User authentication method and system for implementing the same

A user authentication method executed by an authentication system that performs authentication of a user who performs access from an information communication terminal device in order to use a usage target system by using a reference terminal device that includes a security token capable of generating a time-based password,

• the user authentication method comprising:
• storing, for each user, in an authentication database, user information including token information related to the security token and use environment information related to a use environment of the information communication terminal device of the user and associated with the user information;
• receiving a user authentication request transmitted from the information communication terminal device used by one user who is to be authenticated in order to use the usage target system;
• setting an update cycle of a time-based password based on use environment information contained in the user authentication request;
• generating a time-based password according to the set update cycle;
• and
• performing the authentication of the one user based on a time-based password transmitted from the information communication terminal device and the generated time-based password, wherein
• the setting of the update cycle includes setting the update cycle of the time-based password to a first update cycle in a case where determination is made that the use environment information associated with the received user authentication request is equal to the use environment information stored in the authentication database, and setting the update cycle of the time-based password to a second update cycle shorter than the first update cycle in a case where determination is made that the use environment information associated with the received user authentication request is unequal to the use environment information stored in the authentication database.

A user authentication system performing authentication of a user who performs access from an information communication terminal device in order to use a usage target system by using a reference terminal device that includes a security token capable of generating a time-based password,

• the user authentication system comprising:
• an authentication database that stores user information of the user;
• and
• a hardware processor configured to perform functions of:
• an authentication server that refers to the authentication database and performs the authentication based on a user authentication request received from the information communication terminal device;
• and
• a token management server that generates a time-based password that is time-synchronized with a time-based password generated by the security token in accordance with a set update cycle, wherein
• the authentication server sets the update cycle of the time-based password to a first update cycle, wherein
• the authentication server receives a user authentication request including the time-based password generated by the security token from the information communication terminal device, and performs the authentication based on the time-based password contained in the received user authentication request, and wherein
• the authentication server acquires use environment information of the information communication terminal device, stores the acquired use environment information in an authentication database, and sets the update cycle of the time-based password to a second update cycle shorter than the first update cycle in a case where the authentication server determines that a use environment of the information communication terminal device is changed based on previously-stored use environment information and the latest stored use environment information, wherein
• the use environment information is information related to a security level of the information communication terminal device.

A user authentication system performing authentication of a user who performs access from an information communication terminal device in order to use a usage target system by using a reference terminal device that includes a security token capable of generating a time-based password,

• the user authentication system comprising:
• an authentication database that stores, for each user, user information including token information related to the security token and use environment information related to a use environment of the information communication terminal device of the user and associated with the user information;
• and
• a hardware processor configured to performs functions of:
• a token management server that generates a time-based password that is synchronized with a time-based password generated by the security token in a predetermined update cycle based on the token information;
• and
• an authentication server that receives a user authentication request transmitted from the information communication terminal device used by one user who is to be authenticated in order to use the usage target system, and performs the authentication based on the user authentication request, wherein
• the authentication server sets the predetermined update cycle to a first update cycle in a case where the authentication server determines that use environment information associated with the received user authentication request is equal to the use environment information stored in the authentication database, and sets the predetermined update cycle to a second update cycle shorter than the first update cycle in a case where the authentication server determines that the use environment information associated with the received user authentication request is unequal to the use environment information stored in the authentication database, and wherein
• the authentication server performs the authentication based on a time-based password transmitted from the information communication terminal device and the time-based password generated by the token management server.