JPH11341151A - Dial-up connection authentication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To more surely confirm account in an Internet connection and a personal communication service by the way of dial-up. SOLUTION: A user side terminal 11a operates dialing to an access point at a service provider side. A called telephone number is communicated to a host computer 16. Also, when a line is connected, a user ID and a password are transmitted to the host computer 16. In the host computer 16, the user ID and the password are confirmed in the same way at the time of normal connection, and the called telephone number is checked without starting the service provision, and when they are matched with each other, the connection is authenticated, and each kind of service provision is started.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a dial-up connection authentication method for a service provider / provider to confirm a service user's account at the time of a line connection in a dial-up Internet connection or a personal computer communication service.

[0002]

2. Description of the Related Art In the Internet connection or personal computer communication service by dial-up, a user terminal dials a service provider's access point, and a service provider transmits a user's request transmitted from the user terminal. The user is authenticated based on the ID and the password, and service provision is started.

[0003]

However, according to the prior art, when a user ID and a password are leaked to a third party and used improperly, the service provider determines the service use time or the contents of the specific service use. In addition, since the user having the user ID is charged as a usage fee, there is a problem that an unauthorized use of the user ID causes a serious damage to a legitimate user.

The present invention has been made in view of the above circumstances, and in a dial-up Internet connection or a personal computer communication service, when a service provider / provider confirms a service user's account at the time of line connection, a calling telephone number is used. It is an object of the present invention to provide a dial-up connection authentication method capable of performing more reliable account confirmation by using notification information.

[0005]

In order to solve the above-mentioned problems, the invention according to claim 1 uses a dial-up connection authentication system for performing user authentication for a terminal that has requested connection by dial-up. The calling telephone number of each user is stored, and when there is a connection request from the terminal, the calling telephone number of the terminal notified at the time of an incoming call is compared with the previously stored calling telephone number, and both are matched. It is characterized in that user authentication is performed by determining whether or not to perform.

Further, according to the invention described in claim 2, according to claim 1,
In the dial-up connection authentication method described above, before and after the user authentication, the user ID and password transmitted from the terminal after the line connection and the user ID registered in advance
The second user authentication is performed by comparing D and the password and determining whether or not both match.

[0007] According to the third aspect of the present invention, the first aspect of the present invention.
In the dial-up connection authentication method described above, the outgoing telephone number of the terminal notified at the time of the incoming call is compared with a previously stored outgoing telephone number, and if both match, at least the stored outgoing telephone number The update of the user information including the above is permitted.

According to the present invention, each time a call is received from a service user, the outgoing telephone number is compared with the registered outgoing telephone number. Therefore, it is possible to prevent unauthorized use of the account by a third party.

[0009]

Embodiments of the present invention will be described below with reference to the drawings. A. Configuration of Embodiment FIG. 1 is a block diagram showing an overall configuration according to an embodiment of the present invention. In the figure, a terminal 11a is a fixed terminal on the user side, transmits a signal by a modem 12,
Connect to the telephone network at any time via a. A normal telephone can be connected to the modem 12. In this case, the transmission from the terminal 11a to the host computer 16 always has the same transmission telephone number. In the illustrated example, the exchange 14a is an exchange on the transmitting side, is connected to the telephone network, and is connected to the exchange 15a on the receiving side in accordance with the transmission by the modem 12. The exchange 15a is an exchange on the receiving side (service provider side) in the illustrated example, is connected to the telephone network, receives an incoming call from the exchange 14a, and connects to the host computer 16.

A terminal (mobile computer) 11
Reference numeral b denotes a user-side mobile terminal, which is connected to the telephone network at any time via the exchange 14b corresponding to the location. in this case,
The transmission from the terminal 11b to the host computer 16 is as follows:
Each time, there is a possibility that a different calling telephone number will be used. The exchange 14b is an exchange on the transmitting side in the illustrated example, is connected to the telephone network, and is connected to the exchange 15b on the receiving side in accordance with an outgoing call from the mobile computer 11b. Also,
The exchange 15b is an exchange on the receiving side (service provider side) in the illustrated example, is connected to the telephone network, and is connected to the exchange 14b.
And connects to the host computer 16.

[0011] Host computer 1 on the service provider side
Reference numeral 6 stores, as user profile information, a user ID, a password, a security option flag, and a plurality of calling telephone numbers in association with each other to perform user authentication. The host computer 16 is connected to the receiving side exchange 15
A comparison is made between the outgoing telephone numbers notified from a and 15b and the registered outgoing telephone numbers. The calling phone number is 1998
The service which notifies the called party of the telephone number of the calling party to the called party from February nationwide,
The called party is notified via a, 15a (or 14b, 15b). The details of the user profile information for user authentication stored in the host computer 16 will be described later.

FIG. 2 is a block diagram showing a detailed configuration of the access point and the host computer on the service provider side shown in FIG. In FIG. 2, the relay device 22 receives an incoming call from the telephone network 21 and also receives a notification of the calling telephone number. The notified outgoing telephone number is saved to the outgoing telephone number storage unit 23, and communication with the host computer 16 is started through a line such as a dedicated line. After the user ID and password of the user terminal 11a and the service provider side of the host computer 16 are authenticated and confirmed, the calling telephone number saved in the calling telephone number storage unit 23 is transmitted to the host computer 16.

The service manager 24 is a user terminal 1
The user ID transmitted from the side 1a is received, and the user profile information 26 recorded on the host computer 16 is referred to. Subsequently, a user-specific password is transmitted from the user terminal side, so that it is confirmed that the received password and the information recorded in the user profile information 26 match. If the information does not match here, it is necessary to take recovery measures such as requesting the user terminal 11a to re-enter the password, but the details are not included in the scope of the present invention. Is omitted.

After the authentication is confirmed by the password, the calling telephone number saved in the calling telephone number storage unit 23 is received from the relay device 22 of the access point, saved in the calling telephone number management unit 25, and the user profile information 26 is saved.
(Security option flag) that specifies whether or not to confirm one or more registered outgoing telephone numbers and outgoing telephone numbers (outgoing telephone number confirmation function) defined in.
And performs additional user authentication according to the setting contents. Here, the default value of the security option flag and the default value of the first registered outgoing telephone number (first registered outgoing telephone number) are set to not confirm the outgoing telephone number, respectively.
It is the registered phone number when applying for service use.

In order for the user to use the outgoing telephone number confirmation function, the user terminal 11a uses the communication service from the line of the first registered outgoing telephone number defined in the user profile information 26 and changes these information. I do. When the user terminal 11a requests the security information to be changed, the outgoing telephone number saved in the outgoing telephone number management unit 25 is compared with the first registered outgoing telephone number included in the user profile information 26. The security information contained in the user profile information 26 can be updated only when they match. By registering a plurality of registered caller telephone numbers, the user can use the communication service from an outside location by using the mobile computer 11b using a mobile phone or the like.

B. Next, the overall operation of this embodiment will be described in detail with reference to the flowchart shown in FIG. First, dialing is performed from the user side terminal 11a in FIG. 1 to an access point on the service provider side. The service provider can receive a call from the telephone network 21 and a notification of the calling telephone number in the relay device 22 of the access point. The relay device 22 starts communication with the host computer 16 through a line such as a dedicated line, and stores the outgoing telephone number notified at the time of the incoming call in the outgoing telephone number storage unit 23 (step S31).

The service manager 24, which controls the provision of a series of services on the host computer 16 side, confirms the user ID as in the case of a normal connection (step S3)
2) The password is confirmed with reference to the user profile data information 26 (step S33). After confirming the password, the telephone number is further confirmed without starting the service provision (step S34). The outgoing telephone number confirmation processing will be described in detail below.

Next, FIG. 4 is a flowchart for explaining the detailed operation of the calling telephone number confirmation processing (step S34) of FIG. First, the calling telephone number saved in the calling phone number storage unit 23 in step S31 is received from the relay device 22 of the access point, saved in the calling phone number management unit 25, and stored in the user ID acquired in step S32. Information (calling telephone number information) for confirming the calling telephone number is acquired from the corresponding user profile data information 26 (step S41).

Next, by referring to a flag for determining whether or not to use the outgoing telephone number confirmation service, which is one of the outgoing telephone number information acquired in step S41, it is defined that the service is not used. In this case, the connection is authenticated and the provision of various services is started (step S4).
2). On the other hand, if the service is set to be used, the outgoing telephone number information set in the user profile information 26 is checked (steps S43 and S44), and if there is a match, the connection is authenticated. The service provision by the various service programs 27 is started. On the other hand, if there is no match, it is regarded as unauthorized use by a third party, and a line disconnection process is performed (step S45).

Next, FIG. 5 shows the user profile information 26 stored on the host computer 16 on the service provider side.
9 is a flowchart for explaining the operation of processing when updating outgoing telephone number information defined in. When updating the outgoing telephone number information defined in the user profile information 26, first, the outgoing telephone number saved in the outgoing telephone number management unit 25 and the user profile information 26 are updated.
Is compared with the first registered telephone number included in (step S5).
1) Only when these pieces of information match, the update of the security option flag and the registered telephone number information is permitted (step S52). If the outgoing telephone numbers do not match, the user terminal 11a is notified that the outgoing telephone number information cannot be updated (step S5).
3).

C. Next, another embodiment of the present invention will be described. In the above-described embodiment, the method of performing user authentication and the means of updating the registered information are described by confirming that the calling telephone number matches the registered data.
It may be necessary to change the user's telephone number. In such a case, it is necessary to easily shift the use environment.

Therefore, the outgoing telephone number to be shifted (reserved outgoing telephone number) is registered separately from the normally used registered outgoing telephone number, and the outgoing telephone number confirming step S43 is performed.
, The reserved calling telephone number is also set as a comparison target, and the information of the first registered calling telephone number is replaced with the reserved calling telephone number only when the reserved calling telephone number matches the calling telephone number at the time of receiving. By following this procedure, it will be possible to receive service without any influence thereafter.

In the above-described embodiment, the outgoing telephone number confirmation processing is performed after confirming the password. However, in the case where the connection is rejected when confirming the calling telephone number, the input / confirmation processing of the password becomes meaningless. For this reason, the confirmation process of the calling telephone number may be performed before the confirmation of the password.

[0024]

As described above, according to the present invention,
Each time a call is received from the service user, the outgoing phone number notification information is compared with the registered outgoing phone number, so that the account can be confirmed more reliably, and unauthorized use of the account by a third party Can be prevented.

[Brief description of the drawings]

FIG. 1 is a block diagram showing an overall configuration according to an embodiment of the present invention.

FIG. 2 is a block diagram showing a detailed configuration of an access point and a host computer on a service provider side.

FIG. 3 is a flowchart showing a basic operation of a connection confirmation process before starting a communication service in a service provider side host computer.

FIG. 4 is a flowchart illustrating a detailed operation of a calling telephone number confirmation process (step S34).

FIG. 5 is a flowchart for explaining an operation of processing when updating outgoing telephone number information defined in user profile information 26;

[Explanation of symbols]

 11a, 11b Terminal 12 Modem 13 Telephone 14a, 15a, 14b, 15b Switch 16 Host Computer 21 Telephone Network 22 Relay Device 23 Calling Phone Number Storage 24 Service Manager 25 Calling Phone Number Management 26 User Profile Information 27 Various Service Programs

Claims (3)

[Claims] In a dial-up connection authentication method for performing user authentication for a terminal that has made a connection request by dial-up, an outgoing telephone number for each user is stored in advance, and when there is a connection request from the terminal, Dial-up connection authentication, wherein a user's authentication is performed by comparing an outgoing telephone number of the terminal notified at the time of an incoming call with a previously stored outgoing telephone number, and determining whether or not both match. method. 2. Before and after the user authentication, a user ID and a password transmitted from a terminal after a line connection are compared with a pre-registered user ID and a password, and it is determined whether or not both match. 2. The dial-up connection authentication method according to claim 1, wherein the second user authentication is performed. 3. A calling phone number of the terminal notified when an incoming call is received is compared with a calling phone number stored in advance, and if both match, the user information including at least the calling phone number stored in advance is read. 2. The dial-up connection authentication method according to claim 1, wherein updating is permitted.