Authentication apparatus and method, network system, recording medium and computer program

• US 20050108520A1
• Filed: 12/09/2004
• Published: 05/19/2005
• Est. Priority Date: 06/12/2002
• Status: Abandoned Application

• Current Assignee: Sumitomo Heavy Industries Limited
• Original Assignee: Sumitomo Heavy Industries Limited
• Inventors: Yamamoto, Tatsuyoshi, Miyamaki, Hideo
• Application Number:
  US11/007,446
• Publication Number:
  US 20050108520A1
• Time in Patent Office: Days
• US Class Current: 713/155
• CPC Class Codes: G06F 21/35 communicating wirelessly

Abstract

An authentication apparatus that makes it difficult to perform posing when accessing information is provided. When there is an access request from a mobile phone, an authentication server transmits a program to the mobile phone (S3202). The program is for reading data regarding an individual number (for example, serial number) recorded in a scratch pad of the mobile phone, and transmitting the data to the authentication server. The authentication server that receives the data regarding the serial number transmitted by activation of the program (S3202) compares the serial number with data regarding the identification number of each mobile phone, the data being maintained in the authentication server (S3203). When the serial number matches any of serial numbers maintained therein (S3203: Yes), the authentication server authenticates the access to be valid.

Claims

1. An authentication apparatus that performs, when a user terminal used by a user assigned with predetermined user identification information accesses predetermined information, authentication as to whether the user terminal is valid based on terminal identification information assigned to each user terminal, said apparatus comprising:

user identification information recording means recording the user identification information therein;

user identification information determination means for receiving from the user terminal the user identification information of the user using the user terminal, and comparing the received user identification information with user identification information recorded in the user identification information recording means so as to determine whether the received user identification information is valid;

terminal identification information generation means for, when the received user identification information is determined to be valid, generating the terminal identification information to be recorded in the user terminal, and transmitting the generated terminal identification information to the user terminal;

terminal identification information recording means for recording the terminal identification information;

authentication means for comparing the terminal identification information received when the user terminal accesses the predetermined information with the terminal identification information recorded in the terminal identification information recording means so as to determine whether the received terminal identification information is valid; and

allowing means for, when the received terminal identification information is valid, allowing the access from the user terminal.

2. The authentication apparatus as claimed in claim 1, wherein the terminal identification information recording means records the terminal identification information and area information in pairs, the area information indicating an area of information accessible by a user terminal indicated by each terminal identification information, and

the allowing means allows the user terminal to make an access within an area indicated by the area information.

3. The authentication apparatus as claimed in claim 2, wherein the area information includes an address of an access destination registered in advance for each user terminal.

4. The authentication apparatus as claimed in claim 2, wherein the area information is a pair of an address and the user identification information.

5. The authentication apparatus as claimed in claim 2, wherein a single pair of an ID and a password is associated with one of the user identification information, and the single pair of an ID and a password is assigned as general ID and password in the case where the access destination is more than one.

6. The authentication apparatus as claimed in claim 5, further comprising means for collectively suspending or canceling suspension of use of the general ID and password.

7. The authentication apparatus as claimed in claim 6, further comprising:

means for recording an e-mail address used by each user by associating the e-mail address with the user identification information assigned to each user;

means for, when transmitting the terminal identification information to a user, reading an e-mail address assigned to the user from the means for recording an e-mail address, and transmitting to the e-mail address an e-mail including information for causing the user to transmit acknowledge information for confirming whether a predetermined process for causing transmission of the terminal identification information is performed by the user; and

means for, based on the acknowledge information received from the user who receives the e-mail, determining whether the predetermined process for causing transmission of the terminal identification information is performed by the user, and, performing one of;

a process of canceling suspension of use of the general ID and password when it is determined that the transmission of the terminal identification information is based on an action of the user; and

a process of suspending the use of the general ID and password when it is determined that the transmission of the terminal identification information is not based on an action of the user.

8. The authentication apparatus as claimed in claim 7, further comprising:

means for receiving the authentication information transmitted by the user in a form of an e-mail;

means for detecting an e-mail address of a transmitting source of the received acknowledge information, and comparing the e-mail address with the e-mail address recorded in the means for recording an e-mail address; and

means for performing, as a result of the comparison, one of;

a process of canceling suspension of use of the general ID and password when the e-mail addresses match; and

a process of suspending the use of the general ID and password when the e-mail addresses do not match.

9. The authentication apparatus as claimed in claim 7, further comprising:

means for recording a telephone number of a mobile phone used by each user by associating the telephone number with the user identification information assigned to each user;

means for receiving the authentication information transmitted by the user in a form of communication by telephone;

means for detecting a telephone number of a transmitting source of the received acknowledge information, and comparing the telephone number with the telephone number recorded in the means for recording a telephone number; and

means for performing, as a result of the comparison, one of;

a process of canceling suspension of use of the general ID and password when the telephone numbers match; and

a process of suspending the use of the general ID and password when the telephone numbers do not match.

10. The authentication apparatus as claimed in claim 1, wherein the user identification information consists of a pair of an ID and a password assigned to each user.

11. The authentication apparatus as claimed in claim 1, wherein a single pair of an ID and a password is associated with one of the user identification information, and the single pair of an ID and a password is assigned as general ID and password in the case where the access destination is more than one.

12. The authentication apparatus as claimed in claim 11, further comprising means for collectively suspending or canceling suspension of use of the general ID and password.

13. The authentication apparatus as claimed in claim 12, further comprising:

means for recording an e-mail address used by each user by associating the e-mail address with the user identification information assigned to each user;

means for, when transmitting the terminal identification information to a user, reading an e-mail address assigned to the user from the means for recording an e-mail address, and transmitting to the e-mail address an e-mail including information for causing the user to transmit acknowledge information for confirming whether a predetermined process for causing transmission of the terminal identification information is performed by the user; and

means for, based on the acknowledge information received from the user who receives the e-mail, determining whether the predetermined process for causing transmission of the terminal identification information is performed by the user, and, performing one of;

a process of canceling suspension of use of the general ID and password when it is determined that the transmission of the terminal identification information is based on an action of the user; and

a process of suspending the use of the general ID and password when it is determined that the transmission of the terminal identification information is not based on an action of the user.

14. The authentication apparatus as claimed in claim 13, further comprising:

means for receiving the authentication information transmitted by the user in a form of an e-mail;

means for detecting an e-mail address of a transmitting source of the received acknowledge information, and comparing the e-mail address with the e-mail address recorded in the means for recording an e-mail address; and

means for performing, as a result of the comparison, one of;

a process of canceling suspension of use of the general ID and password when the e-mail addresses match; and

a process of suspending the use of the general ID and password when the e-mail addresses do not match.

15. The authentication apparatus as claimed in claim 13, further comprising:

means for recording a telephone number of a mobile phone used by each user by associating the telephone number with the user identification information assigned to each user;

means for receiving the authentication information transmitted by the user in a form of communication by telephone;

means for detecting a telephone number of a transmitting source of the received acknowledge information, and comparing the telephone number with the telephone number recorded in the means for recording a telephone number; and

means for performing, as a result of the comparison, one of;

a process of canceling suspension of use of the general ID and password when the telephone numbers match; and

a process of suspending the use of the general ID and password when the telephone numbers do not match.

16. The authentication apparatus as claimed in claim 1, further comprising:

means for maintaining a program for causing the user terminal to be authenticated to transmit the terminal identification information thereof; and

means for transmitting the program to the user terminal requesting for authentication.

17. The authentication apparatus as claimed in claim 16, wherein the user terminal includes means for recording the program, and the terminal identification information is transmitted from the user terminal requesting for authentication by a function formed by activating the program recorded in the means for recording the program.

18. The authentication apparatus as claimed in claim 1, wherein the user terminal is a wireless mobile terminal.

19. The authentication apparatus as claimed in claim 1, wherein the information which the user terminal desires to access is record information of a common file that exists in a predetermined network requiring security, and at least a part of which common file is maintained to be common with a file existing outside the network.

20. A network system, comprising:

a first server recording information accessible to a user terminal therein; and

an authentication apparatus performing authentication as to whether the user terminal that desires to access the information recorded in the first server is valid,

the first server being configured to search for relevant information in response to an access from a valid user terminal and transmit the searched for information to the user terminal that is a source of the access;

the authentication apparatus including;

user identification information recording means recording therein predetermined user identification information assigned to a user;

user identification information determination means for receiving from the user terminal the user identification information of the user using the user terminal, and comparing the received user identification information with user identification information recorded in the user identification information recording means so as to determine whether the received user identification information is valid;

terminal identification information generation means for, when the received user identification information is determined to be valid, generating the terminal identification information to be recorded in the user terminal, and transmitting the generated terminal identification information to the user terminal;

terminal identification information recording means for recording the terminal identification information;

authentication means for comparing the terminal identification information received when the user terminal accesses the predetermined information with the terminal identification information recorded in the terminal identification information recording means so as to determine whether the received terminal identification information is valid; and

allowing means for, when the received terminal identification information is valid, allowing the access from the user terminal.

21. The network system as claimed in claim 20, wherein the first server is connected in a network to a second server via a private line or a virtual private line, the second server existing outside the network,

the first server and the second server include common files, at least a part of record information of the common files being maintained to be common with each other, and

the authentication apparatus performs authentication as to whether a user terminal that desires to access the record information of the common files of the first server is valid.

22. The network system as claimed in claim 21, wherein each of the first server and the second server is configured to transmit, when the record information of the common file thereof is changed, difference data before and after the change to the other server, and when the difference data are received from the other server, automatically perform a replication task that replicates the difference data to the common file thereof.

23. The network system as claimed in claim 21, wherein the number of the first servers is more than one, and the second server is provided such that each second server corresponds to one of the first servers.

24. The network system as claimed in claim 20, wherein the authentication apparatus further comprises:

extracting means for extracting information transmitted from the first server to the user terminal; and

transmission information recording means for recording, for each user terminal, data regarding transmission information indicating what information is transmitted.

25. The network system as claimed in claim 20, wherein the authentication apparatus further comprises transmission information presenting means for generating data for displaying transmission information with respect to the user terminal on a display of the user terminal based on the data recorded in the transmission information recording means.

26. A network system, comprising:

means for enabling a first server recording information accessible to a user terminal to perform communications within a predetermined network; and

an authentication apparatus performing authentication as to whether a user terminal that desires to access the information via the network is valid,

the first server being configured to search for relevant information in response to an access from a valid user terminal and transmit the searched for information to the user terminal that is a source of the access,

the authentication apparatus comprising;

user identification information recording means recording the user identification information therein;

user identification information determination means for receiving from the user terminal the user identification information of the user using the user terminal, and comparing the received user identification information with user identification information recorded in the user identification information recording means so as to determine whether the received user identification information is valid;

terminal identification information generation means for, when the received user identification information is determined to be valid, generating the terminal identification information to be recorded in the user terminal, and transmitting the generated terminal identification information to the user terminal;

terminal identification information recording means for recording the terminal identification information;

authentication means for comparing the terminal identification information received when the user terminal accesses the predetermined information with the terminal identification information recorded in the terminal identification information recording means so as to determine whether the received terminal identification information is valid; and

allowing means for, when the received terminal identification information is valid,

allowing the access from the user terminal.

27. A method of authenticating a user terminal in a network system,

wherein an authentication apparatus is provided in a network system in which a first server recording information accessible to a user terminal exists in a predetermined network, and the authentication apparatus performs authentication as to whether a user terminal that desires to access the information is valid,

the authentication apparatus

records user identification information assigned in advance to a user;

receives from the user terminal requesting for authentication the user identification information of the user using the user terminal, and when the received user identification information matches any user identification information that is already recorded, determines that the user terminal is valid and generates terminal identification information to be recorded in the user terminal;

records and transmits the generated terminal identification information to the user terminal; and

compares the terminal identification information received when the user terminal accesses predetermined information with the terminal identification information recorded in the apparatus so as to determine whether the received terminal identification information is valid, and when the received terminal identification information is valid, allows the access from the user terminal.

28. A computer program for causing a computer to perform processes, the computer being provided in a network system in which a first server recording information accessible to a user terminal exists in a predetermined network, and the first server searches for relevant information in response to a request from a valid user terminal and transmits the searched for information to the user terminal,

the processes comprising:

(1) a process of recording predetermined user identification information assigned in advance to a user;

(2) a process of receiving from the user terminal requesting for authentication at least the user identification information of the user using the user terminal, and when the received user identification information matches any user identification information that is already recorded, determining that the user terminal is valid and generating terminal identification information to be recorded in the user terminal;

(3) a process of recording and transmitting the generated terminal identification information to the user terminal; and

(4) a process of comparing the terminal identification information received when the user terminal accesses predetermined information with the terminal identification information recorded in the apparatus so as to determine whether the received terminal identification information is valid; and

(5) a process of allowing, when the received terminal identification information is valid, the access from the user terminal.