Patent ID: 8209746
Filing Date: 2012-06-26
Classification: G06F,G06Q,H04L

Abstract:
1. A content presentation-type authentication system to allow a client to perform a content presentation-type user authentication in which a content is unilaterally presented to a user, who is a subject of authentication, during user authentication which is performed with a one-time password derivation rule applied as a password by the user to pattern elements presented in a presentation pattern to the user to derive therefrom a one-time password which includes elements located at specific positions in the presentation pattern, the content presentation-type authentication system comprising an authentication-service providing server and a client, (A) the authentication-service providing server being configured to manage (i) user IDs of the users and passwords of the users, (ii) content data describing respective contents to be unilaterally presented during the user authentication, and (iii) content IDs of the contents, and to provide content-added authentication information to the users, wherein the authentication-service providing server comprises: a user-information storage which stores therein the user IDs in relation to user attribute information indicative of attributes of the users; a password storage which stores therein the user IDs in relation to the one-time-password derivation rules; a pattern-specifying-information generator operable to generate, in accordance with a given generation rule, plural sets of pattern-specifying information adapted to specify the presentation patterns; a verification-code creator operable to create a verification code from the one-time password subjected to a one-way function operation; a content-information storage which stores therein, in relation to the respective content, (i) the content ID, (ii) the content data, and (iii) content-related information containing content-presentation target user conditions for use in identifying a user to be presented with the content; a presentable-content specifying unit operable to specify the content ID of a content whose content-presentation target user conditions meet the user attribute information of a particular user; an authentication-information storage which stores therein, in relation to the respective user ID, (i) the plural sets of authentication information containing the verification codes and the pattern-specifying information used to create the verification codes, and (ii) plural sets of content data for contents specified to meet the user attributes of the user; an authentication-information-request receiver operable to receive, from the client via a network, an authentication-information request containing the user ID of a user who intends to be authenticated; and a content-added-authentication-information transmitter operable to transmit to the client the content-added authentication information containing the plural sets of authentication information and the plural sets of content data stored in relation to the received user ID, (B) the client being equipped with a content presentation-type user authentication program and a processor operable to execute the program to implement the content presentation-type user authentication, wherein the content presentation-type user authentication program is executed by the processor to achieve: a user-ID input unit operable to accept an entry of the user ID from the user; an authentication-information-request transmitter operable to transmit the authentication-information request containing the entered user ID to the authentication-service providing server via the network; a content-added-authentication-information receiver operable to receive, via the network, the content-added authentication information stored for the entered user ID in and transmitted from the authentication-service providing server; an authentication-information storage which stores therein the received content-added authentication information; an authentication-information selector operable to select one set of authentication information contained in the received content-added authentication information; a pattern-element-sequence creator operable to create a pattern element sequence, based on the pattern-specifying information contained in the selected set of authentication information; a pattern display unit operable to create a presentation pattern, based on the created pattern element sequence, and display the created presentation pattern on a screen; a one-time-password input unit operable to accept a one-time password from the user who applied the one-time-password derivation rule to pattern elements displayed in the presentation pattern; a user authentication unit operable to compare the entered one-time password subjected to the one-way function operation, with the verification code contained in the selected set of authentication information, and, when they are identical to each other, to successfully authenticate the user; a content selector operable to select, in accordance with a given rule, a set of content data of a content to be unilaterally presented during the user authentication, from the plural sets of content data contained in the received content-added authentication information; and a content presentation unit operable to present the content of the selected set of content data to the user during the user authentication.