described therein are intended. Including.

The present invention can be used in a communication equipment related industry that manufactures or lends communication equipment for performing secure communication or conducts a business for providing facilities for secure communication.

Claims (15)

A server device connected to a communication terminal via a network,
The server device
A storage device that stores information for biometric authentication of the user of the communication terminal and a result of the biometric authentication in association with the identifier of the communication terminal;
A communication device connected to the network;
While receiving biological information from an arbitrary communication terminal via the communication device, the received biological information is stored in the storage device in association with the identifier of the communication terminal that has transmitted the biological information. The authentication of the received biometric information is repeated by comparison with the information for biometric authentication, and the storage device stores the biometric authentication result in association with the identifier of the communication terminal that has transmitted the biometric information. Biometric authentication means for repeatedly storing the
In response to receiving an authentication request as a result of biometric authentication from a certain communication terminal via the communication device, the certain communication terminal is associated with the identifier of the communication terminal and stored in the storage device A server device including a transmission unit for transmitting a result of biometric authentication. The storage device further stores a password in association with the identifier of the communication terminal,
In response to receiving a password authentication request from another communication terminal via the communication device, the server device further associates the password included in the authentication request with the identifier of the arbitrary communication terminal. The password authentication means for authenticating the authentication request by the password by comparing with the password stored in the storage device and transmitting the authentication result to the other communication terminal. Server device. The authentication request received by the password authenticating means is for requesting authentication by a password and requesting delivery of predetermined data to the server device,
3. The server device according to claim 2, further comprising means for transmitting the predetermined data to the other communication terminal together with an authentication result based on a password in response to successful authentication by the password authenticating means. Server device. The authentication request received by the transmission means is for requesting an authentication result by biometric authentication and requesting delivery of predetermined data to the server device,
The transmission means includes
In response to receiving the authentication request from the certain communication terminal via the communication device and the result of authentication by the biometric authentication means for the authentication request being unsuccessful, the certain communication terminal Means for transmitting a result of the biometric authentication stored in the storage device in association with an identifier of a communication terminal;
The authentication request is received from the certain communication terminal, and in response to the result of the authentication by the biometric authentication means for the authentication request being successful, the communication terminal is associated with the identifier of the certain communication terminal. The server apparatus according to claim 1, further comprising: means for transmitting the biometric authentication result stored in the storage device and the predetermined data. The server device according to any one of claims 1 to 4, wherein the biological information is voice information of a user. 5. The server device according to claim 1, wherein the biological information is user fingerprint information. * A communication terminal connected to a server device via a network,
The communication terminal is
A communication device connected to the network;
Biometric information transmitting means for continuously transmitting biometric information of the user of the communication terminal to a predetermined server device via the communication device;
Connection is possible even while the biological information transmitting means is transmitting biological information. In response to the connection, the biological information transmitted by the biological information transmitting means is transmitted to the server device via the communication device. First authentication request transmitting means for transmitting an authentication request for obtaining a result of biometric authentication based on;
A communication terminal comprising: first authentication result receiving means for receiving the result of an authentication request transmitted by the first authentication request transmitting means from the server device via the communication apparatus. The communication terminal further includes
A second authentication request means for transmitting an authentication request by a password including the password input by the user to the server device via the communication device;
The communication terminal according to claim 7, further comprising: a second authentication result receiving unit configured to receive an authentication request result transmitted by the second authentication request unit from the server device via the communication device. . The second authentication request means includes means for requesting delivery of predetermined data to the server device via the communication device and transmitting an authentication request for requesting authentication by the password,
The second authentication result receiving means receives the predetermined data from the server device together with the authentication result based on the password when the authentication result based on the password for the authentication request transmitted by the means for transmitting indicates a successful authentication. Receive
The communication terminal is further configured to display the predetermined data to the user in response to the fact that the authentication result by the password received by the second authentication result receiving unit indicates that the authentication is successful. The communication terminal according to claim 8, comprising display means. The first authentication request transmission unit can be connected even while the biometric information transmission unit is transmitting biometric information. In response to the connection, the first authentication request transmission unit transmits predetermined data to the server device via the communication device. Means for transmitting an authentication request for requesting a delivery of the biometric authentication based on the biometric information transmitted by the biometric information transmitting means,
When the result of biometric authentication for the authentication request transmitted by the means for transmitting indicates successful authentication, the first authentication result receiving unit transmits the predetermined data together with the result of biometric authentication to the communication device. Received from the server device via
The communication terminal further displays the predetermined data to the user in response to an operation by the user when the result of biometric authentication received by the first authentication result receiving means indicates a successful authentication. The communication terminal according to claim 7, further comprising: The communication terminal according to any one of claims 7 to 10, wherein the biological information is voice information of a user. The communication terminal according to any one of claims 7 to 10, wherein the biological information is user fingerprint information. An authentication system in which a server device and a communication terminal are connected via a network,
The server device
A storage device that stores information for biometric authentication of the user of the communication terminal and a result of the biometric authentication in association with the identifier of the communication terminal;
A communication device connected to the network;
While receiving biometric information from the communication terminal via the communication device, the received biometric information and the biometric authentication stored in the storage device in association with the identifier of the communication terminal Biometric authentication means for repeatedly authenticating the received biometric information by comparison with information, and repeatedly storing the result of biometric authentication in the storage device in association with the identifier of the communication terminal;
In response to receiving an authentication request as a result of biometric authentication from the communication terminal, the biometric authentication result stored in the storage device in association with the identifier of the communication terminal is transmitted to the communication terminal. Biometric authentication result transmission means for
The communication terminal is
A communication device that communicates with the server device via the network;
Biometric information transmitting means for continuously transmitting the biometric information of the user of the communication terminal to the server device via the communication device of the communication terminal;
Connection is possible even while the biometric information transmitting means is transmitting biometric information, and in response to the connection, a result of biometric authentication based on the biometric information transmitted by the biometric information transmitting means is sent to the server device. First authentication request transmitting means for transmitting an authentication request for obtaining;
An authentication system comprising: first authentication result receiving means for receiving an authentication request result transmitted by the first authentication request transmitting means from the server device. The storage device further stores a password in association with the identifier of the communication terminal,
The server device is further responsive to receiving a password authentication request from the communication terminal and stored in the storage device in association with the password included in the authentication request and the identifier of the communication terminal. A password authenticating means for authenticating an authentication request by the password by comparison with a password, and transmitting an authentication result to the arbitrary communication terminal;
The communication terminal further includes
A second authentication request transmitting means for transmitting an authentication request by a password including the password input by the user to the server device;
The authentication system according to claim 13, further comprising second authentication result receiving means for receiving a result of the authentication request transmitted by the second authentication request transmitting means from the server device. A server device connected to the network;
A communication terminal connected to the network;
An authentication method in a system including a storage device that stores information for voice authentication of the user and a result of the voice authentication in association with an identifier of the user,
The server device includes data transmission means for transmitting the predetermined data to the communication terminal in response to a distribution request for the predetermined data transmitted from the communication terminal,
The communication terminal is
Data receiving means for transmitting a distribution request for the predetermined data to the server device and receiving the predetermined data according to the distribution request from the server device;
Display means for displaying the predetermined data received by the data receiving means to a user of the communication terminal;
Telephone communication means for outputting the user's voice information,
The authentication method is:
Obtaining voice information output by the telephone communication means;
While acquiring the voice information of the user in the acquiring step, the acquired voice information and information for voice authentication stored in the storage device in association with the user identifier A voice authentication step of authenticating the acquired voice information by comparing
An authentication method, comprising: enabling or disabling display of the predetermined data to the user by the display means according to an authentication result in the voice authentication step.

Images