Information processing system, information processing method, information processing device, program and storage medium

• US 9,202,030 B2
• Filed: 01/30/2012
• Issued: 12/01/2015
• Est. Priority Date: 05/31/2011
• Status: Active Grant

• Current Assignee: Rakuten Group, Inc.
• Original Assignee: Rakuten, Inc. (Rakuten Group, Inc.)
• Inventors: Yamahara, Hisanori
• Primary Examiner(s): McNally, Michael S
• Application Number:
  US14/119,447
• Publication Number:
  US 20140150117A1
• Time in Patent Office: 1,401 Days
• Field of Search: 726/28
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/032 Protect output to user by software means
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2123 Dummy operation
• CPC Class Codes: G06F 2221/2149 Restricted operating environment

Abstract

To reduce a fear in that another person notices limitation of a range of information that forms a basis of a screen provided to a user, a page generation unit identifies a publicly-displayable range of information on the user based on control information, which is information different from a password and is identified based on content of an operation performed in a password input field with an input device. The page generation unit limits the range of the information that forms the basis of the screen provided to the user so that the range of the information falls within the publicly-displayable range identified by the page generation unit.

Claims

1. An information processing system, comprising:

at least one processor; and

at least one memory device that stores a plurality of instructions, which when executed by the at least one processor, causes the at least one processor to operate to;

authenticate a user; and

generate a page provided to the user, wherein

the user is authenticated by using a first part of content of an operation performed in a password input field with an input device and a password set in advance by the user;

identify control information, which is information different from the password set in advance by the user and a second part of the content of the operation not used for the authentication of the user;

identify a publicly-displayable range of information on the user based on the control information; and

wherein

when the authentication of the user is succeeded, limit a range of information on the user used for generating information disposed on the page provided to the user so that the range of the information falls within the identified publicly-displayable range.

2. The information processing system according to claim 1,

wherein when executed by the at least one processor, the plurality of instructions cause the at least one processor to operate to identify a first information element from among one or more information elements on the user, and

limit, to the identified first information element, the range of the information used for generating information disposed on the page provided to the user.

3. The information processing system according to claim 2,

wherein to each of the one or more information elements, a secrecy level representing a degree of secrecy of the information is set,

wherein when executed by the at least one processor, the plurality of instructions cause the at least one processor to operate to identify the secrecy level, and

identify an information element having set thereto a secrecy level representing secrecy that is lower than secrecy represented by the identified secrecy level.

4. The information processing system according to claim 3, wherein the secrecy level is set based on a combination of a type of an item or service introduced in a page browsed by the user and an attribute of the user.

5. The information processing system according to claim 2, wherein when executed by the at least one processor, the plurality of instructions cause the at least one processor to operate to limit a range of information disposed on the page provided to the user.

6. The information processing system according to claim 2, wherein when a condition that a character string input to the input device includes the password set in advance by the user is satisfied, the plurality of instructions cause the at least one processor to operate to limit the range of the information used for generating information disposed on the page.

7. The information processing system according to claim 2, wherein when any one of a plurality of character strings having the same number of characters is input to the input device, the plurality of instructions cause the at least one processor to operate to limit the range of the information used for generating information disposed on the page provided to the user so that the range of the information falls within a range of information associated with the control information which is a part of the input character string and information different from the password set in advance by the user.

8. The information processing system according to claim 1, wherein when executed by the at least one processor, the plurality of instructions cause the at least one processor to operate to limit a range of information disposed on the page provided to the user.

9. The information processing system according to claim 1, wherein when executed by the at least one processor, the plurality of instructions cause the at least one processor to operate to control information disposed on the page provided to the user so that alternative information is arranged instead of information limited not to be disposed on the page.

10. The information processing system according to claim 1, wherein when a condition that a character string input to the input device includes the password set in advance by the user is satisfied, the plurality of instructions cause the at least one processor to operate to limit the range of the information used for generating information disposed on the page.

11. The information processing system according to claim 1, wherein when any one of a plurality of character strings having the same number of characters is input to the input device, the plurality of instructions cause the at least one processor to operate to limit the range of the information used for generating information disposed on the page provided to the user so that the range of the information falls within a range of information associated with the control information which is a part of the input character string and information different from the password set in advance by the user.

12. The information processing system according to claim 1, wherein when any one of a plurality of character strings having the same number of characters and at least parts of keys used to input characters at the same positions from a top of matching with each other is input to the input device, the plurality of instructions cause the at least one processor to operate to limit the range of the information on the user used for generating information disposed on the page provided to the user so that the range of the information falls within a range of information associated with the control information which is a key input to the input device and information different from the password set in advance by the user.

13. The information processing system according to claim 1, wherein when executed by the at least one processor, the plurality of instructions cause the at least one processor to operate to identify the control information based on an input interval of characters included in the password or a time period calculated based on a time when an input of the password is enabled and a time when a character included in the password is input.

14. The information processing system according to claim 1, wherein when executed by the at least one processor, the plurality of instructions cause the at least one processor to operate to identify information on the user associated with a type of an item or service or an attribute of the user as the publicly-displayable range, based on the control information.

15. An information processing method, comprising:

authenticating a user by using a first part of content of an operation performed in a password input field with an input device and a password set in advance by the user;

identifying control information, which is information different from the password set in advance by the user and a second part of the content of the operation not used for the authentication of the user;

identifying a publicly-displayable range of information on the user based on the control information; and

when the authentication of the user is succeeded, limiting a range of information on the user used for generating information disposed on the page provided to the user so that the range of the information falls within the identified publicly-displayable range.

16. An information processing device, comprising:

at least one processor; and

at least one memory device that stores a plurality of instructions, which when executed by the at least one processor, causes the at least one processor to operate to;

generate a page provided to a user,

when the user is authenticated by using a first part of content of an operation performed in a password input field with an input device and a password set in advance by the user, identify a publicly-displayable range of information on the user based on control information, which is information different from the password set in advance by the user and is identified based on a second part of the content of the operation not used for the authentication of the user; and

when the authentication of the user is succeeded, limit a range of information on the user used for generating information disposed on the page provided to the user so that the range of the information falls within the identified publicly-displayable range.

17. A non-transitory storage medium having a program stored thereon, the program causing a computer to function as:

a page generation unit that generates a page provided to a user, wherein

when the user is authenticated by using a first part of content of an operation performed in a password input field with an input device and a password set in advance by the user, the page generation unit identifies a publicly-displayable range of information on the user based on control information, which is information different from the password set in advance by the user and is identified based on a second part of the content of the operation not used for the authentication of the user; and

when the authentication of the user is succeeded, the page generation unit limits a range of information on the user used for generating information disposed on the page provided to the user so that the range of the information falls within the identified publicly-displayable range.