JP2005216250A - Reception system, reception auxiliary server, and reception processing server - Google Patents

Abstract

PROBLEM TO BE SOLVED: To increase the safety against unauthorized use of a telephone in a system that authenticates the person based on the caller number of the telephone and accepts various applications from a terminal such as a separate personal computer via a web page or the like. In addition, it can be applied in common as a neutral third-party authentication service to a plurality of service providers that accept various applications.
In response to an incoming call from a telephone used by a user, the telephone receives a password preset with a telecommunications carrier for each telephone and a service number for identifying various application services. A reception assistant server is provided that authenticates the user from the caller number and the password, and notifies the reception processing server corresponding to the service number of the authentication result and the caller number.
[Selection] Figure 1

Description

  The present invention relates to a reception system, a reception auxiliary server, and a reception processing server.

  At a window that accepts various applications by telephone or the like, automation of the system is strongly desired for reasons such as labor cost reduction, 24-hour response, and real-time improvement.

  As part of this automation, some reception desks have recently been opened as websites, but it is very difficult to confirm their identity because they cannot see their faces or hear their voices. is there.

In order to confirm such identity, a technique for authenticating the identity of a person using a caller number such as a mobile phone has been disclosed (see, for example, Patent Documents 1 to 3).
JP 2001-31471 A JP 2002-298042 A JP 2003-30146 A

  By the way, in the techniques shown in the above Patent Documents 1 to 3, authentication is basically performed only by a caller number such as a mobile phone, and a product is purchased based on a transaction number or a password issued at that time. Etc. can enter the site. Therefore, when a mobile phone is lost or stolen, if the malicious person enters the personal authentication system using the mobile phone, the personal authentication is normally performed even though the mobile phone is not the user. In addition, there is a problem that it is possible to enter a site such as product purchase by issuing a transaction number or a password.

  In this regard, if the loss or theft of the mobile phone is promptly made to the mobile phone operator, the use of the mobile phone becomes impossible, so the damage does not increase so much. If a friend or family member operates a mobile phone without permission to misuse identity authentication, the loss or theft is not reported from the person, so the system cannot cope with it at all. This problem may also occur when a fixed telephone is used for authentication instead of a mobile phone.

  In addition, in the above-mentioned patent document 2, after entering a site for product purchase, etc., another password associated with a credit card number is input, and at that time, the purchase of the product is restricted. However, there is a security problem in that a third party with an unjust intention can enter a site that should originally contain only legitimate members.

  On the other hand, the techniques shown in the above-mentioned patent documents 1 to 3 assume an authentication system provided exclusively for a site such as product purchase, and are provided in each of a plurality of sites such as product purchase. Therefore, when using a plurality of sites provided with such an authentication system, there is a problem that the user has a very poor usability because the user authentication interface is different for each product purchase site.

  The present invention has been proposed in view of the above-mentioned conventional problems, and the object of the present invention is to provide a plurality of service providers that accept various applications as well as being highly secure against unauthorized use of a mobile phone or a fixed phone. Another object of the present invention is to provide a reception system, a reception auxiliary server, and a reception processing server that can be commonly applied as an authentication service by a neutral third party.

  In order to solve the above problems, the reception system according to the present invention responds to an incoming call from a telephone used by a user, and communicates with a communication carrier for each telephone. The password set in advance and the service number for identifying various application services are received, the caller ID of the telephone and the password are authenticated, the authentication result is sent to the reception processing server corresponding to the service number and the above A reception assistant server for notifying the caller number, and receiving the notification of the authentication result and the caller number from the reception assistant server, and accessing an access page for accepting various applications to a mail address of a terminal set in advance for each user. Send an email including the address for the phone number when you receive access from the terminal through the access page Receiving a force, so that and a reception processing server for providing various application services If a match between the telephone number and the caller number has been confirmed.

  As a result, the user's identity is double-checked not only by the caller ID of the phone but also by a password set in advance with the carrier, greatly increasing the safety against unauthorized use of the phone. Can do. In addition, since the result of personal authentication is automatically distributed to a plurality of service provider servers by the service number, it can be applied in common to a plurality of service providers as a neutral third party authentication service.

  In addition, as described in claim 2, an incoming telephone number is assigned for each service of various applications, responds to an incoming call from a telephone used by a user, and is preset with a communication carrier for each telephone. A reception assistant server that receives the received password, authenticates the caller number of the telephone and the password, and notifies the reception processing server corresponding to the incoming telephone number of the authentication result and the caller number; and the reception assistance Receives notification of the authentication result and caller number from the server, sends a mail including the address for accessing the access page for accepting various applications to the mail address of the terminal set in advance for each user, from the terminal When access is received through the access page, the phone number is entered and the phone number matches the caller ID. It can be made to include a reception processing server that provides services for various application if it is confirmed. Thereby, the input of the service number can be omitted, and the reception processing server can be sorted by the incoming telephone number.

  According to a third aspect of the present invention, when the reception assistant server responds to an incoming call from the telephone, it receives a temporary user setting password arbitrarily set by the user separately from the password, and receives the reception process. The server can provide various application services after receiving the input of the password corresponding to the user setting password from the terminal and confirming the match with the user setting password. Thereby, it is possible to further enhance security.

  According to a fourth aspect of the present invention, the reception assistant server sets the password, service number, or user setting password following the telephone number when the user makes a call to the reception assistant server. Can be received from the received subaddress. Thereby, it is not necessary to input a password or the like after the call connection, and the user's input operation can be simplified.

  According to a fifth aspect of the present invention, the reception assistant server can return the operation method and the processing status to the telephone by voice and can receive information from the telephone by a dial tone signal. . Thereby, operation at the time of receiving authentication can be made user-friendly.

  Further, as described in claim 6, a service for responding to an incoming call from a telephone used by a user and identifying a password set in advance with a communication carrier for each telephone and various application services A reception auxiliary server comprising: means for receiving a number; and means for authenticating the identity from the caller number and the password of the telephone and notifying the reception processing server corresponding to the service number of the authentication result and the caller number Can be configured.

  In addition, as described in claim 7, an incoming telephone number is assigned for each service of various applications, responds to an incoming call from a telephone used by a user, and is preset with a communication carrier for each telephone. A means for receiving the received password, and means for authenticating the person from the caller number and the password of the telephone and notifying the reception processing server corresponding to the incoming telephone number of the authentication result and the caller number. It can be configured as an auxiliary server.

  In addition, as described in claim 8, an authentication result and a caller ID notification are received from the reception assistant server that performs personal authentication, and an access page for receiving various applications is sent to a mail address of a terminal set in advance for each user. The means for sending mail including the address for access and the input of the telephone number when receiving access through the access page from the terminal, and the match between the telephone number and the caller ID was confirmed. In some cases, it can be configured as a reception processing server including means for providing various application services.

  In the present invention, a system for authenticating a person based on a caller number of a telephone and a password set with a communication carrier and accepting various applications by a service number or an incoming telephone number of a reception assistant server. Since authentication results are distributed, it is possible to increase the safety against unauthorized use of the phone, and it is commonly applied as a neutral third-party authentication service for multiple service providers that accept various applications. be able to.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a configuration diagram of a reception system according to an embodiment of the present invention.

  In FIG. 1, a reception assistant server 31 that can be accessed via a voice telephone network 2 from a telephone 11 that is a mobile phone or a fixed telephone used by a user 1 is provided under the management of a communication carrier 3. Here, the reception assistant server 31 is a device having a function of performing identity authentication using a caller number of the telephone 11 and a password set with the communication carrier 3 prior to various applications by the user 1. The authentication service is provided to the service provider. Note that a user information management database 32 storing information related to the user 1 of the telephone 11 is provided so as to be referred to from the reception assistant server 31.

  On the other hand, a reception processing server 61 that can be accessed via a public data network 4 such as the Internet from a terminal 12 such as a personal computer used by the user 1 is provided as an automatic reception center of the service provider 6. Here, the reception processing server 61 is a device that actually receives various applications, and a reception processing server 61 is provided for each of the plurality of service providers 6. Note that a user information management database 62 storing information about the user 1 is provided so as to be referred to from the reception processing server 61.

  The reception assistant server 31 of the communication carrier 3 and the reception processing server 61 of the service provider 6 can be connected by the public data network 4 or the dedicated line 5.

  FIG. 2 is a diagram illustrating an example of a user information management database.

  In FIG. 2, the user information management database 32 provided in the telecommunications carrier 3 includes a telephone number (subscriber number) field of the telephone 11 used by the user 1 and a telephone call between the user 1 and the telecommunications carrier 3 in advance. 11 and a password field set every 11. Here, when the telephone 11 is a mobile phone, setting of a personal identification number is compulsory for each telephone at the time of contracting, so that it can be used as a password.

  On the other hand, the user information management database 62 provided in the service provider 6 has a telephone number field of the telephone 11 used by the user 1 and a mail address field of the terminal 12 used by the user 1. These are set in advance in procedures such as member registration on the premise of receiving various applications. In addition, as a field set temporarily, a field indicating an authentication result performed most recently, and an address (for example, only one access for accessing a Web page for receiving various applications issued at that time) One-time URL) field and a temporary user setting password field that is arbitrarily set when the user 1 accesses the reception assistant server 31 of the communication carrier 3 via the voice telephone network 2 by the telephone 11. doing. In addition, the address for accessing the Web page for accepting various applications is not necessarily limited to the one-time URL, but the security can be improved by limiting the number of accesses to one time. An example will be described using a one-time URL. In addition, the user setting password is for further enhancing security and may not be used. Furthermore, the “authentication result”, “one-time URL”, and “user setting password” that are temporarily set may be managed in another database using “phone number” as a key.

  FIG. 3 is a sequence diagram showing the operation of the above reception system.

  In FIG. 3, when the user 1 intends to make various applications, first, the telephone 11 makes a call to the reception assistant server 31 of the communication carrier 3 via the voice telephone network 2 (step S101). At this time, the caller number of the telephone 11 is transmitted to the reception assistant server 31 at the same time.

  When the reception assistant server 31 responds to the incoming call, the reception auxiliary server 31 returns a response indicating that the authentication is started by a talkie (voice guidance) (step S102). At this time, operations necessary for authentication are also guided.

  In response to this, the user 1 transmits a password preset with the communication carrier 3 and a service number for identifying various application services from the telephone 11 to the reception assistant server 31 by a dial tone signal (DTMF). (Step S103). Instead of the dial tone signal, a digital signal corresponding to each dial operation may be used. In addition, the reception assistant server 31 continues the password or the like with the destination subaddress set after the telephone number when the user 1 makes a call to the reception auxiliary server 31 (for example, “*” after the telephone number). It may be received from a number etc. that can be used on the receiving side). Thereby, the user 1 does not need to input a password or the like after the call connection, and the input operation can be simplified.

  The reception assistant server 31 performs an authentication process based on the caller number and password sent from the telephone 11 (step S104). That is, referring to the user information management database 32, it is determined whether or not the caller number is registered in the telephone number field and the corresponding passwords match. As a result, the fact that the authentication is complete is returned by the talkie (step S105). If the personal authentication is not normally performed, the reception assistant server 31 notifies the telephone 11 of the fact and ends the process.

  In this way, the user 1's identity is double-checked not only by the caller number of the telephone 11 but also by a password set in advance with the communication carrier 3, so that the colleague, friend or family of the user 1 Therefore, the safety against unauthorized use of the telephone 11 due to the above can be greatly improved.

  When the user 1 receives the authentication completion response from the reception assistant server 31, the user 1 disconnects the communication of the telephone 11 (step S106).

  Next, the reception assistant server 31 selects the service provider 6 that provides the service based on the service number sent from the user 1 (step S107), and the authentication result (person himself / herself) with respect to the reception processing server 61 of the service provider 6 is selected. The fact that the authentication has been performed normally) and the telephone number (caller number) of user 1 are transmitted (step S108). In addition, since user information goes out from the communication carrier 3, it is assumed that the consent of the user 1 is obtained in order to receive this authentication service.

  As described above, since the result of the personal authentication is automatically distributed to the reception processing servers 61 of the plurality of service providers 6 by the service number, it is common to the plurality of service providers 6 as a neutral third party authentication service. Can be applied to.

  Next, the reception processing server 61 stores the authentication result sent from the reception auxiliary server 31 in the user information management database 62 (step S109), and an address (only valid for one access to various application reception Web pages) ( One-time URL) is generated and stored in the user information management database 62, and mail data pasted with the one-time URL is generated (step S110). Note that the one-time URL is used to improve security by allowing only the person who has received the notification of the one-time URL to enter the application acceptance Web page after the authentication of the phone number and password is completed. At the same time, it is to prevent misuse by reuse.

  Then, the reception processing server 61 transmits a mail via the public data network 4 to the mail address of the terminal 12 obtained from the user information management database 62 based on the telephone number of the user 1 sent from the reception auxiliary server 31. (Step S111).

  The user 1 opens the mail by operating the terminal 12 (step S112), and accesses the reception processing server 61 via the public data network 4 by the Web browser by clicking the one-time URL included in the mail. (Step S113).

  The reception processing server 61 transmits page data of the initial screen in response to web access from the terminal 12 (step S114). This initial screen includes a guidance sentence requesting input of the telephone number of the telephone 11 used by the user 1.

  The user 1 operates the terminal 12 to input a telephone number and transmits it to the reception processing server 61 (step S115).

  The reception processing server 61 refers to the user information management database 62 using the telephone number sent from the terminal 12 as a key, confirms whether the authentication is normal, and the validity of the requested one-time URL (already It is determined whether it has not been used or whether the expiration date has expired (step S116). If it can be confirmed normally, page data of various application service screens is transmitted to the terminal 12 (step S117). . If it cannot be confirmed normally, the fact is notified to the terminal 12 and the process is terminated.

  If the confirmation is successful and the service screen can be entered, the user 1 operates the terminal 12 to process various applications (step S118).

  In the above embodiment, the terminal 12 such as a personal computer accesses the Web server by the reception processing server 61 because the browser such as a mobile phone has few operation keys and the screen is small and the operation is complicated. This is because it is difficult to input user information (address, name, etc.) that needs to be input for various applications.

  In addition, the authentication process is based on a unique caller ID so that the user authentication is requested from the telephone 11 through a voice line such as a mobile phone or a fixed telephone separate from the terminal 12 accessing the Web server by the reception processing server 61. This is because personal authentication can be performed easily, and the telephone 11 is familiar and easy to use regardless of age or sex. Further, the operation method and the processing status can be returned by voice, and there is an advantage that it can be made user-friendly. In this respect, when performing personal authentication by web access from a browser of a mobile phone, a complicated operation such as entering an authentication web site or selecting a menu is necessary, and operability is difficult. Although a method of performing personal authentication using a digital signature or the like from a terminal 12 such as a personal computer is also conceivable, it is not widely used and has a difficulty in operability as compared with a method using the telephone 11 via a voice line. .

  Furthermore, the authentication is performed at the stage of the reception assistant server 31 managed by the communication carrier 3 in response to the request for personal authentication from the telephone 11, especially in the case of a mobile phone, a telephone-specific password is set at the time of contract. This is because there is an advantage that it is not necessary to newly set a password, and it is preferable that the communication carrier 3 performs the management. Moreover, even if a method of connecting to an authentication server by a mobile phone browser is used, the data packet currently sent to the Web from the carrier's server does not include the caller ID, The party number cannot be used for authentication.

  Next, FIG. 4 is a sequence diagram showing another operation of the above reception system. In order to further enhance security, an arbitrary password (user setting) is set for the user 1 at the time of personal authentication in the reception assistant server 31 of the communication carrier 3. Password) is set, and it is input when accessing the reception processing server 61 of the service provider 6.

  In FIG. 4, when the user 1 intends to make various applications, first, the telephone 11 makes a call to the reception assistant server 31 of the communication carrier 3 via the voice telephone network 2 (step S201). At this time, the caller number of the telephone 11 is transmitted to the reception assistant server 31 at the same time.

  When the reception assistant server 31 responds to the incoming call, the reception auxiliary server 31 returns a response indicating that the authentication is started by a talkie (voice guidance) (step S202). At this time, operations necessary for authentication are also guided.

  In response to this, the user 1 receives from the telephone 11 a password preset with the communication carrier 3, a service number for identifying various application services, and a temporary user set password arbitrarily determined by the user 1. The dial tone signal (DTMF) is transmitted to the reception assistant server 31 (step S203). Instead of the dial tone signal, a digital signal corresponding to each dial operation may be used. Further, the reception assistant server 31 may receive a password or the like from a destination subaddress set subsequent to the telephone number when the user 1 makes a call to the reception assistant server 31.

  The reception assistant server 31 performs an authentication process based on the caller number and password sent from the telephone 11 (step S204). At this point, the user setting password is not used for personal authentication. That is, referring to the user information management database 32, it is determined whether or not the caller number is registered in the telephone number field and the corresponding passwords match. As a result, the fact that the authentication is complete is returned by the talkie (step S205). If the personal authentication is not normally performed, the reception assistant server 31 notifies the telephone 11 of the fact and ends the process.

  When the user 1 receives the authentication completion response from the reception assistant server 31, the user 1 disconnects the communication of the telephone 11 (step S206).

  Next, the reception assistant server 31 selects the service provider 6 that provides the service based on the service number sent from the user 1 (step S207), and authenticates the reception processing server 61 of the service provider 6 (the person himself / herself). The fact that the authentication has been normally performed), the telephone number (sender number) of user 1 and the user setting password are transmitted (step S208).

  The reception processing server 61 stores the authentication result and the user setting password sent from the reception auxiliary server 31 in the user information management database 62 (step S209), and is effective only for one-time access to various application reception Web pages. An address (one-time URL) is generated and stored in the user information management database 62, and mail data pasted with the one-time URL is generated (step S210).

  Then, the reception processing server 61 transmits a mail via the public data network 4 to the mail address of the terminal 12 obtained from the user information management database 62 based on the telephone number of the user 1 sent from the reception auxiliary server 31. (Step S211).

  The user 1 opens the mail by operating the terminal 12 (step S212), and accesses the reception processing server 61 via the public data network 4 by the Web browser by clicking the one-time URL included in the mail. (Step S213).

  The reception processing server 61 transmits the page data of the initial screen in response to web access from the terminal 12 (step S214). This initial screen includes a telephone number of the telephone 11 used by the user 1 and a guidance sentence requesting input of a user setting password set by the user 1 at the time of user authentication.

  The user 1 operates the terminal 12 to input a telephone number and a user setting password, and transmits them to the reception processing server 61 (step S215).

  The reception processing server 61 refers to the user information management database 62 using the telephone number sent from the terminal 12 as a key, confirms whether authentication is normal, the user setting password matches, and whether there is a request. The validity of the one-time URL (whether it has not been used or the validity period has expired) is determined (step S216). It transmits to the terminal 12 (step S217). If it cannot be confirmed normally, the fact is notified to the terminal 12 and the process is terminated.

  If the confirmation is successful and the service screen can be entered, the user 1 operates the terminal 12 to process various applications (step S218).

  In the sequence diagrams shown in FIGS. 3 and 4, when a call is made from the user 1 to the reception assistant server 31, a service number for identifying various application services is input (steps S <b> 103 and S <b> 203). In FIG. 31, distribution is made to the corresponding reception processing server 61 on the basis of the service number (steps S107 and S207). The reception processing server 61 may be assigned according to the telephone number that has received the incoming call. According to this, the input of the service number by the user 1 can be omitted.

  In the sequence diagrams shown in FIGS. 3 and 4, authentication processing is performed based on the sender number and password sent from the user 1 in the reception assistant server 31 (steps S104 and S204). First, it is determined whether or not the telephone 11 is authorized to use the authentication service based on the caller number, and only when the call can be cleared, both the caller number and the password are used. User authentication can be performed. In this case, if a negative result is obtained at the stage of determining whether or not to use the authentication service based on the first caller ID, the process is terminated at that stage. Thereby, the processing burden in the reception assistance server 31 can be reduced.

  Furthermore, in the above-described embodiment, the web server on the Internet has been described as the reception processing server 61. However, the present invention is not limited to this, but via a RAS (Remote Access Server) that is managed and operated by a company or the like. Needless to say, it may be an arbitrary system to be accessed. The connection form is not limited to the Internet but may be a dedicated line, and there is no difference between wired and wireless.

  The present invention has been described above by the preferred embodiments of the present invention. While the invention has been described with reference to specific embodiments, various modifications and changes may be made to the embodiments without departing from the broad spirit and scope of the invention as defined in the claims. Obviously you can. In other words, the present invention should not be construed as being limited by the details of the specific examples and the accompanying drawings.

It is a block diagram of the reception system concerning one Embodiment of this invention. It is a figure which shows the example of a user information management database. It is a sequence diagram (the 1) which shows operation | movement of a reception system. It is a sequence diagram (the 2) which shows operation | movement of a reception system.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 User 11 Telephone 12 Terminal 2 Voice telephone network 3 Communication carrier 31 Reception assistance server 32 User information management database 4 Public data network 5 Dedicated line 6 Service provider 61 Reception processing server 62 User information management database

Claims (8)

In response to an incoming call from the telephone used by the user, the telephone receives a password set in advance with the communication carrier for each telephone and a service number for identifying various application services. A reception assistant server that performs identity authentication from the password and notifies the reception processing server corresponding to the service number of the authentication result and the caller number;
Receive the notification of the authentication result and caller number from the reception assistant server, send an email including the address for accessing the access page of various application reception to the email address of the terminal set in advance for each user, A reception processing server that receives input of a telephone number when receiving access from the terminal through the access page, and provides various application services when the telephone number and the caller ID are confirmed to match. A reception system characterized by that. An incoming phone number is assigned for each service of each application, responds to incoming calls from the phone used by the user, receives a preset password with the carrier for each phone, and sends the caller ID of the phone And a reception assistant server that authenticates the user from the password and notifies the reception processing server corresponding to the incoming telephone number of the authentication result and the caller number;
Receive the notification of the authentication result and caller number from the reception assistant server, send an email including the address for accessing the access page of various application reception to the email address of the terminal set in advance for each user, A reception processing server that receives input of a telephone number when receiving access from the terminal through the access page, and provides various application services when the telephone number and the caller ID are confirmed to match. A reception system characterized by that. When the reception assistant server responds to an incoming call from the telephone, it receives a temporary user setting password arbitrarily set by the user separately from the password,
3. The service according to claim 1, wherein the reception processing server provides various application services after receiving a password corresponding to the user setting password from the terminal and confirming a match with the user setting password. The reception system according to any one of the above.   The reception auxiliary server receives the password, service number, or user-set password from a destination subaddress set subsequent to a telephone number when a call is made to the reception auxiliary server by the user. Item 4. The reception system according to any one of Items 1 to 3.   The said reception assistance server returns the operation method and a processing condition to the said telephone with a voice, and receives the input of information by the dial tone signal from the said telephone, The Claim 1 thru | or 4 characterized by the above-mentioned. Reception system. Means for responding to an incoming call from a telephone used by the user, and receiving a password preset with a communication carrier for each telephone and a service number for identifying various application services;
A reception assistant server, comprising: means for authenticating a person from the caller number of the telephone and the password, and notifying the reception processing server corresponding to the service number of the authentication result and the caller number. An incoming telephone number is assigned for each service of various applications, means for responding to an incoming call from a telephone used by a user, and receiving a password set in advance with a communication carrier for each telephone,
A reception assistant server, comprising: means for authenticating the person from the caller number of the telephone and the password, and notifying the reception processing server corresponding to the incoming telephone number of the authentication result and the caller number. Receives notification of authentication result and caller number from the reception assistant server that performs personal authentication, and sends mail including the address for accessing various application reception access pages in the mail address of the terminal set in advance for each user Means,
A means for receiving a telephone number when receiving access from the terminal through the access page, and providing a service for various applications when a match between the telephone number and the caller number is confirmed; A reception processing server characterized by.

Images