Authentication system, authentication server, and non-transitory computer readable medium storing program

An authentication server that authenticates users who use terminals to which login requests for a network system have been transmitted through an access point, comprising:

• a first hardware processor configured to:
• receive a login request transmitted from a second hardware processor of a first terminal, where the first terminal is used by a user who is not permitted to log into the network system, where the login request is transmitted from the first terminal through the access point for requesting a login process to the network system and the login request is modified by the access point by attaching an identification of the access point to the login request which is received by the first hardware processor;
• in response to the login request from the first terminal, transmit a request including authentication information requesting transmission of proof information proving that the first terminal is located in a specific space,
• receive proof information including authentication information from the second hardware processor;
• verify whether the first terminal is located in the specific space with a second terminal that is used by a user who is permitted to log into the network system, wherein verification of the first terminal is performed on the basis of identification of the access point and verification of whether the received proof information was generated by the second terminal in cooperation with the first terminal and permit the first terminal to log into the network system when verification of the first terminal is successful;
• and
• deny the first terminal permission to log into the network system when the authentication data included in the request for proof information does not match the authentication data in the received proof information.

A non-transitory computer readable medium storing a program causing a computer that forms an authentication server that authenticates users who use terminals to which login requests for a network system have been transmitted through an access point, to realize a function of:

• receiving, by a first hardware processor of the authentication server a login request transmitted from a second hardware processor of a first terminal, where the first terminal is used by a user who is not permitted to log into the network system, where the login request is transmitted from the first terminal through the access point for requesting a login process to the network system and the login request is modified by the access point by attaching an identification of the access point to the login request which is received by the first hardware processor;
• in response to the login request from the first terminal, transmitting by the first hardware processor, a request including authentication information requesting transmission of proof information proving that the first terminal is located in a specific space,
• receiving, by the first hardware processor, proof information including authentication information from the second hardware processor;
• verifying, by the first hardware processor, whether the first terminal is located in the specific space with a second terminal that is used by a user who is permitted to log into the network system, wherein verification of the first terminal is performed on the basis of identification of the access point and verification of whether the received proof information was generated by the second terminal in cooperation with the first terminal and permit the first terminal to log into the network system when verification of the first terminal is successful;
• and
• denying, by the first hardware processor, the first terminal permission to log into the network system when the authentication data included in the request for proof information does not match the authentication data in the received proof information.