Authentication method for information access, authentication apparatus for information access, and authentication program for information access

Abstract

This invention provides an authentication method for information access, which performs the following processes: verifying first authentication information with registered first authentication information; if the verification is confirmed, using the unique ID of the receiving device as second authentication information; calculating the hash value of the received second authentication information; verifying the calculated hash value with a registered hash value; if the hash value verification is confirmed, sending arbitrary code to the device; receiving the sent code; and verifying the received code with the code sent to the device.

Description

Technical Field

[0001] This invention relates to an authentication method, an authentication device, and an authentication procedure for information access. Background Technology

[0002] Japanese Patent Application Publication No. 2010-79795 discloses a technology related to authentication methods in two-factor authentication. Summary of the Invention

[0003] -The technical problem that the invention aims to solve-

[0004] During user authentication, information about the user's personal belongings, such as smartphones, is verified. The smartphone or other device sends identification information (a combination of IP address and device serial number, etc.) to the system for communication. If the device is registered in the system, the system sends an authentication code to it. The user reads the authentication code from the device and sends it to the system, thus verifying their identity. However, in some countries, device identification information is considered important personal information, and its transfer abroad is strictly restricted. Therefore, in systems providing services from abroad, it is impossible to store device identification information on permanent storage devices for use.

[0005] The present invention was made in view of the above-mentioned problems, and its object is to provide an authentication method, an authentication device, and an authentication procedure for information access that perform user authentication without retaining the device's identification information.

[0006] -Means used to solve technical problems-

[0007] To achieve the above objectives, in the authentication method for information access according to the present invention, the processor performs the following processing: receiving first authentication information from a device; verifying the received first authentication information against registered first authentication information; if the verification is confirmed, receiving the device's unique ID as second authentication information; calculating the hash value of the received second authentication information; verifying the calculated hash value against registered hash values; if the hash value verification is confirmed, sending arbitrary code to the device; receiving the sent code; and verifying the received code against the code sent to the device.

[0008] If the hash value is verified, the processor may perform the following processes: generate the code; and send the generated code to the device.

[0009] To achieve the above objectives, in the authentication method for information access according to the present invention, the processor performs the following processing: receiving first authentication information from a device; verifying the received first authentication information against registered first authentication information; if the verification is confirmed, receiving the unique ID of the device as second authentication information; calculating the hash value of the received second authentication information; verifying the calculated hash value against registered hash values; if the hash value verification is confirmed, displaying a prompt prompting the user to confirm on the device; and receiving the user's response to the displayed prompt.

[0010] The first authentication information may be a user ID, or a user ID and password.

[0011] The first authentication information is an electronic signature generated using a private key recorded in the device, and the processor can use a registered public key to verify the received electronic signature.

[0012] To achieve the above objectives, the authentication device for information access according to the present invention includes a processor that performs the following processing: receiving first authentication information from a device; verifying the received first authentication information against registered first authentication information; if the verification is confirmed, receiving the unique ID of the device as second authentication information; calculating the hash value of the received second authentication information; verifying the calculated hash value against registered hash values; if the hash value verification is confirmed, sending arbitrary code to the device; receiving the sent code; and verifying the received code against the code sent to the device.

[0013] To achieve the above objectives, the authentication device for information access according to the present invention includes a processor that performs the following processing: receiving first authentication information from a device; comparing the received first authentication information with registered first authentication information; if the comparison is confirmed, receiving the device's unique ID as second authentication information; calculating the hash value of the received second authentication information; comparing the calculated hash value with registered hash values; if the hash value comparison is confirmed, displaying a prompt prompting the user to confirm on the device; and receiving the user's response to the displayed prompt.

[0014] To achieve the above objectives, the authentication program for information access involved in this invention causes a computer to perform the following processes: receiving first authentication information from a device; verifying the received first authentication information against registered first authentication information; if the verification is confirmed, receiving the device's unique ID as second authentication information; calculating the hash value of the received second authentication information; verifying the calculated hash value against registered hash values; if the hash value verification is confirmed, sending arbitrary code to the device; receiving the sent code; and verifying the received code against the code sent to the device.

[0015] To achieve the above objectives, the authentication program for information access according to the present invention causes a computer to perform the following processes: receiving first authentication information from a device; comparing the received first authentication information with registered first authentication information; if the comparison is confirmed, receiving the device's unique ID as second authentication information; calculating the hash value of the received second authentication information; comparing the calculated hash value with registered hash values; if the hash value comparison is confirmed, displaying a prompt prompting the user to confirm on the device; and receiving the user's response to the displayed prompt.

[0016] -Invention Effects-

[0017] According to the present invention, an authentication method, an authentication device, and an authentication procedure for information access can be provided for user authentication without retaining device identification information. Attached Figure Description

[0018] Figure 1 This is a diagram illustrating the schematic structure of the authentication system involved in the implementation of the technology of the present invention.

[0019] Figure 2 It is a block diagram representing the hardware structure of the authentication server.

[0020] Figure 3 This is a block diagram illustrating an example of the functional structure of an authentication server.

[0021] Figure 4 It is a flowchart representing the authentication process used for accessing information based on the authentication server.

[0022] Figure 5 It is a flowchart representing the authentication process used for accessing information based on the authentication server.

[0023] Figure 6 This is an example of a prompt displayed on a user terminal that prompts the user to confirm. Detailed Implementation

[0024] Hereinafter, an example of an embodiment of the present invention will be described with reference to the accompanying drawings. Furthermore, in each drawing, the same or equivalent components and parts are given the same reference numerals. Also, the dimensions in the drawings may be exaggerated for ease of explanation and may differ from the actual dimensions.

[0025] Figure 1 This is a diagram showing the general structure of the authentication system involved in this embodiment. Figure 1 The authentication system shown has an authentication server 10 and a user terminal 20. The authentication server 10 and the user terminal 20 are connected in a manner that enables them to communicate with each other via a network 30 such as the Internet. Figure 1 The illustration shows two user terminals 20, but the number of user terminals 20 is not limited to this example.

[0026] Authentication server 10 performs a two-factor authentication process to confirm whether the user has permission to access the specified service. Authentication server 10 is an example of the "authentication device for information access" of the present invention. User terminal 20 is a terminal that utilizes the service, and is an information processing device such as a personal computer, smartphone, or tablet terminal. User terminal 20 is an example of the device of the present invention. User terminal 20 executes client software. Client software is software used by the user operating user terminal 20, and can be either service-specific software or general-purpose software. For example, if the specified service uses a web application, the client software is a general-purpose web browser.

[0027] The authentication server 10 is connected to a database (DB) 40. The database 40 stores information used for user authentication. In this embodiment, the database 40 stores the hash value of the unique ID of the user terminal 20 as authentication information for authenticating the user. The unique ID of the user terminal 20 may include, for example, the serial number of the user terminal 20, its MAC address, IP address, and the serial number of the peripheral device (dongle) connected to the user terminal 20.

[0028] In this embodiment, the authentication server 10 compares the first authentication information sent from the user terminal 20 with the registered first authentication information. The first authentication information may be, for example, a user ID and password. If authentication using the first authentication information is confirmed, the authentication server 10 receives second authentication information from the user terminal 20 that is different from the first authentication information, calculates the hash value of the received second authentication information, and compares the calculated hash value with the hash value registered in the database 40. Then, if the hash value comparison is confirmed, the authentication server 10 sends arbitrary code to the user terminal 20.

[0029] In this embodiment, the authentication server 10 obtains the unique ID of the user terminal 20 from the user terminal 20 as the second authentication information. Furthermore, the authentication server 10 only uses the unique ID of the user terminal 20 obtained from the user terminal 20 during authentication and does not permanently retain it. Therefore, even if the authentication server 10 exists in a country different from the country where the user terminal 20 exists, and it is undesirable or impossible to store the unique ID of the user terminal 20 in the authentication server 10, the authentication system according to this embodiment can still achieve two-factor authentication.

[0030] Figure 2 This is a block diagram representing the hardware structure of the authentication server 10.

[0031] like Figure 2 As shown, the authentication server 10 includes a CPU (Central Processing Unit) 11, a ROM (Read Only Memory) 12, a RAM (Random Access Memory) 13, a storage device 14, an input unit 15, a display unit 16, and a communication interface (I / F) 17. All these components are interconnected via a bus 19.

[0032] CPU 11 is the central processing unit, which executes various programs or controls various parts. Specifically, CPU 11 reads programs from ROM 12 or storage device 14 and executes the programs using RAM 13 as its working area. CPU 11 performs control of the aforementioned structures and various arithmetic operations according to the programs registered in ROM 12 or storage device 14. In this embodiment, ROM 12 or storage device 14 stores an authentication program for user authentication information access.

[0033] ROM12 stores various programs and data. RAM13 serves as a temporary storage area for programs or data. Storage device 14 is composed of storage devices such as HDD (Hard Disk Drive), SSD (Solid State Drive), or flash memory, and stores various programs and data, including the operating system.

[0034] The input unit 15 includes a mouse and other pointing devices and a keyboard for various input operations.

[0035] The display unit 16 is, for example, a liquid crystal display (LCD) that displays various information. The display unit 16 may also function as an input unit 15 using a touch panel.

[0036] Communication interface 17 is an interface for communicating with other devices such as user terminal 20, for example using standards such as Ethernet (registered trademark), FDDI, and Wi-Fi (registered trademark).

[0037] When executing the authentication procedure for accessing the aforementioned information, the authentication server 10 uses the aforementioned hardware resources to implement various functions. The functional structure implemented by the authentication server 10 will be described below.

[0038] Figure 3 This is a block diagram illustrating an example of the functional structure of authentication server 10.

[0039] like Figure 3 As shown, the authentication server 10 has a functional structure comprising a receiving unit 101, a verification unit 102, a calculation unit 103, and a sending unit 104. Each functional structure is implemented by the CPU 11 reading and executing an authentication program for information access stored in the ROM 12 or the storage device 14.

[0040] The receiving unit 101 receives various information related to service utilization from the user terminal 20 via the network 30.

[0041] When authenticating a user, the receiving unit 101 first receives the user ID and password for using the service from the user terminal 20 via the network 30. If the received user ID and password match the registered user ID and password, the receiving unit 101 then receives the unique ID of the user terminal 20 from the user terminal 20 via the network 30. If the hash value of the unique ID of the user terminal 20 matches the registered hash value, the receiving unit 101 receives the authentication code for authentication from the user terminal 20 via the network 30.

[0042] The verification unit 102 performs a verification process using the information received by the receiving unit 101. The verification unit 102 first verifies the user ID and password received by the receiving unit 101 against the pre-registered user ID and password. The user ID and password are stored, for example, in the storage device 14.

[0043] If the user ID and password received by the receiving unit 101 match the pre-registered user ID and password, then the verification unit 102 checks the hash value calculated by the calculation unit 103 for the unique ID of the user terminal 20 received by the receiving unit 101 against the hash value stored in the database 40. If the hash value calculated by the calculation unit 103 matches the hash value registered in the database 40, then the verification unit 102 checks the authentication code received by the receiving unit 101 against the authentication code sent by the sending unit 104. Finally, if the authentication code received by the receiving unit 101 matches the authentication code sent by the sending unit 104, the authentication of the user terminal 20 is completed, and the user terminal 20 is allowed to use the service.

[0044] Furthermore, the receiving unit 101 can receive an electronic signature generated using a private key already recorded in the user terminal 20, instead of the user ID and password. Upon receiving an electronic signature generated in the user terminal 20, the verification unit 102 authenticates the received electronic signature using a public key registered in the authentication server 10. Thus, the authentication server 10 can verify whether the correspondence between the user and the public key is appropriate. In this case, the electronic signature received by the receiving unit 101 becomes an example of the first authentication information of the present invention.

[0045] The calculation unit 103 performs hash value calculation. Specifically, the calculation unit 103 calculates the hash value of the unique ID of the user terminal 20. The hash value calculated by the calculation unit 103 is used for the verification process in the verification unit 102.

[0046] The sending unit 104 sends various information to the user terminal 20 via the network 30. Specifically, the sending unit 104 sends information related to the verification process in the verification unit 102 to the user terminal 20. This information related to the verification process in the verification unit 102 includes information about the results of each verification and authentication information used for authentication when hash values ​​match. The authentication information is an example of any code of the present invention. Authentication information used for authentication is, for example, a PIN (Personal Identification Number) code, a one-time password, etc.

[0047] If the verification results of the user ID and password, the hash value, and the authentication code all match, the sending unit 104 sends successful authentication information to the user terminal 20. Conversely, if any one of these verification results is inconsistent, the sending unit 104 sends failed authentication information to the user terminal 20. In the case of successful authentication, the user terminal 20 displays successful authentication information and can use the system. In the case of failed authentication, the user terminal 20 displays failed authentication information and cannot use the system.

[0048] With this structure, authentication server 10 can perform user authentication without retaining the unique ID of user terminal 20 itself. For example, in countries where authentication server 10 is located, the unique ID of user terminal 20 is considered important personal information and its transfer abroad is strictly restricted, making it impossible to store it on permanent storage devices for use. In such cases, user authentication can still be performed using a hash value instead of the unique ID of user terminal 20 itself.

[0049] Next, the function of authentication server 10 will be explained.

[0050] Figure 4This is a flowchart illustrating the authentication process for information access based on authentication server 10. CPU 11 reads the authentication program for information access from ROM 12 or storage device 14, expands it in RAM 13 and executes it, thereby performing the authentication process for information access.

[0051] In step S101, CPU11 receives the system's user ID and password from the user terminal 20 that wants to utilize the system.

[0052] After step S101, in step S102, CPU11 determines whether the user ID and password received from user terminal 20 are consistent with the pre-registered user ID and password.

[0053] In step S102, if the user ID and password received from user terminal 20 do not match the pre-registered user ID and password (step S102; No), CPU 11 terminates the authentication process as an authentication failure. If, in step S102, the user ID and password received from user terminal 20 match the pre-registered user ID and password (step S102; Yes), then in step S103, CPU 11 receives from user terminal 20 the unique ID of user terminal 20 used to authenticate the user using the system.

[0054] Following step S103, in step S104, CPU 11 calculates the hash value of the unique ID of user terminal 20 received from user terminal 20. Here, CPU 11 can calculate not only the hash value of the unique ID of user terminal 20 received from user terminal 20, but also the hash value of the password received in step S101.

[0055] After step S104, in step S105, CPU11 determines whether the calculated hash value is consistent with the hash value pre-registered in database 40.

[0056] In step S105, if the calculated hash value does not match the hash value pre-registered in database 40 (step S105; No), CPU 11 terminates the authentication process as an authentication failure. If, in step S105, the calculated hash value matches the hash value pre-registered in database 40 (step S105; Yes), then in step S106, CPU 11 sends authentication information for authenticating the system to user terminal 20. Authentication information for authenticating the system may be, for example, a PIN code or a one-time password.

[0057] After step S106, in step S107, CPU11 receives authentication information from user terminal 20 for authenticating the system.

[0058] After step S107, in step S108, CPU11 determines whether the received authentication information is consistent with the authentication information sent in step S106.

[0059] In step S108, if the received authentication information is inconsistent with the authentication information sent in step S106 (step S108; No), the CPU 11 terminates the authentication process as an authentication failure. In step S108, if the received authentication information is consistent with the authentication information sent in step S106 (step S108; Yes), the CPU 11 terminates the authentication process as an authentication success.

[0060] This illustrates another example of the role of authentication server 10. Figure 5 This is a flowchart illustrating the authentication process for information access based on the authentication server 10. The CPU 11 reads the authentication program for information access from the ROM 12 or the storage device 14, expands it in the RAM 13, and executes it, thereby performing the authentication process for information access.

[0061] exist Figure 5 In the flowchart shown, for and Figure 4 Explanations are omitted for the same parts of the flowchart shown.

[0062] In step S105, if the calculated hash value matches the hash value pre-registered in the database 40 (step S105; Yes), then in step S111, the CPU 11 notifies the user terminal 20 to prompt the user to confirm.

[0063] Figure 6 This diagram illustrates an example of a prompt displayed on user terminal 20 that prompts the user to confirm. In this display, the user can continue the authentication process in authentication server 10 by selecting confirmation button 201 within a specified time.

[0064] Following step S111, in step S112, CPU 11 determines whether the user's action to the prompt prompting confirmation was performed on user terminal 20 within a specified time. That is, whether the action was performed on user terminal 20 as described above. Figure 6 In the case shown, CPU11 determines whether the confirmation button 201 has been selected within the specified time.

[0065] In step S112, if the user fails to perform the operation prompting the user to confirm on the user terminal 20 within the specified time (step S112; No), the CPU 11 terminates the authentication process as an authentication failure. If the user terminal 20 confirms the operation within the specified time in step S112 (step S112; Yes), the CPU 11 terminates the authentication process as an authentication success.

[0066] By performing this process, authentication server 10 can perform user authentication without retaining the unique ID of user terminal 20 itself. For example, in countries where authentication server 10 is located, the unique ID of user terminal 20 is considered important personal information and its transfer abroad is strictly restricted, making it impossible to store it on permanent storage devices for use. In such cases, user authentication can be performed using a hash value instead of the unique ID of user terminal 20 itself.

[0067] The embodiments of the present invention have been described in detail above with reference to the accompanying drawings, but the technical scope of the present invention is not limited to these examples. Those skilled in the art will be able to conceive of various modifications or alterations within the scope of the technical concept set forth in the claims, and it should be understood that such modifications or alterations naturally also fall within the technical scope of the present invention.

[0068] Furthermore, the effects described in the above embodiments are illustrative or exemplary and are not limited to the effects described in the above embodiments. That is, those skilled in the art, with respect to the technology involved in this invention, can achieve the same effects as those described in the above embodiments, or achieve other, more significant effects based on the effects described in the above embodiments, according to the descriptions in the above embodiments.

[0069] In this specification, "A and / or B" has the same meaning as "at least one of A and B". That is, "A and / or B" means that it can be only A, only B, or a combination of A and B. Furthermore, when "and / or" is used in this specification to represent three or more items together, the same concept as "A and / or B" can also be applied.

[0070] Alternatively, the authentication processing for information access, executed by the CPU reading software (program) in the above embodiments, can also be performed by various processors other than the CPU. Examples of such processors include FPGAs (Field-Programmable Gate Arrays), PLDs (Programmable Logic Devices) whose circuit structure can be changed after manufacturing, and ASICs (Application Specific Integrated Circuits), which have dedicated circuit structures specifically designed for performing specific processes. Furthermore, the authentication processing for information access can be performed by one of these various processors, or by a combination of two or more processors of the same or different types (e.g., multiple FPGAs or a combination of a CPU and an FPGA). More specifically, the hardware structure of these various processors is a circuit composed of circuit elements such as semiconductor components.

[0071] Furthermore, while the above embodiments describe the authentication program for information access being pre-stored (installed) in a ROM or storage device, this is not a limitation. The program can be provided in a non-transitory recording medium such as a CD-ROM (Compact Disk Read Only Memory), DVD-ROM (Digital Versatile Disk Read Only Memory), or USB (Universal Serial Bus) memory. Additionally, the program can be downloaded from an external device via a network.

[0072] The appended items of this invention are described below.

[0073] (Note 1)

[0074] An authentication method for information access, wherein,

[0075] The processor performs the following processing:

[0076] Receive the first authentication information from the device;

[0077] The received first authentication information is compared with the registered first authentication information;

[0078] If the verification is confirmed, the unique ID of the receiving device is used as the second authentication information;

[0079] Calculate the hash value of the received second authentication information;

[0080] The calculated hash value is compared with the registered hash value;

[0081] If the verification of the hash value is confirmed, arbitrary code will be sent to the device;

[0082] Receive the sent code; and

[0083] The received code is compared with the code sent to the device.

[0084] (Note 2)

[0085] According to the authentication method for information access described in Appendix 1, wherein,

[0086] If the verification of the hash value is confirmed,

[0087] The processor performs the following processing:

[0088] Generate the code; and

[0089] The generated code is sent to the device.

[0090] (Note 3)

[0091] An authentication method for information access, wherein,

[0092] The processor performs the following processing:

[0093] Receive the first authentication information;

[0094] The received first authentication information is compared with the registered first authentication information;

[0095] If the verification is confirmed, the unique ID of the device is received as the second authentication information;

[0096] Calculate the hash value of the received second authentication information;

[0097] The calculated hash value is compared with the registered hash value;

[0098] If the hash value verification is confirmed, a prompt for user confirmation will be displayed on the device; and

[0099] Receive the user's response to the displayed prompt.

[0100] (Note 4)

[0101] An authentication method for information access according to any one of notes 1 to 3, wherein the first authentication information is a user ID, or a user ID and a password.

[0102] (Note 5)

[0103] The authentication method for information access according to any one of the appendix items 1 to 3, wherein,

[0104] The first authentication information is an electronic signature generated using a private key already recorded in the device.

[0105] The processor uses a registered public key to verify the received electronic signature.

[0106] (Note 6)

[0107] An authentication device for information access, comprising:

[0108] processor,

[0109] The processor performs the following processing:

[0110] Receive the first authentication information from the device;

[0111] The received first authentication information is compared with the registered first authentication information;

[0112] If the verification is confirmed, the unique ID of the device is received as the second authentication information;

[0113] Calculate the hash value of the received second authentication information;

[0114] The calculated hash value is compared with the registered hash value;

[0115] If the verification of the hash value is confirmed, arbitrary code will be sent to the device;

[0116] Receive the sent code; and

[0117] The received code is compared with the code sent to the device.

[0118] (Note 7)

[0119] An authentication device for information access, comprising:

[0120] processor,

[0121] The processor performs the following processing:

[0122] Receive the first authentication information from the device;

[0123] The received first authentication information is compared with the registered first authentication information;

[0124] If the verification is confirmed, the unique ID of the receiving device is used as the second authentication information;

[0125] Calculate the hash value of the received second authentication information;

[0126] The calculated hash value is compared with the registered hash value;

[0127] If the hash value verification is confirmed, a prompt prompting the user to confirm is displayed on the device; and

[0128] Receive the user's response to the displayed prompt.

[0129] (Note 8)

[0130] An authentication procedure for information access that causes a computer to perform the following processing:

[0131] Receive the first authentication information from the device;

[0132] The received first authentication information is compared with the registered first authentication information;

[0133] If the verification is confirmed, the unique ID of the receiving device is used as the second authentication information;

[0134] Calculate the hash value of the received second authentication information;

[0135] The calculated hash value is compared with the registered hash value;

[0136] If the verification of the hash value is confirmed, arbitrary code will be sent to the device;

[0137] Receive the sent code; and

[0138] The received code is compared with the code sent to the device.

[0139] (Note 9)

[0140] An authentication procedure for information access that causes a computer to perform the following processing:

[0141] Receive the first authentication information from the device;

[0142] The received first authentication information is compared with the registered first authentication information;

[0143] If the verification is confirmed, the unique ID of the receiving device is used as the second authentication information;

[0144] Calculate the hash value of the received second authentication information;

[0145] The calculated hash value is compared with the registered hash value;

[0146] If the hash value verification is confirmed, a prompt prompting the user to confirm is displayed on the device; and

[0147] Receive the user's response to the displayed prompt.

[0148] The disclosure of Japanese Patent Application No. 2023-208032, filed on December 8, 2023, is incorporated herein by reference in its entirety.

[0149] All documents, patent applications and technical specifications set forth in this specification are incorporated herein by reference to the same extent as the individual documents, patent applications and technical specifications specifically and individually described and incorporated by reference.

Claims

1. An authentication method for information access, wherein, The processor performs the following processing: Receive the first authentication information from the device; The received first authentication information is compared with the registered first authentication information; If the verification is confirmed, the unique ID of the receiving device is used as the second authentication information; Calculate the hash value of the received second authentication information; The calculated hash value is compared with the registered hash value; If the verification of the hash value is confirmed, arbitrary code will be sent to the device; Receive the sent code; and The received code is compared with the code sent to the device.

2. The authentication method for information access according to claim 1, wherein, If the verification of the hash value is confirmed, The processor performs the following processing: Generate the code; and The generated code is sent to the device.

3. An authentication method for information access, wherein, The processor performs the following processing: Receive the first authentication information from the device; The received first authentication information is compared with the registered first authentication information; If the verification is confirmed, the unique ID of the device is received as the second authentication information; Calculate the hash value of the received second authentication information; The calculated hash value is compared with the registered hash value; If the verification of the hash value is confirmed, a prompt prompting the user to confirm will be displayed on the device; and Receive the user's response to the displayed prompt.

4. The authentication method for information access according to any one of claims 1 to 3, wherein, The first authentication information is the user ID, or the user ID and password.

5. The authentication method for information access according to any one of claims 1 to 3, wherein, The first authentication information is an electronic signature generated using a private key already recorded in the device. The processor uses a registered public key to verify the received electronic signature.

6. An authentication device for information access, comprising: processor, The processor performs the following processing: Receive the first authentication information from the device; The received first authentication information is compared with the registered first authentication information; If the verification is confirmed, the unique ID of the device is received as the second authentication information; Calculate the hash value of the received second authentication information; The calculated hash value is compared with the registered hash value; If the verification of the hash value is confirmed, arbitrary code will be sent to the device; Receive the sent code; and The received code is compared with the code sent to the device.

7. An authentication device for information access, comprising: processor, The processor performs the following processing: Receive the first authentication information from the device; The received first authentication information is compared with the registered first authentication information; If the verification is confirmed, the unique ID of the receiving device is used as the second authentication information; Calculate the hash value of the received second authentication information; The calculated hash value is compared with the registered hash value; If the verification of the hash value is confirmed, a prompt prompting the user to confirm will be displayed on the device; and Receive the user's response to the displayed prompt.

8. An authentication procedure for accessing information, which causes a computer to perform the following processing: Receive the first authentication information from the device; The received first authentication information is compared with the registered first authentication information; If the verification is confirmed, the unique ID of the receiving device is used as the second authentication information; Calculate the hash value of the received second authentication information; The calculated hash value is compared with the registered hash value; If the verification of the hash value is confirmed, arbitrary code will be sent to the device; Receive the sent code; and The received code is compared with the code sent to the device.

9. An authentication procedure for accessing information, which causes a computer to perform the following processing: Receive the first authentication information from the device; The received first authentication information is compared with the registered first authentication information; If the verification is confirmed, the unique ID of the receiving device is used as the second authentication information; Calculate the hash value of the received second authentication information; The calculated hash value is compared with the registered hash value; If the verification of the hash value is confirmed, a prompt prompting the user to confirm will be displayed on the device; and Receive the user's response to the displayed prompt.

Images