User authentication system and user authentication method

• US 6,817,519 B2
• Filed: 09/07/2001
• Issued: 11/16/2004
• Est. Priority Date: 09/08/2000
• Status: Expired due to Fees

• Current Assignee: Pioneer Corporation
• Original Assignee: Pioneer Corporation
• Inventors: Yasushi, Mitsuo, Yanagidaira, Masatoshi
• Primary Examiner(s): St. Cyr, Daniel
• Application Number:
  US09/947,921
• Publication Number:
  US 20020049915A1
• Time in Patent Office: 1,166 Days
• Field of Search: 235/379, 235/380, 235/382, 235/382.5, 709/203, 709/205, 709/218, 709/219, 709/222, 709/225, 709/228
• US Class Current: 235/379
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

A user authentication system and a user authenticating method, in which an access from a terminal apparatus to a server by an illegal user other than a specific user can be certainly eliminated by a relatively simple construction using a first terminal apparatus for connecting to an information server through a network line and a second terminal apparatus for connecting to the information server by a communication line independent of the network line.

Claims

1. A user authentication system having a first terminal apparatus for connecting to an information server through a network line, a second terminal apparatus for connecting to said information server by a communication line independent of said network line, and an authentication server located on said network line, for authenticating a user of said first terminal apparatus when said information server is accessed from said first terminal apparatus through said network line, comprising:

first transmitting means for transmitting a new-issuing request of a password from said second terminal apparatus to said information server through said communication line;

password forming means for forming a new password in said information server in response to the new-issuing request of the password from said first transmitting means;

second transmitting means for transmitting the password formed by said password forming means to said second terminal apparatus through said communication line;

third transmitting means for transmitting the password formed by said password forming means to the authentication server through said network line;

reception notifying means for receiving the password transmitted by said second transmitting means in said second terminal apparatus and notifying the received password;

input means for accepting the password from the user in said first terminal apparatus;

fourth transmitting means for transmitting the password accepted by said input means to said authentication server through said network line; and

authenticating means for performing the user authentication in said authentication server in accordance with a coincidence of at least the password transmitted by said third transmitting means and the password transmitted by said fourth transmitting means,

wherein said second terminal apparatus is a mobile terminal apparatus having a telephone function, and

wherein said communication line is provided with a telephone exchange apparatus for inhibiting a line connection to said information server from a terminal apparatus other than said mobile terminal apparatus to which a predetermined telephone number has been allocated.

2. The system according to claim 1, wherein when the user authentication by said authenticating means is completed, said authentication server guides a destination accessed by said first terminal apparatus to said information server.

3. The system according to claim 1, wherein said authentication server has holding means for receiving the password transmitted by said third transmitting means and holding the received password together with a user identification code which has previously been set and registered.

4. The system according to claim 3, wherein

said input means accepts the user identification code together with the password,

said fourth transmitting means transmits the password and the user identification code accepted by said input means to said authentication server through said network line, and

said authenticating means executes the user authentication by detecting a coincidence of the user identification code held by said holding means and the user identification code transmitted by said fourth transmitting means and a coincidence of the password transmitted by said third transmitting means and the password transmitted by said fourth transmitting means.

5. The system according to claim 1, wherein said information server is a home server which is connected to said network line through a relay apparatus by a dial-up connecting method.

6. The system according to claim 5, wherein said network line is a line of the Internet, and said relay apparatus is an apparatus of an Internet service provider.

7. A user authentication system having a first terminal apparatus for connecting to an information server through a network line, a second terminal apparatus for connecting to said information server by a communication line independent of said network line, and an authentication server located on said network line, for authenticating a user of said first terminal apparatus and when said information server is accessed from said first terminal apparatus through said network line, comprising:

password forming means for forming a new password in said second terminal apparatus and notifying the new password;

first transmitting means for transmitting the password formed by said password forming means to said information server through said communication line;

transmitting and receiving means for receiving the password transmitted from said first transmitting means in said information server and, thereafter, transmitting the received password to said authentication server through said network line;

input means for accepting a password from the user in said first terminal apparatus;

second transmitting means for transmitting the password accepted by said input means to said authentication server through said network line; and

authenticating means for performing the user authentication in said authentication server in accordance with a coincidence of at least the password transmitted by said transmitting and receiving means and the password transmitted by said second transmitting means,

wherein the password forming means forms the new password prior to the user authentications,

wherein said second terminal apparatus is a mobile terminal apparatus having a telephone function, and

wherein said communication line is provided with a telephone exchange apparatus for inhibiting a line connection to said information server from a terminal apparatus other than said mobile terminal apparatus to which a predetermined telephone number has been allocated.

8. The system according to claim 7, wherein when the user authentication by said authenticating means is completed, said authentication server guides a destination accessed by said first terminal apparatus to said information server.

9. The system according to claim 7, wherein said authentication server has holding means for receiving the password transmitted by said second transmitting means and holding the received password together with a user identification code which has previously been set and registered.

10. The system according to claim 9, wherein

said input means accepts the user identification code together with the password,

said second transmitting means transmits the password and the user identification code accepted by said input means to said authentication server through said network line, and

said authentication means executes the user authentication by detecting a coincidence of the user identification code held by said holding means and the user identification code transmitted by said second transmitting means and a coincidence of the password transmitted by said transmitting/receiving means and the password transmitted by said second transmitting means.

11. The system according to claim 7, wherein said information server is a home server which is connected to said network line through a relay apparatus by a dial-up connecting method.

12. The system according to claim 11, wherein said network line is a line of the Internet, and said relay apparatus is an apparatus of an Internet service provider.

13. A user authentication system having a first terminal apparatus for connecting to an information server through a network line, a second terminal apparatus for connecting to said information server by a communication line independent of said network line, and an authentication server located on said network line, for authenticating a user of said first terminal apparatus when said information server is accessed from said first terminal apparatus through said network line, comprising:

password forming means for forming a new password by said first terminal apparatus and notifying the new password;

first transmitting means for transmitting the password formed by said password forming means to said authentication server through said network line;

input means for accepting a password from the user in said second terminal apparatus;

second transmitting means for transmitting the password accepted by said input means to said information server through said communication line;

transmitting and receiving means for receiving the password transmitted from said first transmitting means in said information server and, thereafter, transmitting the received password to said authentication server through said network line; and

authenticating means for performing the user authentication in said authentication server in accordance with a coincidence of at least the password transmitted by said transmitting and receiving means and the password transmitted by said second transmitting means,

wherein the password forming means forms the new password prior to the user authentications,

wherein said second terminal apparatus is a mobile terminal apparatus having a telephone function, and

wherein said communication line is provided with a telephone exchange apparatus for inhibiting a line connection to said information server from a terminal apparatus other than said mobile terminal apparatus to which a predetermined telephone number has been allocated.

14. The system according to claim 13, wherein when the user authentication by said authenticating means is completed, said authentication server guides a destination accessed by said first terminal apparatus to said information server.

15. The system according to claim 13, wherein said authentication server has holding means for holding the password used in the user authentication by said authenticating means together with a user identification code which has previously been set and registered.

16. The system according to claim 15, wherein said first terminal apparatus includes second input means for accepting a previous password,

said first transmitting means transmits the previous password accepted by said second input means to said authentication server through said network line,

said authentication server includes discriminating means for discriminating a coincidence of at least the password held by said holding means and the previous password transmitted by said first transmitting means, and receives the new password transmitted by said first transmitting means when the coincidence is determined by said discriminating means.

17. The system according to claim 16, wherein

said second input means accepts a user identification code together with the previous password,

said first transmitting means transmits the previous password and the user identification code accepted by said input means to said authentication server through said network line, and

said discriminating means discriminates a coincidence of the user identification code held by said holding means and the user identification code transmitted by said first transmitting means and a coincidence of the password held by said holding means and the previous password transmitted by said first transmitting means.

18. The system according to claim 13, wherein said information server is a home server which is connected to said network line through a relay apparatus by a dial-up connecting method.

19. The system according to claim 18, wherein said network line is a line of the Internet, and said relay apparatus is an apparatus of an Internet service provider.