JP2015026159A - Server system and processing method for server system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To easily realize data migration of an application according to change of user terminal etc. when the application is supposed to be essentially used in one specific user terminal.SOLUTION: A user data database 140 stores in association: a first ID which is issued by a server system 10 when an application is executed for the first time in a user terminal 20, and is stored in the user terminal 20; a second ID which is automatically set in the user terminal 20; and user data. Then, when the application is executed in a user terminal 20, authentication request information including a first ID and a second ID is transmitted to the server system 10. In response to reception of the authentication request information, the server system 10 determines whether a combination of the first ID and the second ID included in the authentication request information matches the combination of the first ID and the second ID stored in the user data database 140. When these combinations do not match with each other, the server system 10 performs data migration.

Description

  The present invention relates to a server system or the like that performs user data management and authentication processing related to an application program.

  Portable electronic devices called user terminals such as smartphones and tablet terminals are popular. The user terminal has a communication function that can be connected to a network, and an application program (hereinafter abbreviated as “app” as appropriate) is installed by connecting to the network and downloading the application program from a predetermined server. Is common (see, for example, Patent Document 1).

  A user does not always use one user terminal in a fixed manner, and one user uses a plurality of user terminals or purchases user terminals on a daily basis. . A user who wants to use the same application on different user terminals installs and uses the same application on each user terminal.

  If the app is intended for browsing or editing files such as e-book readers, image albums, and word processors, the same file can be downloaded from any user terminal by storing the file on a predetermined server accessible to each user terminal. You can browse.

JP 2013-077057 A

  However, it is also known that there is an application that is basically assumed to be used on one specific user terminal among applications that must communicate with the server. For example, an application such as a game or learning software. In the case of a game application, the server manages data (user data) such as user play data, acquired characters, acquired items, etc. in association with a terminal ID for identifying the user terminal, so that one specific user terminal Can only be used. Similarly, the learning software application is also limited to use on a specific user terminal by managing data (user data) such as past learning processes and past results in association with the terminal ID. Can do.

  However, as described above, a user does not always use one user terminal, and does not always continue to use the same user terminal. Therefore, there is a desire to “migrate” the use of applications between user terminals and use the same user data.

As a possible migration method, as in the conventional software license management method, there is a method of applying for change registration of the terminal ID to the help desk of the application provider, but the procedure is troublesome and takes time. Therefore, it would be convenient if a mechanism capable of migrating by a simple method could be realized.
On the other hand, it is also necessary to prevent unauthorized migration.
The present invention has been devised in view of the above-described problems.

The first invention for solving the above-described problems includes management of user data related to an application, and authentication processing based on authentication request information transmitted from the user terminal when the application is executed on the user terminal. A server system (for example, the server system 10 in FIG. 1),
A first ID issued by the server system and stored in the user terminal when the application is executed for the first time in the user terminal, a second ID automatically set in the user terminal, and user data are stored in association with each other. Storage unit (for example, user data DB 140 in FIG. 1),
Upon execution of the application in the user terminal, an authentication receiving means (for example, the authentication processing unit 112 in FIG. 6) that receives the authentication request information including the first ID and the second ID stored in the user terminal from the user terminal; ,
Match for determining whether or not the combination of the first ID and the second ID included in the authentication request information received by the authentication receiving means matches the combination of the first ID and the second ID stored in association with the storage unit Determination means (for example, the authentication processing unit 112 in FIG. 6 and step S10 in FIG. 7);
When it is determined by the match determination means that there is a mismatch, and the user data associated with the second ID included in the authentication request information is not stored in the storage unit, the first ID and the first ID included in the authentication request information First association updating means (for example, the authentication processing unit 112 in FIG. 6, FIG. 6) that updates the storage contents of the storage unit so as to associate the 2 ID with the user data stored in the storage unit in association with the first ID. 7 step S20),
Is a server system.

As another invention, the server system performs management of user data related to execution of an application and authentication processing based on authentication request information transmitted from the user terminal when the application is executed on the user terminal. A way to do,
A first ID issued by the server system and stored in the user terminal when the application is executed for the first time in the user terminal, a second ID automatically set in the user terminal, and user data are stored in association with each other. Remembering in the department,
Receiving the authentication request information including the first ID and the second ID stored in the user terminal from the user terminal in executing the application in the user terminal;
Determining whether the combination of the first ID and the second ID included in the accepted authentication request information matches the combination of the first ID and the second ID stored in association with the storage unit;
When the determination result is inconsistent and the user data associated with the second ID included in the authentication request information is stored in the storage unit, the user data used in the user terminal is First user data stored in the storage unit in association with the first ID included in the request information, or second user data stored in the storage unit in association with the second ID included in the authentication request information. To perform control to select in the user terminal,
The first ID and the second ID included in the authentication request information when the determination result is inconsistent and the user data associated with the second ID included in the authentication request information is not stored in the storage unit. Updating the storage content of the storage unit so as to relate to the user data stored in the storage unit in association with the first ID;
It is good also as comprising the method containing.

  According to the first aspect of the invention, the first ID that is issued by the server system and stored in the user terminal when the app is executed for the first time in the user terminal, and the second ID that is automatically set in the user terminal, The user data is stored in association with the user data. Then, in executing the application in the user terminal, authentication request information including the first ID and the second ID is transmitted to the server system, and it is determined whether or not it matches the combination of the first ID and the second ID stored in the storage unit. If they match, it means that the user is executing the application using the same user terminal, and of course the authentication is successful. The problem is a mismatch.

  Here, when the first ID and the second ID are arranged, the first ID and the second ID are always set if the application has been executed. Therefore, the combination of the first ID and the second ID included in the authentication request information does not match the combination of the first ID and the second ID stored in the storage unit, and is associated with the second ID included in the authentication request information. When the received user data is not stored in the storage unit, the following case can be considered. That is, the second ID changes for some reason. Even if the user terminal is changed and the original first ID that has been backed up or the like can be taken over, the second ID may change due to a change in the user terminal. Moreover, although the user terminal is the same, the case where only the second ID is changed corresponds to this case. Even in such a case, “migration” can be easily realized. Moreover, the effect which suppresses an illegal "migration | transfer" on the character of 1st ID and 2nd ID can be anticipated.

The second invention is the first invention, wherein
When user data associated with the second ID included in the authentication request information is determined to be inconsistent by the match determination unit and stored in the storage unit, user data used in the user terminal is The first user data stored in the storage unit in association with the first ID included in the authentication request information, or the second user stored in the storage unit in association with the second ID included in the authentication request information. Selection control means (for example, the authentication processing unit 112 in FIG. 6, step S14 in FIG. 7) for performing control to select the data in the user terminal,
If the first user data is selected as a result of the selection control by the selection control means, the memory stores the first ID and the second ID included in the authentication request information and the first user data so as to be associated with each other. When the second user data is selected, the first ID and the second ID included in the authentication request information are associated with the second user data when the second user data is selected. Second association updating means for updating the stored contents (for example, the authentication processing unit 112 in FIG. 6 and step S16 in FIG. 7);
Is a server system.

  According to the second invention, the following effects are expected. That is, first, if the application has been executed, some user data should exist. Therefore, the combination of the first ID and the second ID included in the authentication request information does not match the combination of the first ID and the second ID stored in the storage unit, and is associated with the second ID included in the authentication request information. When the obtained user data is stored in the storage unit, the following cases are conceivable. That is, there are a first user terminal and a second user terminal that have previously executed an application separately, and in the second user terminal, either the first ID or the second ID is assigned to the first user terminal. It is a case of changing to a thing. In this case, since the application was executed on each of the two user terminals, there are two pieces of user data. Therefore, the user can select which user data will be used in the future, thereby simplifying the “migration” Can be accomplished.

  Thus, also in the second invention, when the application is executed for the first time in the user terminal, the server system issues a first ID that is stored in the user terminal and a second ID that is automatically set in the user terminal. By using it, “migration” can be easily realized. Moreover, the effect which suppresses an illegal "migration | transfer" on the character of 1st ID and 2nd ID can be anticipated.

The third invention is the first or second invention, wherein
The second ID includes universal identification information of the application issued by the OS of the user terminal, universal identification information of the user terminal issued by the OS of the user terminal, and universal identification information defined in the hardware of the user terminal. An ID determined using at least one of
It is a server system.

Moreover, 4th invention is set in 3rd invention,
The second ID is an ID determined using a communication ID necessary for communication set in a communication storage medium detachable from the user terminal.
It is a server system.

  According to the third and fourth aspects of the present invention, universal identification information determined by the user terminal itself is used as the second ID, so that unauthorized use of the second ID can be suppressed.

The figure which shows an example of a structure of a computer system. The figure which shows an example of a user terminal. The figure for demonstrating the usage example of the user terminal of the first class. The figure for demonstrating the usage example of the user terminal of the second kind. The figure for demonstrating the usage example of the user terminal of the second kind. The figure for demonstrating the function structure of a server system. The flowchart which shows the flow of the login authentication process which a server system performs. The figure for demonstrating the function structure of a user terminal. The flowchart which shows the flow of the login process which a user terminal performs.

An example of an embodiment to which the present invention is applied will be described.
FIG. 1A is a diagram illustrating an example of a configuration of a computer system 1 in the present embodiment. The computer system 1 of the present embodiment is configured by connecting a server system 10 and a plurality of user terminals 20 via a communication network N so that they can communicate with each other.

  The communication network N means a communication path capable of voice communication and data communication. If voice is included in the data, it means a communication path capable of data communication. The communication network N is meant to include a communication network such as a telephone communication network, a cable network, and the Internet in addition to a LAN (Local Area Network) using a dedicated line (dedicated cable) or Ethernet (registered trademark) for direct connection. The communication method may be wired / wireless. In addition, a mobile phone base station, a radio base station, and the like are also included in the communication network N.

  The server system 10 includes a housing 1104 having a plurality of blade servers 1102, a keyboard 1106 and a display monitor 1108 used for management operations of the blade server 1102, and a storage 1140 such as a hard disk that can be accessed from each blade server 1102. Further, a power supply module (not shown) that supplies power to each blade server 1102 and the like, a communication device for connecting to the communication network N, and the like are appropriately mounted on the housing 1104. The blade server 1102 may be a rack mount server.

  The server system 10 supports, for example, a common gateway interface (CGI) program implementation language, and performs user registration procedures, authentication of registered users (so-called login processing), and application programs (hereinafter referred to as “apps” as appropriate) executed on user terminals. ) Can be implemented.

  The user terminal 20 has a communication function that can be connected to the communication network N. For example, the user terminal 20 is a kind of computer such as a smartphone, a mobile phone, a tablet device, a portable game device, and a personal computer, and is an electronic device. By executing the program, the user terminal 20 can access the server system 10 as a partial function thereof, realize data transmission / reception according to a predetermined procedure, and enjoy various support.

  FIG. 2 is a front external view showing a configuration example of the user terminal 20. The user terminal 20 includes a direction input key 1502, a button switch 1504, a touch panel 1506 functioning as an image display device / contact position input device, a speaker 1510, a built-in battery 1509, a microphone 1512, a control board 1550, a computer. A memory card reader 1542 that can read and write data from a memory card 1540 that is a readable storage medium. In addition, a power button, a volume control button, etc., not shown, are provided.

The control board 1550 is a mobile phone for communicating with various microprocessors such as a CPU 1551, GPU, DSP, various IC memories 1552 such as an ASIC, VRAM, RAM, ROM, and a mobile phone base station connected to a communication network N. A module SCM and a wireless communication module 1553 for wireless communication with a wireless LAN base station and the like are mounted.
The mobile phone module SCM is detachably equipped with a SIM (Subscriber Identity Module) card SC in which phone number information (communication ID) is recorded. When the SIM card SC is not attached, the mobile phone base station Communication with is impossible. The wireless communication module 1553 records a MAC (Media Access Control) address (communication ID).

  It is possible to connect the user terminal 20 to the server system 10 via the communication network N by using either the mobile phone module SCM or the wireless communication module 1553. In the embodiment, when the SIM card SC is attached to the mobile phone module SCM, description will be made assuming that the mobile phone module SCM is preferentially connected to the server system 10.

  In addition, the user terminal 20 includes a driver circuit of the touch panel 1506, a circuit that receives signals from the direction input key 1502 and the button switch 1504, an output amplifier circuit that outputs an audio signal to the speaker 1510, and an audio signal collected by the microphone 1512. A so-called I / F circuit 1557 (interface circuit) such as an input signal generation circuit for generating a signal and a signal input / output circuit for the memory card reader 1542 are mounted. Each element mounted on the control board 1550 is electrically connected via a bus circuit or the like, and is connected so as to be able to read / write data and transmit / receive signals.

  The control board 1550 stores the application program acquired from the server system 10 and data such as a first ID described later in the IC memory 1552. The acquired application program can be executed by installing it. In executing the application, each unit of the player terminal 1500 is controlled in accordance with operation inputs from the direction input key 1502, the button switch 1504, and the touch panel 1506. In the present embodiment, the user terminal 20 is configured to acquire the application program from the server system 10, but may be configured to be read from a separately obtained memory card 1540 and installed.

  Returning to FIG. 1 (1), the server system 10 includes a user data DB (database) 140 in the storage 1140. The user data DB is a database that stores a first ID, a second ID, and user data in association with each other.

  In the present embodiment, it is assumed that user data is required to execute an application on the user terminal 20. For example, if it is a game application, the user's character setting information and play data such as acquired items / acquired characters are user data. If it is a learning software application, the user's past learning results and progress, learning history, etc. Is user data. When the application is executed, the user terminal 20 transmits authentication request information including the first ID and the second ID to the server system 10 to request login authentication, and the user data can be used when the authentication is approved. Will be able to run the app.

  Further, in the present embodiment, basically, it is assumed that an application for one license is used on one user terminal 20, so there is only one user data related to an application for one license, An ID is managed in association with this one user data. In other words, one user data is not allowed to be shared and used by a plurality of user terminals. On the other hand, in this embodiment, when changing the user terminal 20 that the user is using, a mechanism that can easily perform “migration” that can continuously use the same user data is introduced. For this reason, the first ID and the second ID are managed in association with user data.

  As shown in FIG. 1 (2), the first ID is an ID issued by the server system 10 when the application is first executed on the user terminal 20. The first ID is universal identification information, for example, unique identification information including a sequential number or the like. As for the issue timing, for example, it is preferable that the user terminal 20 issues the first ID by communicating with the server system 10 during the display of the initial activation screen or the initial setting screen when the application is first executed on the user terminal 20. It is. Once issued, the first ID is set and stored in the user terminal 20 and is managed in the user terminal 20 as an integral part of the application without being updated. Further, if the application is deleted, the first ID is also deleted.

  The second ID is an ID set by the user terminal 20 alone. In the present embodiment, it is assumed that the user terminal 20 has a type A and a type B. The second ID in the first-class user terminal 20-1 is, for example, an ID (such as UIID (Unique Installation Identifer)) that the OS (Operating System) of the user terminal 20 gives as universal identification information to the installed application ( Hereinafter, this is set using “installed application ID”. Since the installed application ID is an ID set by the OS for the application, when it is set and stored in the user terminal 20, it is not updated and is managed in the user terminal 20 together with the application. It becomes. If the application is deleted, the installed application ID is also deleted. Note that the installed application ID may not be deleted even if the application is deleted. When the deleted application is reinstalled, the same installed application ID as the previous one is used.

  As another example, for example, a numerical value based on the MAC address of the wireless communication module 1553 is set as the second ID, or a numerical value generated by the OS using the numerical value based on the installed application ID or the MAC address as a random number seed is universal. Since it can be identification information, it can be set as the second ID.

  In addition, the second ID in the user terminal 20-2 is set using the communication ID recorded on the SIM card. The communication ID recorded on the SIM card is universal identification information. As another example, for example, a numerical value based on the MAC address of the wireless communication module 1553 may be the second ID, or a numerical value generated by the OS using the numerical value based on the MAC address as a random number seed may be universal identification information. Therefore, it can be set as the second ID.

  In both the class A and the class B, the user terminal 20 transmits the authentication request information including the first ID and the second ID to the server system 10 and obtains the authentication approval when executing the application. Since both the first ID and the second ID are universal identification information, it seems that only one of them can uniquely identify the user terminal 20. However, when changing the model of the user terminal 20 or replacing the SIM card SC, it is not possible to easily “migrate” with only one ID. One of the features of the present embodiment is to use the first ID and the second ID in order to realize accurate and early “transition”.

When the server system 10 accepts login authentication from the user terminal 20, the first ID and second ID stored in the user terminal 20 included in the authentication request information and the first ID registered in the user data DB 140 are stored. And the second ID is compared to perform the authentication process. One feature of the present embodiment is that “migration” is also performed at this time.
FIG. 1 (3) shows a different pattern when the first ID and the second ID registered in the user data DB 140 of the server system 10 are compared with the first ID and the second ID of the user terminal 20. There are four possible cases (a) to (d).

  In the case of (a), the first ID of the user terminal 20 is registered in the user data DB 140, the second ID of the user terminal 20 is also registered in the user data DB 140, and the combination (association) with each other is also possible. It is the same case. Usually, there is no need for “migration” and this is the case in (i).

  In the case of (b), the first ID of the user terminal 20 is registered in the user data DB 140, and the second ID of the user terminal 20 is also registered in the user data DB 140. It is a different case.

  For example, when an application has been executed on each of the A terminal and B terminal, which are user terminals of class A, and each of the A terminal and B terminal corresponds to the case of (A), as shown in FIG. The B terminal corresponds to the case where the first ID of the A terminal is backed up on a personal computer or the like and the backed up first ID is reflected on the B terminal. In this case, as shown in FIG. 3 (2-1), in the B terminal, the first ID is “1A” of the A terminal, and the second ID is “2B” as before. In the user data DB 140 of the server system 10, the first ID “1A” and the second ID “2B” are not registered in association with each other. The second ID registered in association with the first ID “1A” is “2A” of the A terminal.

  Further, for example, when the application is executed in each of the X terminal and the Y terminal, which are the user terminals of the second kind, and each of the X terminal and the Y terminal corresponds to the case of (A), FIG. As described above, the Y terminal corresponds to the case of (b) when the SIM card of the Y terminal is replaced with the SIM card of the X terminal. In this case, in the Y terminal, the first ID remains “1Y”, but the second ID is “2X” in the X terminal. In the user data DB 140 of the server system 10, the first ID “1Y” and the second ID “2X” are not registered in association with each other. The first ID registered in association with the second ID “2X” is “1X” of the X terminal.

  In this case (b), it is necessary to update the association between the first ID, the second ID, and the user data registered in the user data DB 140. If the first ID of the user terminal 20 included in the authentication request information is positive, the second ID registered in the user data DB 140 in association with the first ID is used as the second ID of the user terminal 20 included in the authentication request information. Change and delete the association related to the original second ID (the first ID and user data associated with the original second ID). On the other hand, if the second ID of the user terminal 20 included in the authentication request information is positive, the first ID registered in the user data DB 140 in association with the second ID is used as the first ID of the user terminal 20 included in the authentication request information. The ID is changed to 1 ID, and the association (the second ID and user data associated with the original first ID) related to the original first ID is deleted.

  The case (c) is a case where the first ID of the user terminal 20 is registered in the user data DB 140, but the second ID of the user terminal 20 is not registered in the user data DB 140. This case corresponds to, for example, the case where the application has not been executed on the B terminal in FIG. As shown in FIG. 3 (2-2), when the first ID of terminal A is reflected in terminal B, the first ID and second ID are temporarily stored and set in terminal B, but the application is executed on terminal B. As a result, the second ID of the terminal B is not registered in the terminal B or the user data DB 140 of the server system 10. When the application is executed on the B terminal in this state, the second ID is newly set on the B terminal, but the second ID of the B terminal is not yet registered in the user data DB 140 of the server system 10. Therefore, it falls under case (c).

In addition, for example, the application has been executed on the X terminal, which is the user terminal of the second class, and it corresponds to the case (a), but the case where it is replaced with a new SIM card SC as shown in FIG. To do. This is because the second ID registered in association with the first ID “1X” in the user data DB 140 is the second ID “2X _old ” before replacement.
In the case (c), since the first ID is registered in the user data DB 140, the second ID associated with the first ID is changed to the second ID of the user terminal included in the authentication request information.

In the case of (d), for example, the application has been executed on the X terminal, which is the user terminal of the second class, but when the application has not been executed on the Y terminal, the SIM card SC of the X terminal is This corresponds to the Y terminal when the application is executed with the terminal mounted.
In this case (d), the application is executed on the Y terminal for the first time, but the second ID is registered in the user data DB 140. Therefore, without issuing the first ID, a recovery process for assigning the first ID registered in the user data DB 140 in association with the second ID to the Y terminal is performed. The registration of the user data DB 140 is not updated.

  As described above, the user terminal 20 is changed by using the first ID issued by the server system 10 when the application is first executed on the user terminal 20 and the second ID automatically set in the user terminal 20. In addition, since the “migration” related to the continuous use of user data in the case of changing the SIM card can be accurately grasped, the “migration” can be easily realized. In addition, since either one of the first ID and the second ID is registered in the user data DB, and neither the first ID nor the second ID is set by the user, the “migration” fraud is suppressed due to the nature of the ID. Can do.

[Description of functional blocks of server system]
Next, a functional configuration example of the server system 10 will be described.
FIG. 6 is a functional block diagram illustrating a functional configuration example of the server system 10 in the present embodiment. The server system 10 of this embodiment includes a server processing unit 110, a server storage unit 130, an operation input unit 170, a display unit 180, and a communication unit 190.

  The server processing unit 110 is realized by electronic components such as a microprocessor such as a CPU and a GPU, an ASIC (application-specific integrated circuit), and an IC memory, and includes functional units including the operation input unit 170 and the server storage unit 130. Data input / output control between The server system 10 executes various arithmetic processes based on predetermined programs and data, an operation input signal from the operation input unit 170, a signal received from the user terminal 20 accessed via the communication network N, and the like. Integrated operation control. And in this embodiment, the authentication process part 112, the 1st ID issuing part 114, the application distribution control part 122, and the communication control part 124 are included.

  The authentication processing unit 112 is a functional unit for executing a login authentication process, which will be described later with reference to FIG. 7, and is a functional unit that performs “migration” using the first ID and the second ID. The first ID issuing unit 114 is a functional unit that issues a first ID in response to an initial login of a user terminal, that is, an initial authentication request. When the first ID is issued by the first ID issuing unit 114, the authentication processing unit 112 associates the second ID included in the authentication request information with new user data in association with the issued first ID and the new user data. Register with.

  The application distribution control unit 122 is a functional unit that provides an application program in response to a download request from the user terminal 20. The distribution application 138 stored in the server storage unit 130 is an original program, which is duplicated and provided.

  The communication control unit 124 executes data processing related to data communication, and connects to the communication network N via the communication unit 190 to realize data exchange with an external device. The external device is mainly the user terminal 20.

The operation input unit 170 is a means for inputting various operations for server management, and corresponds to the keyboard 1106 in FIG.
The display unit 180 displays various images for system management. For example, it can be realized by an image display device such as a flat panel display, a cathode ray tube (CRT), a projector, or a head mounted display. The display monitor 1108 in FIG. 1 corresponds to this.

  The communication unit 190 is connected to the communication network N to realize communication. For example, it is realized by a wireless communication device, a modem, a TA (terminal adapter), a line terminator, a wired communication cable jack, a control circuit, or the like.

  The server storage unit 130 is a system program for realizing various functions for causing the server processing unit 110 to control the server system 10 in an integrated manner, a program necessary for realizing a support function on the server side of the application, various data, etc. Remember. Further, it is used as a work area of the server processing unit 110, and temporarily stores calculation results and the like executed by the server processing unit 110 according to various programs. The server storage unit 130 is realized by, for example, an IC memory such as a RAM or a ROM, a magnetic disk such as a hard disk, an optical disk such as a CD-ROM or DVD, and the like. In FIG. 1, storage media such as an IC memory and a storage 1140 mounted on the blade server 1102 correspond to this.

  The server storage unit 130 of this embodiment stores a login authentication program 132, a first ID issuing program 134, a distribution application 138, and a user data DB 140. In addition, information such as a timer, a counter, and a flag necessary for functioning as the server system 10 can be stored.

The login authentication program 132 is a program for realizing the function as the authentication processing unit 112 by being read and executed by the server processing unit 110. The first ID issuing program 134 is a program for realizing the function as the first ID issuing unit 114 by being read and executed by the server processing unit 110.
The distribution application 138 is an original program copied when the application distribution control unit 122 provides (distributes) an application program in response to a download request for the application program.
As described with reference to FIG. 1A, the user data DB 140 is a database that stores and registers the first ID, the second ID, and user data in association with each other.

  The server storage unit 130 may store, for example, application execution history data of the user terminal 20 in addition to these data. The application execution history data refers to, for example, receiving operation information, execution progress information, and the like on the user terminal 20 during execution of the application on the user terminal 20, and associating this with date / time, first ID, and second ID. To remember. By storing the application execution history data, the application provider can cope with any trouble or problem in the user terminal 20.

[Operation flow of login authentication processing]
A login authentication process executed in the server system 10 will be described with reference to FIG. FIG. 7 is a flowchart showing a flow of login authentication processing realized by the server processing unit 110 reading and executing the login authentication program 132. The login authentication process is executed by receiving authentication request information from the user terminal 20.

  First, the server processing unit 110 determines whether or not the first request ID is included in the authentication request information transmitted from the user terminal 20, that is, whether or not the first ID is information indicating empty (NULL) ( Step S2). In the case of information indicating empty (NULL) (step S2: YES), it is determined whether or not the second ID included in the authentication request information is registered in the user data DB 140 (step S4).

  When the second ID is not registered in the user data DB 140 (step S4: NO), the reception of the authentication request information this time is the first reception, that is, the first execution for the user terminal 20. Therefore, the first ID is issued by executing the first ID issuance program 134, and the issued first ID, the second ID included in the authentication request information, and the new user data are associated with each other and newly created in the user data DB 140. Register (step S6). In addition, the issued first ID is notified to the user terminal 20 and new user data is transmitted to complete the login authentication process.

  When the second ID included in the authentication request information is registered in the user data DB 140 (step S4: YES), the recovery process is executed because it corresponds to the case of (d) in FIG. That is, the server processing unit 110 notifies the user terminal 20 of the first ID registered in the user data DB 140 in association with the second ID, and notifies the user terminal 20 that the data will be restored. Then, the user data stored in association with the second ID is transmitted to the user terminal 20. After executing the recovery process, the login authentication process is terminated.

  In step S2, if the first ID included in the received authentication request information is not empty (NULL) (step S2: NO), the server processing unit 110 includes the first ID and the first ID included in the authentication request information. It is determined whether or not 2ID is registered in the user data DB 140 and the first ID and the second ID are registered in association with the user data DB 140 (step S10). That is, it is determined whether the combination of the first ID and the second ID matches the combination registered in the user data DB 140.

  If they match (step S10: YES), this corresponds to the case of (a) in FIG. While notifying the user terminal 20 that the authentication has been approved, the corresponding user data stored in the user data DB 140 is transmitted to the user terminal 20, and the login authentication process is terminated.

  On the other hand, when they do not match (step S10: NO), the server processing unit 110 determines whether or not user data is stored in the user data DB 140 in association with the second ID included in the authentication request information ( Step S12). If stored (step S12: YES), it corresponds to the case of (b) in FIG. Accordingly, the user data (first user data) stored in the user data DB 140 in association with the first ID included in the authentication request information and the user data DB 140 in association with the second ID included in the authentication request information. A control signal that allows the user to select either the stored user data (second user data) is transmitted to the user terminal 20 (step S14).

  Then, when a selection result indicating that the first user data has been selected is received from the user terminal 20, the first ID and the second ID included in the authentication request information are associated with the first user data. The stored contents (registered contents) of the user data DB 140 are updated (step S16). Specifically, since the first ID and the first user data are stored in association with each other, the second ID in this association may be updated to the second ID included in the authentication request information. In addition, inconsistent data is deleted upon update. That is, the association of the second ID before updating (the first ID and user data associated with the second ID before updating) is deleted from the user data DB 140.

  On the other hand, when a selection result indicating that the second user data is selected is received from the user terminal 20, the first ID and the second ID included in the authentication request information are associated with the second user data. The stored contents (registered contents) of the user data DB 140 are updated (step S16). Specifically, since the second ID and the second user data are stored in association with each other, the first ID in this association may be updated to the first ID included in the authentication request information. In addition, inconsistent data is deleted upon update. That is, the association of the first ID before updating (the second ID and user data associated with the first ID before updating) is deleted from the user data DB 140.

  Then, the user terminal 20 is notified that the user data DB 140 has been updated, the user data in the updated association is transmitted to the user terminal 20, and the login authentication process is terminated.

  In addition, in step S12, when the user data associated with the second ID of the authentication request information is not stored in the user data DB 140 (step S12: NO), it corresponds to the case of (c) in FIG. To do. Since the first ID is registered in the user data DB 140, user data associated with the first ID is also stored in the user data DB 140. Therefore, the user data associated with the first ID is transmitted to the user terminal 20 as a control signal that updates the registration so that the user data is associated with the first ID and the second ID of the authentication request information and confirms that the user is to “migrate”. (Step S18).

  When the confirmation operation is performed, the user data DB 140 is configured to associate the first ID and the second ID included in the authentication request information with the user data stored in the user data DB 140 in association with the first ID. The association is updated (step S20). Specifically, since the first ID and the user data are stored in association with each other, the second ID in this association may be updated to the second ID included in the authentication request information. In addition, inconsistent data is deleted upon update. That is, the first ID registered in the user data DB 140 is deleted in association with the second ID included in the authentication request information before updating.

  Then, the user terminal 20 is notified that the user data DB 140 has been updated, the user data in the updated association is transmitted to the user terminal 20, and the login authentication process is terminated.

  As described above, according to the present embodiment, when the user terminal 20 that uses an already executed application is changed or the SIM card SC is replaced, the so-called “user data” can be used continuously. The operation of “migration” can be easily realized.

[Description of functional block of user terminal]
Next, a functional configuration example of the user terminal 20 will be described.
FIG. 8 is a functional block diagram illustrating an example of a functional configuration of the user terminal 20 in the present embodiment. The user terminal 20 of this embodiment includes a processing unit 210, a storage unit 230, an operation input unit 270, a sound output unit 275, a display unit 280, and a communication unit 290.

  The processing unit 210 is realized by, for example, a microprocessor such as a CPU or a GPU, or an electronic component such as an ASIC or an IC memory, and transmits data between the functional units of the user terminal 20 including the operation input unit 270 and the storage unit 230. Performs input / output control. Then, various arithmetic processes are executed based on a predetermined program and data, an operation input signal from the operation input unit 270, a communication result with the server system 10, and the like, and the operation of the user terminal 20 is controlled. In FIG. 2, the CPU 1551 and the like correspond to the processing unit 210.

  The processing unit 210 constructs an OS in the user terminal 20 based on the system program 240 and realizes various functions included in the OS. As a function of the OS, for example, the processing unit 210 downloads and installs an application from the server system 10, and generates an installed application ID 232 related to the installed application according to the installed application ID generation program 242. As this function, for example, a known function that is a UIID issuing function can be used. The installed application ID 232 is universal identification information.

  In addition, as a function of the OS, a backup function of the application setting data 260 according to the application setting data backup program 244 and a reflection function of the backed-up application setting data 260 according to the backup data reflection program 246 are realized. The backup function and the reflection function are functions described with reference to FIG. 3A and are activated by connecting the user terminal 20 to a data backup device (for example, a personal computer) and executing the program.

The processing unit 210 includes an application execution control unit 212, a sound generation unit 222, an image generation unit 224, and a communication control unit 226.
The application execution control unit 212 is a functional unit realized by the processing unit 210 executing the application program 250. The application execution control unit 212 not only executes the application program 250 but also the second ID setting unit 214 that sets the second ID using the installed application ID 232 or the communication ID 291 when the application program 250 is executed, and the server system 10. A login control unit 216 that transmits authentication request information including the first ID 262 and the second ID 234 to perform login processing is provided.

  The sound generation unit 222 is realized by, for example, a digital signal processor (DSP), a processor such as a speech synthesis IC, an audio codec that can reproduce an audio file, and the like. Based on the processing result by the application execution control unit 212, BGM and various operation sounds Sound signal is generated and output to the sound output unit 275.

  The image generation unit 224 includes, for example, a processor such as a GPU (Graphics Processing Unit) and a digital signal processor (DSP), a program such as a video signal IC and a video codec, a drawing frame IC memory such as a frame buffer, and a texture data expansion unit. This is realized by an IC memory or the like used for the above. The image generation unit 224 generates an image signal based on the processing result of the processing unit 210, and outputs the generated image signal to the display unit 280.

  The communication control unit 226 is a functional unit that controls communication (voice communication or data communication) with an external device via the communication unit 290. The external device is another user terminal 20, a data backup personal computer, the server system 10, or the like.

  The operation input unit 270 outputs an operation input signal to the processing unit 210 according to various operation inputs made by the user. For example, it can be realized not only by an element that is directly operated by a player with a finger, such as a button switch, a touch pad, or a trackball, but also by an element that detects motion or posture, such as an acceleration sensor, an angular velocity sensor, a tilt sensor, or a geomagnetic sensor. The direction input key 1502, the button switch 1504, and the touch panel 1506 in FIG.

  The sound output unit 275 is realized by a device that outputs sound based on the sound signal input from the sound generation unit 222. In FIG. 2, the speaker 1510 corresponds to this.

  The display unit 280 displays various images based on the image signal input from the image generation unit 224. For example, it can be realized by an image display device such as a flat panel display, a projector, or a head mounted display. In FIG. 2, the touch panel 1506 corresponds to this.

The communication unit 290 is a functional unit that realizes communication (voice communication or data communication) by connecting to the communication network N, and corresponds to the mobile phone module SCM and the wireless communication module 1553 in FIG. The communication unit 290 is directly connected to a personal computer or the like to realize data backup and communication for reflecting the backed up data.
The communication unit 290 records a communication ID 291 that is universal identification information. The communication ID 291 corresponds to, for example, SIM data in the SIM card SC if the communication unit 290 is the mobile phone module SCM, and corresponds to, for example, a MAC address if the communication unit 290 is the wireless communication module 1553.

  The storage unit 230 stores a system program 240 for realizing various functions for causing the processing unit 210 to control the user terminal 20 in an integrated manner, an application program 250, application setting data 260, an installed application ID 232, and the like. Further, it is used as a work area of the processing unit 210, and temporarily stores calculation results executed by the processing unit 210 according to various programs, input data input from the operation input unit 270, and the like. For example, the second ID 234 is this temporarily stored data. The function of the storage unit 230 is realized by, for example, an IC memory such as a RAM or a ROM, a magnetic disk such as a hard disk, an optical disk such as a CD-ROM or DVD, and the like. In FIG. 2, the IC memory 1552 and the memory card 1540 mounted on the control board 1550 correspond to this.

  The system program 240 is a program for realizing the basic functions of the user terminal 20, and is a program for constructing an OS. The system program 240 includes an installed application ID generation program 242, an application setting data backup program 244, a backup data reflection program 246, and terminal type information 248.

  The installed application ID generation program 242 is a program for generating an installed application ID 232 when a new application is installed in the user terminal 20. The application setting data backup program 244 is a program for backing up application setting data 260 storing various settings necessary for executing an installed application to an external device. The backup data reflection program 246 is a program for storing / reflecting the application setting data 260 backed up in the external device in the user terminal 20. The terminal type information 248 is information indicating a type of whether the user terminal 20 is a class A or a class B, and is embedded in the system program 240 so as not to be rewritten.

  The application program 250 is a program installed by downloading a copy of the distribution application 138 from the server system 10 and installing it. The application program 250 includes a login processing program 252 for performing login by communicating with the server system 10 in executing the application, and a second ID setting program 254 for performing second ID setting processing for setting the second ID 234 in the login processing. Including.

The application setting data 260 is data that stores various settings necessary for executing the application program 250, and includes a first ID 262 issued by the server system 10.
The installed application ID 232 is, for example, a UIID, and is a universal ID generated by executing the installed application ID generation program 242 when the application program 250 is installed.
The second ID 234 is an ID set by executing the second ID setting program 254.

[Operation flow related to user terminal login]
Next, an operation flow relating to a login process to the server system 10 performed when the user terminal 20 executes the application program 250 will be described with reference to FIG.
In FIG. 9, first, the processing unit 210 executes the second ID setting program 254 to perform the second ID setting process. That is, the type of the own device is determined from the terminal type information 248 (step S102). In the case of Class A, the processing unit 210 sets the second ID 234 using the installed application ID 232 (Step S104). The installed application ID 232 may be set as the second ID 234 as it is, or another ID may be further added and set as the second ID 234. In any case, since the installed application ID 232 is a universally unique ID, the second ID 234 is also a universally unique ID.

In the case of the second class, the processing unit 210 sets the second ID 234 using the communication ID 291 (step S106). The communication ID 291 may be set as the second ID 234 as it is, or another ID may be further added and set as the second ID 234. Since the communication ID 291 is a universally unique ID, the second ID 234 is a universally unique ID even in the case of the B type.
The processes in steps S102 to S106 are the second ID setting process.

Next, authentication request information including the first ID 262 and the second ID 234 is transmitted to the server system 10 (step S108), and predetermined communication is performed with the server system 10 that executes the process shown in FIG. 7 (step S108). S110).
When the authentication process ends, the login process ends. However, if the authentication is approved, the user data can be received from the server system 10, and therefore the processing unit 210 continues to execute the application program 250 as it is. On the other hand, if the authentication is not approved, the processing unit 210 stops the execution of the application program 250 and displays that fact on the display unit 280.

[Summary]
As described above, according to the present embodiment, the first ID that is issued by the server system 10 and stored in the user terminal 20 when the application is executed for the first time in the user terminal 20 is automatically set in the user terminal 20. The second ID and the user data are associated with each other and stored in the user data DB 140. Then, when executing the application in the user terminal 20, it is determined whether the authentication request information including the first ID and the second ID is transmitted to the server system 10 and matches the combination of the first ID and the second ID stored in the user data DB 140. Is done. If they match, it means that the user is executing the application using the same user terminal 20, and authentication is successful. On the other hand, if there is a mismatch, a process involving “migration” is performed.

  Since the first ID and the second ID are always set if the application has been executed, some user data exists if the application has been executed. For this reason, the combination of the first ID and the second ID included in the authentication request information does not match the combination of the first ID and the second ID stored in the user data DB 140 (step S10: NO in FIG. 7), and When user data associated with the second ID included in the authentication request information is stored in the user data DB 140 (step S12 in FIG. 7: YES), the following state is conceivable. That is, for example, there are a first user terminal and a second user terminal that have previously executed an application separately, and in the second user terminal, either the first ID or the second ID is assigned to the first user. This is the case of changing to the terminal. In this case, since the application was executed on each of the two user terminals, there are two user data, so that the user selects which user data will be used in the future, and “migrate” Can do.

  Further, the combination of the first ID and the second ID included in the authentication request information does not match the combination of the first ID and the second ID stored in the storage unit (step S10: NO in FIG. 7), and the authentication When the user data associated with the second ID included in the request information is not stored in the user data DB 140 (step S12: NO in FIG. 7), the first ID and the second ID included in the authentication request information and the first ID The association is updated so that the user stored in the user data DB 140 is associated with one ID, and “migration” is realized. In this case, the following cases can be considered. That is, the second ID changes for some reason. Even when the user terminal 20 is changed and the original first ID can be taken over by reflecting the first ID, the case where the second ID changes due to the change of the user terminal 20 is applicable. Moreover, although the user terminal 20 is the same, it corresponds also when only 2nd ID changed. Even in such a case, “migration” can be easily realized.

  Accordingly, by using the first ID that is issued by the server system 10 and stored in the user terminal 20 when the application is executed for the first time on the user terminal 20, and the second ID that is automatically set in the user terminal 20. , "Migration" can be realized easily. Further, the first ID and the second ID are not IDs set by the user, but are IDs mechanically set by the server system 10 or the user terminal 20, and the second ID is set every time the login process is executed (FIG. 9). (See), and in its character, it can be expected to suppress illegal “migration”.

[Modification]
As described above, the embodiment to which the present invention is applied has been described. However, the applicable embodiment of the present invention is not limited to the above-described embodiment, and additions, omissions, and modifications of components can be appropriately made. .

  For example, the second ID may be set using universal identification information of the user terminal issued by the OS of the user terminal 20. For example, ANDROID (registered trademark) ID corresponds to this identification information. Further, the second ID may be set using universal identification information assigned to each device of the user terminal 20. For example, UDID (Unique Device IDentifier) corresponds to this identification information. Of course, it is good also as setting 2nd ID combining these identification information.

  DESCRIPTION OF SYMBOLS 10 ... Server system, 110 ... Server processing part, 112 ... Authentication processing part, 114 ... 1st ID issuing part, 140 ... User data DB, 20 ... User terminal

Claims (5)

A server that performs management of user data related to execution of an application program (hereinafter referred to as “application”) and authentication processing based on authentication request information transmitted from the user terminal when the application is executed on the user terminal. A system,
A first ID issued by the server system and stored in the user terminal when the application is executed for the first time in the user terminal, a second ID automatically set in the user terminal, and user data are stored in association with each other. A storage unit
An authentication accepting means for accepting the authentication request information including the first ID and the second ID stored in the user terminal from the user terminal upon execution of the application in the user terminal;
Match for determining whether or not the combination of the first ID and the second ID included in the authentication request information received by the authentication receiving means matches the combination of the first ID and the second ID stored in association with the storage unit A determination means;
When it is determined by the match determination means that there is a mismatch, and the user data associated with the second ID included in the authentication request information is not stored in the storage unit, the first ID and the first ID included in the authentication request information First association updating means for updating the storage content of the storage unit so as to associate 2ID with the user data stored in the storage unit in association with the first ID;
Server system with When user data associated with the second ID included in the authentication request information is determined to be inconsistent by the match determination unit and stored in the storage unit, user data used in the user terminal is The first user data stored in the storage unit in association with the first ID included in the authentication request information, or the second user stored in the storage unit in association with the second ID included in the authentication request information. Selection control means for performing control to select in the user terminal whether to use data;
If the first user data is selected as a result of the selection control by the selection control means, the memory stores the first ID and the second ID included in the authentication request information and the first user data so as to be associated with each other. When the second user data is selected, the first ID and the second ID included in the authentication request information are associated with the second user data when the second user data is selected. A second association updating means for updating the stored content;
Server system with The second ID includes universal identification information of the application issued by the OS of the user terminal, universal identification information of the user terminal issued by the OS of the user terminal, and universal identification information defined in the hardware of the user terminal. An ID determined using at least one of
The server system according to claim 1 or 2. The second ID is an ID determined using a communication ID necessary for communication set in a communication storage medium detachable from the user terminal.
The server system according to claim 3. A server system is a method for performing management of user data related to execution of an application and authentication processing based on authentication request information transmitted from the user terminal when the application is executed on the user terminal. ,
A first ID issued by the server system and stored in the user terminal when the application is executed for the first time in the user terminal, a second ID automatically set in the user terminal, and user data are stored in association with each other. Remembering in the department,
Receiving the authentication request information including the first ID and the second ID stored in the user terminal from the user terminal in executing the application in the user terminal;
Determining whether the combination of the first ID and the second ID included in the accepted authentication request information matches the combination of the first ID and the second ID stored in association with the storage unit;
When the determination result is inconsistent and the user data associated with the second ID included in the authentication request information is stored in the storage unit, the user data used in the user terminal is First user data stored in the storage unit in association with the first ID included in the request information, or second user data stored in the storage unit in association with the second ID included in the authentication request information. To perform control to select in the user terminal,
The first ID and the second ID included in the authentication request information when the determination result is inconsistent and the user data associated with the second ID included in the authentication request information is not stored in the storage unit. Updating the storage content of the storage unit so as to relate to the user data stored in the storage unit in association with the first ID;
Including methods.

Images