Apparatus, method, and program for validating user

Abstract

User validation accuracy is improved without inconveniencing a user. When an authentication request packet is received from a terminal and the authentication is successful based on a user ID and a password, an HTTP header, user-agent information, and access source IP address are extracted from the packet, and user authentication is performed by verifying the IP address and the user-agent information against usage history information where at most two sets of the IP address and the user-agent information extracted from the authentication request packet which is received from the same user previously are registered. When the set of the IP address and the UA information corresponding to the new extracted IP address and the new extracted UA information is registered in the usage history information, the authentication is successful, and the usage history information is overwritten with the new IP address and the new UA information.

Description

[0001]This is a Continuation of application Ser. No. 11 / 886,902 filed Sep. 21, 2007, which in turn is a National Phase of Application No. PCT / JP2006 / 306501 filed Mar. 29, 2006. The disclosure of the prior application is hereby incorporated by reference herein in its entirety.TECHNICAL FIELD[0002]The present invention relates to an apparatus, a method, and a program for validating a user, particularly to a user validation apparatus for validating whether or not a user operating a terminal device is a valid user, a user validation method which can be applied to the user validation apparatus, and a user validation program which causes a computer to act as the user validation apparatus.BACKGROUND ART[0003]Generally a user validation method is adopted in a web site which provides predetermined online service to users who have registered in advance, wherein, a user who accesses the web site through a terminal device is caused to input a user ID and a password, and a confirmation whether o...

AI Technical Summary

Benefits of technology

"The patent text describes a user validation apparatus, method, and program that can improve the accuracy of user validation without reducing user's convenience. The invention is based on the use of HTTP headers that include user-agent information, which can be set by default in a browser or other terminal device. This information can include information about the operating system or browser version, as well as patches or other updates. By analyzing this information, the invention can verify whether a user is a valid user or if their identity is being illegally used. This can be useful in preventing fraud and ensuring security in web applications. However, the use of HTTP headers may not be effective in all cases, and there may be other ways to improve user validation accuracy without adding burden to users."

Problems solved by technology

However, in the case that the user ID and the password are leaked to another person, the above user validation method is disadvantageous because the person who knows the user ID and the password can illegally access the web site while disguising their identity as that of a valid user.

Images