INFORMATION PROCESSING SYSTEM AND USER AUTHENTICATION METHOD

摘要

An information processing system includes at least one information processing terminal and a first information processing apparatus. When an instruction for selecting a user authentication mode, which is received, from a user, by a user interface of the information processing terminal, selects a second user authentication mode, circuitry of the first information processing apparatus determines whether a sum of charges for services used by the user while logging in the information processing terminal via the second user authentication mode after a most recent login via a first user authentication mode exceeds a predetermined amount, and generates an authentication result indicating that the user is not the authenticated user.

主权项

1. An information processing system comprising:
at least one information processing terminal; and a first information processing apparatus connected to the at least one information processing terminal via a network, the information processing terminal including:
a user interface to receive, from a user, an instruction for selecting a user authentication mode from among at least a first user authentication mode and a second user authentication mode, the first user authentication mode using individual authentication information stored in an IC card as user authentication information, and the second user authentication mode using a user ID and a password input from the user as the user authentication information; andcircuitry to:in response to the instruction from the user for selecting the first user authentication mode, acquire the individual authentication information from the IC card, and send a user authentication request including the individual authentication information acquired from the IC card to the first information processing apparatus;in response to the instruction from the user for selecting the second user authentication mode, acquire the user ID and the password input from the user and send the user authentication request including the user ID and the password to the first information processing apparatus; andsend, to the first information processing apparatus, a login history recording request when the user is an authenticated user who is permitted to log in the information processing terminal, the login history recording request including information indicating the selected user authentication mode selected by the authenticated user and login date and time of the authenticated user; and the first information processing apparatus including:
a memory to store a login history that associates the selected user authentication mode with the login date and time of the authenticated user, which are included in the login history recording request received from the information processing terminal; andcircuitry to authenticate the user based on the authentication information included in the user authentication request received from the information processing terminal,wherein, when the instruction for selecting selects the second user authentication mode, the circuitry of the first information processing apparatus is further configured to
determine whether a sum of charges for services used by the user while logging in the information processing terminal via the second user authentication mode after a most recent login via the first user authentication mode exceeds a predetermined amount, andgenerate an authentication result indicating that the user is not the authenticated user.