Authentication system and authentication method

Abstract

An authentication system and authentication method are provided that can prevent unauthorized use of a mobile terminal connected to the system via an external network outside its destination. [Solution] In a computer system having a medical treatment terminal 2 that makes a login request to a system 5 within the hospital via an external network N, a smartphone 3 carried by the user operating the medical treatment terminal 2, and an authentication server 4 connected to these via the external network N, when the authentication server 4 receives user information sent from the smartphone 3, it requests the smartphone 3 that sent the user information to send location information, and when it receives the location information sent from the smartphone 3 in response to this request, it compares the received location information from the smartphone 3 with the location information of the visited destination that has been registered in advance in the authentication server 4, and authenticates the login request from the medical treatment terminal 2 on the condition that these two pieces of location information match.

Description

[Technical Field]

[0001] The present invention relates to an authentication system and an authentication method, and more particularly to an authentication technique for logging into a system from a remote location via an external network. [Background technology]

[0002] In recent years, home visit medical care and home care services, in which doctors, nurses, and care staff visit patients' or users' homes to provide medical treatment, nursing care, and care, are becoming more common in medical and nursing care settings.

[0003] For example, in the case of home visits, doctors and nurses (hereinafter referred to as "doctors, etc.") visit patients' homes to perform the necessary medical procedures. At that time, the doctors, etc. carry a medical terminal such as a tablet device with them to the place they visit, and from this medical terminal they log in to various systems within the hospital, such as an electronic medical record system, ordering system, and medical accounting system, which are connected to the hospital's network (internal network) via an external network, and use the services provided by these systems (for example, electronic medical records provided by the electronic medical record system) (see, for example, Patent Document 1).

[0004] In such home visits, high security is required because login to the hospital's system from the visited site is performed via an external network. For this reason, two-factor authentication is widely used for login to the hospital's system from the medical terminal, combining authentication based on knowledge information such as authentication ID and password with authentication based on recorded information recorded on magnetic cards, IC cards, etc. carried by the doctor, etc. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Japanese Patent Application Laid-Open No. 2015-194974 Summary of the Invention [Problem to be solved by the invention]

[0006] However, such a conventional method has the following problems. In other words, while conventional two-factor authentication provides a higher level of security than single authentication based on knowledge information alone, by entering knowledge information and record information, it is possible to log in to the hospital's system from locations other than the patient's home, which poses the risk of information leakage due to unauthorized use of medical terminals.In particular, electronic medical records that can be viewed on medical terminals must be strongly protected as personal information, so there was a strong need to restrict the use of medical terminals to locations other than those where their use is permitted, such as the patient's home during a medical visit.

[0007] The present invention has been made in consideration of these problems, and its purpose is to provide an authentication system and authentication method that can prevent unauthorized use of a mobile terminal connected to the system via an external network outside of its destination. [Means for solving the problem]

[0008] In order to achieve the above object, the authentication system according to the present invention comprises: An authentication system for a login request to a system via an external network, comprising: The system comprises a first mobile terminal that requests login to the system, a second mobile terminal carried by a user who operates the first mobile terminal, an authentication server that is connected to the first and second mobile terminals via the external network, and the system that uses location authentication by the authentication server, the first mobile terminal has a communication means for communicating with the authentication server and the system via the external network; the second mobile terminal has a location information acquisition means for acquiring location information of a current location and a communication means for communicating with the authentication server via the external network; the authentication server has a storage means and a control means; the storage means stores visited destination location information associating the first mobile terminal with location information of a visited destination of the user, and terminal owner information associating the user with the second mobile terminal; When the control means receives user information identifying the user of the second mobile terminal, it executes a location information transmission request process to request the second mobile terminal that transmitted the user information to transmit location information, and when the control means receives location information transmitted from the second mobile terminal in response to the location information transmission request process, it executes a location information comparison process to compare the received location information of the second mobile terminal with the location information of the visited destination, and authenticates the login request of the first mobile terminal on the condition that these two pieces of location information match. It is characterized by:

[0009] The authentication system according to the present invention has the following configuration as a preferred embodiment.

[0010] (1) An authentication system for a login request to a system via an external network, comprising: The system comprises a first mobile terminal that requests login to the system, a second mobile terminal carried by a user who operates the first mobile terminal, an authentication server that is connected to the first and second mobile terminals via the external network, and the system that uses location authentication by the authentication server, the first mobile terminal has a location information acquisition means for acquiring location information of a current location and a communication means for communicating with the authentication server and the system via the external network; the second mobile terminal has a location information acquisition means for acquiring location information of a current location and a communication means for communicating with the authentication server via the external network; the authentication server has a storage means and a control means; the storage means stores visited destination location information that associates the first mobile terminal with location information of a visited destination of the user, and terminal owner information that associates the user with the second mobile terminal; When the control means receives user information identifying the user of the second mobile terminal, the control means executes a location information comparison process that compares the location information of the first mobile terminal, the location information of the second mobile terminal, and the location information of the visited destination, and authenticates the login request of the first mobile terminal on the condition that these three pieces of location information match. It is characterized by:

[0011] (2) The above location information 、 It is characterized by including position information of the height position.

[0012] (3) The position information comparison process is characterized in that it is configured to process the position information to be compared as a match if the difference between the position information is within a predetermined tolerance range that has been set in advance.

[0014] ( 4 ) The second mobile terminal is characterized in that it performs authentication processing based on biometric information and / or stored information of the user before transmitting the user information.

[0015] ( 5 ) The first mobile terminal is a notebook or tablet computer, and the second mobile terminal is a smartphone.

[0016] Further, the authentication method according to the present invention comprises: A method for authenticating a login request to a system via an external network, comprising: The system comprises a first mobile terminal that requests login to the system, a second mobile terminal carried by a user who operates the first mobile terminal, an authentication server that is connected to the first and second mobile terminals via the external network, and the system that uses location authentication by the authentication server, the first mobile terminal has a communication means for communicating with the authentication server and the system via the external network; the second mobile terminal has a location information acquisition means for acquiring location information of a current location and a communication means for communicating with the authentication server via the external network; the authentication server has a storage means and a control means; the storage means stores visited destination location information associating the first mobile terminal with location information of a visited destination of the user, and terminal owner information associating the user with the second mobile terminal; the control means includes a location information transmission request step of, when receiving user information identifying a user of the second mobile terminal transmitted from the second mobile terminal, requesting the second mobile terminal that transmitted the user information to transmit location information; Steps When the location information transmitted from the second mobile terminal in response to the request is received, a location information comparison step is executed to compare the received location information of the second mobile terminal with the location information of the visited destination, and the login request of the first mobile terminal is authenticated on the condition that the two pieces of location information match. [Effects of the Invention]

[0017] According to the present invention, when the authentication server receives user information from a second mobile terminal, it performs a location information transmission request process to request the second mobile terminal to transmit location information, and when it receives location information transmitted from the second mobile terminal in response to the location information transmission request process, it performs a location information comparison process to compare the received location information of the second mobile terminal with location information of a visited destination registered in the authentication server, and authenticates the login request of the first mobile terminal if these two pieces of location information match, so that logins from locations other than the visited destinations previously registered in the authentication server can be rejected. Therefore, according to the present invention, it is possible to effectively prevent unauthorized connection from outside the destination for mobile terminals connected to the system via an external network. [Brief explanation of the drawings]

[0018] [Figure 1] 1 is a system configuration diagram of a computer system for home visits to which the authentication system according to the present invention is applied. [Figure 2] FIG. 2 is a block diagram showing a schematic configuration of a medical examination terminal (first mobile terminal) in the computer system. [Figure 3] FIG. 2 is a block diagram showing a schematic configuration of a smartphone (second mobile terminal) in the computer system. [Figure 4] FIG. 2 is a block diagram showing a schematic configuration of an authentication server in the computer system. [Figure 5] 10 is a time chart showing an overview of an authentication procedure in the computer system. [Figure 6] This is a screen layout diagram showing an example of the procedure for sending smartphone location information in the computer system, where Figure 6(a) shows the screen for setting the destination for location information, and Figure 6(b) shows the screen for entering smartphone user information. [Figure 7] This is a screen configuration diagram showing an example of the procedure for sending location information of a smartphone in the computer system, where Figure 7(a) shows the screen requesting the sending of location information, and Figure 7(b) shows the screen displaying the result of the sending of location information. DETAILED DESCRIPTION OF THE INVENTION

[0019] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. It should be noted that the same reference numerals denote the same components or elements throughout the drawings.

[0020] Embodiment 1 Fig. 1 shows a schematic configuration of a computer system to which the authentication system according to the present invention is applied. This computer system 1 is suitable for a home visit medical system that links, for example, a medical terminal carried by a doctor or other medical professional who performs a home visit with a system within a hospital that dispatches the doctor or other medical professional via an external network N. As shown in Fig. 1, the computer system 1 mainly comprises a medical terminal 2 carried by a user such as a doctor, a smartphone 3 carried by a user who operates the medical terminal 2, an authentication server 4 that manages logins to the in-hospital system, and an in-hospital system 5 such as an electronic medical record system 5a. Between the external network N and the authentication server 4 and the in-hospital system 5 (the in-hospital network comprised of these), a demilitarized zone (DMZ) area 6 including a relay server (not shown) is formed, and communication between the external network N and the authentication server 4 and the in-hospital system 5 is performed via the relay server.

[0021] [Hardware configuration] The medical examination terminal (first mobile terminal) 2 is a mobile terminal device that the user carries with them to the patient's home during a medical visit, and is configured as a computer capable of executing application programs such as a location information application and an electronic medical record application, described below; specifically, a portable computer such as a tablet or notebook computer (a tablet computer in the illustrated example). Figure 2 shows the schematic configuration of the medical examination terminal 2. As shown in the figure, the medical examination terminal 2 mainly comprises a controller 21 that controls each part of the device, a storage 22 that stores application programs and the like, a user interface 23 that is configured as a display device, an input device, and the like, and a wireless interface 24 and a wired interface 25 for connecting to an external network N.

[0022] More specifically, the controller 21 is configured with a processor including a central processing unit (CPU), read-only memory (ROM), random access memory (RAM), etc., and loads programs and data stored in the ROM, storage 22, etc. into the RAM to execute various processes in the medical treatment terminal 2 (details will be described later). The storage 22 is an auxiliary storage device that stores application programs, data, etc., and is configured, for example, as an internal storage device built into the medical treatment terminal 2, such as a hard disk drive (HDD) or solid state drive (SSD), but may also be configured as an external storage device (e.g., an external HDD, SSD, USB memory, SD card, etc.). The storage 22 stores, as application programs, at least an electronic medical record application 221 that provides the medical treatment terminal 2 with the function of linking with an electronic medical record system (described later) and a visit destination registration application 222 for registering visit destinations (described later). In the illustrated example, in addition to these, a location information application 223 that acquires location information of the medical treatment terminal 2 is also stored. The location information application 223 acquires location information of the current location of the medical treatment terminal 2 by a known method using a GPS (Global Positioning System), a wireless LAN (Local Area Network) access point, or a nearby smartphone, etc. In addition to the above-mentioned application programs, it is desirable that the storage 22 also stores programs such as a web browser.

[0023] The user interface 23 is composed of an input unit for inputting information, a display unit for displaying information, etc. In this embodiment, a tablet computer is used as the medical treatment terminal 2, and therefore a touch panel 231 that serves as both an input unit and a display unit is used in the user interface 23. When a notebook computer is used as the medical treatment terminal 2, a pointing device such as a keyboard or mouse is preferably used as the input unit, and a display device such as a liquid crystal display is preferably used as the display unit.

[0024] The wireless interface 24 and the wired interface 25 are means for communicating with an external network N. Here, the external network N includes the Internet and a network for connecting to the Internet. The wireless interface 24 is configured, for example, by a connection adapter to a wireless LAN connected to the Internet. The wired interface 25 is configured by a connection adapter to a wired LAN connectable to the Internet. The wireless interface 24 and the wired interface 25 constitute communication means by which the medical treatment terminal 2 communicates with the authentication server 4, the electronic medical record system 5a, and the like via the external network N.

[0025] The smartphone (second mobile terminal) 3 is a mobile terminal device carried by a user, such as a doctor, who operates the medical treatment terminal 2. In this embodiment, the smartphone 3 is preferably a (personally owned) smartphone owned by the user who operates the medical treatment terminal 2, particularly a smartphone equipped with an authentication function using the user's biometric information and / or stored information. The reason for using a user's own smartphone here is that the user's identity can be confirmed by utilizing the biometric authentication function and stored authentication function provided in the smartphone. Note that the smartphone 3 may be loaned by, for example, the hospital, but in that case, the hospital would have to bear the loan cost of the smartphone 3, which would increase the cost of building the computer system. In this embodiment, using a personally owned smartphone 3 avoids such cost increases.

[0026] 3 shows a schematic configuration of the smartphone 3. As shown in the figure, the smartphone 3 mainly includes a controller 31 that controls each unit of the device, a storage 32 that stores application programs and the like, a user interface 33 that is composed of a display unit, an input unit, and the like, and a wireless interface 34 for connecting to an external network N.

[0027] The controller 31 is configured with a processor including a CPU, ROM, RAM, etc., and loads programs and data stored in the ROM, storage 32, etc. into RAM to execute various processes in the smartphone 3 (details will be described later). The storage 32 is an auxiliary storage device that stores application programs, data, etc., and is configured with an internal storage device made of a flash memory such as a universal flash storage (UFS) or an SSD. The storage 32 stores, as application programs, at least a location information application 321 that acquires location information of the current location of the smartphone 3 and a location authentication application 322 that transmits location information for location authentication, which will be described later. In the illustrated example, in addition to these application programs, a biometric authentication application 323 for user authentication of the smartphone 3 is also stored. The location information application 321 acquires location information of the current location of the smartphone 3 using a known method, such as a GPS, a wireless LAN access point, a mobile phone line base station, or a nearby smartphone, and constitutes the location information acquisition means of the smartphone 3.

[0028] The user interface 33 has an input section for inputting information and a display section for displaying information, and in this embodiment, a touch panel 331 is used that serves both purposes. The wireless interface 34 has a communication adapter for connecting to the Internet via a mobile phone line and a connection adapter for connecting to a wireless LAN that can connect to the Internet, and constitutes communication means by which the smartphone 3 communicates with the authentication server 4 via the external network N.

[0029] The authentication server 4 is a server computer that performs login authentication for the hospital systems 5, such as the electronic medical record system 5a and the ordering system 5b. It is located inside the DMZ area 6 (on the hospital side) and, together with the hospital systems 5 and the like, forms an in-hospital network (internal network). FIG. 4 shows a schematic configuration of the authentication server 4. As shown in the figure, the authentication server 4 mainly comprises a controller 41 that controls each component of the device, a storage 42 that stores application programs and the like, a user interface 43 that is composed of a display unit, an input unit, and the like, and a wired interface 44 for connecting to the hospital network. Note that connection to the hospital network may also be configured to be made via a wireless interface (not shown).

[0030] The controller 41 constitutes the control means of the authentication server 4. The controller 41 is composed of a processor including a CPU, ROM, RAM, etc., and loads programs and data stored in the ROM, storage 42, etc. into the RAM to execute various processes in the authentication server 4 (details will be described later). The storage 42 constitutes the storage means of the authentication server 4. The storage 42 is an auxiliary storage device that stores application programs, data, etc., and is composed of an internal storage device such as an HDD or SSD, but may also be composed of an external storage device such as an external HDD or SSD. The storage 42 stores, as an application program, at least a location authentication processing application 421 for performing location authentication including a location information comparison process described later. In addition, as data necessary for location authentication, the storage 42 stores at least visited location information 422 that associates the medical treatment terminal 2 with the location information of the user's visited location, and device owner information 423 that associates the user with the owner of the smartphone 3 (or the person carrying the smartphone 3 if the smartphone 3 is loaned).

[0031] The user interface 43 has an input unit for inputting information and a display unit for displaying information. For example, a pointing device such as a keyboard or a mouse is preferably used for the input unit, and a display device such as a liquid crystal display is preferably used for the display unit. The wired interface 44 is a means for communicating with the in-hospital network and the relay server, and is composed of, for example, a connection adapter for a wired LAN that can be connected to the in-hospital network and the relay server.

[0032] The in-hospital systems 5 are computer systems connected to an in-hospital network (not shown), and examples include an electronic medical record system, an ordering system, and a medical accounting system. FIG. 1 shows an electronic medical record system 5a and an ordering system 5b. As is well known, each of these in-hospital systems 5 is composed of a computer equipped with a predetermined application program, and to use the services provided by these systems, login authentication by the authentication server 4 is required. In other words, login to the in-hospital systems 5 is managed by the authentication server 4.

[0033] Next, the procedure for home visit medical treatment by the home visit medical treatment system to which the computer system 1 according to the present invention is applied will be described with reference to FIGS.

[0034] [Registering a visitor (pre-registration)] When a home visit medical treatment is performed using a home visit medical treatment system to which the present invention is applied, the location information of the destination (for example, the patient's home) is registered in advance in the authentication server 4. Here, the "location information" is preferably location information that specifies the location using latitude and longitude, but it is also possible to use location information that specifies the location using elements other than latitude and longitude (for example, coordinates on a specific map or an address). Note that this "location information" uses location information that uses the same elements at least in the authentication server 4 and the smartphone 3. Furthermore, the location information of the medical treatment terminal 2 also uses location information that uses the same elements as the authentication server 4, etc.

[0035] The location information of the destination is registered from the medical treatment terminal 2. In this embodiment, the medical treatment terminal 2 is equipped with a destination registration application 222 for registering destinations. This application program is launched, and the location information of the destination is sent to the authentication server 4 according to the program's instructions, and the location information of the destination is registered in the authentication server 4 (see steps S100 to S102 in FIG. 5). When registering the location information of the destination, user information (e.g., user name (user ID)) identifying the user who will be performing the home visit and identification information (e.g., serial number) identifying the medical treatment terminal 2 carried for the home visit are also registered. This allows the authentication server 4 to associate the location information of the destination for the home visit, the medical treatment terminal 2 carried for the home visit, and the user (user) performing the home visit. The information thus associated is stored in the storage means of the authentication server 4 as destination location information 422, which associates the medical treatment terminal 2 with the location information of the user's destination.

[0036] Then, when the registration of the location information of the visited destination is completed, the visited destination registration application 222 is terminated (see step S103 in FIG. 5). Note that, although the present embodiment shows a case where the location information of the visited destination is registered from the medical treatment terminal 2, it is also possible to register the location information of the visited destination using a computer other than the medical treatment terminal 2 (for example, a business computer used in a hospital) as long as it is a computer equipped with the visited destination registration application 222.

[0037] [Location authentication of medical devices during home visits] When logging in to the hospital system 5 from the medical treatment terminal 2 at a visiting location, the user performs location authentication using the following procedure. For convenience of explanation, the following description will discuss a case where login authentication of the medical treatment terminal 2 is performed solely by location authentication. However, for login authentication of the medical treatment terminal 2, multi-factor authentication is preferably employed, which appropriately combines location authentication processing with authentication based on knowledge information such as an authentication ID and password, authentication based on recorded information on a magnetic card or IC card, or authentication based on biometric information such as a fingerprint or iris. That is, when applying the present invention, at least one authentication processing based on stored information, recorded information, or biometric information is performed before or after the location information comparison processing described below, and the login request of the medical treatment terminal 2 is authenticated using multi-factor authentication combined with location information.

[0038] (1) The user launches the location authentication application 322 of the smartphone 3 carried by the user (see step S200 in FIG. 5). The smartphone 3 is equipped with a biometric authentication function and a memory authentication function such as a password. Therefore, prior to launching the location authentication application 322 (before transmitting user information, which will be described later), the user performs identity verification (biometric authentication processing based on the user's biometric information and / or memory authentication processing based on the user's memory information) using the biometric authentication function and / or memory authentication function of the smartphone 3. In this way, by verifying the user's identity using the biometric authentication function or memory authentication function before launching the location authentication application 322, it is possible to prevent impersonation by others. Note that user authentication of the smartphone 3 is generally performed using the biometric authentication function and memory authentication function described above, but it is of course also possible to configure the smartphone 3 to perform user authentication using other authentication factors.

[0039] (2) When the location authentication application 322 is launched, a setting screen for setting the destination of the location information of the smartphone 3 (the connection destination of the smartphone 3) is displayed on the touch panel 331 of the smartphone 3 (see FIG. 6(a)). The illustrated destination setting screen has a URL (Uniform Resource Locator) input field A for setting the destination of the location information, and a Set button B. The user inputs a URL specifying the authentication server 4 in the URL input field A according to the screen display, and touches the Set button B, thereby setting the destination of the location information to the smartphone 3. Note that if the destination of the location information has already been set, this screen can be skipped and the user can proceed to the next user information input screen.

[0040] (3) Once the destination of the location information has been set, a user information input screen for identifying the user of the smartphone 3 is displayed on the touch panel 331 (see FIG. 6(b)). The illustrated user information input screen has input fields C and D for the user name (user ID) and password, and a send button E. The user enters the user name and password in the input fields C and D according to the screen display, and touches the send button E to send the user information to the authentication server 4 (see step S201 in FIG. 5). Upon receiving the user ID and password sent from the smartphone 3, the authentication server 4 determines whether these are the user ID and password of an appropriate user. Specifically, the authentication server 4 compares the stored information data (the user ID and password for each user stored for user authentication) held by the authentication server 4 for user authentication to determine whether the user using the smartphone 3 is an appropriate user.

[0041] If the user is valid, the user (user ID) is associated with the smartphone 3 and user registration is performed (see step S202 in FIG. 5). Here, the smartphone 3 is identified, for example, by having the smartphone 3 transmit identification information (for example, a serial number, a telephone number, etc.) that identifies the smartphone 3 along with the user information, and this identification information is used to identify the smartphone 3. The information about the user and smartphone associated during user registration is stored in the storage means of the authentication server 4 as terminal owner information 423. Note that if the authentication server 4 determines that the user is not valid (if either the user ID or the password does not match), a predetermined error message or the like is displayed on the touch panel 331.

[0042] (4) When the registration of the user information of the smartphone 3 is completed, the authentication server 4 transmits a user registration confirmation to the smartphone 3 that performed the user registration (see step S203 in FIG. 5). In this embodiment, this user registration confirmation also serves as a location information transmission request (processing) that requests the smartphone 3 that transmitted the user information to transmit location information. Upon receiving the user registration confirmation, the smartphone 3 displays a location information transmission request screen on the touch panel 331 (see FIG. 7(a)). The location information transmission request screen shown in the figure includes the user ID and name of the registered user and the location information of the smartphone 3. Here, the location information of the smartphone 3 is acquired by the location information application 321. By touching the send button F in accordance with the screen display of the location information transmission request screen, the user transmits the location information of the current location of the smartphone 3 acquired by the location information application 321 to the authentication server 4 (see step S204 in FIG. 5).

[0043] (5) Upon receiving the smartphone 3's location information, the authentication server 4 compares the received smartphone 3's location information with the visited destination's location information (location information comparison process: see step S205 in FIG. 5). That is, upon receiving the smartphone 3's location information, the authentication server 4 identifies the medical treatment terminal 2 of the user registered on the smartphone 3 and identifies the visited destination's location information associated with the medical treatment terminal 2 using the visited destination's location information 422. The identified visited destination's location information is then compared with the received smartphone 3's location information to determine whether the two pieces of location information match (see step S205 in FIG. 5). This determination can be configured to determine whether the location information matches perfectly, but it is preferable to set a tolerance for the discrepancy in the location information, taking into account errors in the location information and the size of the visited destination. That is, even if the comparison reveals a discrepancy in the location information, the authentication server 4 determines that the location information matches as long as the discrepancy is within a predetermined tolerance. Note that this tolerance can be set as appropriate, for example, to several meters to several tens of meters.

[0044] (6) If, as a result of comparing the location information, the location information of the visited destination and the location information of the smartphone 3 match (the difference is within the allowable range), the authentication server 4 determines that the authentication based on the location information (location authentication process) is successful. On the other hand, if the location information of the two does not match (the difference exceeds the allowable range), the authentication server 4 determines that the location authentication has failed. The result of the location authentication is sent from the authentication server 4 to the smartphone 3 and displayed on the touch panel 331 of the smartphone 3 (see step S206 in FIG. 5 and FIG. 7(b)).

[0045] (7) If it is determined that the location authentication is successful, the authentication server 4 accepts (authenticates) the login request from the medical treatment terminal 2 to the in-hospital system 5 and connects the medical treatment terminal 2 to the in-hospital system 5 (e.g., electronic medical record system 5a) (see steps S207 and S208 in Figure 5). This allows the user to use the medical treatment terminal 2 connected to the in-hospital system 5 via the external network N to use the services provided by the in-hospital system 5. Specifically, by launching the electronic medical record app 221 on the medical treatment terminal 2, the user can view, edit, etc., the patient's medical record held by the electronic medical record system 5a from the location they are visiting.

[0046] Thus, according to the authentication system of the present invention, when the authentication server 4 receives user information from the smartphone 3, it performs a location information transmission request process to request the smartphone 3 to transmit location information, and when it receives the location information transmitted from the smartphone 3 in response to this location information transmission request process, it performs a location information comparison process to compare the received smartphone 3 location information with the location information of the visited destination registered in the authentication server 4, and if these two pieces of location information match, it authenticates the login request of the medical treatment terminal 2, thereby making it possible to reject logins from locations other than the visited destinations previously registered in the authentication server 4. Therefore, the computer system to which the present invention is applied can prevent unauthorized connection from outside the destination for the medical treatment terminal 2 connected to the in-hospital system 5 via the external network N.

[0047] Embodiment 2 Next, a second embodiment of the present invention will be described. The computer system 1 shown in the second embodiment is a modification of the location information comparison process performed by the authentication server 4, and is configured so that in the location information comparison process performed by the authentication server 4, in addition to comparing the location information of the smartphone 3 with the location information of the visited destination registered in the authentication server 4, a comparison is also made with the location information of the current location of the medical treatment terminal 2. Therefore, in this embodiment, the authentication server 4 acquires the location information of the current location of the medical treatment terminal 2 from the medical treatment terminal 2 before performing the location information comparison process. Here, the location information of the medical treatment terminal 2 is acquired by a location information application 223 provided in the medical treatment terminal 2. The authentication server 4 acquires the location information of the current location of the medical treatment terminal 2, and during the location information comparison process, compares the location information of the smartphone 3 with the location information of the visited destination registered in the authentication server 4, as well as with the location information of the current location of the medical treatment terminal 2. If these three location information match, the location authentication process is determined to be successful.

[0048] Thus, in the computer system 1 shown in the second embodiment, when a login request is made from the medical treatment terminal 2, the authentication server 4 requires that the location information of the smartphone 3 match the location information of the medical treatment terminal 2 in addition to the location information of the pre-registered destination, so that unauthorized logins can be prevented when the person carrying the smartphone 3 and the person carrying the medical treatment terminal 2 are in different locations. Therefore, this embodiment can provide an authentication system with a higher level of security.

[0049] Embodiment 3 Next, a third embodiment of the present invention will be described. The third embodiment is a modification of the location information used in the first and second embodiments. In this embodiment, the location information acquired by the medical treatment terminal 2 and the smartphone 3 and the location information of the visited destination registered in the authentication server 4 are as follows: Location information as described aboveIn addition to the above, the computer system 1 is configured to use position information including information on height position. Therefore, in the position information comparison process of the authentication server 4, the authentication condition is not only whether the two-dimensional positions match but also whether the height positions match.

[0050] Therefore, in the computer system 1 shown in this embodiment, for example, if the destination is a building with two or more floors, such as an apartment building, it is possible to eliminate unauthorized logins from rooms on a different floor from the registered destination. Therefore, this embodiment can provide an authentication system with a higher level of security.

[0051] The above-described embodiments are merely preferred embodiments of the present invention, and the present invention is not limited to these, and various design modifications are possible within the scope of the present invention.

[0052] For example, in the above-described embodiment, the present invention is applied to a home visit medical system, but the authentication system according to the present invention is not limited to home visit medical systems, and can be applied to other computer systems, such as a computer system for home care in which a caregiver carries a mobile terminal, as long as the computer system includes a configuration for logging in to the system from a remote location via an external network N. Also, in the above-described embodiment, the medical terminal 2 is carried to a home visit medical treatment, but the present invention can also be applied when the medical terminal 2 is taken out for purposes other than home visit medical treatment (for example, to an academic conference or to one's home).

[0053] In the above-described embodiment, the smartphone 3 is configured to transmit a user name (user ID) and a password as user information, but it is also possible to use information other than the user ID as long as it is information that can identify the user in the authentication server 4. It is also possible to omit the password.

[0054] In addition, in the above-described embodiment, the storage 22 of the medical treatment terminal 2 is provided with the visit destination registration application 222, but the visit destination registration application 222 may be provided on a computer that can be connected to the authentication server 4, and the application may be configured to register visit destinations from a device other than the medical treatment terminal 2.

[0055] In the above-described embodiment, the authentication server 4 is configured to manage logins to the hospital system, but the hospital system may be configured to manage logins to the hospital system itself. That is, for example, the hospital system may perform login authentication based on stored information or recorded information, and in addition to this authentication, the authentication server 4 may perform authentication processing based on location information. [Explanation of symbols]

[0056] 1. Computer Systems 2. Medical terminal (first mobile terminal) 3. Smartphone (second mobile device) 4 Authentication Server 5 In-hospital system (system) 5a Electronic medical record system 5b Ordering System 6 DMZ area 21, 31, 41 Controller 22, 32, 42 Storage 23,33,43 User Interface 24,34 Wireless Interface 25,44 Wired Interface 221 Electronic Medical Record App 222 Visitor Registration App 223 Location App 231,331 Touch Panel 321 Location information app (location information acquisition means) 322 Location authentication app 421 Location authentication processing app 422 Visited location information 423 Device Owner Information N External Network

Claims

1. An authentication system for a login request to a system via an external network, comprising: The system includes a first mobile terminal that requests login to the system, a second mobile terminal carried by a user who operates the first mobile terminal, an authentication server that is connected to the first and second mobile terminals via the external network, and the system that uses location authentication by the authentication server, the first mobile terminal has a communication means for communicating with the authentication server and the system via the external network; the second mobile terminal has a location information acquisition means for acquiring location information of a current location and a communication means for communicating with the authentication server via the external network; the authentication server has a storage means and a control means; the storage means stores visited destination location information that associates the first mobile terminal with location information of a destination visited by the user, and terminal owner information that associates the user with the second mobile terminal; When the control means receives user information identifying the user of the second mobile terminal, it executes a location information transmission request process to request the second mobile terminal that transmitted the user information to transmit location information, and when it receives location information transmitted from the second mobile terminal in response to the location information transmission request process, it executes a location information comparison process to compare the received location information of the second mobile terminal with location information of the destination, and authenticates the login request of the first mobile terminal on the condition that these two pieces of location information match. An authentication system comprising:

2. An authentication system for a login request to a system via an external network, comprising: The system includes a first mobile terminal that requests login to the system, a second mobile terminal carried by a user who operates the first mobile terminal, an authentication server that is connected to the first and second mobile terminals via the external network, and the system that uses location authentication by the authentication server, the first mobile terminal has a location information acquisition means for acquiring location information of a current location and a communication means for communicating with the authentication server and the system via the external network; the second mobile terminal has a location information acquisition means for acquiring location information of a current location and a communication means for communicating with the authentication server via the external network; the authentication server has a storage means and a control means; the storage means stores visited destination location information that associates the first mobile terminal with location information of a destination visited by the user, and terminal owner information that associates the user with the second mobile terminal; When the control means receives user information identifying the user of the second mobile terminal, the control means executes a location information comparison process to compare the location information of the first mobile terminal, the location information of the second mobile terminal, and the location information of the visited destination, and authenticates the login request of the first mobile terminal on the condition that these three pieces of location information match. An authentication system comprising:

3. The position information includes height position information.

3. The authentication system according to claim 1 or 2.

4. The position information comparison process is configured to process the position information as a match if the difference between the compared position information is within a predetermined tolerance range.

3. The authentication system according to claim 1 or 2.

5. The second mobile terminal performs authentication processing based on biometric information and / or stored information of the user before transmitting the user information.

3. The authentication system according to claim 1 or 2.

6. the first mobile terminal is configured as a notebook or tablet computer, The second mobile terminal is a smartphone.

3. The authentication system according to claim 1 or 2.

7. A method for authenticating a login request to a system via an external network, comprising: The system includes a first mobile terminal that requests login to the system, a second mobile terminal carried by a user who operates the first mobile terminal, an authentication server that is connected to the first and second mobile terminals via the external network, and the system that uses location authentication by the authentication server, the first mobile terminal has a communication means for communicating with the authentication server and the system via the external network; the second mobile terminal has a location information acquisition means for acquiring location information of a current location and a communication means for communicating with the authentication server via the external network; the authentication server has a storage means and a control means; the storage means stores visited destination location information that associates the first mobile terminal with location information of a destination visited by the user, and terminal owner information that associates the user with the second mobile terminal; The control means executes a location information transmission request step, upon receiving user information identifying the user of the second mobile terminal transmitted from the second mobile terminal, for requesting transmission of location information from the second mobile terminal that transmitted the user information, and a location information comparison step, upon receiving location information transmitted from the second mobile terminal in response to the location information transmission request step, for comparing the received location information of the second mobile terminal with location information of the visited destination, and authenticates the login request of the first mobile terminal on the condition that these two pieces of location information match.

1. An authentication method comprising:

Images