Authentication system and method
OwnerShoji Kodamainventor
Life of this patent
Estimating the term…
Abstract
Security is improved as compared to the security of conventional authentication systems, only by requesting a user to perform operations involving the same number of operations as that of the conventional authentication systems. When login information is registered, an authentication system (1, 1A) accepts registration of a type of a login image that composes an authentication button for initiating user authentication. When displaying an authentication page that is used for user authentication, the authentication system (1, 1A) displays buttons including the authentication button composed of the login image and dummy buttons composed of other images. The authentication system (1, 1A) performs user authentication in a case in which an operation button selected by the user is the authentication button.
Claims13
An authentication system including a user terminal and an administrative server, the authentication system performing user authentication based on login information that includes a user ID and a password for identifying a user, the authentication system comprising:
- a registration accepting unit for accepting registration of a type of a login image that composes an authentication button for initiating the user authentication when the login information is registered, the registration accepting unit being arranged in the administrative server;
- a login image obtaining unit for generating an authentication page on the user terminal in response to a request from the user terminal, the authentication page displaying a plurality of operation buttons that include an authentication button composed of the login image accepted by the registration accepting unit and dummy buttons composed of images different from the login image, the login image obtaining unit being arranged in the administrative server;
- an authentication page displaying unit for displaying the authentication page in a state where the login information has been automatically input into an entry field of the authentication page generated by the login image obtaining unit, the authentication page displaying unit being arranged in the user terminal;
- a login image determining unit for determining a type of an operation button selected on the authentication page by a user of the user terminal, and for transmitting the login information being input into the entry field to the administrative server in a case in which the operation button thus selected is the authentication button, the login image determining unit being arranged in the user terminal;
- and
- an authenticating unit for performing the user authentication, based on determining whether the login information is correct, the authenticating unit being arranged in the administrative server.
A method of performing user authentication based on login information that includes a user ID and a password for identifying a user, the method comprising the steps executed by a computer:
- accepting registration of a type of a login image that composes an authentication button for initiating the user authentication when the login information is registered;
- generating an authentication page in response to a request from a user terminal, the authentication page displaying a plurality of operation buttons that include an authentication button composed of the login image accepted and dummy buttons composed of images different from the login image;
- displaying the authentication page in a state where the login information has been automatically input into an entry field of the authentication page;
- determining a type of an operation button selected on the authentication page by a user of the user terminal and transmitting the login information being input into the entry field to an administrative server in a case in which the operation button thus selected is the authentication button;
- and
- performing the user authentication, and transmitting the login information being input into the entry field to an administrative server in a case in which the operation button thus selected is the authentication button.
A non-transitory storage medium having instructions stored thereon which when executed cause a user's computing device to perform operations comprising:
- requesting login credentials of a user comprising a user ID and a password;
- causing a first plurality of images to be displayed to the user, wherein one of the first plurality of images is predefined as an authenticating image and the other images are dummy;
- receiving input from the user of the user ID, the password and the user's selection of one of the first plurality of images;
- causing the user to be authenticated based upon the input from the user of the user ID, the password and the user's selection of one of the first plurality of images, and determining that the user is not authentic if the user has selected any of the dummy images of the first plurality of images.
Dependencies are inferred from the claim text.