公开(公告)号：EP2557507A3

公开(公告)日：2013-10-23

申请号：EP12184239.7

申请日：2003-02-13

申请人： PASSLOGY CO., LTD.

发明人： Ogawa, Hideharu

IPC分类号： G06F15/00 ,  H04L9/32

CPC分类号： H04L63/083 ,  G06F21/31 ,  G06F21/33 ,  G06F21/36 ,  H04L63/104

摘要： A method of verifying a user, performed by a verification server, the method comprising: registering a password derivation pattern for a usage target system, the password derivation pattern being based on at least one specific element selected from a plurality of elements constituting a predetermined pattern; receiving system identification information of the usage target system and a restriction code from an information terminal device owned by a user, the restriction code being for restricting access to personal information for using the usage target system; generating a presentation pattern in which a plurality of predetermined characters are assigned to a plurality of elements constituting the predetermined pattern; generating an internal system password based on the password derivation pattern and the presentation pattern; sending the presentation pattern to the information terminal device to cause the information terminal device to display a screen containing the presentation pattern thereon and thereby to allow the user to input at least one character assigned to the at least one specific element corresponding to the password derivation pattern using into the usage target system; receiving the inputted at least one character, as an inputted password, from the usage target system; determining whether the inputted password is legitimate based on the system identification information and the internal system password; sending a result of the determination made to the usage target system; and restricting the personal information of the user to be provided to the usage target system based on the restriction code.

公开(公告)号：EP3828742A1

公开(公告)日：2021-06-02

申请号：EP21152741.1

申请日：2013-05-23

申请人： PASSLOGY CO., LTD.

发明人： Ogawa, Hideharu

IPC分类号： G06F21/31 ,  G06F21/34 ,  G06F21/36 ,  H04L9/32 ,  H04L29/06 ,  H04L29/08 ,  G06F16/955

摘要： [Problem] To provide a user authentication technology whereby hacking of a system by a third party is effectively prevented.
[Solution] The present invention is a user authentication method and system, wherein: an information communication terminal allocates numerals, etc., which configure a token code which is generated by time synchronizing with an authentication system side to each cell which configures a user's password derivation pattern, and displays upon a user interface a personal identification table whereupon numerals, etc., are allocated which have been randomly generated with other cells; the user, with reference to the personal identification table, selects the numerals, etc., which are allocated to each cell which configures the user's password derivation pattern, and inputs same as a password; and the authentication system carries out an authentication determination upon the inputted password on the basis of the generated time synchronized token code.

公开(公告)号：EP2557507A2

公开(公告)日：2013-02-13

申请号：EP12184239.7

申请日：2003-02-13

申请人： PASSLOGY CO., LTD.

发明人： Ogawa, Hideharu

IPC分类号： G06F15/00 ,  H04L9/32

CPC分类号： H04L63/083 ,  G06F21/31 ,  G06F21/33 ,  G06F21/36 ,  H04L63/104

摘要： A method of verifying a user, performed by a verification server, the method comprising: registering a password derivation pattern for a usage target system, the password derivation pattern being based on at least one specific element selected from a plurality of elements constituting a predetermined pattern; receiving system identification information of the usage target system and a restriction code from an information terminal device owned by a user, the restriction code being for restricting access to personal information for using the usage target system; generating a presentation pattern in which a plurality of predetermined characters are assigned to a plurality of elements constituting the predetermined pattern; generating an internal system password based on the password derivation pattern and the presentation pattern; sending the presentation pattern to the information terminal device to cause the information terminal device to display a screen containing the presentation pattern thereon and thereby to allow the user to input at least one character assigned to the at least one specific element corresponding to the password derivation pattern using into the usage target system; receiving the inputted at least one character, as an inputted password, from the usage target system; determining whether the inputted password is legitimate based on the system identification information and the internal system password; sending a result of the determination made to the usage target system; and restricting the personal information of the user to be provided to the usage target system based on the restriction code.

摘要翻译： 一种由验证服务器执行的验证用户的方法，所述方法包括：登记用于使用目标系统的密码导出模式，密码导出模式基于从构成预定模式的多个元素中选择的至少一个特定元素 ; 从用户拥有的信息终端装置接收使用目标系统的系统识别信息和限制码，所述限制码用于限制对使用目标系统的个人信息的访问; 生成其中多个预定字符被分配给构成预定图案的多个元素的呈现模式; 基于密码导出模式和呈现模式生成内部系统密码; 将所述呈现模式发送到所述信息终端设备，以使所述信息终端设备在其上显示包含所述呈现模式的屏幕，从而允许用户输入分配给与所述密码导出模式对应的所述至少一个特定元素的至少一个字符 使用到使用目标系统; 从使用目标系统接收输入的至少一个字符作为输入的密码; 基于系统识别信息和内部系统密码来确定输入的密码是否合法; 发送对所述使用目标系统的确定的结果; 以及基于所述限制码限制要提供给所述使用目标系统的用户的个人信息。

公开(公告)号：EP2682890B1

公开(公告)日：2016-09-07

申请号：EP13187345.7

申请日：2006-07-27

申请人： PASSLOGY CO., LTD.

发明人： Ogawa, Hideharu

IPC分类号： G06F21/42 ,  H04L29/06

CPC分类号： H04L63/18 ,  G06F21/42 ,  H04L63/083

公开(公告)号：EP2557508A2

公开(公告)日：2013-02-13

申请号：EP12184240.5

申请日：2003-02-13

申请人： PASSLOGY CO., LTD.

发明人： Ogawa, Hideharu

IPC分类号： G06F15/00 ,  H04L9/32

CPC分类号： H04L63/083 ,  G06F21/31 ,  G06F21/33 ,  G06F21/36 ,  H04L63/104

摘要： A method of registering a password derivation pattern for deriving a password to be used in user verification, the method comprising: upon control of a server, generating a presentation pattern in which a predetermined character is assigned to each element in a predetermined pattern; presenting the generated presentation pattern to a user in order to cause the user to input a character assigned to a specific element in the generated presentation pattern; repeating the generating and the presenting until the password derivation pattern is specified based on the inputted character, and registering the specified password derivation pattern.

摘要翻译： 一种注册用于导出用于用户验证的密码的密码导出模式的方法，所述方法包括：在控制服务器时，生成以预定模式将预定字符分配给每个元素的呈现模式; 将所生成的呈现模式呈现给用户，以便使用户输入分配给所生成的呈现模式中的特定元素的角色; 重复生成和呈现，直到基于输入的字符指定密码导出模式，并且登记指定的密码导出模式。

公开(公告)号：EP2682890A1

公开(公告)日：2014-01-08

申请号：EP13187345.7

申请日：2006-07-27

申请人： PASSLOGY CO., LTD.

发明人： Ogawa, Hideharu

IPC分类号： G06F21/30 ,  H04L29/06

CPC分类号： H04L63/18 ,  G06F21/42 ,  H04L63/083

摘要： According to the present invention there is provided a site check method for checking whether a predetermined site is legitimate or not, the method comprising the steps of providing a first server that is provided with site identification information and manages the predetermined site; and a second server that holds the site identification information provided to the first server and synchronizes its time with a time in the first server, receiving, by the first server, a first access from a first information terminal used by a user and creating first check information based on the time of the first access obtained from its own time information and the site identification information, displaying, by the first server, a login screen containing the created first check information on the first information terminal, receiving, by the second server, a second access from a second information terminal used by the user and creating second check information based on the time of the second access obtained from its own time information and the site identification information, and displaying, by the second server, the created second check information on the second information terminal. The site check method enables a user to easily check whether a site the user has accessed is legitimate or not.

摘要翻译： 根据本发明，提供了一种用于检查预定站点是否合法的站点检查方法，该方法包括以下步骤：提供具有站点识别信息并管理预定站点的第一服务器; 以及第二服务器，其保存提供给所述第一服务器的站点识别信息，并将其时间与所述第一服务器中的时间同步，由所述第一服务器接收来自用户使用的第一信息终端的第一访问，并且创建第一检查 基于从其自身的时间信息获取的第一次访问的时间和站点识别信息的信息，由第一服务器显示包含在第一信息终端上创建的第一检查信息的登录屏幕，由第二服务器接收， 从用户使用的第二信息终端进行第二次访问，并且基于从其自身的时间信息和站点识别信息获得的第二次访问的时间创建第二检查信息，并且由第二服务器显示所创建的第二检查信息 在第二信息终端上。 站点检查方法使用户能够方便地检查用户访问的站点是否合法。

公开(公告)号：EP2557508A3

公开(公告)日：2013-10-30

申请号：EP12184240.5

申请日：2003-02-13

申请人： PASSLOGY CO., LTD.

发明人： Ogawa, Hideharu

IPC分类号： G06F15/00 ,  H04L9/32

CPC分类号： H04L63/083 ,  G06F21/31 ,  G06F21/33 ,  G06F21/36 ,  H04L63/104

摘要： A method of registering a password derivation pattern for deriving a password to be used in user verification, the method comprising: upon control of a server, generating a presentation pattern in which a predetermined character is assigned to each element in a predetermined pattern; presenting the generated presentation pattern to a user in order to cause the user to input a character assigned to a specific element in the generated presentation pattern; repeating the generating and the presenting until the password derivation pattern is specified based on the inputted character, and registering the specified password derivation pattern.

摘要翻译： 一种密码导出模式的登记方法，用于导出在用户验证中使用的密码，所述方法包括：在服务器的控制下，产生呈现模式，其中预定字符以预定模式分配给每个元素; 向用户呈现所生成的呈现模式，以使得用户输入分配给所生成的呈现模式中的特定元素的字符; 基于输入的字符重复产生和呈现直到指定密码导出模式，并注册指定的密码导出模式。