Authentication system, authentication method and authentication program

Abstract

To provide an authentication system, an authentication method and an authentication program in which operability of accessing to access object data is improved and illegal access can be prevented.SOLUTION: A signage system 10 comprises: a setting processing unit 112 that sets password information which is required to access to access object data, to a predetermined operation folder previously associated with access information when the access information for accessing to the access object data is selected by a user; a transmission processing unit 313 that transmits an access request including the password information on the basis of the access information; and an authentication processing unit 113 that performs authentication of access to the access object data on the basis of the password information included in the access request.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present disclosure relates to a technique for authenticating access to data to be accessed. [Background technology]

[0002] Conventionally, a system that performs authentication for accessing a server via a network is known (see, for example, Patent Document 1). For example, in the system, a user inputs login information for accessing a server, and if the login information is correct, the system authenticates the access to the server. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2008-171087 A Summary of the Invention [Problem to be solved by the invention]

[0004] However, in conventional technology, users must input login information every time they access a server (data to be accessed), which is time-consuming. To avoid the need to input login information, a method may be considered in which a URL (access information) for accessing the server is issued to the user in advance, but this method can pose a problem in that if the URL is leaked to a third party, the third party may gain unauthorized access to the server.

[0005] An object of the present disclosure is to provide an authentication system, an authentication method, and an authentication program that can improve the operability of accessing data to be accessed and prevent unauthorized access. [Means for solving the problem]

[0006] An authentication system according to one aspect of the present disclosure is a system that authenticates access to data to be accessed. The authentication system includes a setting processing unit, a transmission processing unit, and an authentication processing unit. When access information for accessing the data to be accessed is selected by a user, the setting processing unit sets password information required to access the data to be accessed in a predetermined operation folder that is pre-associated with the access information. The transmission processing unit transmits an access request including the password information based on the access information. The authentication processing unit authenticates the access to the data to be accessed based on the password information included in the access request.

[0007] An authentication method according to another aspect of the present disclosure is a method for authenticating access to data to be accessed, the authentication method including the steps of: when access information for accessing the data to be accessed is selected by a user, setting password information required to access the data to be accessed in a predetermined operation folder previously associated with the access information, transmitting an access request including the password information based on the access information, and authenticating the access to the data to be accessed based on the password information included in the access request, the steps being executed by one or more processors.

[0008] An authentication program according to another aspect of the present disclosure is a program for authenticating access to data to be accessed, the authentication program causing one or more processors to execute the following operations when access information for accessing the data to be accessed is selected by a user: setting password information required to access the data to be accessed in a predetermined operation folder previously associated with the access information, transmitting an access request including the password information based on the access information, and authenticating the access to the data to be accessed based on the password information included in the access request. Effect of the Invention

[0009] According to the present disclosure, it is possible to provide an authentication system, an authentication method, and an authentication program that can improve the operability of accessing data to be accessed and prevent unauthorized access. [Brief description of the drawings]

[0010] [Figure 1] FIG. 1 is a functional block diagram showing a schematic configuration of a signage system according to an embodiment of the present disclosure. [Diagram 2] FIG. 2 is a diagram illustrating an example of authentication information according to an embodiment of the present disclosure. [Diagram 3] FIG. 3 is a diagram illustrating an example of processing of a server and a user terminal according to an embodiment of the present disclosure. [Figure 4] FIG. 4 is a diagram illustrating an example of processing of a server and a user terminal according to an embodiment of the present disclosure. [Diagram 5] FIG. 5 is a diagram showing an example of an operation screen for content playback settings according to an embodiment of the present disclosure. [Figure 6] FIG. 6 is a sequence diagram for explaining an example of a procedure of an authentication process according to an embodiment of the present disclosure. [Figure 7] FIG. 7 is a diagram illustrating an example of processing of a server and a user terminal according to an embodiment of the present disclosure. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0011] Hereinafter, embodiments of the present disclosure will be described with reference to the accompanying drawings. Note that the following embodiments are examples of the present disclosure and are not intended to limit the technical scope of the present disclosure.

[0012] The authentication system according to the present disclosure is a system that authenticates access to data to be accessed. Specifically, the authentication system accesses the data to be accessed stored in a server from a user terminal, and executes an authentication process for permitting or denying a user operation on the data to be accessed. The authentication system according to the present disclosure is applicable to various systems that authenticate access to data to be accessed, and the present embodiment will exemplify an example in which the authentication system is applied to a signage system that reproduces content (content reproduction system). A signage system is a system that plays multiple contents according to a predetermined playback schedule (playlist) on a display device (digital signage display) installed in a predetermined location. For example, a signage system displays (plays) content consisting of video and audio such as advertisements in various locations such as public squares, stations, streets, offices, and stores. The authentication system according to the present disclosure is included in the signage system. In a signage system, the data to be accessed is data stored in a server, such as a content playlist and setting information related to playback settings.

[0013] Fig. 1 is a diagram showing a schematic configuration of a signage system 10 according to this embodiment. The signage system 10 includes a server 1, a display device 2, and a user terminal 3. The server 1, the display device 2, and the user terminal 3 are communicatively connected via a network N1. The network N1 is, for example, a communication network such as the Internet.

[0014] Furthermore, the signage system 10 may include multiple display devices 2 and multiple user terminals 3. The server 1 manages the multiple display devices 2 each installed in a different location. The user terminal 3 is an operation terminal for registering content to be played on the display devices 2 and setting various items related to the playback of content.

[0015] [Server 1] 1, the server 1 is a server computer including a control unit 11, a storage unit 12, an operation display unit 13, and a communication unit 14. The server 1 is not limited to a single computer, and may be a computer system in which multiple computers work in cooperation. Various processes executed by the server 1 may be executed in a distributed manner by one or multiple processors.

[0016] The communication unit 14 is a communication interface for connecting the server 1 to the network N1 by wire or wirelessly, and for executing data communication between the display device 2 and the user terminal 3 via the network N1 in accordance with a predetermined communication protocol.

[0017] The operation display unit 13 is a user interface that includes a display unit such as a liquid crystal display or an organic EL display that displays various information, and an operation unit such as a mouse, a keyboard, or a touch panel that accepts operations. The operation display unit 13 accepts operations from, for example, an administrator of the server 1.

[0018] The storage unit 12 is a non-volatile storage unit such as an HDD (Hard Disk Drive), an SSD (Solid State Drive), or a flash memory that stores various information. The storage unit 12 stores control programs such as an authentication program for causing the control unit 11 to execute an authentication process (see FIG. 6) described below. For example, the authentication program is non-temporarily recorded on a computer-readable recording medium such as a CD or a DVD, and is read by a reading device (not shown) such as a CD drive or a DVD drive provided in the server 1 and stored in the storage unit 12. The authentication program may be distributed from a cloud server and stored in the storage unit 12.

[0019] In addition to the content data, various information related to the content is stored in the storage unit 12. Specifically, the storage unit 12 stores data such as a playlist related to the content reproduction schedule, and setting information for various items related to the content reproduction.

[0020] The storage unit 12 also stores authentication information D1 for authenticating access to data to be accessed. An example of the authentication information D1 is shown in FIG. 2. Information such as an operation folder ID, access information, and a password is stored in association with the authentication information D1. The operation folder ID is identification information of an operation folder accessible in the user terminal 3. For example, the operation folder is a shared folder that can be operated by multiple users who have operation authority. For example, multiple users belonging to the same group can access a common operation folder (shared folder) from their respective user terminals 3 via the network N1.

[0021] The access information is information for accessing the data to be accessed via the network N1, and is information indicating a storage location of the data to be accessed. For example, the access information is a URL (Uniform Resource Locator). The control unit 11 generates and registers the access information for each operation folder.

[0022] The password is information for authenticating access to the data to be accessed. The control unit 11 sets and registers the password for each operation folder. Fig. 2 shows a state in which the password "pass1" is set for the operation folder ID "F001" (operation folder F1). No password is set for the operation folder IDs "F002" and "F003".

[0023] In another embodiment, some or all of the content data, the playlist, the setting information, and the authentication information D1 may be stored in another server (data server) accessible from the server 1. In this case, the control unit 11 of the server 1 may obtain the information from the other server and execute each process.

[0024] The control unit 11 has control devices such as a CPU, a ROM, and a RAM. The CPU is a processor that executes various arithmetic processing. The ROM is a non-volatile storage unit in which control programs such as a BIOS and an OS for causing the CPU to execute various processes are stored in advance. The RAM is a volatile or non-volatile storage unit that stores various information, and is used as a temporary storage memory (work area) for various processes executed by the CPU. The control unit 11 controls the server 1 by executing, by the CPU, various control programs stored in advance in the ROM or the storage unit 12.

[0025] Specifically, the control unit 11 includes various processing units such as a registration processing unit 111, a setting processing unit 112, an authentication processing unit 113, and a delivery processing unit 114. The control unit 11 functions as the various processing units by executing various processes according to the control program. Some or all of the processing units included in the control unit 11 may be configured with electronic circuits. The control program may be a program for causing a plurality of processors to function as the various processing units.

[0026] The registration processing unit 111 registers the content to be played. Specifically, when the registration processing unit 111 receives an operation to register the content to be played in an operation folder from a specific user, the registration processing unit 111 registers the content in the operation folder. FIG. 3 shows operation folders F1 and F2 that can be accessed from the user terminal 3. For example, the user terminal 3 displays the operation folders F1 and F2 in the server 1 by starting a signage application (Web application) and executing browser processing. A plurality of users having operation authority are registered in the operation folders F1 and F2, respectively.

[0027] For example, a user who has the operation authority for operation folder F1 opens operation folder F1 on the user terminal 3, and performs an operation to register contents C1 and C2 to be played in operation folder F1. The registration processing unit 111 registers contents C1 and C2 in playlist X in response to the user's operation. Similarly, a user who has the operation authority for operation folder F2 opens operation folder F2 on the user terminal 3, and performs an operation to register contents C3 and C4 to be played in operation folder F2. The registration processing unit 111 registers contents C3 and C4 in playlist Y in response to the user's operation.

[0028] In this way, each user can execute the Web application on the user terminal 3, access a predetermined operation folder for which the user has operation authority, and register content to be played back.

[0029] When the user selects access information for accessing the data to be accessed, the setting processor 112 sets password information required to access the data to be accessed in a predetermined operation folder previously associated with the access information. The access information is information including a URL for accessing the data to be accessed via the network N1.

[0030] Specifically, the setting processing unit 112 sets the access information in the operation folder. For example, the setting processing unit 112 registers a URL for accessing the access target data d1 in the authentication information D1 in association with the operation folder F1 (see FIG. 2). The setting processing unit 112 also generates an access file A1 (HTML file) including a URL for accessing the access target data d1, and writes the access file A1 in the operation folder F1 (see FIG. 3).

[0031] Similarly, the setting processing unit 112 registers a URL for accessing the access target data d2 in the authentication information D1 in association with the operation folder F2 (see FIG. 2). The setting processing unit 112 also generates an access file A2 (HTML file) including a URL for accessing the access target data d2, and writes the access file A2 to the operation folder F2 (see FIG. 3). In this way, the setting processing unit 112 sets a URL for each operation folder, and writes an access file (HTML file) including the URL to the operation folder.

[0032] Furthermore, when access information (access file) is selected by the user, the setting processing unit 112 sets a password in the operation folder. For example, when the user selects the access file A1 written in the operation folder F1, the setting processing unit 112 sets a password ("pass1") in the operation folder F1. The registration processing unit 111 associates the operation folder ID ("F001") and password ("pass1") of the operation folder F1 with each other and registers them in the authentication information D1 (see FIG. 2).

[0033] Furthermore, the setting processing unit 112 generates a password file Pf including the set password, and writes the file Pf into the operation folder F1 corresponding to the user terminal 3 (see FIG. 4).

[0034] The authentication processing unit 113 performs authentication of access to the data to be accessed based on password information included in the access request obtained from the user terminal 3. For example, when a user wants to access the data to be accessed d1, the user selects the access file A1 in the operation folder F1 on the user terminal 3. When the user terminal 3 accepts the selection operation of the access file A1, it transmits the access request to the server 1. The authentication processing unit 113 obtains the access request for the data to be accessed d1 from the user terminal 3. Here, the access request includes password information. For example, when the user selects the access file A1 in the operation folder F1, the user terminal 3 reads out the password from the password file Pf written in the operation folder F1, and transmits the password to the server 1 together with the access request.

[0035] The authentication processing unit 113 authenticates the access to the data to be accessed when the password information included in the access request matches the password information registered in the storage unit 12 (authentication information D1). For example, the authentication processing unit 113 authenticates the access to the data to be accessed d1 when the password included in the access request to the data to be accessed d1 matches the password ("pass1") associated with the operation folder F1 (see FIG. 2).

[0036] Furthermore, if the password included in the access request for the access target data d1 does not match the password ("pass1") associated with the operation folder F1, the authentication processing unit 113 denies access to the access target data d1.

[0037] When the authentication processing unit 113 authenticates the access to the access target data, the authentication processing unit 113 permits a user who has the operation authority of the operation folder to perform setting operations on the setting information. For example, when the authentication processing unit 113 authenticates the access to the access target data d1, the authentication processing unit 113 permits a user who has the operation authority of the operation folder F1 to perform setting operations related to the playback settings of the content. FIG. 5 shows an example of an operation screen for the playback settings of the content corresponding to the access target data d1. When the access to the access target data d1 is authenticated, the user can perform various setting operations related to the playback of the content corresponding to the access target data d1 on the user terminal 3. That is, the user can perform content registration operations and setting operations related to the playback of the content by executing a Web application on the user terminal 3.

[0038] The distribution processing unit 114 distributes the content to the display device 2. Specifically, the distribution processing unit 114 transmits display data including a playlist corresponding to the display device 2 and content data to the display device 2. Upon acquiring the display data from the server 1, the display device 2 reproduces the content based on the playlist.

[0039] [User terminal 3] 1, the user terminal 3 includes a control unit 31, a storage unit 32, an operation display unit 33, and a communication unit 34. The user terminal 3 is an information processing device such as a personal computer, a smartphone, or a tablet terminal.

[0040] The communication unit 34 is a communication interface for connecting the user terminal 3 to the network N1 by wire or wirelessly, and for executing data communication between the server 1 and the display device 2 via the network N1 in accordance with a predetermined communication protocol.

[0041] The operation display unit 33 is a user interface that includes a display unit such as a liquid crystal display or an organic EL display that displays information such as various web pages, and an operation unit such as a mouse, a keyboard, or a touch panel that accepts operations. For example, the operation display unit 33 displays a screen executed by a web application.

[0042] The storage unit 32 is a non-volatile storage unit such as an HDD, SSD, or flash memory that stores various information. For example, a control program such as a browser program is stored in the storage unit 32. Specifically, the browser program is a control program that causes the control unit 31 to execute communication processing with an external device such as the server 1 according to a communication protocol such as HTTP (Hypertext Transfer Protocol). The browser program may also be a dedicated application for executing communication processing with the server 1 according to a predetermined communication protocol.

[0043] The control unit 31 has control devices such as a CPU, a ROM, and a RAM. The CPU is a processor that executes various arithmetic processing. The ROM is a non-volatile storage unit in which control programs such as a BIOS and an OS for causing the CPU to execute various processes are stored in advance. The RAM is a volatile or non-volatile storage unit that stores various information, and is used as a temporary storage memory (work area) for various processes executed by the CPU. The control unit 31 controls the user terminal 3 by executing, by the CPU, various control programs stored in advance in the ROM or the storage unit 32.

[0044] Specifically, the control unit 31 includes various processing units such as a display processing unit 311, a reception processing unit 312, and a transmission processing unit 313. The control unit 31 functions as the various processing units by executing various processes according to the control program. Some or all of the processing units included in the control unit 31 may be configured with electronic circuits. The control program may be a program for causing a plurality of processors to function as the various processing units.

[0045] The display processing unit 311 causes a display screen of a Web application to be displayed on the operation display unit 33. For example, when a user logs in to a Web application on the user terminal 3, the display processing unit 311 causes the operation display unit 33 to display various operation screens.

[0046] The reception processing unit 312 receives various operations for the Web application from the user. For example, the reception processing unit 312 receives an operation to register content to be played back from the user. When the reception processing unit 312 receives a content registration operation, the registration processing unit 111 of the server 1 registers the content in a playlist.

[0047] The reception processing unit 312 also receives a selection operation of access information for accessing the access target data from the user. For example, when an access file A1 (HTML file) including a URL for accessing the access target data d1 is written in the operation folder F1 (see FIG. 3), if the user selects the access file A1 in the operation folder F1, the reception processing unit 312 receives the selection operation of the access file A1.

[0048] When the reception processing unit 312 receives a user's operation to select the access file A1, the transmission processing unit 313 transmits an access request to the server 1. Here, the transmission processing unit 313 transmits an access request for the access target data d1 to the server 1 based on the access file A1 (HTML file).

[0049] When the server 1 authenticates the access request, the display processing unit 311 causes the operation display unit 33 to display an operation screen (see FIG. 5) for playback settings of the content corresponding to the access target data d1. This allows the user to perform various setting operations related to the playback of the content corresponding to the access target data d1. In other words, a user who has the operation authority for the operation folder F1 can perform setting operations on the setting information.

[0050] As another embodiment, the transmission processing unit 313 may transmit an access request for the access target data d1 to the server 1 when the operation folder F1 in which the access file A1 is stored and the folder for which the password is set are the same folder.

[0051] [Authentication process] Hereinafter, an example of the procedure of the authentication process executed by signage system 10 will be described with reference to FIG.

[0052] The present disclosure can be understood as an invention of an authentication method that executes one or more steps included in the authentication process. One or more steps included in the authentication process described here may be omitted as appropriate. The steps in the authentication process may be executed in a different order as long as the same action and effect is achieved. Furthermore, although an example is described here in which the control unit 11 of the server 1 and the control unit 31 of the user terminal 3 execute the steps in the authentication process, in other embodiments, multiple processors may execute the steps in the authentication process in a distributed manner.

[0053] Here, an authentication process will be described in which a user having operation authority for the operation folder F1 (eg, operation authority for registering content) accesses the access target data d1 and performs setting operations related to content playback settings.

[0054] First, in step S1, the control unit 31 of the user terminal 3 transmits an access request for the access target data d1 to the server 1. For example, when the user wishes to access the access target data d1 on the user terminal 3, the user selects an access file A1 (HTML file) written in advance in the operation folder F1. The access file A1 includes a URL for accessing the access target data d1. When the user selects the access file A1, the control unit 31 transmits an access request to the server 1.

[0055] When the control unit 11 of the server 1 receives an access request from the user terminal 3, in step S2, it sets a password in the operation folder that is the source of the access request. For example, when the user selects an access file A1 registered in the operation folder F1, the control unit 11 sets a password ("pass1") in the operation folder F1. The control unit 11 also associates the operation folder ID ("F001") and password ("pass1") of the operation folder F1 with each other and registers them in the authentication information D1 (see FIG. 2).

[0056] The control unit 11 also generates a password file Pf including the set password ("pass1") and writes it to the operation folder F1. Fig. 6 shows a schematic diagram of the password file Pf being written to the operation folder F1. In this manner, when the access file A1 is selected, the control unit 11 sets a password (password file Pf) in the operation folder F1 (see Fig. 2) associated with the URL (access information) included in the access file A1.

[0057] When the process of writing the password file Pf into the operation folder F1 is completed, the control unit 11 transmits a writing completion notification to the user terminal 3 in step S3.

[0058] When the control unit 31 of the user terminal 3 receives the write completion notification from the server 1, in step S4, it again transmits an access request to the server 1. Specifically, the control unit 31 reads out the password from the password file Pf written in the operation folder F1, and transmits the password to the server 1 together with the access request.

[0059] When the control unit 11 of the server 1 again receives an access request from the user terminal 3, the control unit 11 executes an authentication process in step S5. Specifically, the control unit 11 determines whether or not the password included in the access request matches the password registered in the authentication information D1 (see FIG. 2), and if it is determined that the two match, it authenticates the access to the data to be accessed. For example, the control unit 11 authenticates (permits) the access to the data to be accessed d1 when the password included in the access request to the data to be accessed d1 matches the password ("pass1") associated with the operation folder F1 (see FIG. 2).

[0060] On the other hand, if the password included in the access request for the access target data d1 does not match the password ("pass1") associated with the operation folder F1, the control unit 11 denies access to the access target data d1.

[0061] When the control unit 11 authenticates the access to the access target data d1, it permits the user who has the operation authority of the operation folder F1 to perform setting operations related to the playback settings of the content. When the access to the access target data d1 is authenticated, the control unit 31 of the user terminal 3 displays an operation screen (see FIG. 5) for the playback settings of the content corresponding to the access target data d1 and accepts the user's setting operations. This allows the user to perform various setting operations related to the playback of the content corresponding to the access target data d1 on the operation screen of the user terminal 3.

[0062] In this manner, the server 1 and the user terminal 3 execute the authentication process. In addition, the server 1 and the user terminal 3 execute the authentication process every time they receive an access request from the user terminal 3.

[0063] As described above, signage system 10 is a system that authenticates access to data to be accessed, and includes a setting processing unit 112 that, when access information for accessing the data to be accessed is selected by a user, sets password information required to access the data to be accessed in a predetermined operation folder that is pre-associated with the access information, a transmission processing unit 313 that transmits an access request including the password information based on the access information, and an authentication processing unit 113 that authenticates access to the data to be accessed based on the password information included in the access request.

[0064] According to the above configuration, for example, when a user selects access information (URL) for accessing the access target data d1, password information required to access the access target data d1 is set in a predetermined operation folder F1 (see FIG. 2) that is previously associated with the access information, and an access request including the password information is transmitted to the server 1. Then, the server 1 authenticates the access to the access target data d1 based on the password information included in the access request.

[0065] As a result, for example, when a third party who does not have access authority to the access target data d1 illegally obtains the access information and tries to access the access target data d1 based on the access information, the server 1 does not perform authentication, so that the illegal access can be prevented. For example, as shown in FIG. 7, when a third party writes (copies) an access file A1 (URL) written in an operation folder F1 to an operation folder F5 to which the third party has access authority and selects the access file A1 (S11), the control unit 11 of the server 1 sets a password ("pass1") and writes a password file Pf (S12) to the operation folder F1 (see FIG. 2) to which the URL (access information) included in the access file A1 is associated, and transmits a writing completion notice to the user terminal 3 of the operation folder F1. In this case, since the password file Pf is not written to the operation folder F5 that the third party can operate, the user terminal 3 of the third party cannot transmit an access request including a password to the server 1, and the process is interrupted. As a result, access to the access target data d1 via the operation folder F5 is denied, so that the illegal access to the access target data d1 can be prevented.

[0066] Furthermore, according to the configuration of this embodiment, there is no need to set separate access permissions for the target data d1 for a user who has access permissions for the operation folder F1, and the user can access the target data d1, thereby improving the operability of accessing the target data.

[0067] In another embodiment of the present disclosure, the password set for the operation folder may be a password (one-time password) that is issued at regular intervals and can be used only once, thereby improving the security of access to the data to be accessed.

[0068] [Disclosure Note] The following will provide an overview of the disclosure extracted from each of the above-described embodiments. Note that the configurations and processing functions described in the following supplementary notes can be selected and combined as desired.

[0069] <Appendix 1> An authentication system for authenticating access to data to be accessed, comprising: a setting processing unit that, when access information for accessing the access target data is selected by a user, sets password information required to access the access target data in a predetermined operation folder that is pre-associated with the access information; a transmission processing unit that transmits an access request including the password information based on the access information; an authentication processing unit that performs authentication of the access to the access target data based on the password information included in the access request; An authentication system comprising:

[0070] <Appendix 2> the transmission processing unit transmits the access request when the operation folder in which the access information is stored and the folder in which the password information is set are the same folder. 2. An authentication system as described in Appendix 1.

[0071] <Appendix 3> a registration processing unit that registers the identification information of the operation folder and the password information in a storage unit in association with each other; the authentication processing unit authenticates the access to the access target data when the password information included in the access request matches the password information registered in the storage unit. 3. An authentication system according to claim 1 or 2.

[0072] <Appendix 4> The password information is a one-time password. 4. An authentication system according to any one of claims 1 to 3.

[0073] <Appendix 5> the access information includes a URL for accessing the access target data via a network; An authentication system according to any one of appendix 1 to 4.

[0074] <Appendix 6> The access target data is setting information related to content playback, accepting an operation to register content to be played back in the operation folder from a predetermined user; when authenticating the access, the authentication processing unit permits the predetermined user having an operation authority of the operation folder to perform a setting operation on the setting information. 6. An authentication system according to any one of claims 1 to 5. [Explanation of symbols]

[0075] 1: Server 2:Display device 3: User device 10: Signage system 11: Control section 31: Control section 111: Registration processing unit 112: Setting processing section 113: Authentication processing unit 114: Distribution processing unit 311: Display processing unit 312: Reception department 313: Transmission processing unit A1: Access File A2: Access File C1: Content C2: Content C3: Content C4: Content D1: Authentication information F1 :Operation Folder F2 :Operation Folder F5 :Operation Folder Pf : Password file X: Playlist Y : Playlist d1: Data to be accessed d2: Data to be accessed

Claims

1. An authentication system for authenticating access to data to be accessed, comprising: a setting processing unit that, when access information for accessing the access target data is selected by a user, sets password information required to access the access target data in a predetermined operation folder that is pre-associated with the access information; a transmission processing unit that transmits an access request including the password information based on the access information; an authentication processing unit that performs authentication of the access to the access target data based on the password information included in the access request; An authentication system comprising:

2. the transmission processing unit transmits the access request when the operation folder in which the access information is stored and the folder in which the password information is set are the same folder. The authentication system according to claim 1 .

3. a registration processing unit that registers the identification information of the operation folder and the password information in a storage unit in association with each other; the authentication processing unit authenticates the access to the access target data when the password information included in the access request matches the password information registered in the storage unit. The authentication system according to claim 2 .

4. The password information is a one-time password. The authentication system according to any one of claims 1 to 3.

5. the access information includes a URL for accessing the access target data via a network; The authentication system according to any one of claims 1 to 3.

6. The access target data is setting information related to content playback, accepting an operation to register content to be played back in the operation folder from a predetermined user; when authenticating the access, the authentication processing unit permits the predetermined user having an operation authority of the operation folder to perform a setting operation on the setting information.

4. An authentication system according to claim 2 or 3.

7. 1. An authentication method for authenticating access to data to be accessed, comprising: When access information for accessing the access target data is selected by a user, password information required to access the access target data is set in a predetermined operation folder previously associated with the access information; transmitting an access request including the password information based on the access information; performing authentication of access to the access target data based on the password information included in the access request; An authentication method performed by one or more processors.

8. An authentication program for authenticating access to data to be accessed, When access information for accessing the access target data is selected by a user, password information required to access the access target data is set in a predetermined operation folder previously associated with the access information; transmitting an access request including the password information based on the access information; performing authentication of access to the access target data based on the password information included in the access request; A certified program for executing the above on one or more processors.

Images