Authentication apparatus, authentication method, and data using method

A method for authenticating a request, the method comprising:

• receiving a request which is transmitted via a communication device by a service user to request a service-related process, the request containing process request information and connection identification information, the process request information indicating the contents of the process that the service user requests and the connection identification information being unique to the communication device;
• first determining whether or not the request is a login request in which the connection identification information is added to user identification information of the service user;
• transmitting, when the request is determined to be the login request, the user identification information contained in the login request;
• second determining, when the request is determined not to be the login request, whether the connection identification information contained in the request exactly corresponds to connection identification information of a communication device that has established a connection that allows authorized use of the service;
• and
• permitting performing a process that corresponds to the process request information contained in the request, when the result of the second determining indicates that the two pieces of the connection identification information exactly correspond to each other.

A data using method for using data for a service that is provided via connection that is established by a communication device on a network, the data using method comprising:

• securing an individual storage area that is individually associated with the communication device when the communication device establishes connection that allow authorized use of the service;
• receiving a request which is transmitted via a communication device by a service user to request a service-related process, the request containing process request information and connection identification information, the process request information indicating contents of the process that the service user requests and the connection identification information being unique to the communication device;
• first determining whether or not the request is a login request in which the connection identification information is added to user identification information of the service user;
• transmitting, when the request is determined to be the login request, the user identification information contained in the login request;
• second determining, when the request is determined not to be the login request, whether the connection identification information contained in the request exactly corresponds to connection identification information of a communication device that has established a connection that allows authorized use of the service;
• and
• permitting performing a process that uses data stored in the individual storage area secured at the securing, and that corresponds to the process request information contained in the request, when the result of the second determining indicates that the two pieces of the connection identification information exactly correspond to each other.