WO2000029965A1

WO2000029965A1 - Method and apparatus for network authentication

Info

Publication number: WO2000029965A1
Application number: PCT/JP1999/006365
Authority: WO
Inventors: Kazuhiro Aihara; Kuniaki Tanezaki; Masakatsu Tsukamoto; Tamami Yamada
Original assignee: Saison Information Systems Co., Ltd.
Priority date: 1998-11-16
Filing date: 1999-11-15
Publication date: 2000-05-25

Abstract

An ID entered from a personal computer or a mobile terminal is sent to an authentication server via a proxy server. In response to the ID, the authentication server sends current encrypting information to the proxy server. The proxy server provides the user terminal with one-time data input program based on the encrypting information. The program encrypts the password entered on the user terminal and sends it to the authentication server, and the authentication server then checks the validity. The intervention of the proxy server ensures the security of the authentication server. The provision of the one-time program in the form of a JAVA applet prevents illegal access by those intercepting the session.

Description

Description Network authentication device and method

Technical field

The present invention relates to a security technology in a commercial network such as the Internet.

Background technology

As the Internet has been used for commercial purposes, it has become necessary to quickly establish network security technologies.

That is, the Internet is data communication using an open protocol based on TCPZIP, and the confidentiality of data communication is not originally planned.

For this reason, many techniques have been proposed to secure data security between a user terminal and a server using various encryption techniques such as a public key.

In such encrypted communication, it is common that a user terminal transmits specific encrypted data to a server, and the server decrypts the data and authenticates the validity of the user.

However, the authentication server itself was placed in an open environment on the Internet, and even if a server itself had a firewall established, anyone could know the address of that server.

In other words, the authentication server could not deny the possibility that it would always be a target for hackers and crackers because its address was known.

Furthermore, if a malicious third party intercepts such encrypted communication and resumes data communication with the server, so-called spoofing becomes possible, and a credit card or the like may be imposed on the network. Could be used illegally.

The present invention has been made in view of such a point, and the existence of an authentication server Technology to provide a system that assures high network security by increasing the secrecy of products and using programs that allow users to enter data for authentication to be used up and delivered to user terminals. Subject.

Disclosure of the invention

A first means of the present invention comprises a mediation server that mediates data for a user terminal that inputs data, and an authentication server that authenticates the data. An authentication server that outputs the encryption information to the mediation server in response to the input of the data, and encrypts the second data input by the one user terminal based on the encryption information received from the authentication server. The network authentication device includes an intermediary server that generates an encryption program for performing the encryption program and distributes the encryption program to the user terminal.

The feature of the present invention resides in realizing the “mediation authentication system”.

That is, the confidentiality of the authentication server can be enhanced by passing through the mediation server. That is, the address of the authentication server itself can be kept secret.

In addition, the encryption information provided by the authentication server is provided to the mediation server, and the mediation server generates an encryption program based on the unique encryption information, and when the second data is input from the user terminal, the encryption program is generated. Encrypted through the encryption program. Here, the encryption program can be generated by the JAV II ablet. The user terminal is not limited to a terminal device installed indoors such as a personal computer, but may be a mobile computer connected to a mobile phone and having a terminal function, a PDA (Personal Data Assistant), or the like. It may be. Also, a mobile phone having an Internet terminal function (such as “i-mode terminal” of NTT DoCoMo, Inc.) itself may be used.

According to a second aspect of the present invention, in the first aspect, the encryption information is an encryption function, and the authentication server has a second data encrypted by an encryption program, The legitimacy of the session from the user terminal is evaluated by comparing the data of No. 2 with the data encrypted by the encryption function. The number of encryption functions is not necessarily one. By preparing multiple functions, confidentiality by encryption can be further enhanced.

According to a third aspect of the present invention, in the first or second aspect, the encryption information is changed for each session from the user terminal to the mediation server.

For example, by using date and time information of the machine clock of the authentication server as a parameter (variable), it is possible to generate different encryption information for each session. Thus, even if a third party who intercepts data from one user terminal accesses the intermediary server illegally, since the encryption information has already been changed, valid authentication by the authentication server is performed. I can't get it and keep it secret.

According to a fourth aspect of the present invention, in the first aspect, the first data is a user-ID, and the second data is a password. For example, the present invention can be used to transfer password information that requires a high degree of confidentiality in checking the number of points acquired for credit cards.

According to a fifth aspect of the present invention, in the second means, the encryption key for specifying an encryption function from among a plurality of encryption functions of the mediation server instead of the authentication server as encryption information. It was made.

In this case, the authentication server and the mediation server have the same function table, and the encryption key can specify the encryption function to be adopted from the table.

A sixth means of the present invention includes a step of mediating the first data received from the user terminal to the authentication server in the mediation server; generating encryption information based on the first data; Transmitting the second data corresponding to the first data and held by the authentication server, and encrypting the second data with the encryption information. Generating an encryption program for encrypting second data input at the user terminal based on the following, and distributing the encryption program to the user terminal. Encrypting the second data input by the program; and transmitting the second data encrypted by the user terminal to the authentication server. In an encrypted network authentication method comprising the step of comparing the second data. This method also increases the confidentiality of the authentication server by passing through the mediation server.

Can be That is, the address of the authentication server itself can be kept secret. Also, the encryption information provided by the authentication server is provided to the mediation server, and the mediation server generates an encryption program based on the unique encryption information, and receives the second data from the user terminal. Encrypt through this encryption program. Here, the encryption program can be generated by the JAVA ablet.

According to a seventh aspect of the present invention, in the sixth aspect, the encrypted information is changed for each session from the user terminal to the mediation server.

For example, by using date and time information of the machine clock of the authentication server as a parameter (variable), it is possible to generate different encryption information for each session. As a result, even if a third party who intercepts data from the user terminal accesses the intermediary server illegally, the third party can receive valid authentication by the authentication server because the encryption information has already changed. No, secrets are kept.

An eighth aspect of the present invention is a storage medium storing a program including the steps described in the sixth aspect.

Here, the storage medium includes any medium provided with optical, magnetic, or magneto-optical recording means, such as an optical disk, a magneto-optical disk, a magnetic tape, or a cartridge, cassette, or card containing these. And so on.

According to a ninth means of the present invention, the authentication server generates unique information corresponding to the processing request in response to the input of the processing request at the user terminal, and the relay server receiving the processing request generates the unique information based on the unique information. An interface is provided to the user terminal.

The processing request means, for example, an action transmitted when the user designates a button displayed on an Internet browser or the like with a mouse. The unique information generated by the authentication server means, for example, a reception number and an encryption method corresponding to the processing request.

According to a tenth aspect of the present invention, in the ninth aspect, an execution program that functions on a user terminal is provided as the input interface. The system receives two or more pieces of user information, encrypts them, and transmits them to the mediation server.

The execution program is, for example, a JAVA ablet, and the user information means a card number or a password input on the tablet. These pieces of user information are encrypted on the relevant abbreviated and sent to the authentication server via the mediation server. BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 is a schematic diagram showing a system configuration according to an embodiment of the present invention.

Figure 2 is an explanatory diagram showing the contents of the reception database

Figure 3 is an explanatory diagram showing the contents of the authorization database

Fig. 4 is a functional block diagram of the mediation server and the authentication server in the reception process of the embodiment.

FIG. 5 is a functional block diagram of the mediation server and the authentication server in the authentication processing according to the embodiment.

FIG. 6 is a block diagram showing a procedure for generating an HTML file and an encryption applet provided to one user terminal in the embodiment.

FIG. 7 is an explanatory diagram showing source codes of an HTML file provided to a user terminal in the embodiment.

FIG. 8 is a block diagram illustrating a modified example of the method for generating an encrypted applet in the mediation server according to the embodiment.

FIG. 9 is an explanatory diagram showing an encryption table according to the embodiment (1)

FIG. 10 is an explanatory diagram showing an encryption table according to the embodiment (2)

FIG. 11 is an explanatory diagram showing an encryption table according to the embodiment (3)

Fig. 12 is an explanatory diagram showing the ablet template of the embodiment.

FIG. 13 is a sequence diagram showing data exchange between the user terminal, the mediation server, and the authentication server in the embodiment.

Fig. 14 shows the display screen of the user terminal of the embodiment (1)

Figure 15 shows the display screen of the user terminal of the embodiment (2)

Figure 16 shows the display screen of the user terminal of the embodiment (3) Figure 17 shows the display screen of the user terminal of the embodiment.

FIG. 18 is a sequence diagram showing data exchange between the user terminal, the mediation server, and the authentication server in the modification of the embodiment (1)

FIG. 19 is a sequence diagram showing data exchange between the user terminal, the mediation server, and the authentication server in the modification of the embodiment (2)

BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, the present invention will be described with reference to the drawings.

FIG. 1 is a schematic diagram showing the system configuration of the present embodiment.

In this embodiment, a user terminal 1 is connected to an intermediary server 3 via the Internet 2, and the intermediary server 3 is connected to an authentication server 5 via a LAN or WAN via a firewall server 4. .

This user terminal 1 is not limited to a terminal device of a type installed indoors such as a personal computer, but may be a mobile computer connected to a mobile phone and having a terminal function, a PDA (Personal Data Assistant), or the like. Alright. In addition, a mobile phone having an Internet terminal function (such as “i-mode terminal” of NTT DoCoMo, Inc.) itself can be used.

The authentication server 5 has a reception database 6 and an authorization database 7, and the file configuration of each database is as shown in FIGS. That is, the reception database 6 includes a reception number assigned by the authentication server 5, a card number input at the user terminal 1, and an encryption key for specifying an encryption algorithm (described later in detail). ) Is registered. In addition, the authorization database 7 stores a card number registered in advance for authentication and a passcode also registered in advance.

The authentication server 5 has a user information database 26 and an authentication result database 2 (both shown in FIG. 5) in addition to the reception database 6 and the solution database 7. In FIG. 1, illustration is omitted.

In the system shown in FIG. 1 described above, for example, the user enters the credit card number and password from the user terminal 1 so that the credit It is used to illuminate a non-intellectual samurai modeled like a sword. The credit card number and password input from the user terminal 1 require high security on the communication path, and the authentication server 5 for authenticating the password and the reception database 6 are required. The security of the sled database 7 needs to be maintained.

In the present embodiment, regarding these points, a credit card number and password input from the user terminal 1 are temporarily used up and used, for example, using a disposable JAVA tablet to prevent data interception on the communication path, The mediation server 3 is provided, and the user terminal 1 directly communicates with the mediation server 3 to keep the address of the authentication server 5 itself and the system configuration secret. Next, the functions of the user terminal 1, the mediation server 3, and the authentication server 5 will be described with reference to FIG.

In Fig. 4, one user terminal 1 accesses the server program 12 of the mediation server 3 (see Fig. 14), selects the card number input screen (see Fig. 15), and sends the card number to the mediation server 3 FIG. 17 is a block diagram showing the functions of the user terminal 1, the mediation server 3, and the authentication server 5 until the password input screen shown in FIG. 16 is displayed on the user terminal 1.

First, the user accesses the Internet 2 from the user terminal 1 by a method such as dial-up IP, and starts the browser 11 (WWW browsing program) in the user terminal 1. Then, by specifying the address of the server program 12 of the mediation server 3 as URL (Uniform Resource Locator), the screen shown in FIG. 14 is displayed.

Then, the user designates a point inquiry on the screen shown in FIG. 14 using an input assisting device such as a mouse, and according to the link information set in the “point inquiry”, the user designates the point inquiry. Is displayed.

Here, when the user inputs his / her card number (for example, “1 2 3 4”), the input card number (ID) is transmitted to the mediation server 3 (Step (1) in FIG. 4: The numbers with brackets in this embodiment correspond to the numbers with circles in FIG. 4).

When the server program 12 of the mediation server 3 receives the card ID, it starts the reception servlet 13 (use-up server-side program) (step (2)), The card ID is set to the state of queuing 14 via the reception servlet 13 (steps (3) and (4)).

The authentication server 5 periodically checks the queue from the mediation server 3 by the queue switch function 15 (step (5)), and when the queue 14 is confirmed, takes it in (step (6)).

Then, the authentication server 5 starts the authorization “user 1” agent ■ program (hereinafter referred to as “authorization U AJ”) 16 and sends a card ID to the authorization UA 16 (step (7), (8)) This authorization UA 16 is a temporary agent program. If the communication is cut off from the user terminal 1 for some reason, the authorization UA 16 is sent to the authentication server 5 after a certain period of time. Removed from.

Further, the user UA 16 reads the encryption key and the encryption function from the encryption function management unit 17 of the authentication server 5 (step (9)), generates a reception number, and stores the reception information in the reception database. Stored in 6 (step (10)). Note that the encryption key means key information for encryption, and a key that is selectively used for each access from among a plurality of encryption functions is used.

The reason for preparing such an encryption key is as follows.

That is, since the card ID is constant, it is possible that the same card ID has multiple accesses. Therefore, by preparing a plurality of encryption functions that can realize different encryption keys for each access to the card ID, unauthorized access can be prevented.

The encryption key and the encryption function will be described later with reference to Figs. 9, 10 and 11. The reception number is a sequential number and is reset every day at midnight. That is, “0003” is assigned to the third access of the day.

The solution UA 16 generates a reception number assigned in the reception order as described above (step (10)) and stores it in the reception database 6 together with the card ID and the encryption key (see FIG. 2). ).

Next, the authorization UA 16 instructs the mediation server 3 to start the mediation user agent (hereinafter referred to as “mediation UA”) 20 (steps (11) and (12)). When the mediation UA 2 O is activated in the mediation server 3, reception information including a reception number, a card ID, and an encryption function is transmitted from the authorization UA 16 of the authentication server 5-(step (13)).

The mediation UA 20 that has received the reception information transmits the reception number and the encryption function to the above-mentioned reception servlet 13 (step (14)).

Based on this, the reception servlet 13 generates an encryption applet 21 in which the reception number and the encryption function are embedded (step (15)). This encrypted applet 21 is transmitted to the browser 11 of the user terminal 1 through the server program (steps (16) and (17)).

The encrypted applet 21 is a so-called JAVA applet, which is transmitted to the browser 11 of the user terminal 1 together with an HTML (Hyper Text Mark-up Language) file as an interface. Figure 16 shows the browser 11 screen at this time. The HTML file for displaying this is composed of text descriptions as shown in FIG. In this description, OTP specified as APPLET CODE "! 998081 21 1 4910. c I ass is the file name of the encryption applet 21. This encryption abbreviated 21 is a so-called one-time This is a temporary program that is used only for the session for authentication of the card ID.The encryption ablet 21 is, as described above, the reception number assigned by the authentication server 5 and However, since it is generated by the encryption function, the possibility that the same encryption applet 21 is generated is numerically low in astronomy.

Next, referring to FIG. 5, on the browser 11 of the user terminal 1, the password entered on the applet screen shown in FIG. 16 is authenticated by the authentication server 5 via the mediation server 3. The functions of the intermediary server 3 and the authentication server 5 until the authentication screen shown in FIG.

First, the password input from the browser 11 on the user terminal 1 is encrypted by the encryption applet 21 generated for only one session as described above, and transmitted to the mediation server 3. Sent (step (2)). By encrypting the input password using the one-time encryption applet 21 provided from the mediation server 3 in this manner, the line between the user terminal 1 and the mediation server 3 is switched. Even if you race and intercept the communication, the next session with the same force ID Cannot be used for

In the intermediary server 3 that has received the encrypted password, the authentication servlet 25 is started by the server program 12, and the encrypted password is delivered here (steps (3) and (4)).

Here, the authentication servlet 25 takes over the reception number held by the reception servlet 13 described with reference to FIG. 4, and transmits this reception number together with the encryption password to the intermediary UA 20 (step (5)). .

An authentication request is issued from the solution UA 16 of the authentication server 5 to the mediation server 3 at regular intervals (step (1)), and the mediation UA 20 of the mediation server 3 uses the above-mentioned reception number and encryption password. When the state is received, the authentication request is triggered and the information is transmitted to the authorization UA 16 (step (6)).

The solution U A 16 accesses the reception database 6 using the reception number as a key, and reads out the card ID and the encryption key corresponding to the reception number (step (7)). Then, an authentication request is made to the authentication unit 28 by combining the obtained card ID, the encryption key, and the encryption password (step (8)).

Upon receiving the authentication request, the authentication unit 28 reads the encryption function from the encryption function management unit 17 (step (9)), and reads the password using the authorization card ID as the key (step (9)). Ten)) . Then, the authentication unit 28 encrypts the password read from the password database by an encryption function (step (11)), and compares this with the encrypted password received by the password UA 16. (Step (12)).

When the two encrypted passwords match, the authentication unit 28 reads the one piece of information from the user information database 26 as the authentication OK (step (13)). This user information is, for example, the number of points earned for the user's credit card. Then, the authentication unit 28 registers the reception number, the encrypted password, and the user information as the authentication result in the authentication result database 27 (step (14)). At the same time, the authentication result, that is, the authentication OK result flag and user information such as the number of acquired points are transmitted to the authorization UA 16 (step (15)).

If the authentication result is 〇K, the user UA 16 At the same time as writing the encrypted password (step (16)), the authentication result is transmitted to the mediation UA 20 of the mediation server 3 together with the user information (step (17)). The authentication result is transmitted to the user terminal 1 via the mediation UA 20 → the authentication servlet 25 and the server program 12 of the mediation server 3 and displayed on the browser screen of the user terminal 1 (step ( 18)-(20)).

FIG. 17 shows a display screen on the user terminal 1 at this time.

Next, a procedure for generating the HTML file and the encrypted applet 21 provided to the browser 11 described in FIG. 4 will be described with reference to FIG.

First, as described above, when the re-card ID is input on the browser 11 (step (1)), the server program 12 is started, and the start of the reception servlet 13 is prompted (step (2)). )).

First, the reception servlet 13 selectively reads out the template 61 shown in FIG. 12 (step (3)), rewrites the seed program (Seed) and executes the execution file ( cl ass) is output (step (4)), and an encrypted applet 21 is generated. The encrypted ablet 21 is provided to the browser 11 of the user terminal 1 through the server program 12 together with the HTML data 62 generated by the reception servlet 13 (step (5)). ~ (6)).

FIG. 7 shows a specific source code of the H TML data 62. Next, encryption in the present embodiment will be described.

First, an encryption key is set in order to use the encryption applet 21 only for the session. That is, a different encryption formula is generated for each session by operating the encryption key. For this reason, the encryption function management unit 1 is provided with encryption tables A and B in which the encryption functions shown in FIGS. 9 and 10 are registered.

That is, in the present embodiment, the encryption function adopted by the encryption key is specified, and this encryption key is stored in the reception database 6 of the authentication server 5 for later authentication. (See Figure 5).

In FIGS. 9 and 10, the variable a is a date, which is obtained from the clock function of each server. In the table configuration, when “A 3” is designated as the encryption key, the third equation of table A shown in FIG. 9, that is, “Y = aX + 3” Is adopted. When this expression is used, for example, if the date is 10 days (a = 10), the numerical value Y obtained by multiplying the input numerical value X by 10 and adding 3 is the encrypted value.

The encryption key may use the value of the server's machine clock as a variable so that a different numerical value is generated for each session. For example, if a function like the one shown in Figure 11 is registered in the encryption table, A is the second (four digits) of the server's mechanical clock, B is the year, month and day (six digits) of the server's mechanical clock, C May be the hour and minute (4 digits) of the server's mechanical clock.

Next, referring to FIGS. 13A and 13B, in order to facilitate understanding of encryption and authentication in the present embodiment, a user terminal 1, an intermediary server 3, an authentication server Explain the chronology of the work with 5. Force number (ID): 1 234

Reception number: 49 1 2

Pass ID: 9 1 04

Encryption function: Y = 3 X—99 First, when 一 234 ”is input as a user terminal 1's password (ID) (step 1301), the mediation server 3 mediates this (1 302), and notifies the authentication server 5.

The authentication server 5 obtains the card number (ID) “1 234” and assigns the receipt number “49 1 2” to it. Then, the encryption method is set (1303). Specifically, the encryption function “Y = 3 X-99” and the encryption key that specifies this function are read from the encryption function management unit 1 (see Fig. 4).

The mediation server 3 obtains the reception number “491 2” and the encryption function “Υ = 3 X—99” from the authentication server 5 (1304), and generates an encryption applet 21 in which these are embedded (1304). 305).

Next, when the pass code “91 04” is input on the user terminal 1 (1 306), this is calculated by the encryption function “Υ = 3Χ—99”, and the calculation result is the encryption password “2721”. 3 ”to the authentication server 5 through the mediation server 3 (1 307, 1 308).

On the other hand, in parallel with the above, the authentication server 5 reads out the encryption function “γ = 3Χ−99” from the encryption function management unit 17 (1309), and reads the password obtained in step 1303. Read the password "91 04" from the authorization database using the password (ID) as a key (1 310). Then, the read passcode is encrypted by the encryption function “Y = 3X−99” (1311). Then, the encrypted numerical value is compared with the encrypted password “2F 213” notified from the user terminal 1 described above (1312).

As a result, if the encrypted password stored in the software database matches the encrypted password from the user terminal 1, the authentication is established and held in the authentication server 5. The user information that has been provided is provided to the user terminal 1 via the mediation server 3 (1 3 13) (1 3 1 4).

In the above description, the encryption function is notified from the authentication server 5 to the mediation server 3 to generate the encryption ablet 21, but as shown in FIG. It is also possible to receive only the encryption key 801 from the server and generate the encryption applet 21 in combination with the function table 802 of the mediation server 3 itself.

In this case, the function table 802 held by the mediation server 3 must be the same as the function table of the encryption function management unit 1 included in the authentication server 5. FIG. 18 is a sequence diagram showing exchange of data between the user terminal, the mediation server, and the authentication server in a modification of the embodiment of the present invention.

In the sequence diagram shown in Fig. 13 above, after inputting the record number from the user terminal 1, the reception number is issued by the authentication server. Above, the password was entered on this tablet.

On the other hand, in the sequence of FIG. 18, when a processing request is made at the user terminal 1, an AB is generated and distributed by the mediation server based on the reception number from the authentication server 5 ■ the encryption method, and On the terminal 1, the user enters a password and a password on this ablet.

This will be described specifically. 3 = 3 ¹ 1 aflfi no I じ 73 73 73 73 73 73 73 73 通し通し通し通し通し通し通し通し通し通し通しクリッククリック処理処理The authentication server 5 is notified that this processing request has been made (1802). The authentication server 5 sets the reception number and the encryption method (for example, the encryption function “Υ = 3Χ−99”) based on this (1803). The processing of this step "! 803 is the same as that of step 1303 in FIG. 13 described above. Here, for example, if 49 12 is given to the authentication server 5 as a reception number, this reception number and encryption The method is notified to the mediation server 3 (1804).

Based on this, the mediation server 3 generates an alphabet and distributes it to the user terminal 1 (1805).

On the user terminal 1, the abbreviation distributed from the mediation server 3 is executed, and the input of the password and the password is received from the user (1806). Here, the entered security code is converted to an encryption security code (here, Υ = 3 Χ—99 = 3 X 9 104 -99 = 2721 3) on the tablet based on the encryption method described above. Then, it is sent to the mediation server 3 (1807).

On the other hand, in parallel with the above, the authentication server 5 reads out the encryption function “Υ = 3Χ−99” from the encryption function management unit 17 (1809), and extracts the target data. Read from the solid database (1801). This includes the card number and password "91 04". Then, the read password is encrypted by the encryption function “Υ = 3X−99” (1811). Then, the encrypted numerical value is compared with the encrypted password “27213” notified from the user terminal 1 (1812).

As a result, if the encrypted passcode stored in the authorization database 7 and the encrypted password from the user terminal 1 match, authentication is established and the authentication server 5 The held user information is provided to the user terminal 1 via the mediation server 3 (1813) (1814).

As described above, in the modification shown in FIG. 18, the user is required to enter the card number and the password on the same abbreviated form, so that the user enters the card number and then waits for the password input screen. No stress to the user.

Figure 18 shows the status of the card number and password on the V1806 tablet. Z You You T Tsyo? Although the example of R swords was omitted, the user information is not limited to these two, and a plurality of items may be input. Figure 19 shows this example in a sequence diagram. As shown in the figure, data of a plurality of items are registered in the software database 7 and these are compared with the input user information.

The details are the same as those described with reference to FIGS. 13 and 18, and therefore description thereof is omitted.

As described above, according to the present invention, the existence of a re-authentication server can be kept secret from an authentication service from a user terminal via an intermediary server. In addition, the mediation server provides a one-time use encryption program for the session only, and this encryption program can encrypt the input data on the user terminal, thus ensuring high-security data communication against leakage on the communication path. Is possible.

Furthermore, since the encryption program is a one-time use encryption program only for the session, even if a third party starts a session based on the leaked data, the encryption program does not match and unauthorized access is prevented. Can be prevented.

Industrial applicability

INDUSTRIAL APPLICABILITY The present invention can be used for an authentication system when a user purchases a product from a terminal computer or a mobile terminal via the Internet.

Claims

Scope of request For a user terminal that inputs data, the mediation server includes a mediation server that mediates the data, and an authentication server that authenticates the data.

An authentication server for outputting encrypted information to the mediation server upon input of the first data at the user terminal;

Based on the encryption information received from the authentication server, an encryption program for encrypting the second data input at the user terminal is generated, and the encryption program is distributed to the user terminal. A network authentication device consisting of an intermediary server that operates.

The encryption information is an encryption function, and the authentication server encrypts the second data re-encrypted by the encryption program and the second data held by the authentication server using the encryption function. 2. The network authentication device according to claim 1, wherein the legitimacy of the session from the one user terminal is evaluated by comparing the authenticated session with the authenticated one.

3. The network authentication device according to claim 1, wherein the encryption information changes for each session from the one user terminal to the mediation server. 2. The network authentication device according to claim 1, wherein the first data is a user ID, and the second data is a password.

3. The network according to claim 2, wherein the encryption information is an encryption key for specifying an encryption function from a plurality of encryption functions of the mediation server instead of the authentication server. Work authentication device.

Mediating the first data received from the user terminal to the authentication server in the mediation server;

Generating encryption information based on the first data, and transmitting the encryption information to an intermediate server;

Reading second data corresponding to the first data and held by an authentication server, and encrypting the second data with the encryption information;

In the mediation server, based on the encrypted information, Generating an encryption program for encrypting the second data to be manually input, and distributing the encryption program to the user terminal;

At the user terminal, encrypting the second data input by the encryption program;

Comparing the second data encrypted by the user terminal with the second data encrypted by the authentication server. <The encryption information is transmitted from the user terminal to the mediation server. 7. The network authentication method according to claim 6, wherein the network authentication method changes for each session.

A step of generating an encryption program for encrypting second data input at the user terminal based on the encryption information in the mediation server, and distributing the encryption program to the user terminal;

Comparing the second data encrypted by the user terminal with the second data encrypted by the authentication server.

For a user terminal that inputs data, there is a mediation server that mediates the data, and an authentication server that authenticates the data.

An authentication server that generates unique information for the processing request in response to input of a processing request at the one user terminal;

A network authentication device, comprising: a mediation server that provides an input interface generated based on the unique information to the user terminal.

The input interface is an execution program functioning on a user terminal, 10. The network authentication device according to claim 9, wherein the execution program accepts input of two or more pieces of user information, and encrypts the two or more pieces of input user information and transmits the encrypted user information to the mediation server.