Network computer system

Abstract

To provide a network computer system with a superior security performance.SOLUTION: A network computer system 1 comprises a first server 10 operated by a Web site 11 having browsable content only if passing through a prescribed password authentication, a client terminal 40 capable of accessing the Web site 11 via a network, a second server 20 comprising at least a Web server function, and a third server 30 comprising at least a database server function. A password for authentication of the Web site 11 is only client-action password generated by the operation from a Web browser 41 operating on the client terminal 40, and the client-action password is generated by the third server 30 via the second server 20.SELECTED DRAWING: Figure 2

Description

[Technical field]

[0001] The present invention relates to a network computer system in the form of a so-called client-server system in which a client terminal accesses a server that constitutes a website or the like via a network. [Background technology]

[0002] There are many computer systems that require authentication when browsing servers that make up websites on the Internet, and many Internet sites use a method of authentication using a login ID and password (for example, Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent Publication No. 2021-71857 Summary of the Invention [Problem to be solved by the invention]

[0004] In a computer system in which authentication is performed using a login ID and a password as described above, the login ID and password are often generated in advance on a server and stored in a database on the server.

[0005] Pre-generated passwords posed a security risk as they could be leaked.

[0006] Therefore, the object of the present invention is to provide a network computer system with improved security by improving the password generation process. [Means for solving the problem]

[0007] In order to solve the above-mentioned problems, the present invention provides a network computer system that includes at least a first server on which a website runs that contains content that cannot be viewed without passing a specified password authentication, and a client terminal that can access the website via a network, in which the password for authentication of the website is solely a client action password that is generated by operation from web browsing software running on the client terminal.

[0008] In order to solve the above-mentioned problems, the present invention provides a network computer system which also includes a second server having at least a Web server function and a third server having at least a database server function, and in which the client action password is generated by the third server via the second server.

[0009] In order to solve the above-mentioned problems, the present invention provides a network computer system that allows the client action password to be deleted by an operation from Web browsing software running on the client terminal. Effect of the Invention

[0010] The network computer system of the present invention is a network computer system that includes at least a first server on which a website runs that contains content that cannot be viewed unless a specific password authentication is passed, and a client terminal that can access the website via a network.Since the password for authenticating the website is solely a client action password generated by operation from web browsing software running on the client terminal, no one other than the operator who generated the client action password has any way of knowing the password, and a network computer system that includes a highly secure website can be constructed.

[0011] The network computer system of the present invention also includes a second server having at least a Web server function and a third server having at least a database server function, and the client action password is generated by the third server via the second server, making it possible to construct a network computer system that maintains high security while also being excellent at balancing the load on each server.

[0012] The network computer system of the present invention also makes it possible to delete the client action password by operating the Web browsing software running on the client terminal, making it possible to build and operate a network computer system with higher security. [Brief description of the drawings]

[0013] [Figure 1] FIG. 1 is a diagram showing the overall configuration of a network computer system. [Diagram 2] FIG. 2 is a diagram showing the password generation operation at a client terminal and the initial stage (first half) of the password generation flow. [Diagram 3] FIG. 3 shows a login screen (first screen) displayed on the Web browsing software on the client terminal side. [Figure 4] FIG. 4 is a diagram showing the password generation operation at the client terminal and the latter half (second half) of the password generation flow. [Diagram 5] FIG. 5 shows the second screen displayed on the Web browsing software on the client terminal side. [Figure 6] Figure 6 is an image showing how to log in to a website while visually checking the password notification received via email. [Figure 7] Figure 7 is an image showing how to log in to a website while visually checking the password notification received via SMS on a smartphone. [Figure 8]FIG. 8 shows a logout screen (including a password deletion button) displayed on the Web browsing software on the client terminal side. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0014] The present invention is implemented as a network computer system in which a group of servers consisting of a first Web server running a website containing content that cannot be viewed unless a specified password authentication is passed, a second Web server equipped with Web server functions, and a database server are accessed by client terminals via the Internet. EXAMPLES

[0015] The hardware, software and network configuration of the computer system, as well as the functions of each server, will be explained with reference to FIG.

[0016] The network computer system (1) is composed of a first server (10) running a website (11) containing content that cannot be viewed without passing a specified password authentication, a second server (20) having at least a web server function, a third server (30) having a database server function, a client terminal (40) capable of accessing the first server via the Internet, and a specified smartphone (50) (Figure 1).

[0017] The first server (10) must be running a website (11) that contains content that cannot be viewed unless a specific password is passed (FIG. 1).

[0018] It should be noted that this does not only apply to servers installed at the location of the website operator, but also to servers installed in remote locations such as so-called cloud computers.

[0019] The second server (20) has a Web server function (21) as well as a JSP (Java Server Pages) service function (22) for writing and executing scripts in HTML files (FIG. 1).

[0020] The third server (30) comprises at least a first table (31) relating to user information, a second table (32) relating to login, and a third table (33) relating to password expiration dates (FIG. 1).

[0021] The first table (31) related to the user information is composed of a login ID column, a password column for password generation, an address column, a phone number column, an email address column, a smartphone phone number column for receiving SMS, a credit card information column, etc. The login ID column is used as the primary key.

[0022] The second table (32) relating to login is composed of a login ID column and a password column. The login ID column serves as a primary key.

[0023] The third table (33) relating to the password expiration date is made up of a login ID column, a password expiration date column, and a password expiration period column. The login ID column serves as a primary key.

[0024] The client terminal (40) is assumed to be a personal computer or tablet terminal equipped with web browsing software (hereinafter referred to as a "browser"). It is necessary that the client terminal can access at least the first server via the Internet using the browser running on the client terminal.

[0025] The smartphone (50) is assumed to be hardware equipped with an app or software for receiving SMS and an app or software capable of receiving email (Figure 1).

[0026] Next, an image of how the network computer system is used will be described with reference to FIGS.

[0027] Using a browser (41) of a client terminal (40), a Web site (11) running on a first server (10) is accessed and a login screen (42) is displayed (FIGS. 2 and 3).

[0028] A pre-specified ID (e.g., USER1) and password (e.g., password) are entered in the ID field (421) and password field (422) displayed at the bottom of the login screen (42) and a password generation button (423) is clicked to generate a client action password, which is an authentication password for the website (Figure 3).

[0029] (Internal processing) If the ID entered in the ID field (421) and the password entered in the password field (422) match with the ID and password for password generation stored in the third server (30) through the above-mentioned operation (if they do not match, an error message is displayed and the login screen (42) is displayed again), the screen transitions to the next screen, the second screen (43) (FIGS. 4 and 5).

[0030] More specifically, the reference is a password string for password generation in the first table (31) related to user information in the third server (30).

[0031] When a user selects any radio button ("15 minutes" selected by the black circle shown in FIG. 5) from among the radio buttons (431) for selecting the expiration date displayed at the top of the second screen (43) displayed on the browser (41), selects any radio button ("Randomly Generated" selected by the black circle shown in FIG. 5) from among the radio buttons (432) for selecting the password data generation method displayed below the radio buttons (432), and clicks the "Notify Password by E-mail" button (433), a new client action password (e.g., pW123xx) is generated in the third server (30), and the client action password is sent (notified) to a specified e-mail address (FIG. 5).

[0032] (Internal processing) The first server (10) and the second server (20) update the password information in the login ID column of the second table (32) related to the login running on the third server (30) via the JSP server function (22) to a newly generated client action password.

[0033] Also, information from the login ID column, password validity date column, and password validity period column of the third table (33) relating to the validity period running on the third server (30) is inserted.

[0034] The operator visually confirms the notified client action password using a specified email software and uses the client action password to log in to the website (11). Specifically, the operator enters the client action password in the login ID field (424) displayed in the center of the login screen (42) and clicks the login button (425) (FIGS. 6 and 3).

[0035] Furthermore, when an arbitrary radio button ("15 minutes" selected by the black circle shown in FIG. 5) is selected from among the radio buttons (431) for selecting the expiration date displayed at the top of the second screen (43) displayed on the browser (40), and an arbitrary radio button ("Randomly Generated" selected by the black circle shown in FIG. 5) is selected from among the radio buttons (432) for selecting the password data generation method displayed below the above, and a button (434) for notifying the password to the smartphone for SMS is clicked, a new client action password (e.g., pW123xx) is generated in the third server (30), and the client action password is sent (notified) to a specified SMS number (not shown).

[0036] The operator visually confirms the notified client action password on a specific smartphone (50) and uses the client action password to log in to the website (11). Specifically, the operator enters the client action password in the login ID field (424) displayed in the center of the login screen (42) and clicks the login button (425) (FIGS. 7 and 3).

[0037] When the operator has finished browsing the website (11), he or she can use the browser (41) of the client terminal (40) to display the logout screen (44) and log out of the website by clicking the logout button (442) (FIG. 8).

[0038] By clicking the password deletion button (441) displayed on the logout screen (44), the client action password, which is the password for authentication of the website, is updated to NULL or deleted (FIG. 8).

[0039] After the client action password is updated to NULL or deleted, it is not possible to log in to the website (11) no matter what ID and password are entered.

[0040] The same internal processing is performed by clicking the "ERASE PASSWORD" button (441) displayed on the logout screen (44) and the "ERASE PASSWORD" button displayed at the bottom of the login screen (42) (FIGS. 8 and 3). [Industrial Applicability]

[0041] The present invention is a network computer system with excellent security performance and has industrial applicability. [Explanation of symbols]

[0042] 1 Network Computer Systems 10 First Server 11 Websites that contain content that cannot be viewed without passing a specific password authentication 20 Second Server 21 Web server function 22 JSP Features 30 Third Server 31 Table 1 32 Table 2 33 Table 3 40 Client Terminals 41 Web browsing software (browser) 42 Login screen (first screen) 421 ID input field 422 Password entry field 423 Password generation button 424 Client action password entry field 425 Login button 43 2nd screen 431 Client Action Password Expiry Radio Buttons 432 Radio buttons for selecting client action password data 433 Client Action Send Password to Email Button 434 Client action password to send to smartphone for SMS button 44 Logout screen 441 Client Action Clear Password Button 442 Logout button 50 Smartphone

Claims

1. A network computer system including at least a first server (10) on which a website (11) exists, the website having contents that cannot be viewed unless a predetermined password authentication is passed, and a client terminal (40) capable of accessing the website via a network, A network computer system in which the password for authentication of the Web site is a client action password generated by an operation from a Web browsing software running on the client terminal.

2. In addition to the first server (10), a second server (20) having at least a Web server function and a third server (30) having at least a database server function are also included, 2. The network computer system according to claim 1, wherein said client action password is generated by said third server via said second server in response to an operation from a Web browsing software running on said client terminal.

3. 3. The network computer system according to claim 1, wherein said client action password can be deleted by an operation from a Web browsing software running on said client terminal.

Images