Gateway device, authentication system, authentication method, and program

Abstract

To provide a gateway device that can prevent unauthorized access to the gateway device without incurring significant costs. [Solution] The gateway device according to this disclosure includes: an authorization information acquisition unit that acquires authorization information including telephone numbers authorized to access the device; a telephone number acquisition unit that acquires telephone numbers of terminals accessing the device; an identification information acquisition unit that acquires terminal identification information; and an authentication unit that performs telephone authentication of the terminal based on the authorization information, the terminal's telephone number, and the terminal's identification information. The authentication unit determines that telephone authentication is successful if the terminal's telephone number is included in the authorization information and the terminal identification information when the terminal accesses the device matches the terminal identification information when the terminal makes a call to a telephone via the device.

Description

Technical Field

[0001] The present disclosure relates to a gateway device, an authentication system, an authentication method, and a program.

Background Art

[0002] In recent years, due to unauthorized access to a Home Gateway (HGW) that connects a public network and a home network, there has been an increasing problem that the settings of the HGW are changed without the user's knowledge. As a method for preventing unauthorized access, there is a method of performing password authentication on a terminal accessing the HGW and permitting access only to a terminal that has successfully authenticated. However, due to security vulnerabilities and leakage of authentication information due to wiretapping of communication, it may be difficult to prevent unauthorized access even by password authentication.

[0003] Also, telephone authentication can be mentioned as a method other than password authentication. As a related technique, Patent Document 1 discloses a license authentication system including an authentication server that performs license authentication of software, a communication terminal that operates the software, and a telephone owned by a user of the communication terminal. The authentication server stores, in an authentication information database, in association with each other, a key code of software installed in the communication terminal and a telephone number of the telephone owned by the user of the communication terminal. When there is an incoming call from the telephone via a telephone line network, the authentication server detects the telephone number of the telephone and collates the key code of the software transmitted from the communication terminal and the detected telephone number with the information stored in the authentication information database. Thereby, the authentication server performs license authentication of the software.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] The technology disclosed in Patent Document 1 requires the installation of an external server for telephone authentication. Therefore, there is a problem in that system implementation incurs significant costs.

[0006] In light of the aforementioned challenges, the purpose of this disclosure is to provide a gateway device, an authentication system, an authentication method, and a program that can prevent unauthorized access to the gateway device without incurring significant costs. [Means for solving the problem]

[0007] The gateway device related to this disclosure is A permission information acquisition unit that acquires permission information, including telephone numbers authorized to access the device, A telephone number acquisition unit that obtains the telephone number of a terminal accessing the device, An identification information acquisition unit that acquires the identification information of the aforementioned terminal, An authentication unit that performs telephone authentication of the terminal based on the aforementioned permission information, the terminal's telephone number, and the terminal's identification information, Equipped with, The telephone number acquisition unit acquires the telephone number of the terminal when the terminal makes a call to a telephone through its device. The identification information acquisition unit acquires the identification information of the terminal when the terminal accesses the device and the identification information of the terminal when the terminal makes a call to the telephone via the device. The authentication unit determines that telephone authentication has been successful if the telephone number of the terminal is included in the authorization information, and the identification information of the terminal when the terminal accesses the device matches the identification information of the terminal when the terminal makes a call to the telephone via the device.

[0008] The authentication system related to this disclosure is Gateway device and A telephone connected to the gateway device, A terminal that accesses the gateway device, Equipped with, The gateway device is A permission information acquisition unit that acquires permission information, including telephone numbers authorized to access the device, A telephone number acquisition unit that acquires the telephone number of the terminal accessing the device, An identification information acquisition unit that acquires the identification information of the aforementioned terminal, An authentication unit that performs telephone authentication of the terminal based on the aforementioned permission information, the terminal's telephone number, and the terminal's identification information, It has, The telephone number acquisition unit acquires the telephone number of the terminal when the terminal makes a call to the telephone via its device. The identification information acquisition unit acquires the identification information of the terminal when the terminal accesses the device and the identification information of the terminal when the terminal makes a call to the telephone via the device. The authentication unit determines that telephone authentication has been successful if the telephone number of the terminal is included in the authorization information, and the identification information of the terminal when the terminal accesses the device matches the identification information of the terminal when the terminal makes a call to the telephone via the device.

[0009] The authentication method related to this disclosure is: A permission information acquisition step to obtain permission information, including telephone numbers authorized to access the device, A phone number acquisition step to obtain the phone number of a terminal accessing the device, An identification information acquisition step for acquiring the identification information of the aforementioned terminal, An authentication step in which telephone authentication of the terminal is performed based on the permission information, the telephone number of the terminal, and the identification information of the terminal, Includes, The aforementioned telephone number acquisition step includes acquiring the telephone number of the terminal when the terminal makes a call to a telephone via its own device, The identification information acquisition step includes acquiring the identification information of the terminal when the terminal accesses the device, and acquiring the identification information of the terminal when the terminal makes a call to the telephone via the device. The authentication step includes determining that the telephone authentication has been successful if the telephone number of the terminal is included in the authorization information and the identification information of the terminal when the terminal accesses the device matches the identification information of the terminal when the terminal makes a call to the telephone via the device.

[0010] The program related to this disclosure is A permission information acquisition step to obtain permission information, including telephone numbers authorized to access the device, A phone number acquisition step to obtain the phone number of a terminal accessing the device, An identification information acquisition step for acquiring the identification information of the aforementioned terminal, An authentication step in which telephone authentication of the terminal is performed based on the permission information, the telephone number of the terminal, and the identification information of the terminal, Have the computer run it, The aforementioned telephone number acquisition step includes acquiring the telephone number of the terminal when the terminal makes a call to a telephone via its own device, The identification information acquisition step includes acquiring the identification information of the terminal when the terminal accesses the device, and acquiring the identification information of the terminal when the terminal makes a call to the telephone via the device. The authentication step includes determining that the telephone authentication has been successful if the telephone number of the terminal is included in the authorization information and the identification information of the terminal when the terminal accesses the device matches the identification information of the terminal when the terminal makes a call to the telephone via the device. [Effects of the Invention]

[0011] The gateway device, authentication system, authentication method, and program according to the present disclosure can prevent unauthorized access to the gateway device without incurring significant costs.

Brief Description of the Drawings

[0012] [Figure 1] FIG. 1 is a block diagram showing the configuration of a gateway device according to the present disclosure. [Figure 2] FIG. 2 is a flowchart showing the flow of processing performed by the gateway device according to the present disclosure. [Figure 3] FIG. 3 is a block diagram showing the configuration of an authentication system according to the present disclosure. [Figure 4] FIG. 4 is a sequence diagram showing the flow of permission list registration processing performed by the authentication system according to the present disclosure. [Figure 5] FIG. 5 is a sequence diagram showing the flow of authentication processing performed by the authentication system according to the present disclosure. [Figure 6] FIG. 6 is a block diagram showing the configuration of an authentication system according to the present disclosure. [Figure 7] FIG. 7 is a sequence diagram showing the flow of authentication processing performed by the authentication system according to the present disclosure. [Figure 8] FIG. 8 is a block diagram exemplifying the hardware configuration of a computer that realizes a gateway device or the like according to the present disclosure.

Embodiments for Carrying Out the Invention

[0013] Hereinafter, embodiments of the present disclosure will be described in detail with reference to the drawings. In each drawing, the same or corresponding elements are denoted by the same reference numerals. For the sake of clarity of explanation, duplicate explanations are omitted as necessary.

[0014] <Embodiment 1> (Gateway Device 10) Figure 1 is a block diagram showing the configuration of the gateway device 10 according to this disclosure. The gateway device 10 includes an authorization information acquisition unit 11, a telephone number acquisition unit 12, an identification information acquisition unit 13, and an authentication unit 14.

[0015] The authorization information acquisition unit 11 acquires authorization information, including telephone numbers that are authorized to access the gateway device 10 (itself).

[0016] The telephone number acquisition unit 12 acquires the telephone number of a terminal accessing the gateway device 10. For example, the telephone number acquisition unit 12 acquires the telephone number of a terminal when the terminal makes a call to a telephone via the gateway device 10.

[0017] The identification information acquisition unit 13 acquires the identification information of the terminal. For example, the identification information acquisition unit 13 acquires the identification information of the terminal when the terminal accesses the gateway device 10. The identification information acquisition unit 13 also acquires the identification information of the terminal when the terminal makes a call to a telephone via the gateway device 10.

[0018] The authentication unit 14 performs telephone authentication of the terminal based on the authorization information, the terminal's telephone number, and the terminal's identification information. For example, the authentication unit 14 determines that telephone authentication of the terminal is successful if the terminal's telephone number is included in the authorization information and the terminal's identification information when the terminal accesses the gateway device 10 matches the terminal's identification information when the terminal makes a call to a telephone via the gateway device 10.

[0019] The gateway device 10 includes a processor, memory, and storage device (not shown in the diagram). The storage device stores a computer program on which the processing described herein is implemented. The processor can load the computer program from the storage device into memory and execute the computer program. In this way, the processor realizes the functions of the authorization information acquisition unit 11, the telephone number acquisition unit 12, the identification information acquisition unit 13, and the authentication unit 14.

[0020] Alternatively, the authorization information acquisition unit 11, the telephone number acquisition unit 12, the identification information acquisition unit 13, and the authentication unit 14 may each be implemented with dedicated hardware. Furthermore, some or all of each component may be implemented by general-purpose or dedicated circuits, processors, etc., or combinations thereof. These may be configured by a single chip or by multiple chips connected via a bus. Some or all of each component may be implemented by a combination of the aforementioned circuits, etc., and programs.

[0021] (Processing by gateway device 10) The process performed by the gateway device 10 will be explained with reference to Figure 2. Figure 2 is a flowchart showing the flow of the process performed by the gateway device 10.

[0022] First, the authorization information acquisition unit 11 acquires authorization information, including telephone numbers authorized to access the gateway device 10 (S1). Next, the identification information acquisition unit 13 acquires the identification information of the terminal when it accesses the gateway device 10 (S2). Subsequently, the telephone number acquisition unit 12 acquires the telephone number of the terminal accessing the gateway device 10 (S3). For example, the telephone number acquisition unit 12 acquires the telephone number of the terminal when it makes a call to a telephone via the gateway device 10.

[0023] Next, the identification information acquisition unit 13 acquires the identification information of the terminal when the terminal makes a call to the telephone via the gateway device 10 (S4). The authentication unit 14 performs telephone authentication of the terminal based on the authorization information, the terminal's telephone number, and the terminal's identification information (S5). First, the authentication unit 14 determines whether the terminal's telephone number is included in the authorization information (S6).

[0024] If the authentication unit 14 determines that the terminal's phone number is included in the authorization information (YES in S6), it determines whether the terminal's identification information when the terminal accessed the gateway device 10 matches the terminal's identification information when the terminal made a call to the telephone via the gateway device 10 (S7). If the authentication unit 14 determines that the two pieces of identification information match (YES in S7), it determines that the phone authentication of the terminal was successful (S8). If the authentication unit 14 determines that the terminal's phone number is not included in the authorization information (NO in S6), or if the two pieces of identification information do not match (NO in S7), it determines that the phone authentication of the terminal failed (S9).

[0025] As explained above, the gateway device 10 described in this disclosure allows for telephone authentication of terminals accessing the gateway device 10 without the need to install an external server. This enables the gateway device 10 to prevent unauthorized access without incurring significant costs.

[0026] <Embodiment 2> Next, Embodiment 2 will be described. Embodiment 2 is a specific example of Embodiment 1 described above. First, an overview of the authentication system 3000 related to this disclosure will be explained.

[0027] (Authentication System 3000) Figure 3 is a block diagram showing the configuration of the authentication system 3000. The authentication system 3000 comprises an HGW 3100 (its own device), a telephone 3200, Wi-Fi (registered trademark, hereinafter the same) 3300, and a wireless terminal 3400. The telephone 3200 is connected to the HGW 3100 via a telephone interface 3140. The wireless terminal 3400 accesses the HGW 3100 via Wi-Fi 3300. Note that the bidirectional arrows shown in Figure 3 simply illustrate the flow of information (data or signals, etc.) and do not exclude the possibility of one-way information flow.

[0028] The authentication system 3000 can be applied to authentication technology that utilizes telephone functions. The authentication system 3000 authenticates the wireless terminal 3400 that accesses the HGW 3100, thereby verifying that the user using the wireless terminal 3400 is not performing unauthorized access to the HGW 3100. The authentication system 3000 provides a means of telephone authentication that allows access only to authorized terminals by performing authentication using the telephone 3200.

[0029] Specifically, the HGW3100 creates an authorized list of telephone numbers that are permitted to connect by making a call between the telephone 3200 and the wireless terminal 3400 that accesses the HGW3100. The authorized list is an example of the authorization information described in Embodiment 1. The authorization information includes telephone numbers that are permitted to access the HGW3100.

[0030] The authorization list is, for example, a list of telephone numbers that are permitted to access the HGW3100. For example, the authorization list may be a list that associates a terminal ID, which identifies a terminal permitted to access the HGW3100, with the terminal's telephone number. The authorization list may contain multiple telephone numbers that are permitted to access. Alternatively, authorization information may be created in a form other than a list instead of an authorization list.

[0031] When wireless terminal 3400 accesses HGW3100, wireless terminal 3400 makes a call to telephone 3200 via HGW3100. HGW3100 obtains the telephone number of wireless terminal 3400 and identification information to identify wireless terminal 3400. In the following, the MAC (Media Access Control) address of wireless terminal 3400 is used as an example of identification information. However, other information may be used as identification information.

[0032] The HGW3100 performs telephone authentication of the wireless terminal 3400 using the wireless terminal 3400's telephone number and MAC address. The HGW3100 determines that the wireless terminal 3400 has successfully completed telephone authentication if the wireless terminal 3400's telephone number and MAC address meet predetermined conditions.

[0033] The specified conditions include, for example, that the telephone number of wireless terminal 3400 is included in the allowed list, and that the MAC address of wireless terminal 3400 when accessing HGW3100 matches the MAC address of wireless terminal 3400 when making a call to telephone 3200 via HGW3100. If telephone authentication is determined to be successful, HGW3100 grants wireless terminal 3400 access to HGW3100.

[0034] In this way, the authentication system 3000 can perform telephone authentication of the wireless terminal 3400 accessing the HGW 3100 without requiring an external server. The following describes the configurations of the HGW 3100, telephone 3200, Wi-Fi 3300, and wireless terminal 3400 provided by the authentication system 3000, continuing with reference to Figure 3.

[0035] (HGW3100) HGW3100 is an example of the gateway device 10 described in Embodiment 1. HGW3100 performs communication control related to access by the wireless terminal 3400 and calls by the telephone 3200. HGW3100 is, for example, a gateway device equipped with VoIP (Voice over Internet Protocol) functionality. Here, an HGW used in a home is used as an example of a gateway device, but this disclosure is not limited thereto. The authentication system 3000 may include a gateway device used in, for example, a commercial facility or an office.

[0036] The HGW3100 comprises a control unit 3110, a storage unit 3120, a determination unit 3130, a telephone interface 3140, and a Wi-Fi interface 3150.

[0037] The control unit 3110 controls the entire HGW3100. The control unit 3110 comprises a memory unit control unit 3111, a determination unit control unit 3112, a Wi-Fi control unit 3113, and a telephone control unit 3114.

[0038] The memory control unit 3111 acquires various types of information, writes the acquired information to the memory unit 3120, and reads it from the memory unit 3120. The memory control unit 3111 is an example of the permission information acquisition unit 11 and identification information acquisition unit 13 described in Embodiment 1. The memory control unit 3111 also has a registration unit (not shown) function that pre-registers telephone numbers authorized to access the HGW3100 as registered permission information. The following describes each of these functions.

[0039] When a call is established between the telephone 3200 and the wireless terminal 3400, the memory control unit 3111 (registration unit) receives input from the telephone 3200 indicating whether or not to allow the wireless terminal 3400 to access the HGW 3100. If the memory control unit 3111 receives input indicating that access is to be allowed, it pre-registers the telephone number of the wireless terminal 3400 as an allowed list (registered permission information) in the permission list memory unit 3121.

[0040] The memory control unit 3111 (authorization information acquisition unit) acquires authorization information, including telephone numbers authorized to access the HGW3100. For example, the memory control unit 3111 acquires the authorization list (registered authorization information) stored in the authorization list memory unit 3121 as authorization information.

[0041] Furthermore, the memory unit control unit 3111 (identification information acquisition unit) acquires the MAC address (identification information) of the wireless terminal 3400. For example, the memory unit control unit 3111 acquires the MAC address of the wireless terminal 3400 when it accesses the HGW 3100. For example, the control unit 3110 outputs an operation screen (WebGUI: Web Graphical User Interface) that accepts operations from the wireless terminal 3400 to the display unit. The display unit is, for example, the display of the wireless terminal 3400, but is not limited to this. The memory unit control unit 3111 acquires the MAC address of the wireless terminal 3400 that accessed the WebGUI.

[0042] Furthermore, the memory control unit 3111 obtains the MAC address of the wireless terminal 3400 when the wireless terminal 3400 makes a call to the telephone 3200 via the HGW 3100.

[0043] The determination control unit 3112 is an example of the authentication unit 14 described in Embodiment 1. The determination control unit 3112 (authentication unit) transmits the data necessary for telephone authentication to the determination unit 3130 and receives the telephone authentication result from the determination unit 3130. The determination control unit 3112 performs telephone authentication of the wireless terminal 3400 based on the permission list, the telephone number of the wireless terminal 3400, and the MAC address of the wireless terminal 3400.

[0044] The determination unit control 3112 determines that telephone authentication for the wireless terminal 3400 has been successful if the telephone number of the wireless terminal 3400 is included in the authorization information, and the MAC address of the wireless terminal 3400 when it accessed the HGW 3100 matches the MAC address of the wireless terminal 3400 when it made a call to the telephone 3200 via the HGW 3100. If it determines that telephone authentication for the wireless terminal 3400 has been successful, the determination unit control 3112 permits the wireless terminal 3400 to access the HGW 3100.

[0045] The determination control unit 3112 may perform password authentication in addition to telephone authentication. For example, the determination control unit 3112 accepts a password input from the wireless terminal 3400. Also, for example, the storage unit 3120 has registered passwords used for password authentication in advance. The determination control unit 3112 performs password authentication based on the accepted password and the registered password. If the wireless terminal 3400 succeeds in both telephone authentication and password authentication, the determination control unit 3112 allows the wireless terminal 3400 to access the HGW 3100.

[0046] If the determination control unit 3112 determines that telephone authentication, or both telephone authentication and password authentication, has been successful for the wireless terminal 3400, it grants access to the HGW 3100 from the wireless terminal 3400 and notifies that the authentication performed was successful. The determination control unit 3112 may also display on the display unit that the authentication performed was successful. For example, the determination control unit 3112 may display a message on the WebGUI indicating that access has been granted.

[0047] The Wi-Fi control unit 3113 receives data from and transmits data to the Wi-Fi 3300 via the Wi-Fi interface 3150. While Wi-Fi is used as the communication method here, it is not limited to this. Other short-range communication methods, such as Bluetooth (registered trademark, hereinafter the same), may also be used.

[0048] The telephone control unit 3114 performs telephone control functions such as making calls to the wireless terminal 3400, receiving calls from the wireless terminal 3400, making calls with the wireless terminal 3400, and ending calls, via the telephone interface 3140. The telephone control unit 3114 also controls announcement voices and other functions.

[0049] Furthermore, the telephone control unit 3114 is an example of the telephone number acquisition unit 12 described in Embodiment 1. The telephone control unit 3114 (telephone number acquisition unit) acquires the telephone number of the wireless terminal 3400 that accesses the HGW 3100. Specifically, the telephone control unit 3114 acquires the telephone number of the wireless terminal 3400 when the wireless terminal 3400 makes a call to the telephone 3200 via the HGW 3100.

[0050] The storage unit 3120 stores all data related to the HGW3100. The storage unit 3120 includes an authorization list storage unit 3121 and a MAC address storage unit 3122.

[0051] The permission list storage unit 3121 stores a permission list containing telephone numbers that are authorized to access the HGW3100.

[0052] The MAC address storage unit 3122 stores the MAC address of the wireless terminal 3400 when the wireless terminal 3400 accesses the HGW 3100. The MAC address storage unit 3122 also stores the MAC address of the wireless terminal 3400 when the wireless terminal 3400 makes a call to the telephone 3200 via the HGW 3100.

[0053] The determination unit 3130 includes an allow list determination unit 3131 and a MAC address determination unit 3132. The allow list determination unit 3131 and the MAC address determination unit 3132 perform determinations regarding the allow list and MAC address, respectively, under the control of the determination unit control unit 3112.

[0054] When a call from the wireless terminal 3400 is received by the telephone 3200, the permission list determination unit 3131 refers to the permission list storage unit 3121. The permission list determination unit 3131 determines whether the telephone number of the wireless terminal 3400 is included in the permission list. For example, the permission list determination unit 3131 searches for the telephone number of the wireless terminal 3400 within the permission list. If a number matching that telephone number is found in the permission list, the permission list storage unit 3121 determines that the telephone number of the wireless terminal 3400 is included in the permission list.

[0055] The MAC address determination unit 3132 determines whether the MAC address of the wireless terminal 3400 when it accessed the HGW 3100 matches the MAC address of the wireless terminal 3400 when it made a call to the telephone 3200 via the HGW 3100. Based on this, the MAC address determination unit 3132 determines whether the terminal that accessed the wireless terminal 3400 matches the terminal that made the call to the telephone 3200.

[0056] The telephone interface 3140 is a physical interface to the telephone 3200. The Wi-Fi interface 3150 is a physical interface to the Wi-Fi 3300.

[0057] (phone 3200) Telephone 3200 is an example of the telephone described in Embodiment 1. Telephone 3200 is connected to HGW3100.

[0058] (Wi-Fi3300) Wi-Fi3300 is a network that facilitates data exchange between the HGW3100 and the wireless terminal 3400. Instead of Wi-Fi, short-range communication technologies such as Bluetooth may be used.

[0059] (Wireless terminal 3400) The wireless terminal 3400 is an example of a terminal described in Embodiment 1. While the wireless terminal 3400 is used as an example here, the terminal is not limited to a wireless terminal. The terminal may also be a wired terminal.

[0060] The wireless terminal 3400 accesses the HGW 3100 and makes calls with the telephone 3200. The wireless terminal 3400 is, for example, a PC (Personal Computer), a smartphone, or a tablet device, but is not limited to these. The wireless terminal 3400 is equipped with a telephone interface 3410 and a Wi-Fi interface 3420.

[0061] The telephone interface 3410 is a physical interface for making phone calls. The Wi-Fi interface 3420 is a physical interface for Wi-Fi 3300.

[0062] The configuration of the authentication system 3000 has been described above. The configuration of the authentication system 3000 described above is merely an example and can be modified as appropriate. For example, if some or all of the components of the authentication system 3000 are implemented by multiple information processing devices or circuits, these multiple information processing devices or circuits may be centrally located or distributed.

[0063] For example, the above description used an example in which the authorization list storage unit 3121 and the MAC address storage unit 3122 are included in the storage unit 3120, but it is not limited to this. The authorization list storage unit 3121 and the MAC address storage unit 3122 may be provided in devices other than the HGW3100.

[0064] (Processing by authentication system 3000) Next, the processes performed by the authentication system 3000 will be explained with reference to Figures 4 and 5. Figure 4 is a sequence diagram showing the flow of the permission list registration process performed by the authentication system 3000. Figure 5 is a sequence diagram showing the flow of the authentication process performed by the authentication system 3000.

[0065] (Permission list registration process) First, with reference to Figure 4, the flow of the permission list registration process will be explained. The wireless terminal 3400 accesses the WebGUI output by the control unit 3110 of the HGW3100 (S101). The HGW3100 returns a response to the access from the wireless terminal 3400 (S102).

[0066] If the telephone number of wireless terminal 3400 is not registered in the allowed list, wireless terminal 3400 accesses the registration screen of the WebGUI (S103). The control unit 3110 of HGW3100 responds to the access from wireless terminal 3400 (S104). Wireless terminal 3400 makes a call to telephone 3200 connected to HGW3100 via HGW3100 (S105). Telephone 3200 receives the call (S106) and begins a conversation with wireless terminal 3400 (S107).

[0067] When a call comes in, the telephone control unit 3114 (telephone number acquisition unit) of the control unit 3110 in the HGW3100 acquires the telephone number of the wireless terminal 3400 (S108). The telephone control unit 3114 of the control unit 3110 sends a voice announcement to the telephone 3200 informing it of how to allow / reject the call to the allow list (S109). The telephone 3200 accepts the input of allow / reject according to the transmitted allow / reject operation method using the dial buttons (S110).

[0068] If permission is entered on telephone 3200 (S110 "permission"), the memory control unit 3111 (registration unit) of the control unit 3110 in HGW3100 registers the telephone number of wireless terminal 3400 to the permission list (S111). The telephone control unit 3114 of the control unit 3110 disconnects the call between wireless terminal 3400 and telephone 3200 (S112).

[0069] The control unit 3110 of the HGW3100 transitions the WebGUI accessed by the wireless terminal 3400 to the registration completion screen (S113). If a rejection is entered on the telephone 3200 ("Rejection" in S110), the telephone control unit 3114 of the control unit 3110 disconnects the call between the wireless terminal 3400 and the telephone 3200 (S114). The control unit 3110 transitions the WebGUI accessed by the wireless terminal 3400 to the registration failure screen (S115).

[0070] (Authentication process) Next, the authentication process flow will be explained with reference to Figure 5. If the telephone number of the wireless terminal 3400 is registered in the allowed list, the wireless terminal 3400 accesses the login screen from the WebGUI (S201). The control unit 3110 of the HGW3100 returns a response to the access from the wireless terminal 3400 (S202).

[0071] The determination control unit 3112 (authentication unit) of the control unit 3110 accepts password input from the wireless terminal 3400 on the login screen (S203). The password is assumed to be set in advance by the user and stored as a registered password in the storage unit 3120 of the HGW3100. The determination control unit 3112 performs password authentication based on the accepted password and the registered password (S204).

[0072] If password authentication is successful (S204, "Authentication successful"), the control unit 3110 of the HGW3100 transitions the WebGUI accessed by the wireless terminal 3400 to the telephone authentication screen (S205). Upon transitioning to the telephone authentication screen, the storage unit control unit 3111 (identification information acquisition unit) of the control unit 3110 in the HGW3100 acquires the MAC address of the wireless terminal 3400 (S206). The storage unit control unit 3111 stores the acquired MAC address in the MAC address storage unit 3122 of the storage unit 3120.

[0073] The wireless terminal 3400 makes a call to the telephone 3200 (S207). In the HGW 3100, the telephone control unit 3114 (telephone number acquisition unit) and the storage unit control unit 3111 (identification information acquisition unit) of the control unit 3110 acquire the telephone number and MAC address of the wireless terminal 3400, respectively (S208).

[0074] In the HGW3100, the determination unit control 3112 (authentication unit) of the control unit 3110 refers to the permission list storage unit 3121 of the storage unit 3120 and checks the permission list (S209). Specifically, the determination unit control 3112 uses the permission list determination unit 3131 of the determination unit 3130 to check whether the telephone number obtained from the wireless terminal 3400 is included in the permission list.

[0075] If the telephone number obtained from the wireless terminal 3400 is included in the allowed list (S209 "Included in the allowed list"), the determination unit control unit 3112 (authentication unit) of the control unit 3110 refers to the MAC address storage unit 3122 of the storage unit 3120 and checks if the MAC addresses match (S210).

[0076] Specifically, the determination control unit 3112 performs verification using the MAC address determination unit 3132 of the determination unit 3130. The determination control unit 3112 compares the MAC address of the wireless terminal 3400 when it accesses the HGW 3100 (obtained in S206) with the MAC address of the wireless terminal 3400 when it makes a call to the telephone 3200 via the HGW 3100 (obtained in S208).

[0077] If the two MAC addresses match (S210 "match"), the determination unit control 3112 determines that authentication of the wireless terminal 3400 has been successful (S211). The control unit 3110 of the HGW3100 transitions the WebGUI to the top screen after login, indicating that the login was successful (S212).

[0078] If password authentication fails ("Authentication Failed" in S204), if the phone number is not included in the allowed list ("Not Included in Allow List" in S209), or if the MAC address does not match ("Mismatch" in S210), the determination unit control 3112 of the control unit 3110 determines that authentication of the wireless terminal 3400 has failed (S213). The control unit 3110 of the HGW3100 transitions the WebGUI to the login failure screen and determines that the login has failed (S214).

[0079] As explained above, in the authentication system 3000 related to this disclosure, the HGW 3100 obtains the telephone number of the wireless terminal 3400 when the wireless terminal 3400 makes a call to the telephone 3200 via the HGW 3100. The HGW 3100 also obtains the MAC address of the wireless terminal 3400 when the wireless terminal 3400 accesses the HGW 3100, and the MAC address of the wireless terminal 3400 when the wireless terminal 3400 makes a call to the telephone 3200 via the HGW 3100. The HGW 3100 determines that telephone authentication of the wireless terminal 3400 has been successful if the telephone number of the wireless terminal 3400 is included in the allowed list and the MAC addresses of the wireless terminal 3400 obtained at the two different times match.

[0080] With this configuration, the authentication system 3000 can perform telephone authentication for wireless terminals 3400 accessing the HGW 3100 without requiring an external server. Therefore, in environments where landline telephones are already in use, there is no need to add new equipment to implement the authentication system 3000. As a result, the authentication system 3000 can prevent unauthorized access to the HGW 3100 without incurring significant costs.

[0081] Furthermore, telephone authentication can be performed by making a call from the wireless terminal 3400 to the telephone 3200 and conducting a conversation, so users of the HGW3100 and wireless terminal 3400 do not need to perform complex operations. As a result, the authentication system 3000 can perform telephone authentication of the wireless terminal 3400 without increasing the burden on the user.

[0082] <Embodiment 3> Next, Embodiment 3 will be described. Embodiment 3 is a modified version of Embodiment 2. In the following, the differences from Embodiment 2 will be the main focus of the description, and overlapping parts will be omitted as appropriate.

[0083] (Authentication system 3000a) Figure 6 is a block diagram showing the configuration of the authentication system 3000a. The authentication system 3000a comprises a control unit 3110a, a storage unit 3120a, a determination unit 3130a, a telephone interface 3140, and a Wi-Fi interface 3150.

[0084] The authentication system 3000a differs from the authentication system 3000 of Embodiment 2 mainly in the following respects. The authentication system 3000a includes an HGW3100a which has different functions from the HGW3100. In the HGW3100a, the control unit 3110a includes a storage unit control unit 3111a and a determination unit control unit 3112a which have different functions from the storage unit control unit 3111 and the determination unit control unit 3112. Also, the storage unit 3120a includes a telephone number storage unit 3125 which replaces the permission list storage unit 3121. And the determination unit 3130a includes a telephone number determination unit 3135 which replaces the permission list determination unit 3131.

[0085] In addition to its function as the authorization information acquisition unit 11 in Embodiment 1, the memory unit control unit 3111a also has the function of an input reception unit (not shown) that accepts input of a telephone number that is permitted to access the HGW3100a. The memory unit control unit 3111a (input reception unit) may, for example, display an input form on a WebGUI to accept input of a telephone number that is permitted to access the HGW3100a. The memory unit control unit 3111a (authorization information acquisition unit) acquires the accepted telephone number as authorization information.

[0086] In Embodiment 2, a pre-registered list of permitted numbers was used as permission information, but here, instead of the permitted number list, the entered telephone number is used as permission information. Therefore, the determination unit control unit 3112a (authentication unit) performs telephone authentication of the wireless terminal 3400 based on the entered telephone number, the telephone number of the wireless terminal 3400, and the MAC address of the wireless terminal 3400.

[0087] (Processing by authentication system 3000a) Next, with reference to Figure 7, the processes performed by the authentication system 3000a will be explained. Figure 7 is a sequence diagram showing the flow of the authentication process performed by the authentication system 3000a. Although not shown in the diagram, the authentication system 3000a performs password authentication in steps S201 to S204 of Figure 5, similar to the authentication system 3000. The following explanation assumes that password authentication has been successful.

[0088] After password authentication is performed, the control unit 3110a of the HGW3100a transitions the WebGUI accessed by the wireless terminal 3400 to the telephone authentication screen (S701). Upon transitioning to the telephone authentication screen, the storage unit control unit 3111a (identification information acquisition unit) of the control unit 3110a in the HGW3100a acquires the MAC address of the wireless terminal 3400 (S702). The storage unit control unit 3111a stores the acquired MAC address in the MAC address storage unit 3122 of the storage unit 3120a.

[0089] After accessing the telephone authentication screen, the wireless terminal 3400 enters its telephone number (S703). In the HGW3100a, the memory unit control 3111a (input reception unit) of the control unit 3110a receives the entered telephone number. The memory unit control 3111a also stores the received telephone number in the telephone number storage unit 3125 of the memory unit 3120a.

[0090] The wireless terminal 3400 makes a call to the telephone 3200 (S704). The telephone 3200 receives the call (S705) and begins a conversation with the wireless terminal 3400 (S706). In the HGW3100a, the telephone control unit 3114 (telephone number acquisition unit) and the storage unit control unit 3111a (identification information acquisition unit) of the control unit 3110a acquire the telephone number and MAC address of the wireless terminal 3400, respectively (S707).

[0091] In the HGW3100a, the determination unit control 3112a (authentication unit) of the control unit 3110a refers to the telephone number storage unit 3125 of the storage unit 3120a and determines whether the acquired telephone number matches the telephone number entered in the wireless terminal 3400 (S708).

[0092] Specifically, the determination unit control unit 3112a uses the telephone number determination unit 3135 of the determination unit 3130a to check whether the telephone number obtained from the wireless terminal 3400 matches the telephone number stored in the telephone number storage unit 3125.

[0093] If the telephone number obtained from the wireless terminal 3400 matches the telephone number stored in the telephone number storage unit 3125 (match in S708), the determination unit control unit 3112a (authentication unit) of the control unit 3110a refers to the MAC address storage unit 3122 of the storage unit 3120a to check if the MAC addresses match (S709).

[0094] Specifically, the determination control unit 3112a performs verification using the MAC address determination unit 3132 of the determination unit 3130a. The determination control unit 3112a compares the MAC address of the wireless terminal 3400 when it accesses the HGW 3100a (obtained in S702) with the MAC address of the wireless terminal 3400 when it makes a call to the telephone 3200 via the HGW 3100a (obtained in S707).

[0095] If the two MAC addresses match (S709 "Match"), the telephone control unit 3114 of the control unit 3110a sends an authentication success voice announcement to the telephone 3200 (S710) and disconnects the call between the wireless terminal 3400 and the telephone 3200 (S711). The determination unit control unit 3112a of the control unit 3110a determines that authentication of the wireless terminal 3400 was successful (S712). The control unit 3110a of the HGW3100a transitions the WebGUI to the top screen after login and determines that the login was successful (S713).

[0096] If the phone numbers do not match (S708 "Mismatch") or if the MAC addresses do not match (S709 "Mismatch"), the telephone control unit 3114 of the control unit 3110a sends an authentication failure voice announcement to the telephone 3200 (S714) and disconnects the call between the wireless terminal 3400 and the telephone 3200 (S715). The determination unit control unit 3112a of the control unit 3110a determines that authentication of the wireless terminal 3400 has failed (S716). The control unit 3110a of the HGW3100a transitions the WebGUI to the login failure screen and indicates that the login has failed (S717).

[0097] As described above, the authentication system 3000a according to this disclosure can achieve the same effects as in Embodiment 2. Furthermore, since the authentication system 3000a can perform telephone authentication by entering the telephone number of the authorized terminal, there is no need to register an authorized list in advance. As a result, the authentication system 3000a can easily perform telephone authentication of terminals.

[0098] <Example Hardware Configuration> Each functional component of the gateway device 10, HGW3100, HGW3100a, wireless terminal 3400, and telephone 3200 (hereinafter referred to as "gateway device 10, etc.") may be implemented by hardware (e.g., hardwired electronic circuits) or by a combination of hardware and software (e.g., a combination of electronic circuits and programs that control them). The case in which each functional component of the gateway device 10, etc. is implemented by a combination of hardware and software will be further explained below.

[0099] Figure 8 is a block diagram illustrating the hardware configuration of a computer 900 that implements the gateway device 10, etc. The computer 900 may be a dedicated computer designed to implement the gateway device 10, etc., or it may be a general-purpose computer. For example, by installing a predetermined application on the computer 900, the various functions of the gateway device 10, etc., may be implemented on the computer 900. The above application consists of a program for implementing the functional components of the gateway device 10, etc.

[0100] Computer 900 comprises a bus 902, a processor 904, memory 906, a storage device 908, an input / output interface 910, and a network interface 912. The bus 902 is a data transmission path for the processor 904, memory 906, storage device 908, input / output interface 910, and network interface 912 to send and receive data to and from each other. However, the method of connecting the processor 904 and other components to each other is not limited to bus connection.

[0101] The processor 904 is a variety of processors such as a CPU (Central Processing Unit), GPU (Graphics Processing Unit), FPGA (Field-Programmable Gate Array), or quantum processor (quantum computer control chip). The memory 906 is the main memory, implemented using RAM (Random Access Memory), etc. The storage device 908 is the auxiliary storage, implemented using a hard disk, SSD (Solid State Drive), memory card, or ROM (Read Only Memory), etc.

[0102] The input / output interface 910 is an interface for connecting the computer 900 with input / output devices. For example, input devices such as keyboards and output devices such as display devices are connected to the input / output interface 910.

[0103] The network interface 912 is an interface for connecting computer 900 to a network. This network may be a LAN (Local Area Network) or a WAN (Wide Area Network).

[0104] The storage device 908 stores programs that implement each functional component of the gateway device 10, etc. (programs that implement the aforementioned applications). The processor 904 reads these programs into memory 906 and executes them to implement each functional component of the gateway device 10, etc.

[0105] Each processor executes one or more programs containing a set of instructions for causing the computer to perform the algorithms described with reference to the drawings. These programs, when loaded into the computer, contain a set of instructions (or software code) for causing the computer to perform one or more of the functions described in the embodiments. The programs may be stored in various types of non-transitory computer-readable medium or tangible storage medium. Examples, but not limited to, include non-transitory computer-readable medium or tangible storage medium, such as RAM, ROM, flash memory, SSD or other memory technologies, CD-ROM, DVD (Digital Versatile Disc), Blu-ray® disc or other optical disc storage, magnetic cassette, magnetic tape, magnetic disk storage or other magnetic storage devices. The programs may also be transmitted over various types of transient computer-readable medium or communication medium. Examples, but not limited to, include transient computer-readable medium or communication medium, such as electrical, optical, acoustic or other forms of propagating signals.

[0106] Although the present disclosure has been described above with reference to embodiments, the present disclosure is not limited to the embodiments described above. Various modifications to the structure and details of the present disclosure may be made that can be understood by those skilled in the art within the scope of the present disclosure.

[0107] Each drawing is merely illustrative to illustrate one or more embodiments. Each drawing may be associated with one or more other embodiments rather than with only one specific embodiment. As those skilled in the art will understand, various features or steps described with reference to any one drawing can be combined with features or steps shown in one or more other drawings, for example, to create embodiments not explicitly shown or described. Not all features or steps shown in any one drawing to illustrate an exemplary embodiment are necessarily required, and some features or steps may be omitted. The order of steps shown in any of the drawings may be changed as appropriate.

[0108] Furthermore, the embodiments described above can be combined in any way. For example, Embodiment 2 and Embodiment 3 may be combined.

[0109] Some or all of the above embodiments may also be described as follows, but are not limited to the following: (Note 1) A permission information acquisition unit that acquires permission information, including telephone numbers authorized to access the device, A telephone number acquisition unit that obtains the telephone number of a terminal accessing the device, An identification information acquisition unit that acquires the identification information of the aforementioned terminal, An authentication unit that performs telephone authentication of the terminal based on the aforementioned permission information, the terminal's telephone number, and the terminal's identification information, Equipped with, The telephone number acquisition unit acquires the telephone number of the terminal when the terminal makes a call to a telephone through its device. The identification information acquisition unit acquires the identification information of the terminal when the terminal accesses the device and the identification information of the terminal when the terminal makes a call to the telephone via the device. The authentication unit determines that the telephone authentication is successful if the telephone number of the terminal is included in the authorization information, and the identification information of the terminal when the terminal accesses the device matches the identification information of the terminal when the terminal makes a call to the telephone via the device. Gateway device. (Note 2) The device further includes a registration unit that pre-registers telephone numbers authorized to access the device as registration permission information. When a call is established between the telephone and the terminal, the registration unit receives input from the telephone indicating whether or not to allow the terminal to access its own device, and if it receives input indicating that access is permitted, it registers the telephone number of the terminal as the registration permission information. The permission information acquisition unit acquires the registered permission information as the permission information. The gateway device described in Appendix 1. (Note 3) The authentication unit receives a password input from the terminal, performs password authentication of the terminal based on the received password and a pre-registered password, and grants the terminal access to its device if it determines that the telephone authentication and password authentication have been successful. The gateway device described in Appendix 1 or 2. (Note 4) If the authentication unit determines that the telephone authentication has been successful, it grants the terminal access to its device and notifies the terminal that the telephone authentication has been successful. A gateway device as described in any one of the items 1 to 3 of the appendix. (Note 5) The identification information acquisition unit outputs an operation screen that accepts operations from the terminal and acquires the identification information of the terminal that accessed the operation screen. A gateway device as described in any one of the items 1 to 4 of the appendix. (Note 6) The gateway device is an HGW (Home Gateway), The aforementioned identification information is the MAC (Media Access Control) address of the terminal. A gateway device as described in any one of the items 1 to 5 of the appendix. (Note 7) The device further includes an input receiving unit that accepts the input of a telephone number authorized to access the device, The permission information acquisition unit acquires the received telephone number as permission information. A gateway device as described in any one of the items 1 to 6 of the appendix. (Note 8) Gateway device and A telephone connected to the gateway device, A terminal that accesses the gateway device, Equipped with, The gateway device is A permission information acquisition unit that acquires permission information, including telephone numbers authorized to access the device, A telephone number acquisition unit that acquires the telephone number of the terminal accessing the device, An identification information acquisition unit that acquires the identification information of the aforementioned terminal, An authentication unit that performs telephone authentication of the terminal based on the aforementioned permission information, the terminal's telephone number, and the terminal's identification information, It has, The telephone number acquisition unit acquires the telephone number of the terminal when the terminal makes a call to the telephone via its device. The identification information acquisition unit acquires the identification information of the terminal when the terminal accesses the device and the identification information of the terminal when the terminal makes a call to the telephone via the device. The authentication unit determines that the telephone authentication is successful if the telephone number of the terminal is included in the authorization information, and the identification information of the terminal when the terminal accesses the device matches the identification information of the terminal when the terminal makes a call to the telephone via the device. Authentication system. (Note 9) A permission information acquisition step to obtain permission information, including telephone numbers authorized to access the device, A phone number acquisition step to obtain the phone number of a terminal accessing the device, An identification information acquisition step for acquiring the identification information of the aforementioned terminal, An authentication step in which telephone authentication of the terminal is performed based on the permission information, the telephone number of the terminal, and the identification information of the terminal, Includes, The aforementioned telephone number acquisition step includes acquiring the telephone number of the terminal when the terminal makes a call to a telephone via its own device, The identification information acquisition step includes acquiring the identification information of the terminal when the terminal accesses the device, and acquiring the identification information of the terminal when the terminal makes a call to the telephone via the device. The authentication step includes determining that the telephone authentication is successful if the telephone number of the terminal is included in the authorization information, and the identification information of the terminal when the terminal accesses the device matches the identification information of the terminal when the terminal makes a call to the telephone via the device. Authentication method. (Note 10) A permission information acquisition step to obtain permission information, including telephone numbers authorized to access the device, A phone number acquisition step to obtain the phone number of a terminal accessing the device, An identification information acquisition step for acquiring the identification information of the aforementioned terminal, An authentication step in which telephone authentication of the terminal is performed based on the permission information, the telephone number of the terminal, and the identification information of the terminal, Have the computer run it, The aforementioned telephone number acquisition step includes acquiring the telephone number of the terminal when the terminal makes a call to a telephone via its own device, The identification information acquisition step includes acquiring the identification information of the terminal when the terminal accesses the device, and acquiring the identification information of the terminal when the terminal makes a call to the telephone via the device. The authentication step includes determining that the telephone authentication is successful if the telephone number of the terminal is included in the authorization information, and the identification information of the terminal when the terminal accesses the device matches the identification information of the terminal when the terminal makes a call to the telephone via the device. program.

[0110] Some or all of the elements (e.g., configuration and function) described in Appendices 2 to 7 that are dependent on Appendice 1 may also be dependent on Appendices 8 to 10 in the same manner as those described in Appendices 2 to 7. Some or all of the elements described in any appendice may be applied to various hardware, software, recording means, systems, and methods for recording software. [Explanation of symbols]

[0111] 10 Gateway device 11 Permit information acquisition department 12 Telephone number acquisition section 13. Identification Information Acquisition Unit 14. Authentication Department 3000, 3000a Authentication System 3100, 3100a HGW 3110, 3110a Control Unit 3111, 3111a Memory Unit Control Unit 3112, 3112a Determination Unit Control Unit 3113 Wi-Fi Control Unit 3114 Telephone Control Unit 3120, 3120a storage section 3121 Permission List Storage Unit 3122 MAC Address Storage Unit 3125 Telephone number memory unit 3130, 3130a Judgment section 3131 Permit List Determination Unit 3132 MAC Address Determination Unit 3135 Telephone number determination section 3140 Telephone Interface 3150 Wi-Fi Interface 3200 telephone 3300 Wi-Fi 3400 wireless terminals 3410 Telephone Interface 3420 Wi-Fi Interface 900 Computers 902 Bus 904 Processor 906 memory 908 Storage Devices 910 Input / Output Interface 912 Network Interface

Claims

1. A permission information acquisition unit that acquires permission information, including telephone numbers authorized to access the device, A telephone number acquisition unit that obtains the telephone number of a terminal accessing the device, An identification information acquisition unit that acquires the identification information of the aforementioned terminal, An authentication unit that performs telephone authentication of the terminal based on the aforementioned permission information, the terminal's telephone number, and the terminal's identification information, Equipped with, The telephone number acquisition unit acquires the telephone number of the terminal when the terminal makes a call to a telephone through its device. The identification information acquisition unit acquires the identification information of the terminal when the terminal accesses the device and the identification information of the terminal when the terminal makes a call to the telephone via the device. The authentication unit determines that the telephone authentication is successful if the telephone number of the terminal is included in the authorization information, and the identification information of the terminal when the terminal accesses the device matches the identification information of the terminal when the terminal makes a call to the telephone via the device. Gateway device.

2. The device further includes a registration unit that pre-registers telephone numbers authorized to access the device as registration permission information. When a call is established between the telephone and the terminal, the registration unit receives input from the telephone indicating whether or not to allow the terminal to access its own device, and if it receives input indicating that access is permitted, it registers the telephone number of the terminal as the registration permission information. The permission information acquisition unit acquires the registered permission information as the permission information. The gateway device according to claim 1.

3. The authentication unit receives a password input from the terminal, performs password authentication of the terminal based on the received password and a pre-registered password, and grants the terminal access to its device if it determines that the telephone authentication and password authentication have been successful. The gateway device according to claim 1 or 2.

4. If the authentication unit determines that the telephone authentication has been successful, it grants the terminal access to its device and notifies the terminal that the telephone authentication has been successful. The gateway device according to claim 1 or 2.

5. The identification information acquisition unit outputs an operation screen that accepts operations from the terminal and acquires the identification information of the terminal that accessed the operation screen. The gateway device according to claim 1 or 2.

6. The gateway device is an HGW (Home Gateway), The aforementioned identification information is the MAC (Media Access Control) address of the terminal. The gateway device according to claim 1 or 2.

7. The device further includes an input receiving section that accepts the input of a telephone number authorized to access the device, The permission information acquisition unit acquires the received telephone number as permission information. The gateway device according to claim 1.

8. Gateway device and A telephone connected to the gateway device, A terminal that accesses the gateway device, Equipped with, The gateway device is A permission information acquisition unit that acquires permission information, including telephone numbers authorized to access the device, A telephone number acquisition unit that acquires the telephone number of the terminal accessing the device, An identification information acquisition unit that acquires the identification information of the aforementioned terminal, An authentication unit that performs telephone authentication of the terminal based on the aforementioned permission information, the terminal's telephone number, and the terminal's identification information, It has, The telephone number acquisition unit acquires the telephone number of the terminal when the terminal makes a call to the telephone via its device. The identification information acquisition unit acquires the identification information of the terminal when the terminal accesses the device and the identification information of the terminal when the terminal makes a call to the telephone via the device. The authentication unit determines that the telephone authentication is successful if the telephone number of the terminal is included in the authorization information, and the identification information of the terminal when the terminal accesses the device matches the identification information of the terminal when the terminal makes a call to the telephone via the device. Authentication system.

9. A permission information acquisition step to obtain permission information, including telephone numbers authorized to access the device, A phone number acquisition step to obtain the phone number of a terminal accessing the device, An identification information acquisition step for acquiring the identification information of the aforementioned terminal, An authentication step in which telephone authentication of the terminal is performed based on the permission information, the telephone number of the terminal, and the identification information of the terminal, Includes, The aforementioned telephone number acquisition step includes acquiring the telephone number of the terminal when the terminal makes a call to a telephone via its own device, The identification information acquisition step includes acquiring the identification information of the terminal when the terminal accesses the device, and acquiring the identification information of the terminal when the terminal makes a call to the telephone via the device. The authentication step includes determining that the telephone authentication is successful if the telephone number of the terminal is included in the authorization information, and the identification information of the terminal when the terminal accesses the device matches the identification information of the terminal when the terminal makes a call to the telephone via the device. Authentication method.

10. A permission information acquisition step to obtain permission information, including telephone numbers authorized to access the device, A phone number acquisition step to obtain the phone number of a terminal accessing the device, An identification information acquisition step for acquiring the identification information of the aforementioned terminal, An authentication step in which telephone authentication of the terminal is performed based on the permission information, the telephone number of the terminal, and the identification information of the terminal, Have the computer run it, The aforementioned telephone number acquisition step includes acquiring the telephone number of the terminal when the terminal makes a call to a telephone via its own device, The identification information acquisition step includes acquiring the identification information of the terminal when the terminal accesses the device, and acquiring the identification information of the terminal when the terminal makes a call to the telephone via the device. The authentication step includes determining that the telephone authentication is successful if the telephone number of the terminal is included in the authorization information, and the identification information of the terminal when the terminal accesses the device matches the identification information of the terminal when the terminal makes a call to the telephone via the device. program.

Images