| 摘要 |
<P>PROBLEM TO BE SOLVED: To provide an authentication server or the like for executing authentication of users and servers, which is used when settling commodity purchase payments or the like at the Internet electronic transaction sites by credit cards without requiring pre-registration of passwords or personal messages. <P>SOLUTION: Tokens, which generate an OTP (a one-time password) while using card numbers or the like as keys, are distributed to users being card members. An access control server, executing individual authentication, calculates the OTPs based on the same logic from the card numbers or the like received from member-store servers so as to execute individual authentication using the OTPs. The access control server also calculates codes for server authentication from the card numbers or the like so as to display them on the authentication screen for password input. The users are informed of the codes for server authentication by calculation by the tokens or by printing or the like on the tokens so as to prevent phishing. <P>COPYRIGHT: (C)2009,JPO&INPIT |
