JP4547362B2 - E-mail address registration system and method - Google Patents

Description

  The present invention relates to a system for registering a user's mail address.

  By registering your e-mail address on the sender server, you can know the e-mail magazine system that allows you to receive information periodically by e-mail, and the e-mail coupon system that sends preferential tickets to the registered e-mail address. It has been.

  Conventionally, when a user registers his / her e-mail address for such an e-mail magazine system or e-mail coupon system, (1) access the registration page and enter the e-mail address, or (2) e-mail for registration. It was necessary to send a so-called blank e-mail with no body text to the address.

  For example, a system is known in which an e-mail address of a portable terminal is acquired by a blank e-mail without a body, and a registrant of the acquired e-mail address is preferentially treated by e-mail (see, for example, Patent Document 1).

JP 2001-357290 A

  However, (1) When using the e-mail address registration page to prompt the user to enter an e-mail address, it is difficult to input the user's own e-mail address, so it is difficult to obtain an e-mail address from a user who does not register. There is a problem.

  In particular, in the case of a mobile phone that requires character input using a numeric keypad, the act of registering an e-mail address can be even more troublesome for the user.

  (2) When sending a blank email to a given email address, it is necessary to switch from the state where the given email address is presented on the browser screen to the email communication screen, so an efficient registration process There is a problem that cannot be done.

  In particular, when registering using a mobile phone, in addition to the need to completely switch the display screen, it is also necessary to switch the communication protocol.

  Note that the e-mail address needs to be notified to the content provider that issues the e-mail magazine and the like. The user terminal a subscribes to the e-mail magazine, the content server b that provides the e-mail magazine, and the charging information from the content server b. This is due to the fact that the information recorded by the operator server d that makes a contract for using the mobile phone with the central server c and the user terminal to be aggregated and charges a subscription fee for the mail magazine is different.

  For example, as shown in FIG. 11, the information for identifying the user terminal a includes “terminal ID”, “phone number”, and “mail address”. The user terminal “a” records all “terminal ID”, “telephone number”, and “mail address” for identifying itself. The content server b does not record any of the above information before user registration for content, but can acquire a terminal ID when receiving access from the user terminal a. Although the content server b can acquire the terminal ID from the user terminal, the content server b charges the content usage fee based on the terminal ID. This is because it should not be allowed.

  The center server c records the correspondence between “terminal ID” and “phone number”. This is because the terminal ID of the content user is received from the content server b, the telephone number of this terminal ID is specified, and the provider server performs billing processing based on the specified telephone number. The business server d records user personal information including a “telephone number” and a “mail address” for the user terminal. This is because the telephone number of the content user is received from the center server c, the user associated with the terminal ID is specified, and the accounting process is performed. Therefore, even if the content server b tries to acquire the mail address of the user terminal a, the mail address of the business server d cannot be directly referenced from the viewpoint of maintaining security.

  Depending on the business operator, the accounting process may be outsourced, and the outsourcer may be the same as the operator of the center server c. In this case, it is conceivable to adopt the following configuration.

  In the center server c, after receiving the content user's terminal ID from the content server b, the telephone number of this terminal ID is specified, the billing process for each content user is performed, and the provider server performs billing processing. Notify billing information. In addition, the business server d receives billing information from the center server and performs billing processing for each content user.

  Even when such a configuration is adopted, the content server b cannot directly refer to the mail address of the user terminal a recorded in the provider server d as described above.

  The present invention has been made to solve the above-described problems, and while maintaining security, does not make the user feel bothered about registering an e-mail address, and efficiently performs an e-mail address. The purpose is to provide an e-mail address registration system that can perform the registration process.

(1) A mail address registration system according to the present invention includes: (a) a user terminal possessed by a user who desires registration of his / her mail address, wherein the user terminal stores a terminal ID; and (b) the user terminal A content server provided so as to be able to communicate with the content server, and (c) a center server provided so as to be able to communicate with the content server, and having a center server recording unit that records a terminal ID and a telephone number in association with each user terminal, (d) a provider server that is provided so as to be communicable with the content server and the center server and has a provider server recording unit that records a telephone number, an email address, and a password in association with each user terminal. E-mail address registration system,
(a) the user terminal includes: (a1) password input means for accepting input of a password from the user; (a3) password encryption means for encrypting the input password to generate an encrypted password; and (a4 A transmission means for transmitting the generated encrypted password together with a terminal ID to the content server, and (b) the content server receives (b2) transmission from the user terminal, and the terminal of the user terminal Email address request means for requesting an email address for the user terminal by transmitting an ID and an encrypted password to the center server, and (c) the center server includes (c2) the received terminal ID Based on the center server recording unit based on the telephone number identification means for identifying the telephone number corresponding to the terminal ID, and (c3) the identified power supply. A mail address request means for requesting a mail address for the user terminal by transmitting a number and an encrypted password from the content server to the provider server, and (d) the provider server includes (d3 ) Encrypted password decryption means for decrypting the encrypted password transmitted from the center server, and (d4) whether the received telephone number and the decrypted password in the decryption means are recorded in the provider server recording unit And (d5) a mail for acquiring a mail address recorded in the provider server recording unit in association with the telephone number and the password when authentication is possible in the authentication means. Address acquisition means; and (d6) a mail that encrypts the acquired mail address to generate an encrypted mail address. With an address encryption means, and transmission means for transmitting (d7) an encrypted e-mail address that the generated, the content server sends the encrypted password to the center server, the content server, (b3) business server By decrypting the encrypted mail address received from, the mail address related to the user terminal is obtained, and (b4) the mail address is recorded in association with the terminal ID given from the user terminal .

  Therefore, the user can notify the content server of the e-mail address recorded in the provider server simply by inputting the password. That is, as shown in FIG. 11, even if the information recorded in the user terminal a, the content server b, the center server c, and the operator server d are different from each other, just by entering the password from the user terminal a, E-mail address can be registered safely and easily.

  Thereby, it is possible to eliminate the troublesomeness of the user to input the mail address using the mail address registration page, and it is possible to promote the user registration of the mail magazine or the like. Moreover, since it is not necessary to switch the browser screen and the mail communication screen as in the case of registering by sending a blank email to the user, the system load can be suppressed and efficient registration processing can be performed.

(2) In the e-mail address registration system according to the present invention, (b) a content server provided so as to be able to communicate with a user terminal possessed by a user who wants to register his / her e-mail address, storing a terminal ID; c) a center server provided so as to be able to communicate with the content server and having a terminal ID and a telephone number recorded in association with each user terminal; and (d) communicating with the content server and the center server. An email address registration system provided with an operator server having an operator server recording unit provided for each user terminal in association with a telephone number, an email address, and a password, and (b) The content server (b2) receives the terminal ID and encrypted password from the user terminal. (C) the center server includes (c2) the center server recording unit based on the received terminal ID, and a means for transmitting the terminal ID of the user terminal and the encrypted password to the center server. A telephone number identifying means for identifying the telephone number corresponding to the terminal ID, and (c3) a transmitting means for transmitting the identified telephone number and the encrypted password from the content server to the provider server, (d) the operator server includes: (d3) encrypted password decryption means for decrypting the encrypted password transmitted from the center server; and (d4) the received telephone number and the password decrypted by the decryption means are the provider Authentication means for performing authentication based on whether or not the information is recorded in the server recording unit, and (d5) if the authentication means can authenticate, the telephone A mail address acquiring means for acquiring a mail address recorded in the provider server recording unit in association with the number and the password, and (d6) a mail address for encrypting the acquired mail address to generate an encrypted mail address. and encryption means, the encrypted e-mail address that the generated (d7), and transmission means for transmitting the content server, which sends the encrypted password to the center server, the content server, from (b3) business server The received email address is decrypted by decrypting the received encrypted email address, and (b4) the email address is recorded in association with the terminal ID given from the user terminal .
Therefore, for each user terminal, an existing database system called a center server that records a terminal ID and a telephone number in association with each other and a business server that records a telephone number, an e-mail address, and a password in association with each user terminal. The content server can be notified of the mail address of the user while ensuring confidentiality. This eliminates the need for the user to notify the e-mail address.

(3) A mail address registration system according to the present invention is a content server provided for communication with a user terminal owned by a user who (b) stores a terminal ID and desires to register his / her mail address, For each user terminal, a content server connected so as to be communicable with an operator server that records a telephone number, an e-mail address, and a password in association with each other, and (c) provided for communication with the content server. A center server having a center server recording unit that records terminal IDs and telephone numbers in association with each other, and includes a center server communicably connected to the provider server, and (b) the content server includes ( b2) Upon receiving the terminal ID and encryption password of the terminal from the user terminal, Means for transmitting a terminal ID and an encrypted password to the center server, (c) the center server (c2) refers to the center server recording unit based on the received terminal ID, and corresponds to the terminal ID A telephone number specifying means for specifying a telephone number to be transmitted; and (c3) a transmission means for transmitting the specified telephone number and the encrypted password from the content server to the provider server, and b) encrypting the information to the center server. content server that sent the password, b3) on the basis of in front article's server in encrypted password transmitted from said center server receives the authenticated result generated encrypted mail address, the received encrypted electronic mail by decoding the address, to retrieve an email address related to the user terminal, before the (b4) the mail address In association with the terminal ID given from the user terminal to record.
Therefore, for each user terminal, an existing database system called a center server that records a terminal ID and a telephone number in association with each other and a business server that records a telephone number, an e-mail address, and a password in association with each user terminal. The content server can be notified of the mail address of the user while ensuring confidentiality. This eliminates the need for the user to notify the e-mail address.

(4) In the e-mail address registration system according to the present invention, (c) a center server provided so as to be communicable with the content server and having a center server recording unit that records a terminal ID and a telephone number in association with each user terminal And (d) an operator server having an operator server recording unit that is provided so as to be able to communicate with the content server and the center server and that records a telephone number, an e-mail address, and a password in association with each user terminal. (C) when the center server receives the terminal ID and the encrypted password of the user terminal requesting the mail address from the content server, the center server refers to the center server recording unit based on the received terminal ID, and the terminal A telephone number specifying means for specifying the telephone number corresponding to the ID, and (c3) special Transmitting means for transmitting the telephone number and the encrypted password from the content server to the provider server, (d) the provider server (d3) decrypting the encrypted password transmitted from the center server (D4) an authentication means for performing authentication based on whether or not the received telephone number and the password decrypted in the decryption means are recorded in the provider server recording unit; An email address acquisition means for acquiring an email address recorded in the provider server recording unit in association with the telephone number and the password when authentication is successful, and (d6) the acquired email address a mail address encryption means for generating encrypted mail address by encrypting the encrypted email address the product (d7), before Transmission means for transmitting to the content server that has transmitted the encrypted password to the center server.
Therefore, for each user terminal, an existing database system called a center server that records a terminal ID and a telephone number in association with each other and a business server that records a telephone number, an e-mail address, and a password in association with each user terminal. The content server can be notified of the mail address of the user while ensuring confidentiality. This eliminates the need for the user to notify the e-mail address.

(5) In the e-mail address registration method according to the present invention, (a) a user terminal possessed by a user who wishes to register his / her e-mail address and storing a terminal ID; (b) the user terminal (C) a center server that is provided so as to be communicable with the content server and has a center server recording unit that records a terminal ID and a telephone number in association with each user terminal; ) A mail address registration method by a business server having a business server recording unit that is provided so as to be able to communicate with the content server and the center server and records a telephone number, a mail address, and a password associated with each user terminal. (A) when the user terminal is given a password by the user, The password is encrypted to generate an encrypted password and transmitted to the content server together with the terminal ID. (B) The content server receives the transmission from the user terminal, and encrypts the terminal ID and the encryption of the user terminal. (C) the center server refers to the center server recording unit based on the received terminal ID, identifies the telephone number corresponding to the terminal ID, and identifies the telephone (D) the provider server decrypts the encrypted password transmitted from the center server, and the telephone provided from the center server. If the number and the decrypted password are recorded in the provider server recording unit, the telephone Get the email address recorded on the carrier server recording unit in association with the number and the password, the email address is encrypted, transmitted to the center content server that has transmitted the encrypted password to the server, the content The server decrypts the encrypted mail address received from the business server and records it as a mail address corresponding to the terminal ID given from the user terminal .
Therefore, for each user terminal, an existing database system called a center server that records a terminal ID and a telephone number in association with each other and a business server that records a telephone number, an e-mail address, and a password in association with each user terminal. The content server can be notified of the mail address of the user while ensuring confidentiality. This eliminates the need for the user to notify the e-mail address.

[Correspondence with embodiment]
(a1) The password input means for receiving the password input from the user corresponds to the functions of steps S603 to S607 shown in FIG. 6 in the embodiment. (a2) The encrypted information acquisition unit that requests and acquires the encryption information of the provider server corresponds to the function of step S609 shown in FIG. 6 in the embodiment. (a3) In the embodiment, the function of the step S611 shown in FIG. 6 corresponds to the password encryption unit that generates the encrypted password by encrypting the password input by the input unit. (a4) The transmission unit that transmits the encrypted password generated by the encryption unit to the content server together with the terminal ID corresponds to the function of step S613 illustrated in FIG. 6 in the embodiment.

  (b1) Encrypted information information notifying means for receiving encrypted information from a provider server in response to a request for encrypted information from the user terminal and notifying the user terminal of the encrypted information is shown in FIG. 6 in the embodiment. The functions of steps S623 to S625 correspond to this. (b2) In response to the transmission from the user terminal, the terminal ID and the encrypted password of the user terminal are transmitted to the center server, and the mail address request means for requesting the mail address of the user terminal is in the embodiment. This corresponds to the functions of steps S6627 to S629 shown in FIG. (b3) In the embodiment, the function of acquiring the mail address related to the user terminal by decrypting the encrypted mail address received from the provider server corresponds to the function of step S631 shown in FIG. (b4) The process of associating and recording the mail address and the terminal ID corresponds to the function of step S633 shown in FIG. 7 in the embodiment.

  (c1) The recording unit that records the terminal ID and the telephone number associated with the user terminal in association with each other corresponds to the telephone number database 60 shown in FIG. 7 in the embodiment. (c2) The telephone number specifying means for receiving the request for the mail address from the content server, referring to the recording unit based on the received terminal ID, and specifying the telephone number related to the user terminal is shown in FIG. The function of step S641 shown in FIG. (c3) The mail address request means for transmitting the identified telephone number and the encrypted password from the content server to the business server and requesting the mail address for the user terminal is the step shown in FIG. 7 in the embodiment. This corresponds to the function of S643.

  (d1) The encrypted information notification means for receiving the encrypted information request from the content server, acquiring the encrypted information and notifying the content server is the function of step S661 shown in FIG. It corresponds to. (d2) The recording unit that records the telephone number, mail address, and password associated with the user terminal in association with each other corresponds to the mail address database 62 shown in FIG. 7 in the embodiment. (d3) In the embodiment, the function of step S663 shown in FIG. 7 corresponds to the encrypted password decrypting means for decrypting the received encrypted password in response to the mail address request from the center server. (d4) The authentication unit that performs authentication based on whether the received telephone number and the password decrypted by the decryption unit are recorded in the recording unit has the functions of steps S665 to S667 shown in FIG. This is the case. (d5) When the authentication unit can authenticate, the mail address acquisition unit that acquires the mail address recorded in the recording unit in association with the telephone number and the password is step S669 shown in FIG. 7 in the embodiment. This function corresponds to this. (d6) In the embodiment, the function of step S671 shown in FIG. 7 corresponds to the mail address encryption means for generating the encrypted mail address by encrypting the mail address acquired by the mail address acquisition means. (d7) In the embodiment, the function of the step S673 shown in FIG. 7 corresponds to the transmission means for transmitting the encrypted mail address generated by the mail address encryption means to the content server together with the terminal ID.

  In the present invention, the “means” is a concept including a CPU function realized by a program. Here, the “program” is a concept including not only a program that can be directly executed by the CPU but also a program in a source format, a compressed program, an encrypted program, and the like.

1. First embodiment 1-1. Functional Block Diagram FIG. 10 shows an example of the system configuration of a mail address registration system according to an embodiment of the present invention. In this system configuration diagram, a user terminal a, a content server b, a center server c, and a provider server d are connected via a network 1 such as the Internet, and can communicate with each other.

  The user terminal a is a mobile phone owned by a user who wishes to register his / her mail address in the content server. The content server b is a computer device possessed by a content provider, and registers a mail address that is a target of a mail magazine or mail coupon, and transmits a mail magazine or the like to the registered mail address. The center server c is a computer device owned by a data center company that manages the content server b, and collects billing information related to content usage such as a mail magazine. The carrier server d is a computer device possessed by a business operator (for example, a telecommunications carrier) that conducts a communication business related to the mobile phone that is the user terminal a based on a contract with the user, and has contents based on billing information from the center server c. The user is charged a usage fee.

  In FIG. 10, only one user terminal a, one content server b, one center server c, and one business server d are shown, but one or more of each may be provided.

1-2. Outline of Process The outline of the process of the mail address registration system according to the present invention is shown below. FIG. 1 shows an example of a functional block diagram of a mail address registration system according to an embodiment of the present invention.

  In the user terminal a, the password input means a1 displays a password input screen for registering the user's own e-mail address in the e-mail magazine or e-mail coupon system by connecting to the content server b. When the user inputs the password, the time information acquisition unit a2 acquires the time information from the provider server via the content server. The password encryption unit a3 encrypts the password using the acquired time information and generates an encrypted password. The transmission unit a11 transmits the encrypted password to the content server b.

  In the content server b, the time information notifying unit b1 acquires time information from the provider server and notifies the user terminal. The mail address request means b2 requests the mail address for the user terminal with the terminal ID by transmitting the encrypted password and the terminal ID acquired from the user terminal to the center server c. The mail address decrypting means b3 acquires the mail address related to the user terminal by decrypting the encrypted mail address acquired from the business server d. The mail address registration unit b4 registers the acquired mail address in association with the terminal ID.

  In the center server c, the recording unit c1 records a telephone number database in which terminal IDs are associated with telephone numbers. The telephone number specifying means c2 refers to the telephone number database based on the terminal ID acquired from the content server b, and specifies the telephone number corresponding to this terminal ID. The mail address request means c3 requests the mail address for the user terminal of the telephone number by transmitting the identified telephone number and the encrypted password to the business server d.

  In the business server d, the time information notifying unit d1 receives the request from the content server b, acquires the time information based on the internal clock, and transmits it to the content server b. The recording unit d2 records a mail address database in which a telephone number and a mail address are associated with each other. The encrypted password decryption means d3 decrypts the encrypted password acquired from the center server c using the time information transmitted earlier, and acquires the password input at the user terminal. The authentication unit d4 performs authentication by referring to the mail address database based on the acquired password and the telephone number acquired from the center server c. If a password and a telephone number exist, the mail address recorded in association with these is acquired. The mail address encryption unit d6 encrypts the acquired mail address to generate an encrypted mail address. The transmission unit d7 transmits the generated encrypted mail address to the content server b.

1-3. Hardware configuration 1-3-1. User Terminal FIG. 2 shows an example of a hardware configuration in which the user terminal “a” shown in FIG. 1 is realized using a CPU. The user terminal a includes a display 201, a CPU 203, a numeric keypad 205, a memory 207, and a communication circuit 209.

  The memory 207 stores a terminal ID 2070 for identifying a user terminal and a password input program 2071 acquired by downloading. The password input program 2071 prompts the user to input a password, acquires server time information from the operator server d, encrypts the input password using the server time information, and converts the encrypted password into the content server b. Process to send to.

  The input unit a1, the time information acquisition unit a2, the password encryption unit a3, and the transmission unit a4 that constitute the user terminal a shown in FIG. 1 are realized by the functions of the password input program 2071.

1-3-2. Content Server FIG. 3 shows an example of a hardware configuration in which the content server b shown in FIG. 1 is realized using a CPU. The content server b includes a display 301, a CPU 303, a memory 305, a keyboard / mouse 307, a hard disk 309, a CD-ROM drive 311 and a communication circuit 315.

  A mail address acquisition response program 3091 is recorded in the hard disk 309. This mail address acquisition response program 3091 transmits the server time information acquired from the business server d to the user terminal a, makes a mail address request to the center server c with the encrypted password and the terminal ID, The encrypted mail address acquired from the server d is decrypted, and various processes for registering the decrypted mail address for the mail magazine are performed.

  This program is installed by reading the program recorded on the CD-ROM 312 via the CD-ROM drive 311. The installation may be performed using a program downloaded from a network such as the Internet.

  The time information notification unit b1, the mail address request unit b2, the mail address decryption unit b3, and the mail address registration unit b4 constituting the content server b shown in FIG. 1 are realized by each function of the mail address acquisition response program 3091. .

1-3-3. Center Server FIG. 4 shows an example of a hardware configuration in which the center server c shown in FIG. 1 is realized using a CPU. The center server c includes a display 401, a CPU 403, a memory 405, a keyboard / mouse 407, a hard disk 409, a CD-ROM drive 411, and a communication circuit 415.

  A mail address request program 4091 is recorded on the hard disk 409. This mail address request program 4091 searches the telephone number database based on the terminal ID received from the content server b to acquire the telephone number, and the provider server receives the acquired telephone number and the encrypted password received from the content server. The process of sending to d and requesting the mail address is performed.

  This program is installed by reading the program recorded on the CD-ROM 412 via the CD-ROM drive 411. The installation may be performed using a program downloaded from a network such as the Internet.

  The recording unit c1, the telephone number specifying unit c2, and the mail address requesting unit c3 constituting the center server c shown in FIG. 1 are realized by the functions of the mail address requesting program 4091.

1-3-4. Business Server FIG. 5 shows an example of a hardware configuration in which the business server d shown in FIG. 1 is realized using a CPU. The provider server d includes a display 501, a CPU 503, a memory 505, a keyboard / mouse 507, a hard disk 509, a CD-ROM drive 511, and a communication circuit 515.

  A password authentication program 5091 is recorded on the hard disk 509. This password authentication program 5091 transmits the time information in response to the time information request received from the content server b, decrypts the encrypted password received from the center server c, and obtains the password input at the user terminal a. Based on the password and the telephone number received from the content server b, various types for searching the mail address database to acquire the mail address, encrypting the acquired mail address, and transmitting the encrypted mail address to the content server Process.

  This program is installed by reading the program recorded on the CD-ROM 512 via the CD-ROM drive 511. The installation may be performed using a program downloaded from a network such as the Internet.

  Time information notification means d1, recording unit d2, encrypted password decryption means d3, authentication means d4, mail address acquisition means d5, mail address encryption means d6, and transmission means d7 which constitute the business server d shown in FIG. Is realized by each function by the password authentication program 5091.

1-4. Processing Details Processing details in the present embodiment will be described with reference to FIGS. In this embodiment, when the user of the user terminal wishes to register the mail magazine distributed by the content server b, the mail address set in the user terminal when the user inputs a predetermined password to the user terminal An example in which is registered in the content server will be described.

1-4-1. Password Input FIGS. 6 and 7 are flowcharts in the case where the user registers his / her mail address in the content server b by the user entering a predetermined password in the user terminal a in the mail address registration system of the present embodiment. is there.

  When the user operates the numeric keypad 205, the CPU 203 of the user terminal a starts a browser, accesses the content server b via the communication circuit 209, and displays a mail magazine registration screen on the display 201 of the user terminal a.

  FIG. 9 shows an example of the mail magazine registration screen 901. The e-mail magazine registration screen displays that the e-mail magazine provided by the content server b selects whether or not to register the e-mail address for the user terminal a. When the user operates the numeric keypad 205 and presses the “Register” button 91 (step S601, FIG. 6), the CPU 303 of the content server b transmits a password input program 2071 (step S621). For example, the password input program 2071 is a download execution type program created in a program language such as BREW (trademark) or Java (trademark), and a download screen is displayed during downloading from the content server b to the user terminal a. 903 (FIG. 9) is displayed on the display 201.

  When the CPU 203 of the user terminal a downloads the password input program 2071 to the memory 207, it is automatically executed thereafter (step S603). By executing the password input program 2071, the CPU 203 displays a password input screen 905 on the display 201 (step S605).

  The password input screen 905 displays that the content server c is allowed to notify the mail address of the user terminal a by inputting a predetermined password. It is also displayed that the input password is encrypted and transmitted.

  The user at the user terminal a inputs a predetermined password in the password input field 93 of the password input screen 905 and presses an “OK” button 95. For example, the password “1234” is entered in the password entry field 93. The password may be a password that is managed in advance in association with the user in the operator server d. For example, in the case of an au (trademark) mobile phone, “EZ password” corresponds to this.

1-4-2. Acquisition of time information When the password is input (step S607), the CPU 203 of the user terminal a requests time information from the content server b (step S611). Here, the time information is information on which a key used for encrypting or decrypting a password is generated between the user terminal a and the operator server d.

  Upon receiving the time information request from the user terminal a, the CPU 303 of the content server b activates the mail address acquisition program 3091 and requests the time information from the business server d (step S623).

  In response to the time information request from the content server b, the CPU 503 of the business server d starts the password authentication program 5091 (step S661). The CPU 503 of the business server d creates server time information with reference to an internal clock. For example, this server time information is held on the memory 505 of the business server d until the mail address registration process for one user is completed.

  The CPU 503 of the business server d transmits the created server time information to the content server b (step S661). In response to the transmission, the CPU 303 of the content server b further transmits server time information to the user terminal a (step S625).

1-4-3. Generation of Encrypted Password When the server time information is transmitted, the CPU 203 of the user terminal a encrypts the input password and generates an encrypted password (step S611). Encryption is performed by a predetermined encryption algorithm using server time information as an encryption key. For example, the input password “1234” is encrypted using the server time information “20066088081” as an encryption key by a predetermined encryption algorithm. Since this server time information represents the current time in minutes, by configuring so that the same current time is not used as the server time information, impersonation of the encrypted password by a third party can be prevented. it can. For example, the provider server d may be configured to hold the server time information held in the memory 505 for one minute or longer and not issue the same server time information.

  When generating the encrypted password, the CPU 203 of the user terminal a transmits it to the content server b (step S613).

1-4-4. Acquisition of terminal ID At the same time that the encrypted password is transmitted, the CPU 303 of the content server b acquires the terminal ID from the user terminal a (step S627). For example, in the case of an au (trademark) mobile phone, an EZ number (subscriber ID) can be acquired as a terminal ID by an environment variable (HTTP_X_UP_SUBNO).

  When the terminal ID is acquired, the CPU 303 of the content server b transmits the acquired terminal ID and the encrypted password received from the user terminal a to the center server c (step S629).

1-4-5. Identification of telephone number Upon receiving the terminal ID and the encrypted password, the CPU 403 of the center server c searches the telephone number database 60 based on the terminal ID and identifies the telephone number related to the user terminal a (step S641). . FIG. 8A shows an example of the telephone number database 60. In this database, a terminal ID 801 and a telephone number 803 are recorded in association with each other. For example, when the terminal ID is “TM01”, the telephone number of the user terminal “a” is specified as “090-6123-0001”.

  The CPU 403 of the center server c notifies the mail address registration request from the content server b by transmitting the identified telephone number and the encrypted password received from the content server b to the business server d (step S643).

1-4-6. Password Authentication Processing The CPU 503 of the business operator server d decrypts the encrypted password received from the center server c (step S663). Here, the decryption process of the encrypted password is performed by a predetermined decryption algorithm in step S661 using the server time information held in the memory 505 of the operator server d as a decryption key. For example, if “20066088081” is held as the server time information, the encrypted password “1234” is acquired in step S611 by decrypting the encrypted password.

  The CPU 503 of the business server d searches the mail address database 62 based on the decrypted password and the telephone number received from the center server c, and determines whether or not a corresponding combination exists (steps S665 to 667). . FIG. 8B shows an example of the mail address database 62. In this database, a telephone number 811, a password 813, and a mail address 815 are recorded in association with each other.

  If there is a combination of a password and a telephone number in the mail address database 62, the CPU 503 of the business server d acquires a mail address recorded in association with these (step S669). For example, in the case of the combination of the telephone number “090-6123-0001” and the password “1234”, the mail address “ABC0101@ezweb.ne.jp” is acquired based on the record 80. If the combination of password and telephone number does not exist, the content server b is notified by error processing that the password and telephone number do not exist (step S668).

  The CPU 503 of the business operator server d performs encryption to transmit the mail address acquired in step S669 to the content server b (step S671). For example, this encryption may be performed using the public key of the content server b.

  The CPU 503 of the business server d transmits the encrypted mail address generated by the encryption to the content server b (Step S673).

1-4-7. Obtaining / Registering Mail Address Upon receiving the encrypted mail address from the operator server d, the CPU 303 of the content server b decrypts it and obtains the mail address (step S631). For example, when the encrypted mail address is encrypted with the public key of the content server b, the mail address “ABC0101@ezweb.ne.jp” may be obtained by decrypting with the private key of the content server b. it can.

  The CPU 303 of the content server b registers the acquired mail address as a mail magazine distribution destination (step S633). For example, “ABC0101@ezweb.ne.jp” is registered in the database as a distribution destination of the user ID “TM01”.

  When registration is completed, the CPU 303 of the content server b notifies the user terminal a (step S635), and in response to this, the user terminal a displays a registration completion screen on the display 201 (step S615). For example, a registration completion screen 907 shown in FIG. 9 is displayed.

1-5. Summary As described above, according to the present invention, the user can notify the content server b of the mail address recorded in the business server d by simply inputting the predetermined password to the user terminal a. Thereby, it is possible to eliminate the troublesomeness of the user to input the mail address using the mail address registration page, and it is possible to promote the user registration of the mail magazine or the like.

  Moreover, since it is not necessary to switch the browser screen and the mail communication screen as in the case of registering by sending a blank email to the user, the system load can be suppressed and efficient registration processing can be performed.

  Furthermore, since the password entered by the user is transmitted after being encrypted, security can be maintained even when the content server b is used. In this embodiment, the server time information acquired from the operator server at the time of encryption in the user terminal is used as the encryption key, so that impersonation by a third party is prevented and a more reliable system is constructed. can do.

  Furthermore, even if the information recorded in the user terminal a, the content server b, the center server c, and the provider server d is different, it is safe and simple while maintaining security based on such a configuration. An e-mail address registration system can be configured.

2. Other Embodiments In the above embodiment, the system is configured using the center server c possessed by the company that manages the content server. However, as shown in FIG. 1a, the function of the center server c is configured as the function of the operator server. May be. In this case, after the telephone number specifying means c2 is executed, the encrypted password decrypting means d3 is executed.

  In the above embodiment, the content server b performs user registration for the mail magazine, but may be used for user registration for mail coupons. Further, user information other than the mail address may be acquired and registered.

  In the above embodiment, the user password is encrypted using the server time information acquired from the provider server as an encryption key. However, encryption may be performed using a code other than the server time information. For example, a character string generated using a random number may be used.

  Further, if the encrypted password encrypted in the user terminal can be decrypted in the provider server, the user terminal does not need to acquire encrypted information such as server time information from the provider server. For example, when the time of the user terminal and the business server is synchronized, the server time information of the user terminal is clearly transmitted and the encryption password is transmitted, and the business server is based on the specified server time information. Decoding may be performed. In this way, by configuring encryption and decryption that can be used only once, even if the encrypted password is transmitted via a third party, the third party can receive the encrypted It is possible to prevent an e-mail address from being illegally obtained from a business server by reusing a password.

  In the above embodiment, the encryption is performed using the server time information as an encryption key. However, an encryption key to be used may be generated based on the server time information. In addition, when a code acquired from the business server is used instead of the server time information, the encryption key or the encryption method may be determined based on this code.

  In the above embodiment, the password is encrypted using a predetermined encryption algorithm using the server time information as an encryption key. However, a plurality of encryption algorithms are prepared, and the user terminal performs the encryption algorithm. The provider server may transmit the encryption password with the identification of the server specified, and the provider server may perform decryption based on the decryption algorithm corresponding to the specified encryption algorithm.

  In the above embodiment, in order to realize each function shown in FIG. 1, this is realized by software using a CPU. However, some or all of them may be realized by hardware such as a logic circuit. In addition, you may make it make an operating system (OS) process a part of program further.

It is a functional block diagram of a mail address registration system. It is a functional block diagram of a mail address registration system. It is a figure which shows the hardware constitutions of a user terminal. It is a figure which shows the hardware constitutions of a content server. It is a figure which shows the hardware constitutions of a center server. It is a figure which shows the hardware constitutions of a provider server. It is a figure which shows the example of a mail address registration system processing flow. It is a figure which shows the example of a mail address registration system processing flow. It is a figure which shows the example of a telephone number database and a mail address database. It is a figure which shows the example of the screen in a user terminal. 1 is a system configuration diagram of a mail address registration system. It is a figure which shows the information which a user terminal, a content server, a center server, and a provider server record.

Explanation of symbols

a: User terminal b: Content server c: Center server d: Provider server

Claims (5)

(a) a user terminal possessed by a user who wishes to register his / her e-mail address, and a user terminal that stores a terminal ID;
(b) a content server provided to be able to communicate with the user terminal;
(c) a center server provided so as to be communicable with the content server and having a center server recording unit that records a terminal ID and a telephone number in association with each user terminal;
(d) an operator server having an operator server recording unit that is provided so as to be able to communicate with the content server and the center server, and that records a telephone number, an email address, and a password in association with each user terminal;
An e-mail address registration system with
(a) The user terminal
(a1) password input means for receiving password input from the user;
(a3) password encryption means for generating an encrypted password by encrypting the input password;
(a4) comprising a transmission means for transmitting the generated encrypted password together with a terminal ID to the content server,
(b) The content server
(b2) receiving a transmission from the user terminal, and transmitting a terminal ID and an encrypted password of the user terminal to the center server, thereby providing a mail address requesting unit that requests a mail address related to the user terminal. ,
(c) The center server
(c2) referring to the center server recording unit based on the received terminal ID, telephone number specifying means for specifying a telephone number corresponding to the terminal ID;
(c3) email address requesting means for requesting an email address for the user terminal by transmitting the identified telephone number and the encrypted password from the content server to the provider server;
(d) The provider server
(d3) an encrypted password decrypting means for decrypting the encrypted password transmitted from the center server;
(d4) authentication means for performing authentication based on whether the received telephone number and the password decrypted in the decryption means are recorded in the provider server recording unit;
(d5) If authentication can be performed in the authentication means, an email address acquisition means for acquiring an email address recorded in the provider server recording unit in association with the telephone number and the password;
(d6) Email address encryption means for encrypting the acquired email address to generate an encrypted email address;
(d7) the encrypted mail address said generating, and transmitting means for transmitting the content server that has transmitted the encrypted password to the center server,
The content server
(b3) By decrypting the encrypted email address received from the provider server, the email address for the user terminal is obtained,
(b4) recording the email address in association with the terminal ID given from the user terminal ;
E-mail address registration system characterized by (b) a content server that stores a terminal ID and is provided so as to be able to communicate with a user terminal possessed by a user who wishes to register his / her mail address;
(c) a center server provided so as to be communicable with the content server and having a center server recording unit that records a terminal ID and a telephone number in association with each user terminal;
(d) an operator server having an operator server recording unit provided so as to be communicable with the content server and the center server, and for each user terminal, in which a telephone number, an email address, and a password are recorded in association with each other;
An e-mail address registration system with
(b) The content server
(b2) provided with means for transmitting the terminal ID and encryption password of the user terminal to the center server upon receiving the terminal ID and encryption password of the terminal from the user terminal;
(c) The center server
(c2) referring to the center server recording unit based on the received terminal ID, telephone number specifying means for specifying a telephone number corresponding to the terminal ID;
(c3) comprising a transmitting means for transmitting the identified telephone number and the encrypted password from the content server to the provider server,
(d) The provider server
(d3) an encrypted password decrypting means for decrypting the encrypted password transmitted from the center server;
(d4) authentication means for performing authentication based on whether the received telephone number and the password decrypted in the decryption means are recorded in the provider server recording unit;
(d5) If authentication is possible in the authentication means, an email address acquisition means for acquiring an email address recorded in the business server recording unit in association with the telephone number and the password;
(d6) Email address encryption means for encrypting the acquired email address to generate an encrypted email address;
(d7) the encrypted mail address said generating, and transmitting means for transmitting the content server that has transmitted the encrypted password to the center server,
The content server
(b3) By decrypting the encrypted email address received from the provider server, the email address for the user terminal is obtained,
(b4) recording the email address in association with the terminal ID given from the user terminal ;
E-mail address registration system characterized by (b) A content server that stores a terminal ID and is communicable with a user terminal possessed by a user who wishes to register his / her mail address, and for each user terminal, a telephone number, a mail address and a password are stored. A content server that is communicably connected to a provider server that records each in association;
(c) A center server that is provided so as to be communicable with the content server and has a center server recording unit that records a terminal ID and a telephone number in association with each user terminal, and is communicably connected to the provider server. A center server,
An e-mail address registration system with
(b) The content server
(b2) provided with means for transmitting the terminal ID and encryption password of the user terminal to the center server upon receiving the terminal ID and encryption password of the terminal from the user terminal;
(c) The center server
(c2) referring to the center server recording unit based on the received terminal ID, telephone number specifying means for specifying a telephone number corresponding to the terminal ID;
(c3) comprising a transmitting means for transmitting the identified telephone number and the encrypted password from the content server to the provider server,
b) The content server that sent the encrypted password to the center server
b3) Upon receiving the encrypted email address generated as a result of authentication based on the encrypted password transmitted from the center server at the provider server, the received encrypted email address is decrypted, so that the user Get the email address for your device,
(b4) recording the email address in association with the terminal ID given from the user terminal ;
E-mail address registration system characterized by (c) a center server provided so as to be communicable with the content server, and having a center server recording unit that records a terminal ID and a telephone number in association with each user terminal;
(d) an operator server having an operator server recording unit provided so as to be communicable with the content server and the center server, and for each user terminal, in which a telephone number, an email address, and a password are recorded in association with each other;
An e-mail address registration system with
(c) The center server
When a terminal ID and an encrypted password of a user terminal requesting an e-mail address are received from the content server, a telephone that refers to the center server recording unit based on the received terminal ID and identifies a telephone number corresponding to the terminal ID Number identification means;
(c3) comprising a transmitting means for transmitting the identified telephone number and the encrypted password from the content server to the provider server,
(d) The provider server
(d3) an encrypted password decrypting means for decrypting the encrypted password transmitted from the center server;
(d4) authentication means for performing authentication based on whether the received telephone number and the password decrypted in the decryption means are recorded in the provider server recording unit;
(d5) If authentication is possible in the authentication means, an email address acquisition means for acquiring an email address recorded in the business server recording unit in association with the telephone number and the password;
(d6) Email address encryption means for encrypting the acquired email address to generate an encrypted email address;
(d7) the encrypted mail address the generated, and a transmitting means for transmitting the content server that has transmitted the encrypted password to the center server,
E-mail address registration system characterized by (a) a user terminal possessed by a user who wishes to register his / her e-mail address, and a user terminal that stores a terminal ID;
(b) a content server provided to be able to communicate with the user terminal;
(c) a center server that is provided so as to be communicable with the content server and has a center server recording unit that records a terminal ID and a telephone number in association with each user terminal;
(d) an enterprise server having an enterprise server recording unit that is provided so as to be communicable with the content server and the center server, and records a telephone number, an email address, and a password in association with each user terminal;
The email address registration method by
(a) When a password is given from the user, the user terminal generates an encrypted password by encrypting the password, and transmits the encrypted password together with a terminal ID to the content server.
(b) The content server receives transmission from the user terminal, and transmits the terminal ID and encryption password of the user terminal to the center server,
(c) The center server refers to the center server recording unit based on the received terminal ID, identifies the telephone number corresponding to the terminal ID, and encrypts the identified telephone number and the content server. Send the password to the operator server,
(d) The provider server decrypts the encrypted password transmitted from the center server, and the telephone number given from the center server and the decrypted password are recorded in the provider server recording unit the, get the recorded e-mail address to the business server recording unit in association with the telephone number and the password, the e-mail address is encrypted, the content server sends the encrypted password to the center server Send
The content server decrypts the encrypted mail address received from the provider server and records it as a mail address corresponding to the terminal ID given from the user terminal ;
A mail address registration method characterized by

Images