A content presentation-type authentication system to allow a client to perform a content presentation-type user authentication in which user authentication is performed in such a manner that a plurality of pattern elements arranged in a given pattern are presented as a presentation pattern to a user who intends to be authenticated, and a one-time password derivation rule is used as a password of the user and applied to certain ones of the pattern elements located at specific positions in the presentation pattern to create a one-time password, and a content is forcibly presented to the user in connection with the user authentication, the content presentation-type authentication system comprising:
- an authentication-service providing server configured to manage respective user IDs and passwords of users, content data indicative of a detail of each of a plurality of contents to be forcibly presented in connection with a plurality of the user authentications, and respective content IDs of the plurality of contents, and provide content-added authentication information to each of the users;
- and
- a client equipped with a content presentation-type user authentication program and a processor which are operable to perform the content presentation-type user authentication, and connected to the authentication-service providing server via a network,
- wherein the authentication-service providing server includes:
- user-information storage which pre-stores therein the user ID of each of the users, and user attribute information indicative of an attribute of the user, in a mutually associated manner;
- password storage which pre-stores therein the user ID of each of the users, and a one-time-password derivation rule of the user, in a mutually associated manner;
- a pattern-specifying-information generator operable, in accordance with a given generation rule, to generate a plurality of pattern-specifying information each adapted to specify the presentation pattern;
- a verification-code creator operable to create a verification code by applying the one-time-password derivation rule associated with each of the user IDs to the presentation pattern specified based on each of the plurality of pattern-specifying information generated by the pattern-specifying-information generator, and then subjecting the obtained result to a one-way function operation;
- content-information storage operable, with respect to each of the contents to be forcibly presented in connection with the user authentication, to store therein the content ID of the content, the content data indicative of the detail of the content, and content-related information containing a content-presentation target user condition indicative of a condition for users to be targeted in presentation of the content, in a mutually associated manner;
- a presentable-content specifying unit operable, with respect to each of the user IDs, to specify a plurality of the content IDs on condition that the user attribute information associated with the user ID satisfies the content-presentation target user condition contained in the content-related information associated with each of the plurality of content IDs;
- an authentication-information storage operable to store therein a plurality of authentication information each containing the verification code created in association with a respective one of the user IDs and the pattern-specifying information used to create the verification code, and a plurality of the content data each pertaining to a respective one of the plurality of content IDs specified with respect to each of the user IDs, in a manner associated with each of the user IDs;
- an authentication-information-request receiver operable to receive an authentication-information request containing the user ID of the user who intends to be authenticated, from the client via the network;
- and
- a content-added-authentication-information transmitter operable to transmit the content-added authentication information which contains the plurality of authentication information and the plurality of content data each stored in a manner associated with the received user ID,
- and wherein the content presentation-type user authentication program is configured, when it is run on the processor of the client in connection with the user authentication, to achieve:
- a user-ID input unit operable to accept an entry of the user ID from the user;
- an authentication-information-request transmitter operable to transmit the authentication-information request containing the entered user ID, to the authentication-service providing server via the network;
- a content-added-authentication-information receiver operable to receive the content-added authentication information transmitted from the authentication-service providing server in a manner associated with the user ID, via the network;
- authentication-information storage operable to store therein the received content-added authentication information in a manner associated with the user ID;
- an authentication-information selector operable to select one of the plurality of authentication information contained in the content-added authentication information associated with the user ID;
- a pattern-element-sequence creator operable to create a pattern element sequence, based on the pattern-specifying information contained in the selected authentication information;
- a pattern display unit operable to create a presentation pattern, based on the pattern element sequence, and display the presentation pattern on a screen;
- a one-time-password input unit operable to accept, from the user, an entry of a one-time password as a result of applying the one-time-password derivation rule to certain ones of the plurality of pattern elements comprised in the presentation pattern;
- a user authentication unit operable to compare a code created by subjecting the entered one-time password to the one-way function operation, with the verification code contained in the selected authentication information, and, when they are identical to each other, to successfully authenticate the user;
- a content selector operable, in accordance with a given rule, to select content data about a content to be forcibly presented in connection with the user authentication, from the plurality of content data contained in the content-added authentication information;
- and
- a content presentation unit operable, based on the selected content data, to forcibly present the content to the user in connection with the user authentication.