JP7538603B2 - Information processing device, authentication method, and authentication program - Google Patents

Description

The present invention relates to an information processing device, etc.

Initiatives are underway to reduce the burden on the environment using ICT (Information and Communication Technology). One such initiative is a system that digitizes reports that were previously submitted on paper, allowing customers to view the reports by accessing a designated website. In the following explanation, digitized reports will be referred to as "report data."

In addition to the above system, there are prior arts 1 and 2 that send report data to a terminal specified by the customer. In prior art 1, the worker who performed the maintenance work displays the report data on a tablet terminal or the like and presents it to the customer. After the customer checks the contents of the report data, they operate the worker's tablet terminal to input the desired email address and, for example, press a send button. When the send button is pressed, the tablet terminal sends the report data addressed to the email address entered by the customer. The reason why the customer himself enters the email address here is to prevent the worker from being held responsible if an erroneous transmission occurs.

However, with conventional technology 1, there was a risk that the customer would input the wrong email address, and there was also a possibility that a worker would input the email address on the customer's behalf, based on the customer's instructions, etc.

In contrast, in conventional technology 2, the mechanism for the customer to input the email address themselves is the same as in conventional technology 1, but before sending the report data, a test email is sent once to confirm that the email address has not been entered incorrectly, and then the report data is sent, thereby preventing erroneous sending.

JP 2006-243425 A JP 2002-044731 A JP 2007-156522 A

However, the above-mentioned conventional technology has the problem that it is not possible to reduce the burden on users and prevent the erroneous transmission of confidential information.

For example, in conventional technology 2, every time report data is sent, a test email must be sent to check whether the email address is appropriate, which places a burden not only on the customer but also on the workers who support the checking work.

In one aspect, the present invention aims to provide an information processing device, an authentication method, and an authentication program that can reduce the burden on users and prevent erroneous transmission of confidential information.

In the first proposal, the information processing device has a registration unit, an authentication unit, and a transmission unit. When the registration unit receives a password issued by the first terminal device, it registers the password in an authentication table in association with an identification number of confidential information. When the authentication unit receives information including a password and an identification number from the second terminal device, it performs authentication based on the received password and identification number and the authentication table. When authentication by the authentication unit is successful, the transmission unit transmits the confidential information to the second terminal device.

This reduces the burden on users and prevents the accidental sending of confidential information.

FIG. 1 is a diagram illustrating a configuration of a system according to the first embodiment. FIG. 2 is a diagram showing an example of report data displayed on the tablet terminal. FIG. 3 is a diagram illustrating an example of a notification screen according to the first embodiment. FIG. 4 is a functional block diagram illustrating a configuration of the tablet terminal according to the first embodiment. FIG. 5 is a functional block diagram illustrating a configuration of the information processing apparatus according to the first embodiment. FIG. 6 is a diagram illustrating an example of a data structure of the report DB. FIG. 7 is a diagram illustrating an example of a data structure of the authentication table. FIG. 8 is a diagram showing an example of a Web page displayed on a user terminal. FIG. 9 is a flowchart showing an example of a processing procedure of the tablet terminal according to the first embodiment. FIG. 10 is a flowchart illustrating a processing procedure of the user terminal and the information processing device according to the first embodiment. FIG. 11 is a diagram illustrating an example of a notification screen according to the second embodiment. FIG. 12 is a diagram illustrating an example of a hardware configuration of a computer that realizes the same functions as the information processing apparatus of the embodiment.

Below, examples of the information processing device, authentication method, and authentication program disclosed in the present application are described in detail with reference to the drawings. Note that the present invention is not limited to these examples.

FIG. 1 is a diagram showing the configuration of a system according to the first embodiment. As shown in FIG. 1, the system includes a tablet terminal 10, a user terminal 20, and an information processing device 100. The tablet terminal 10 and the information processing device 100 are connected to each other via a network 5. The user terminal 20 and the information processing device 100 are connected to each other via the network 5.

The tablet terminal 10 is a terminal device held by a worker performing maintenance work. When the worker completes the maintenance work, he or she operates the tablet terminal 10 to create report data. The tablet terminal 10 also displays information for sending the report data to the user terminal 20.

The user terminal 20 is a terminal device of a user who has requested a worker to perform maintenance work. The user operates the user terminal 20 and sends an email to the information processing device 100 by inputting information displayed on the tablet terminal 10. The user terminal 20 corresponds to a PC (Personal Computing), a notebook PC, a smartphone, etc.

The information processing device 100 holds the report data sent from the tablet terminal 10. When the information processing device 100 receives an email from the user terminal 20, it performs authentication using the information set in the email. When the authentication is successful, the information processing device 100 transmits the report data to the user terminal 20.

Here, the series of processes executed by the tablet terminal 10, the user terminal 20, and the information processing device 100 will be explained, divided into a first phase and a second phase. The first phase corresponds to the processes from generating report data to displaying information for sending the report data to the user terminal 20. The second phase corresponds to the processes from sending an email, performing authentication, and sending the report data.

The "first phase" will be described. The information processing device 100 registers basic data (draft data) of the report data in the report DB (Data Base) 141 in association with a reception number. The reception number is newly issued when a maintenance work request is received, and is information that uniquely identifies the report data. The basic data of the report data includes information such as the details of the defect reported by the user and the location of the maintenance work.

When the maintenance work is completed, the worker operates the tablet terminal 10 to obtain the basic data of the report data from the information processing device 100, and updates the basic data of the report data by inputting the work content, work time, etc., to complete the report data.

After completing the report data, the worker hands the tablet terminal 10 to the user and has the user confirm the contents of the report data. FIG. 2 is a diagram showing an example of report data displayed on the tablet terminal. In the example shown in FIG. 2, the report data is displayed on the touch panel 12 of the tablet terminal 10.

When the user checks the report data on the tablet terminal 10, the user enters an electronic signature on the report data displayed on the tablet terminal 10 and inputs a "passcode" of a predetermined number of digits into the tablet terminal 10. The user may freely set the passcode. For example, the user inputs the passcode in the passcode input area 12b.

Next, when the tablet terminal 10 receives an instruction from the user to the effect that "I would like to receive report data by email," the tablet terminal 10 generates a one-time password. For example, the tablet terminal 10 displays a specific button 12a, and generates a one-time password when the displayed button 12a is pressed.

Here, the tablet terminal 10 generates a notification screen and displays the notification screen. FIG. 3 is a diagram showing an example of a notification screen according to the first embodiment. The notification screen 30 shown in FIG. 3 includes display areas 31A, 31B, and 31C.

Display area 31A displays the "reception email address." The reception email address is the email address of the information processing device 100. Display area 31B displays the "reception number" of the report. Display area 31C displays the "one-time password."

The user refers to the notification screen 30 displayed on the tablet terminal 10 and learns the reception email address, reception number, and one-time password.

When the user wishes to receive report data by email, the tablet terminal 10 notifies the information processing device 100 of "first update information" including the updated report data, the reception number, the one-time password, and the passcode. The information processing device 100 updates the report DB 141 based on the first update information, and registers a set of the reception number, the one-time password, and the passcode in the authentication table 142.

If the user does not wish to receive the report data by email (if the user wishes to view the report data via the Web), the tablet terminal 10 notifies the information processing device 100 of "second update information" including the report data, reception number, and passcode. The information processing device 100 updates the report DB 141 based on the second update information, and registers the reception number and passcode pair in the authentication table 142.

The "second phase" will now be described. In the second phase, the user may send an email to the information processing device 100 to request report data, or may access a web page provided by the information processing device 100 and refer to the report data on the web page.

A case will be described in which report data is requested by sending an email to the information processing device 100. The user operates the user terminal 20 to input the reception email address, reception number, and one-time password previously determined in the first phase, and generate an email. For example, the user sets the reception email address as the "destination" of the email, sets the reception number as the "subject" of the email, and sets the one-time password in the "body" of the email. The user terminal 20 sends the email to the destination (information processing device 100) set in the email. Note that the email address of the user terminal 20, which is the sender of the email, is attached to the email.

When the information processing device 100 receives the email, it performs authentication based on the information set in the email (reception number and one-time password) and the authentication table 142. The information processing device 100 determines that the authentication is successful if the pair of the reception number and one-time password set in the email is registered in the authentication table 142.

If the information processing device 100 determines that the authentication is successful, it retrieves report data corresponding to the reception number from the report DB 141. The information processing device 100 encrypts the report data using a passcode corresponding to the reception number. The encrypted report data is referred to as "encrypted data". The information processing device 100 generates a reply email whose destination is the email address of the user terminal 20 that is the sender of the email. The information processing device 100 attaches the encrypted data to the reply email and sends the reply email to the destination (user terminal 20).

When the user terminal 20 receives the reply email, the user decrypts the encrypted data attached to the reply email by inputting the passcode that the user set in the first phase into the user terminal 20. The user terminal 20 displays the decrypted report data.

On the other hand, if the information processing device 100 determines that the pair of reception number and one-time password set in the email is not registered in the authentication table 142 and authentication has failed, it notifies the user terminal 20 of an error.

Next, a case will be described in which a user accesses a web page provided by the information processing device 100 and refers to report data on the web page. The user operates the user terminal 20 to access the web page of the information processing device 100. The user inputs the reception number and passcode into a specific input form displayed on the web page.

When the information processing device 100 receives the input of the reception number and passcode, it performs authentication based on the authentication table. If the input pair of reception number and passcode is registered in the authentication table 142, the information processing device 100 determines that the authentication is successful.

If the information processing device 100 determines that the authentication is successful, it retrieves the report data corresponding to the reception number from the report DB 141 and displays it on the web page.

On the other hand, if the information processing device 100 determines that the input reception number and passcode pair is not registered in the authentication table 142 and authentication has failed, it displays an error message on the web page.

As described above, according to the system of the first embodiment, the information processing device 100 registers a pair of a one-time password issued in advance and a reception number in the authentication table 142. When the information processing device 100 receives an email requesting report data from the user terminal 20, it performs authentication based on the information set in the email and the authentication table 142. If the authentication is successful, the information processing device 100 returns the report data to the user terminal that sent the email. This reduces the burden on users and workers while preventing the erroneous sending of confidential information such as report data.

Next, an example of the configuration of the tablet terminal 10 shown in FIG. 1 will be described. FIG. 4 is a functional block diagram showing the configuration of the tablet terminal according to the first embodiment. As shown in FIG. 4, the tablet terminal 10 has a communication unit 11, a touch panel 12, a memory unit 13, and a control unit 14.

The communication unit 11 is a processing unit that executes data communication with the information processing device 100 via the network 5. The communication unit 11 corresponds to a communication device such as a NIC (Network Interface Card). The control unit 14, which will be described later, exchanges data with the information processing device 100 via the communication unit 11.

The touch panel 12 is an integrated input device and display device that uses a sensor to detect the position touched by a finger, identifies which display element has been specified, and performs various corresponding operations.

The memory unit 13 has report data 13a. The memory unit 13 corresponds to a semiconductor memory element such as a RAM (Random Access Memory) or a flash memory, or a storage device such as a HDD (Hard Disk Drive).

The report data 13a is electronic report data. The report data 13a is obtained from the information processing device 100 and updated by an operator who operates the touch panel 12.

The control unit 14 has an acquisition unit 14a, a display control unit 14b, a password issuing unit 14c, and a transmission unit 14d. The control unit 14 can be realized by a CPU (Central Processing Unit) or an MPU (Micro Processing Unit). The control unit 14 can also be realized by hardwired logic such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array).

The acquisition unit 14a is a processing unit that acquires report data 13a from the information processing device 100. The acquisition unit 14a stores the acquired report data 13a in the memory unit 13. For example, when a worker knows the reception number in advance and operates the touch panel 12 to input the reception number, the acquisition unit 14a transmits "report request data" with the reception number set to the information processing device 100 and acquires the report data 13a as a response to the report request data.

When the acquisition unit 14a acquires the report data 13a, only basic data is set in the report data 13a.

When the display control unit 14b receives a display request for the report data 13a from a worker operating the touch panel 12, the display control unit 14b displays the report data 13a on the touch panel 12. When the worker finishes the maintenance work, he or she operates the touch panel 12 to input the work content, work time, etc., and the display control unit 14b updates the report data 13a in response to the input.

When the display control unit 14b receives input of an electronic signature from a user operating the touch panel 12, it displays the button 12a and the passcode input area 12b shown in FIG. 2. If the user wishes to send the report data by email, the user enters a passcode in the input area 12b and presses the button 12a.

If the user does not wish to have the report data sent by email (if they wish to view it via the Web), they enter a passcode in input field 12b and press the OK button (not shown).

When the button 12a is pressed, the display control unit 14b generates data for the notification screen 30 described in FIG. 3 and displays it on the touch panel 12. The display control unit 14b sets and displays the reception email address, reception number, and one-time password on the notification screen 30.

For example, the reception email address data is assumed to have been notified in advance by the information processing device 100. The reception number may be associated with the report data 13a, or the reception number designated by the worker may be used when requesting the report data 13a from the information processing device 100. The one-time password is issued by the password issuing unit 14c, which will be described later.

The password issuing unit 14c is a processing unit that issues a one-time password based on a predetermined random password generation algorithm when the user presses the button 12a. The password issuing unit 14c outputs the issued one-time password to the display control unit 14b and the transmission unit 14d.

When the user requests to receive the report data by email, the sending unit 14d generates first update information and sends it to the information processing device 100. The first update information includes the updated report data 13a, the reception number, the one-time password, and the passcode.

If the user does not wish to receive the report data by email, the sending unit 14d generates second update information and sends it to the information processing device 100. The second update information includes the updated report data 13a, the reception number, and the passcode.

Next, an example of the configuration of the information processing device 100 shown in FIG. 1 will be described. FIG. 5 is a functional block diagram showing the configuration of the information processing device according to the first embodiment. As shown in FIG. 5, the information processing device 100 has a communication unit 110, an input unit 120, a display unit 130, a memory unit 140, and a control unit 150.

The communication unit 110 is a processing unit that executes data communication with the tablet terminal 10 and the user terminal 20 via the network 5. The communication unit 110 corresponds to a communication device such as a NIC. The control unit 150, which will be described later, exchanges data with the tablet terminal 10 and the user terminal 20 via the communication unit 110.

The input unit 120 is an input device for inputting various information to the control unit 150 of the information processing device 100. The input unit 120 corresponds to a keyboard, a mouse, a touch panel, etc.

The display unit 130 is a display device that displays information output from the control unit 150. The display unit 130 corresponds to, for example, a liquid crystal display, an organic EL (Electro-Luminescence) display, a touch panel, etc.

The memory unit 140 has a report DB 141 and an authentication table 142. The memory unit 140 corresponds to a semiconductor memory element such as a RAM (Random Access Memory) or a flash memory, or a storage device such as a HDD (Hard Disk Drive).

Report DB141 is a database that stores report data. FIG. 6 is a diagram showing an example of the data structure of the report DB. As shown in FIG. 6, this report DB141 associates a reception number with report data. The reception number is information that uniquely identifies the report data. The report data is electronic report data.

The authentication table 142 is a table that holds the passcode and one-time password notified from the tablet terminal 10 in association with the reception number. FIG. 7 is a diagram showing an example of the data structure of the authentication table. As shown in FIG. 7, this authentication table 142 associates the reception number, the passcode, and the one-time password.

As described above, the passcode is a passcode set for the user in the first phase. The one-time password is a password issued by the tablet terminal 10.

The control unit 150 has a management unit 151, a registration unit 152, an authentication unit 153, a transmission unit 154, and an access control unit 155. The control unit 150 can be realized by a CPU, an MPU, or the like. The control unit 150 can also be realized by hardwired logic such as an ASIC or an FPGA.

The management unit 151 is a processing unit that manages the report DB 141. For example, the management unit 151 acquires a reception number and basic data of the report data from a terminal device (not shown) operated by an operator of the maintenance management company, and registers the reception number and the report data in the report DB 141.

When the management unit 151 receives report request data from the tablet terminal 10, the management unit 151 searches the report DB 141 for report data corresponding to the reception number set in the report request data. The management unit 151 transmits the searched report data to the tablet terminal 10. When transmitting the report data to the tablet terminal 10, the management unit 151 may attach the corresponding reception number.

When the management unit 151 receives the first update information (or the second update information) from the tablet terminal 10, it updates the corresponding report data in the report DB 141 with the updated report data included in the first update information. For example, if the first update information includes reception number "161210000001", the report data corresponding to reception number "161210000001" in the report DB 141 is updated with the report data included in the first update information.

When the registration unit 152 receives first update information from the tablet terminal 10, it associates the reception number, passcode, and one-time password contained in the first update information and registers them in the authentication table 142.

When the registration unit 152 receives second update information from the tablet terminal 10, it associates the reception number included in the second update information with the passcode and registers them in the authentication table 142.

The authentication unit 153 executes the first authentication process or the second authentication process using the authentication table 142. The authentication unit 153 executes the first authentication process when it receives an email requesting report data from the user terminal 20. The authentication unit 153 executes the second authentication process when it receives a request to view the report data from the user terminal 20.

The "first authentication process" executed by the authentication unit 153 will be described. When the authentication unit 153 receives an e-mail from the user terminal 20, it executes authentication based on the reception number and one-time password set in the e-mail and the authentication table 142. If the pair of the reception number and one-time password set in the e-mail exists in the authentication table 142, the authentication unit 153 determines that the authentication is successful.

If the authentication unit 153 determines that the authentication is successful, it obtains the passcode corresponding to the reception number set in the e-mail from the authentication table 142, and outputs the reception number and the passcode to the transmission unit 154. In addition, if the authentication unit 153 determines that the authentication is successful, it deletes the one-time password corresponding to the reception number in the e-mail from the authentication table 142.

On the other hand, if the pair of reception number and one-time password set in the email does not exist in the authentication table 142, the authentication unit 153 notifies the user terminal 20 of an error.

The "second authentication process" executed by the authentication unit 153 will be described. When the user terminal 20 makes a request to view report data, a reception number and a passcode are sent to the information processing device 100. The authentication unit 153 executes authentication based on the reception number and passcode received from the user terminal 20 and the authentication table 142. The authentication unit 153 determines that the authentication is successful when the pair of the received reception number and passcode exists in the authentication table 142.

If the authentication unit 153 determines that the authentication is successful, it outputs to the access control unit 155 permission to view the report data corresponding to the user terminal 20 that made the request to view the report data.

When the transmission unit 154 receives the reception number and passcode from the authentication unit 153, it retrieves the report data corresponding to the reception number from the report DB 141. The transmission unit 154 generates encrypted data by encrypting the report data using the received passcode as an encryption key. The transmission unit 154 generates a reply email addressed to the user terminal 20 that is the sender of the email, attaches the encrypted data to the reply email, and sends it to the user terminal 20.

When the access control unit 155 receives access from the user terminal 20, it generates web page information and displays it on the user terminal 20. FIG. 8 is a diagram showing an example of a web page displayed on the user terminal. As shown in FIG. 8, the web page 40 includes an input area 40a for a reception number and an input area 40b for a passcode. The user operates the user terminal 20 to input the reception number in the input area 40a and the passcode in the input area 40b (the input reception number and passcode are transmitted to the information processing device 100). The input reception number and passcode are authenticated by the authentication unit 153 described above.

When the access control unit 155 receives permission to view the report data from the authentication unit 153, it retrieves the report data corresponding to the reception number entered in the input field 40a from the report DB 141. The access control unit 155 allows the user terminal 20 to access the retrieved report data.

Next, an example of the processing procedure of the system according to the first embodiment will be described. FIG. 9 is a flowchart showing an example of the processing procedure of the tablet terminal according to the first embodiment. As shown in FIG. 9, the acquisition unit 14a of the tablet terminal 10 acquires report data 13a corresponding to the reception number from the information processing device 100, and stores the data in the memory unit 13 (step S101).

The display control unit 14b of the tablet terminal 10 displays the basic data of the report data (step S102). The display control unit 14b accepts the input of the work report and updates the report data 13a (step S103). The display control unit 14b displays the updated report data (step S104). The report data displayed in step S104 is confirmed by the user.

The display control unit 14b accepts input of an electronic signature and a passcode (step S105). The display control unit 14b (password issuing unit 14c of the tablet terminal 10) determines whether the button 12a indicating a desire to send an email has been pressed (step S106).

When button 12a is pressed (step S106, Yes), password issuing unit 14c generates a one-time password (step S107). Display control unit 14b displays the reception email address, reception number, and one-time password (step S108). Transmission unit 14d transmits the first update information (report data 13a, reception number, one-time password, and passcode) to information processing device 100 (step S109).

On the other hand, if the button 12a indicating the desire to send an email is not pressed (step S106, No), the sending unit 14d sends the second update information (report data 13a, reception number, passcode) to the information processing device 100 (step S110).

Fig. 10 is a flowchart showing the processing procedure of the user terminal and the information processing device according to the first embodiment. As shown in Fig. 10, the user terminal 20 accepts input of a reception email address (step S201). The user terminal 20 accepts input of a reception number and a one-time password (step S202). The user terminal 20 sends an email to the information processing device 100 (step S203).

The authentication unit 153 of the information processing device 100 receives the e-mail (step S204). The authentication unit 153 performs authentication based on the reception number and one-time password in the e-mail and the authentication table 142 (step S205). If the authentication is not successful (step S206, No), the authentication unit 153 sends an error notification to the user terminal 20 (step S207).

On the other hand, if the authentication is successful (Yes at step S206), the authentication unit 153 proceeds to step S208. The transmission unit 154 of the information processing device 100 encrypts the report data with a passcode (step S208). The transmission unit 154 returns a reply email with the encrypted data attached to the user terminal that is the sender of the electronic data (step S209).

The user terminal 20 determines whether or not a reply email has been received (step S210). If the user terminal 20 has received a reply email (step S210, Yes), it accepts input of a passcode (step S211). The user terminal 20 decrypts the encrypted data using the passcode (step S212). The user terminal 20 displays the decrypted report data (step S213).

On the other hand, if the user terminal 20 has not received the reply email (step S210, No), it displays an error (step S214). When the user confirms the error display, he or she may re-enter the reception email address, reception number, and one-time password, and the user terminal 20 may re-send the email to the information processing device 100.

Next, the effects of the information processing device 100 according to the first embodiment will be described. The information processing device 100 registers a pair of a one-time password and a reception number issued in advance in the authentication table 142. When the information processing device 100 receives an email requesting report data from the user terminal 20, it performs authentication based on the information set in the email (the one-time password and the reception number) and the authentication table 142. If the authentication is successful, the information processing device 100 returns the report data to the user terminal that is the sender of the email. This reduces the burden on users and workers while preventing the erroneous sending of confidential information such as report data.

If authentication is successful, the information processing device 100 deletes the one-time password that is the same as the one-time password set in the email from the authentication table 142. This makes it impossible to reuse a one-time password that has been successfully authenticated once, thereby improving security.

The information processing device 100 receives a passcode specified by the user from the tablet terminal 10 and registers it in the authentication table 142. For example, when the information processing device 100 transmits report data, security can be improved by encrypting the report data using the passcode as an encryption key.

When the information processing device 100 receives a request to access report data from the user terminal 20 via a web page, it performs authentication using the reception number and passcode, and if authentication is successful, allows access to the report data. This allows the report data to be viewed by means other than email.

The system processing described in the first embodiment is an example, and other processing may be executed. In the second embodiment, other processing 1 to 4 of the system according to the present invention will be described.

The following describes "Other Process 1" of the system according to the present invention. The tablet terminal 10 described in the first embodiment displays the notification screen 30 as described in FIG. 3 when notifying the user of the reception email address, reception number, and one-time password, but this is not limited to this.

The tablet terminal 10 may generate a QR (Quick Response) code (registered trademark) including information on the reception email address, reception number, and one-time password, and display it as a notification screen. FIG. 11 is a diagram showing an example of a notification screen according to the second embodiment. As shown in FIG. 11, this notification screen 50 displays a QR code 51 including information on the reception number and one-time password.

For example, the user operates the user terminal 20, which has a camera function, to capture an image of a QR code. The user terminal 20 analyzes the captured QR code and extracts the reception email address, reception number, and one-time password from the QR code. The user terminal 20 automatically starts email software, generates an email containing the reception email address, reception number, and one-time password, and sends the generated email to the information processing device 100.

In this way, using a QR code eliminates the need for users to remember (or write down) their reception email address, reception number, and one-time password.

The following describes "Other Processing 2" of the system according to the present invention. The tablet terminal 10 described in the first embodiment may generate multiple one-time passwords for one piece of report data. The number of one-time passwords to be generated is specified by the user who operates the tablet terminal 10.

When the tablet terminal 10 generates multiple one-time passwords, it transmits third update information associating the report data, the reception number, the multiple one-time passwords, and the passcode to the information processing device 100. When the registration unit 152 of the information processing device 100 receives the third update information, it associates the reception number, the passcode, and the multiple one-time passwords, and registers them in the authentication table 142.

This allows the number of pairs of reception numbers and one-time passwords that result in successful authentication to be increased by the number of one-time passwords.

The following describes "Other Processing 3" of the system according to the present invention. In addition to the reception email address of the information processing device 100, a carbon copy (CC) may be set for an email sent from the user terminal 20.

When the authentication unit 153 is successful and a reply email is generated to reply to an email, the sending unit 154 of the information processing device 100 sets only the email address of the user terminal 20 as the destination of the reply email and sends the reply email. In other words, the sending unit 154 can prevent the erroneous sending of report data by preventing the CC email address set in the email from being set in the reply email.

The "Other Processing 4" of the system according to the present invention will now be described. The registration unit 152 of the information processing device 100 may set an expiration date when associating the reception number, passcode, and one-time password included in the first update information and registering them in the authentication table 142. For example, the registration unit 152 may set the expiration date of the one-time password to a predetermined time after the time the first update information is acquired.

The registration unit 152 scans the expiration date in the authentication table 142 at regular intervals and invalidates one-time passwords whose expiration date has passed. This can further increase the security of the report data.

Next, an example of the hardware configuration of a computer that realizes the same functions as the information processing device 100 shown in the above embodiment will be described. FIG. 12 is a diagram showing an example of the hardware configuration of a computer that realizes the same functions as the information processing device of the embodiment.

As shown in FIG. 12, the computer 200 has a CPU 201 that executes various types of arithmetic processing, an input device 202 that accepts data input from the user, and a display 203. The computer 200 also has a reading device 204 that reads programs and the like from a storage medium, and a communication device 205 that transmits and receives data between the tablet terminal 10 and the user terminal 20 via a wired or wireless network. The computer 200 also has a RAM 206 that temporarily stores various types of information, and a hard disk device 207. Each of the devices 201 to 207 is connected to a bus 208.

The hard disk device 207 has a management program 207a, a registration program 207b, an authentication program 207c, a transmission program 207d, and an access control program 207e. The CPU 201 also reads out each of the programs 207a to 207e and expands them in the RAM 206.

The management program 207a functions as the management process 206a. The registration program 207b functions as the registration process 206b. The authentication program 207c functions as the authentication process 206c. The transmission program 207d functions as the transmission process 206d. The access control program 207e functions as the access control process 206e.

The processing of the management process 206a corresponds to the processing of the management unit 151. The processing of the registration process 206b corresponds to the processing of the registration unit 152. The authentication process 206c corresponds to the processing of the authentication unit 153. The transmission process 206d corresponds to the processing of the transmission unit 154. The access control process 206e corresponds to the processing of the access control unit 155.

Note that each of the programs 207a to 207e does not necessarily have to be stored in the hard disk device 207 from the beginning. For example, each program may be stored in a "portable physical medium" such as a flexible disk (FD), CD-ROM, DVD, magneto-optical disk, or IC card that is inserted into the computer 200. Then, the computer 200 may read and execute each of the programs 207a to 207e.

5 Network 10 Tablet terminal 11, 110 Communication unit 12 Touch panel 13, 140 Storage unit 13a Report data 14, 150 Control unit 14a Acquisition unit 14b Display control unit 14c Password issuing unit 14d, 154 Transmission unit 20 User terminal 100 Information processing device 120 Input unit 130 Display unit 141 Report DB
142 Authentication table 151 Management section 152 Registration section 153 Authentication section 155 Access control section

Claims (7)

a registration unit that, when receiving a plurality of one-time passwords issued by a first terminal device, registers the plurality of one-time passwords in an authentication table in association with an identification number of confidential information;
an authentication unit that, when receiving information including a password and an identification number from a second terminal device, performs authentication based on the received password and identification number and the authentication table , and, when the authentication is successful, deletes from the authentication table a one-time password that is identical to the password transmitted from the second terminal device;
a transmission unit that transmits the confidential information to the second terminal device when the authentication unit has been successfully authenticated ;
The information including the password and the identification number transmitted from the second terminal device is an e-mail, and when a second e-mail address is set in addition to a first e-mail address of the second terminal device as an e-mail address set in the e-mail, the transmission unit transmits the confidential information to the first e-mail address and inhibits the confidential information from being transmitted to the second e-mail address.
23. An information processing apparatus comprising : 2 . The information processing apparatus according to claim 1 , wherein the registration unit registers the one-time passwords and an identification number of confidential information in the authentication table in association with each other. 3 . The information processing apparatus according to claim 1 , wherein the registration unit further receives a passcode designated by a user from the first terminal device, and registers the passcode and the confidential information in the authentication table in association with each other. 4 . 4 . The information processing apparatus according to claim 3 , wherein the transmission unit encrypts the confidential information by using the passcode and transmits the encrypted confidential information to the second terminal device. The information processing device according to claim 4, further comprising an access control unit that, when the authentication unit receives information including a passcode and an identification number from the second terminal device, performs authentication based on the received passcode and identification number and the authentication table, and, when authentication by the authentication unit is successful, allows access to confidential information of the identification number received from the second terminal device. 1. A computer implemented authentication method comprising:
when receiving a plurality of one-time passwords issued by the first terminal device, registering the plurality of one-time passwords in an authentication table in association with an identification number of confidential information;
when receiving an e-mail including a password and an identification number from a second terminal device, performing authentication based on the password and the identification number of the received e-mail and the authentication table;
If the authentication is successful, a one-time password identical to the password transmitted from the second terminal device is deleted from the authentication table;
When a second email address is set in addition to a first email address of the second terminal device as an email address set in the email, the confidential information is sent to the first email address and the confidential information is prevented from being sent to the second email address.
23. A method for authentication comprising: On the computer,
when receiving a plurality of one-time passwords issued by the first terminal device, registering the plurality of one-time passwords in an authentication table in association with an identification number of confidential information;
when receiving an e-mail including a password and an identification number from a second terminal device, performing authentication based on the password and the identification number of the received e-mail and the authentication table;
If the authentication is successful, a one-time password identical to the password transmitted from the second terminal device is deleted from the authentication table;
When a second email address is set in addition to a first email address of the second terminal device as an email address set in the email, the confidential information is sent to the first email address and the confidential information is prevented from being sent to the second email address.
An authentication program that causes a process to be executed.

Images