JP2012138047A - Log-in authentication apparatus, log-in authentication method and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To allow a plurality of users to use the same account information.SOLUTION: A log-in authentication apparatus 1 communicatively connected to a user terminal 20 includes: a storage part 16 for storing log-in information that includes account information and log-in seal information associated with the account information; a log-in information registration part 11 for receiving account information from the user terminal 20; a same account determination part 12 for determining whether account information is the same as the account information stored in the storage part 16; the log-in information registration part 11 for registering log-in seal information having information content different from the log-in seal information associated with the account information determined to be the same in the storage part 16; and an authentication determination part 15 for performing log-in authentication on the basis of whether log-in information that includes the registered account accompanying information is the same as log-in information received from the user terminal 20.

Description

  The present invention relates to a login authentication device, a login authentication method, and a program.

  In recent years, services of various genres such as web mail and shopping have been provided by portal sites. When such a service is used by a user, the user ID or password may be required to ensure security.

  In addition, a technique is known in which a user ID and password received from a terminal are compared with a user ID and password stored in advance to determine whether a web page can be browsed or changed. According to this technology, it becomes possible to ensure security in units of web pages (see, for example, Patent Document 1).

JP 2002-183089 A

  Since the above-described user ID (hereinafter, account information) and password are information unique to the user, different information is registered for each user. For this reason, a user who registers account information later cannot use the same account information as a user who previously registered account information. In this case, since the user who registers later must register another account information, there is a problem that unfairness occurs between the user who registered the account information before and the user who registers the account information later. was there.

  An object of the present invention is to provide a login authentication apparatus, a login authentication method, and a program that allow a plurality of users to use the same account information.

In order to solve the above-mentioned problem, a login authentication device according to the invention described in claim 1 is:
In a login authentication device connected to a user terminal for communication,
First storage means for storing login information including account information and account-accompanying information associated with the account information;
First receiving means for receiving the account information from the user terminal;
Determining means for determining whether the account information received by the first receiving means and the account information stored in the first storage means are the same;
A registration unit that registers, in the first storage unit, account-accompanying information having information content different from the account-accompanying information associated with the account information determined to be the same when the determination unit determines that they are the same;
Authentication means for performing login authentication based on whether login information including account-accompanying information registered by the registration means matches login information received from the user terminal;
Is provided.

The invention according to claim 2 is the login authentication device according to claim 1,
Second storage means for storing information content of the account accompanying information;
If the determination unit determines that the account information received by the first reception unit is the same as the account information stored in the first storage unit, the account information is associated with the account information determined to be the same. Extraction means for extracting from the second storage means account accompanying information having information content different from the account accompanying information provided;
First transmission means for transmitting the account-accompanying information extracted by the extraction means to the user terminal;
Second receiving means for receiving, from the user terminal, account accompanying information selected and input by the user terminal from among the account accompanying information transmitted by the first transmitting means;
The registration means includes
The account associated information received by the second receiving means is registered in the storage means.

The invention according to claim 3 is the login authentication device according to claim 1 or 2,
The account accompanying information includes login seal information.

The invention according to claim 4 is the login authentication device according to claim 1,
If the determination unit determines that the account information received by the first reception unit is the same as the account information stored in the first storage unit, the account information is associated with the account information determined to be the same. Second transmitting means for transmitting to the user terminal a request instruction for requesting account associated information having information content different from the account associated information provided;
Third receiving means for receiving from the user terminal account-accompanying information input at the user terminal in response to the request instruction transmitted by the second transmitting means;
The registration means includes
The account associated information received by the third receiving means is registered in the first storage means.

The invention according to claim 5 is the login authentication device according to claim 4,
The account accompanying information includes character type information related to the character type of the account information.

The login authentication method of the invention described in claim 6 is:
In the login authentication method of the login authentication device connected to the user terminal for communication,
A storage step in which storage means stores login information including account information and account-accompanying information associated with the account information;
A receiving step for receiving the account information from the user terminal;
A determination step for determining whether the account information received in the reception step is the same as the account information stored in the storage step;
When the registration means is determined to be the same by the determination step, a registration step of registering in the storage means account accompanying information having information content different from the account accompanying information associated with the account information determined to be the same,
An authentication step for performing login authentication based on whether or not the login information including the account-accompanying information registered by the registration step matches the login information received from the user terminal;
Login authentication method including

The program of the invention described in claim 7 is:
In the computer of the login authentication device connected to the user terminal,
A storage function for storing login information including account information and account-accompanying information associated with the account information in a storage unit;
A receiving function for receiving the account information from the user terminal;
A determination function for determining whether the account information received by the reception function is the same as the account information stored in the storage unit;
A registration function for registering in the storage means account-accompanying information having information content different from the account-accompanying information associated with account information determined to be the same when the determination function determines that they are the same;
An authentication function for performing login authentication based on whether login information including account-accompanying information registered by the registration function matches login information received from the user terminal;
Is realized.

  According to the present invention, a plurality of users can provide a login authentication device, a login authentication processing method, and a program that can use the same account information.

It is a figure which shows the function block diagram of the login authentication apparatus which concerns on 1st Embodiment. It is a figure which shows the information memorize | stored in login information DB which concerns on 1st Embodiment. It is a figure which shows a login page. It is a figure which shows the flow of a 1st registration process. It is a figure which shows the flow of a 1st authentication determination process. It is a figure which shows the function block diagram of the login authentication apparatus which concerns on 2nd Embodiment. It is a figure which shows the information memorize | stored in login information DB which concerns on 2nd Embodiment. It is a figure which shows the flow of a 2nd registration process. It is a figure which shows the flow of a 2nd authentication determination process.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. First, the login authentication device 1 of the present invention will be described. FIG. 1 shows a functional configuration diagram of the login authentication device 1.
The login authentication device 1 is a device that performs login authentication in order to provide a website (for example, a website for a web mail service or a website for a shopping service) according to a user request. In addition, the login authentication device 1 is communicable with a user terminal and has a function of transmitting / receiving information to / from the user terminal. In the present embodiment, it is assumed that the login authentication device 1 has a function of transmitting / receiving information to / from the user terminal 20.
The user terminal 20 is a terminal that can accept an operation input of information from the user A. Examples of the user terminal 20 include a PC (Personal Computer) and a mobile phone.

  As shown in FIG. 1, the login authentication device 1 includes a first receiving unit, a second receiving unit, a login information registration unit 11 as a registration unit, a determination unit, and an identical account determination unit as a first transmission unit. 12, a login seal selection candidate extraction unit 13 as an extraction unit, a login information reception unit 14, an authentication determination unit 15 as an authentication unit, a first storage unit, and a storage unit 16 as a second storage unit , And is configured.

  The login information registration unit 11, the login seal selection candidate extraction unit 13, the login information reception unit 14, and the authentication determination unit 15 are configured by a control unit and a communication unit. Moreover, the same account determination part 12 is comprised by the control part.

  The control unit includes a CPU (Central Processing Unit), a RAM (Random Access Memory), and the like, and centrally controls each unit of the login authentication device 1. The control unit expands a designated program from among the programs stored in the program storage unit in the RAM, and executes various processes in cooperation with the program expanded in the RAM. The communication unit transmits and receives information to and from the connected user terminal 20.

The login information registration unit 11 registers login information, that is, account information, password information, and login seal information in a login information DB (Data Base) 16A.
Specifically, the login information registration unit 11 receives account information from the user terminal 20. When the received account information is the same as the account information stored in the login information DB 16A, the login information registration unit 11 is different from the login seal information associated with the stored account information. The login seal information of the content is received from the user terminal 20. At this time, the login information registration unit 11 receives, from the user terminal 20, login seal information that is selected and input by the user terminal 20 from the selection candidate login seal information. Then, the login information registration unit 11 registers login information including the received login seal information in the login information DB 16A.

  The same account determination unit 12 determines whether the account information received from the user terminal 20 is the same as the account information stored in the login information DB 16A when the login information is registered.

  The login seal selection candidate extraction unit 13 extracts login seal information having information content different from the login seal information stored in the login information DB 16A from the login seal DB 16B, and transmits the extracted login seal information to the user terminal 20.

  The login information receiving unit 14 receives login information, that is, account information, password information, and login seal information from the user terminal 20 during login authentication.

  The authentication determination unit 15 performs login authentication based on whether or not the login information received by the login information reception unit 14 matches the login information stored in the login information DB 16A. Then, the authentication result of login authentication is transmitted to the user terminal 20.

  The storage unit 16 is configured by an HDD (Hard Disk Drive) and stores various application programs and various data. The storage unit 16 particularly stores a login information DB 16A and a login seal information DB 16B.

  As shown in FIG. 2, the login information DB 16A stores account information, password information, and login seal information in association with each other. The account information and password information represent information for obtaining login authentication. The account information corresponds to the user ID.

  The login seal information is information related to the login seal. Specifically, the login seal information includes color information, character information, and image information. The color information is information related to the color of the login seal. The character information is information regarding characters added in the login seal. The image information is information related to an image added in the login seal.

  The login seal is used to prevent an act of trying to trick a user's account information and password information (hereinafter, phishing scam) by using a fake login page. Specifically, the login sticker has a quadrangular shape (see FIG. 3), and is configured by adding characters or images together with colors in the quadrilateral. For example, in the case of a login sticker in which the color of the square is black and “1” is added in the square, the color information “black” and the character information “1” are stored as login sticker information.

  Further, the login sticker is displayed on the login page as shown in FIG. The login page is a page for the user to input account information and password information during login authentication. For example, the account information is input to the account information setting unit, and the password information is input to the password information setting unit.

  The login seal is realized using cookie information. The cookie information is a history of the user's use of the website, contents input by the user, information about the user, and the like. The file describing the cookie information is stored in the user terminal 20. In addition, the login authentication device 1 stores login seal information and cookie information in association with each other.

  For example, when the login sticker information is registered or changed on the user terminal 20, the registration or change history or the like is stored in the user terminal 20 as cookie information. Further, the cookie information and the login seal information are transmitted to the login authentication apparatus 1, and the cookie information and the login seal information are associated with each other and stored in the storage unit 16. When the login page is accessed from the user terminal 20, a login sticker configured with the registered or changed login sticker information is displayed on the login page (see FIG. 3). At this time, if the login sticker is not displayed on the login page or a login sticker different from the set login sticker is displayed, there is a possibility that the login sticker is a fake login page, so that a phishing scam can be prevented.

  The login seal information DB 16B stores the information content of the login seal information. The information content of the login sticker information indicates at least one of information related to the content of the login sticker information, that is, color information, character information, and image information. For example, the login seal information DB 16B stores color information (for example, login seal information indicating blue, login seal information indicating red, etc.).

Next, the operation of the login authentication device 1 will be described with reference to FIGS. 4 and 5.
First, the first registration process will be described. When it is determined that the account information received from the user terminal 20 is the same as the account information stored in the login information DB 16A, the first registration process is associated with the account information determined to be the same. This is a process for registering login seal information having information content different from the login seal information in the login information DB 16A.

  Assume that account information, password information, and login seal information are associated with each other and stored in the login information DB 16A in advance (see FIG. 2).

  For example, the execution of the first registration process is triggered by the fact that an execution instruction for registering account information, password information, and login seal information is received from the user terminal 20.

First, a registration page is transmitted to the user terminal 20 (step S1). The registration page is a page for registering account information, password information, and login seal information.
When the registration page is transmitted to the user terminal 20, the user inputs account information, password information, and login seal information via the operation unit (not shown) of the user terminal 20. Then, account information, password information, login seal information, and cookie information are transmitted to the login authentication device 1.

  The login authentication apparatus 1 receives account information, login information, login seal information, and cookie information (step S2).

  After execution of step S2, it is determined whether there is the same account information (step S3). Specifically, it is determined whether the account information received in step S2 is the same as the account information stored in the login information DB 16A.

  If it is determined in step S3 that there is no identical account information (step S3; NO), the account information, login information, and login seal information received in step S2 are registered in the login information DB 16A as login information (step S4). ). In step S4, the login information is registered, and the received login information and cookie information are associated with each other and stored in the storage unit 16. After execution of step S4, the first registration process is terminated.

  When it is determined in step S3 that there is the same account information (step S2; YES), login seal information selection candidates are extracted (step S5). For example, among the account information stored in the login information DB 16B, the color information of the login seal information associated with the account information determined to be the same is referred to, and the login seal information indicating the color information different from the referred color information Are extracted from the login sticker DB 16B as selection candidates for the login sticker information.

  After execution of step S5, selection candidates for login seal information are transmitted to the user terminal 20 (step S6). And the selection candidate of login seal | sticker information is displayed on the display part (illustration omitted) of the user terminal 20. FIG. For example, color information selection candidates for login seal information are displayed. Then, a selection input for selecting the login sticker information from the selection candidates is accepted by the operation unit of the user terminal 20. Then, the accepted login sticker information is transmitted from the user terminal 20. That is, the login sticker information selected and input by the user terminal 20 is transmitted from the user terminal 20. Then, the login authentication information 1 is received by the login authentication device 1 (step S7).

  After execution of step S7, account information, password information, and login seal information are registered as login information (step S8). Specifically, the login seal information received in step S7 and the account information and password information temporarily received in the RAM after being received in step S2 are registered as login information in the login information DB 16A. .

  When the user selects the login sticker information selection candidate on the user terminal 20, if the account information and the password information are input again, in step S7, the re-input account information and password information are selected. It is good also as receiving login seal information and cookie information. In this case, the received account information, password information, and login seal information are registered in the login information DB 16A as login information.

  In step S8, login information is registered, and the received login information and cookie information are associated with each other and stored in the storage unit 16. After execution of step S8, the first registration process is terminated.

  Next, the first authentication determination process will be described with reference to FIG. The first authentication determination process is a process of executing login authentication based on the login information registered in the login information DB 16A and the login information received from the user terminal 20.

  Assume that the account information, password information, and login seal information registered in the first registration process are stored in the login information DB 16A in advance.

  For example, the first authentication determination process is started when the login authentication device 1 receives a request for access to the login page from the user terminal 20 as a trigger.

  First, a request for cookie information is transmitted to the user terminal 20, and the cookie information stored in the user terminal 20 is extracted. Then, the extracted cookie information is received from the user terminal 20 (step S11).

  Then, from the cookie information stored in the storage unit 16, cookie information that matches the cookie information received in step S11 is extracted. Then, login seal information associated with the extracted cookie information is extracted (step S12).

  After execution of step S12, a login page including a login sticker constituted by the extracted login sticker information is transmitted to the user terminal 20 (step S13).

  Then, a login page is displayed on the display unit of the user terminal 20. Specifically, the login page shown in FIG. 3 is displayed on the display unit of the user terminal 20. When the login page is displayed, account information and password information are input by the user. Then, login information is received from the user terminal 20 (step S14). That is, the login seal information related to the login seal included in the login page, the account information input by the operation and the password information are received.

  After execution of step S14, it is determined whether or not login authentication is successful (step S15). Specifically, it is determined whether or not the login information received in step S14 matches the login information registered in the login information DB 16A. If they match, it is determined that the login authentication has succeeded, and if they do not match, it is determined that the login authentication has failed.

  In step S15, when it is determined that the login authentication has failed (step S15; NO), the first authentication determination process is terminated.

  If it is determined in step S15 that the login authentication is successful (step S15; YES), the login is completed (step S16). When the login is completed, for example, it is possible to access a website for a web mail service. After execution of step S16, the first authentication determination process is terminated.

  In step S13 of the first authentication determination process, the login page including the login seal is transmitted from the login authentication apparatus 1 to the user terminal 20, but the present invention is not limited to this. For example, when the login authentication device 1 receives an access request to the login page from the user terminal 20, the login authentication device 1 may transmit a login page that does not include a login seal to the user terminal 20. In this case, in the user terminal 20, the login sticker information included in the stored cookie information is read, and the login sticker is added to the login page based on the read login sticker information. Thereby, the login page shown in FIG. 3 is displayed on the display unit of the user terminal 20, and the user can input the account information and password information.

  As described above, according to the present embodiment, even if the account information is the same as the account information already stored in the login information DB 16A, the login seal information having information content different from the stored login seal information is registered. Thus, the user can use the same account information. For this reason, users who register account information later do not need to register different account information even if the account information is the same as the user who registered the account information before. It is possible to prevent unfairness between the user and a user who registers account information later.

  Further, at the time of login authentication, the user inputs account information and password information from a login page (see FIG. 3) including a login sticker, so the user confirms whether or not the login page is a phishing page. be able to.

  Further, information content different from the login sticker information already stored in the login information DB 16A, that is, login sticker information indicating different color information can be registered in the login information DB 16A.

(Second Embodiment)
The login authentication apparatus 1A will be described with reference to FIGS. Hereinafter, the same parts as those of the internal configuration of the login authentication apparatus 1 shown in FIG. 1 are denoted by the same reference numerals, the detailed description thereof is used, and different parts will be described below.

  As shown in FIG. 6, the login authentication device 1A includes a third receiving unit, a login information registration unit 11A as a registration unit, an identical account determination unit 12, and a character type change request transmission unit 21 as a second transmission unit. A login information receiving unit 14A, an authentication determining unit 15A, and a storage unit 161.

  The login information registration unit 11A, the character type change request transmission unit 21, the login information reception unit 14A, and the authentication determination unit 15A are configured by a control unit and a communication unit. Moreover, the same account determination part 12 is comprised by the control part.

The login information registration unit 11A registers login information, that is, account information, password information, and character type information in a login information DB (Data Base) 161A.
Specifically, the login information registration unit 11A receives account information from the user terminal 20A. When the received account information is the same as the account information stored in the login information DB 161A, the login information registration unit 11A has information content different from the character type information associated with the stored account information. Is received from the user terminal 20A. At this time, the login information registration unit 11A receives the character type information input from the user terminal 20A in response to the request for changing the character type information from the user terminal 20A. Then, the login information registration unit 11A registers login information including the received character type information in the login information DB 161A.

  The character type change request transmission unit 21 transmits to the user terminal 20A a change request for changing to character type information having information content different from the character type information stored in the login information DB 16A.

  The login information receiving unit 14A receives login information, that is, account information, password information, and character type information from the user terminal 20A during login authentication.

  At the time of login authentication, the authentication determination unit 15A performs login authentication based on whether or not the login information received by the login information receiving unit 14A matches the login information stored in the login information DB 161A. Then, the authentication result of the login authentication is transmitted to the user terminal 20A.

  The storage unit 161 stores a login information DB 161A.

As shown in FIG. 7, the login information DB 161A stores account information, password information, and character type information in association with each other.
The character type information is information related to the character type of the account information. Specifically, the character type information includes character color information and font information of the account information.

Next, the operation of the login authentication device 1A will be described with reference to FIGS.
First, the second registration process will be described. When it is determined that the account information received from the user terminal 20A is the same as the account information stored in the login information DB 16A, the second registration process is associated with the account information determined to be the same. This is a process of registering character type information having information content different from the character type information in the login information DB 161A.

  Assume that account information, password information, and character type information are associated in advance and stored in the login information DB 161A as login information (see FIG. 7).

  For example, the execution of the second registration process is triggered by the fact that an execution instruction for registering account information, password information, and character type information is received from the user terminal.

  First, a registration page is transmitted to the user terminal 20A (step S21). The registration page is a page for registering account information, password information, and character type information. When the registration page is transmitted to the user terminal 20A, the user inputs the account information, password information, and character type information through the operation unit of the user terminal 20A. Then, account information, password information, and character type information are transmitted to the login authentication device 1.

  Then, the login authentication device 1 receives account information, login information, and character type information (step S22). After execution of step S22, it is determined whether there is the same account information (step S23).

  If it is determined in step S23 that there is no identical account information (step S23; NO), the account information, login information, and character type information received in step S22 are registered in the login information DB 161A as login information (step S24). . After execution of step S24, the second registration process is terminated.

  If it is determined in step S23 that there is the same account information (step S23; YES), a request for changing character type information is transmitted to the user terminal 20A (step S25). Specifically, a message for changing to character type information different from the character type information stored in the login information DB 161A is transmitted to the user terminal 20A as a change request. For example, a message “A red Gothic character type is used for account information. Please change to a character type other than red Gothic” is sent as a change request.

  Then, the request for changing the character type information is displayed on the display unit of the user terminal 20A. When the character type information change request is displayed, an operation input for changing the character type information is accepted by the operation unit of the user terminal 20A. Then, the accepted character type information is transmitted from the user terminal 20A. That is, the login sticker information input at the user terminal 20A is transmitted from the user terminal 20A. Then, the character type information is received by the login authentication device 1A (step S26).

  After execution of step S26, account information, password information, and character type information are registered as login information (step S27). Specifically, the character type information received in step S26 and the account information and password information temporarily received in the RAM after being received in step S22 are registered in the login information DB 161A as login information.

When the user changes the character type information on the user terminal 20A, if the account information and the password information are input again, in step S26, the account information, the password information, and the changed character type information that are input again are logged in. The authentication device 1 may receive the information. In this case, the received account information, password information, and character type information are registered in the login information DB 161A as login information.
After execution of step S27, the second registration process is terminated.

  Next, the second authentication determination process will be described with reference to FIG. The second authentication determination process is a process for executing login authentication based on the login information registered in the login information DB 161A and the login information received from the user terminal 20A.

  It is assumed that the login authentication device 1A has received an access request to the login page from the user terminal 20A in advance and has transmitted the login page to the user terminal 20A in response to the access request. Then, a login page is displayed on the display unit of the user terminal 20A, and account information and password information are input from the displayed login page, and the account information, password information, and character type information input by the operation are logged in from the user terminal 20A. It is assumed that it has been transmitted to the authentication device 1A. The login page in the present embodiment is a login page that does not include a login sticker and includes only an account information setting unit and a password information setting unit.

  For example, the second authentication determination process starts to be triggered by the login authentication device 1 starting to receive login information from the user terminal 20A.

  First, login information is received from the user terminal 20 (step S31). Specifically, account information, password information, and character type information are received as login information.

  After execution of step S31, it is determined whether or not the login authentication is successful (step S32). Specifically, it is determined whether or not the login information received in step S31 matches the login information registered in the login information DB 161A.

  If it is determined in step S32 that the login authentication has failed (step S32; NO), the second authentication determination process is terminated.

  If it is determined in step S32 that the login authentication is successful (step S32; YES), the login is completed (step S33). After execution of step S33, the second authentication determination process is terminated.

  As described above, according to the present embodiment, even if the account information is the same as the account information already stored in the login information DB 161A, the character type information having information content different from the stored character type information is registered. The user can use the same account information. For this reason, users who register account information later do not need to register different account information even if the account information is the same as the user who registered the account information before. It is possible to prevent unfairness between the user and a user who registers account information later.

  Further, character type information different from the character type information already stored in the login information DB 16A can be registered in the login DB 161.

  In the first embodiment, the account-accompanying information is login seal information. In the second embodiment, the account-accompanying information is character type information. However, the present invention is not limited to this. . For example, regional information may be applied as account-accompanying information. The area information is information for specifying an area where the user terminal exists, and is specified by an IP (Internet Protocol) address. For example, if the area information of the user terminal is specified as “Tokyo” and the area information of another user terminal is “Saitama” from the IP address, the area information of “Tokyo” and “Saitama” is registered as account-accompanying information. Also good. As a result, even if the account information is the same as the already registered account information, the region information (for example, “Saitama”) whose information content is different from the already registered region information (for example, “Tokyo”) is registered. Then, it becomes possible to identify the login information, and the user can use the same account information.

  In addition, it should be considered that the embodiment disclosed this time is illustrative and not restrictive in all respects. The scope of the present invention is defined by the terms of the claims, rather than the description above, and is intended to include any modifications within the scope and meaning equivalent to the terms of the claims.

1, 1A login authentication device 11 login information registration unit (first receiving means, second receiving means, registration means)
11A Login information registration unit (third receiving means, registration means)
12 Same account determination unit (determination means, first transmission means)
13 Login seal selection candidate extraction unit (extraction means)
14, 14A Login information reception unit 15, 15A Authentication determination unit (authentication means)
16,161 storage unit (first storage means, second storage means)
20, 20A User terminal 21 Character type change request transmission unit (second transmission means)
16A, 161A Login information DB
16B Login seal DB

Claims (7)

In a login authentication device connected to a user terminal for communication,
First storage means for storing login information including account information and account-accompanying information associated with the account information;
First receiving means for receiving the account information from the user terminal;
Determining means for determining whether the account information received by the first receiving means and the account information stored in the first storage means are the same;
A registration unit that registers, in the first storage unit, account-accompanying information having information content different from the account-accompanying information associated with the account information determined to be the same when the determination unit determines that they are the same;
Authentication means for performing login authentication based on whether login information including account-accompanying information registered by the registration means matches login information received from the user terminal;
A login authentication device comprising: Second storage means for storing information content of the account accompanying information;
If the determination unit determines that the account information received by the first reception unit is the same as the account information stored in the first storage unit, the account information is associated with the account information determined to be the same. Extraction means for extracting from the second storage means account accompanying information having information content different from the account accompanying information provided;
First transmission means for transmitting the account-accompanying information extracted by the extraction means to the user terminal;
Second receiving means for receiving, from the user terminal, account accompanying information selected and input by the user terminal from among the account accompanying information transmitted by the first transmitting means;
The registration means includes
The login authentication apparatus according to claim 1, wherein the account associated information received by the second receiving unit is registered in the storage unit.   The login authentication apparatus according to claim 1, wherein the account accompanying information includes login seal information. If the determination unit determines that the account information received by the first reception unit is the same as the account information stored in the first storage unit, the account information is associated with the account information determined to be the same. Second transmitting means for transmitting to the user terminal a request instruction for requesting account associated information having information content different from the account associated information provided;
Third receiving means for receiving from the user terminal account-accompanying information input at the user terminal in response to the request instruction transmitted by the second transmitting means;
The registration means includes
The login authentication apparatus according to claim 1, wherein the account associated information received by the third receiving unit is registered in the first storage unit.   The login authentication apparatus according to claim 4, wherein the account accompanying information includes character type information related to a character type of the account information. In the login authentication method of the login authentication device connected to the user terminal for communication,
A storage step in which storage means stores login information including account information and account-accompanying information associated with the account information;
A receiving step for receiving the account information from the user terminal;
A determination step for determining whether the account information received in the reception step is the same as the account information stored in the storage step;
When the registration means is determined to be the same by the determination step, a registration step of registering in the storage means account accompanying information having information content different from the account accompanying information associated with the account information determined to be the same,
An authentication step for performing login authentication based on whether or not the login information including the account-accompanying information registered by the registration step matches the login information received from the user terminal;
Login authentication method including In the computer of the login authentication device connected to the user terminal,
A storage function for storing login information including account information and account-accompanying information associated with the account information in a storage unit;
A receiving function for receiving the account information from the user terminal;
A determination function for determining whether the account information received by the reception function is the same as the account information stored in the storage unit;
A registration function for registering in the storage means account-accompanying information having information content different from the account-accompanying information associated with account information determined to be the same when the determination function determines that they are the same;
An authentication function for performing login authentication based on whether login information including account-accompanying information registered by the registration function matches login information received from the user terminal;
A program that realizes

Images