Authentication method and device

• US 20020087892A1
• Filed: 11/29/2001
• Published: 07/04/2002
• Est. Priority Date: 12/28/2000
• Status: Abandoned Application

• Current Assignee: Morgan Stanley
• Original Assignee: Morgan Stanley
• Inventors: Imazu, Hideyo
• Application Number:
  US09/997,092
• Publication Number:
  US 20020087892A1
• Time in Patent Office: Days
• US Class Current: 713/202
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/30 Managing network names, e.g. use of aliases or nicknames name-to-address mapping H04L61/45
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

[PROBLEM] Person authentication and authentication device of the present invention aims at providing a user with services of easy, inexpensive, highly secure, and reliable person authentication.

[MEANS TO SOLVE THE PROBLEMS]

Authentication method adopted by the present invention comprises: a step that forwards to a communication device of a user a registration identifier that identifies the user and/or the communication device by including the identifier in an address of registration screen peculiar to the user and/or the communication device; and a step that, when the address is accessed, and a first password is entered and replied to the registration screen, authenticates the user based on the registration identifier and the first password; and a step that sends a login screen display to the user when the authentication step is successful, which the step is comprised of a step where the login screen display comprises a field for entering a second password, and a login identifier to identify the user and/or the communication device; and a step that authenticates the user based on the login identifier contained in the login screen display replied by the user, and the second password.

Claims

1. An authentication method comprising the steps of:

sending an address of a registration screen to a communication device of a user, the address including a registration identifier for identifying the user and/or the communication device;

authenticating the user based on the registration identifier and a first password that is entered in the registration screen and returned when the address is accessed;

sending a login screen to the user when the authenticating step succeeds, the login screen including a field into which a second password is entered, and a login identifier for identifying the user and/or the communication device; and

authenticating the user based on the login identifier included in the login screen, and the second password that are returned by the user.

2. An authentication method according to claim 1, wherein the registration identifier and the login identifier differ from each other.

3. An authentication method according to claim 1, wherein the first and second passwords are the same.

4. An authentication method according to claim 1, wherein the login identifier in the login screen is a device identifier that the communication device automatically sends for particularly identifying the communication device.

5. An authentication method according to claim 1, wherein the step of sending the login screen to the user enables the user to save contents of the login screen in the communication device.

6. An authentication method according to claim 1, wherein an address of the login screen includes the identifier;

and

wherein the step of sending the login screen to the user enables the user to save the address of the login screen in the communication device.

7. An authentication method according to claim 1, wherein the authenticating step using the registration identifier and the first password disables the registration screen to be accessed when the authenticating step succeeds.

8. An authentication method according to claim 1, wherein the first password that has been entered in the registration screen and returned will not be accepted unless the password is returned within a predetermined time.

9. An authentication device comprising:

a storage part that stores user information, a registration identifier, a registration password verification information, login identifier, login password verification information while correlating them with one another;

a first control part that sends an address of a registration screen to a communication device of a user, the address including a registration identifier for identifying the user and/or the communication device;

a second control part that provides the communication device with the registration screen including a field into which a registration password is entered, and the registration identifier in response to a request for the registration screen from the communication device, and that authenticates the user with reference to the storage part when the user enters the login password in the registration screen and returns the same; and

a third control part that provides the communication device with the login screen including a field into which a login password is entered, and the login identifier when the authentication succeeds, and that authenticates the user with reference to the storage part when the user enters the login password in the login screen and returns the same.