| 摘要 |
A method of verifying a user, performed by a verification server, the method comprising: registering a password derivation pattern for a usage target system, the password derivation pattern being based on at least one specific element selected from a plurality of elements constituting a predetermined pattern; receiving system identification information of the usage target system and a restriction code from an information terminal device owned by a user, the restriction code being for restricting access to personal information for using the usage target system; generating a presentation pattern in which a plurality of predetermined characters are assigned to a plurality of elements constituting the predetermined pattern; generating an internal system password based on the password derivation pattern and the presentation pattern; sending the presentation pattern to the information terminal device to cause the information terminal device to display a screen containing the presentation pattern thereon and thereby to allow the user to input at least one character assigned to the at least one specific element corresponding to the password derivation pattern using into the usage target system; receiving the inputted at least one character, as an inputted password, from the usage target system; determining whether the inputted password is legitimate based on the system identification information and the internal system password; sending a result of the determination made to the usage target system; and restricting the personal information of the user to be provided to the usage target system based on the restriction code. |
