JP2002149613A - System and device for personal identification on internet - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an epoch-making system/device for personal identification on the Internet capable of securing rigid security without costs for new plant investment and operation. SOLUTION: A storage medium such as a floppy (registered trademark) disk 9, etc., storing an identification password and a user password which can be used for only once logging in is delivered to a user. Only when a user password is coincident with that stored in the floppy disk, the user logs in a service by it and the side of a system connects the user to a server through Internet. The identification password stored in the disk 9 is collated with that stored in the server to perform personal identification. When the identification passwords are coincident, an identification password for next-time log in is transferred to the storage medium such as the disk 9, etc., to be stored. After then, the using picture (browser) of the service is started to make the service available.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] The present invention is to provide a personal authentication system and apparatus on the Internet that can secure robust security without adding new capital investment and operation costs.

[0002]

2. Description of the Related Art Conventionally, when an external personal computer (terminal device) is connected to a terminal device or a server on the Internet and an intranet, a user (user) ID and password registered and managed in a network system in advance. , The authentication server determines whether connection is possible.

As described above, in the current "personal authentication" method, a simple method such as input of a user ID and a password is mainly used. The reason is that cost is not required and versatility is high.

[0004]

However, it cannot be denied that the risk of hacking such as impersonation of the user is high.
Authentication methods such as IC cards, secure cards (one-time passwords), and fingerprints have also been commercialized to ensure stronger security, but some are limited due to reasons such as cost burden and low versatility. Currently, it is used only for services.

The present invention eliminates the disadvantages of the prior art and eliminates the need for new capital investment and operation costs, as well as a personal authentication method on the Internet as a revolutionary authentication method capable of ensuring robust security. It is to provide a device.

[0006]

According to the present invention, in order to achieve the above object, as an authentication method on the Internet, an authentication password and a user password (first time password) that can be used to log in to a storage medium such as a floppy disk only once are used. (Initial value at the time of distribution. Password that can be changed by the user at any time.)
And distribute the storage medium such as a floppy disk to the user.The user sets the storage medium such as the floppy disk on a personal computer, inputs a user password, logs in to the service, and Only when the user password matches the user password stored on the floppy disk, connect to the server via the Internet. Check the authentication password stored on the floppy disk against the authentication password stored on the server. When the authentication password matches, transfer the authentication password for the next login generated by the original algorithm to a storage medium such as a floppy disk and save it. After that, launch the service use screen (browser), Abstract that the service can be used It is intended to.

[0007] As a personal authentication device on the Internet, a floppy disk or the like in which an authentication password and a user password that can be used for login only once (initial value at the time of initial distribution, a password that can be changed by the user at any time) is stored. When the user sets the storage medium and the storage medium such as the floppy disk in the personal computer, inputs the user password, and logs in to the service,
Only when the user password and the user password stored on the floppy disk match, the connection method to connect to the server via the Internet, and when the authentication password matches, the authentication password for the next login generated by the original algorithm is floppy. The present invention is characterized in that it comprises an authentication password transfer means for transferring and storing the data on a storage medium such as a disk.

According to the present invention, identity authentication is performed by comparing an authentication password stored in a storage medium such as an authentication floppy disk with an authentication password stored in a server. The authentication password for the next login generated in step 2 is transferred to a storage medium such as a floppy disk and saved.
Even if the storage medium such as a floppy disk for authentication passes to a third party by means such as unauthorized copying, the authentication password for the next login is changed in this way. Can not log in. In this way, security is secured by double defense using the user ID and the authentication password.

[0009]

Embodiments of the present invention will be described below in detail. FIG. 1 is an explanatory diagram showing an embodiment of a personal authentication method and apparatus on the Internet according to the present invention. In FIG.

[0010] As is well known on the ordinary Internet, a system-side company works as a provider to provide clients with information such as HTML or the like.
W server 3, F / W (firewall server) 4, which acts as a gatekeeper installed between the external network and the internal network, in order to block unauthorized intrusions from third parties as much as possible, router 5, and clients The database server 6 for searching for information, writing information, and managing information in accordance with the instructions of the client, sends an e-mail based on a request from the client, stores the received e-mail, and receives an inquiry from the client. The mail server 7 has a mail server 7 serving as a post office and a hub 11 serving as a line concentrator.

On the other hand, the user company 1 has an F / W 4 and a router 5, and in the illustrated example, a plurality of personal computers 8 are connected by a run (LAN).

In FIG. 1, reference numeral 10 denotes a user database constructed in the database server 6 or the like.

First, the apparatus of the present invention will be described. The present invention includes an authentication floppy disk 9 produced by the system-side company 2 and distributed to the user company (user) 1. The authentication floppy disk 9 can be changed to another storage medium such as a CD, a memory card, and an additional hard disk.

The authentication floppy disk 9 stores an authentication password a corresponding to a user (user) ID and a user password b called a normal password. Note that the authentication password a is a password that can be used for login only once, the user password b is an initial value when the authentication floppy disk 9 is distributed for the first time, and is a password that can be changed by the user at any time. .

[0015] On the other hand, although not shown, the system-side company 2 uses the storage medium such as a floppy disk in a personal computer and enters a user password to log in to the service. Only when the user password matches the user password stored in the floppy disk, a connection means for connecting to the server via the Internet is provided.

Further, there is provided an authentication password transfer means for transferring the authentication password for the next login generated by a unique algorithm by computer software to a storage medium such as the authentication floppy disk 9 when the authentication passwords match, and storing the same.

Next, the method of the present invention using such an apparatus will be described. The system-side company 2 creates the authentication floppy disk 9 and distributes it to the user company (user) 1.

The user company (user) 1 sets the authentication floppy disk 9 distributed from the system company 2 in the personal computer 8 in this way, and inputs a user password b as well as the authentication password a as appropriate. And log in to the service. In the first time, the user password b is input to the authentication floppy disk 9, and it is not necessary to input this specially (the initial value at the time of initial distribution), but the user can change it at any time. When changed, the user enters the password.

On the system side, that is, on the system side company 2, only when the user password b entered by the user matches the user password b stored in the authentication floppy disk 9, the personal computer 8 is connected to the server via the Internet. Connect to

Further, the authentication password a stored in the authentication floppy disk 9 is compared with the authentication password a stored in the server of the system company 2 to perform the personal authentication. If they do not match, the process ends as an error.

When the authentication passwords a match, the authentication password for the next login generated by a unique algorithm is transferred to the authentication floppy disk 9 and stored.

After that, the service use screen (browser)
Is activated, and the service can be used.

When the authentication floppy disk 9 is illegally copied, the following operation is performed. When an unauthorized user logs in using the illegally copied authentication floppy disk 9, if a valid user has already logged in using the valid authentication floppy disk 9 after the illegal copy, As described above, the authentication password for the next login is transferred to a storage medium such as the authentication floppy disk 9 and the authentication password a is changed to a ', so that the personal authentication is not established.

The login using the illegally copied authentication floppy disk 9 can be performed until the authorized user logs in, and the security effect is high if the authorized user frequently uses the login.

If the authentication floppy disk 9 is used as shown in the figure, the system of the present invention can be used even with a mobile PC such as a notebook personal computer.

[0026]

As described above, the personal authentication method and apparatus on the Internet according to the present invention is an epoch-making method that can secure robust security without adding new capital investment and operation cost. .

[Brief description of the drawings]

FIG. 1 is an explanatory diagram showing an embodiment of a personal authentication method and apparatus on the Internet according to the present invention.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1 ... Use company 2 ... System side company 3 ... WWW server 4 ... F / W 5 ... Router 6 ... Database server 7 ... Mail server 8 ... Personal computer 9 ... Authentication floppy disk 10 ... Database 11 ... Hub

Claims (2)

[Claims] An authentication password and a user password that can be used for log-in only once on a storage medium such as a floppy disk and a user password (initial value at the time of initial distribution; a password that can be changed by the user at any time) are stored on the storage medium such as a floppy disk. The medium is distributed to the user, and the user sets the storage medium such as a floppy disk on the personal computer,
Enter the user password and log in to the service. On the system side, only if the user password matches the user password stored on the floppy disk,
Connects to the server via the Internet, authenticates the user by comparing the authentication password stored on the floppy disk with the authentication password stored on the server, and uses the original algorithm to generate the next login when the authentication password matches. The personal authentication method on the Internet, characterized in that the authentication password is transferred to a storage medium such as a floppy disk and stored, and then the service use screen (browser) is activated to enable use of the service. 2. A storage medium such as a floppy disk storing an authentication password and a user password that can be used for login only once (initial value at the time of initial distribution; a password that can be changed by the user at any time); When a storage medium such as a floppy disk is set in a personal computer and a user password is entered to log in to the service, only when the user password and the user password stored on the floppy disk match, via the Internet The Internet, characterized in that it comprises: a connection means for connecting to the server by means of an authentication password; and an authentication password transfer means for transferring the authentication password for the next login generated by a unique algorithm to a storage medium such as a floppy disk and storing it when the authentication passwords match. Authentication device above.