METHOD AND SERVER FOR AUTHENTICATING USER

摘要

PROBLEM TO BE SOLVED: To provide a mutual authentication method allowing a user to input a password to perform user authentication without using an electronic certificate or the like, and allowing automatic confirmation of genuineness/falseness of a server.

SOLUTION: A server 10 previously associates and stores user identification data (uid) of the user and authenticating comparison data (JDLor JEC) calculated from user password data (π). When generated sixth encryption authentication data (oA') and received fourth encryption authentication data (oA) are compared and if they accord, it can be confirmed that the user authentication is satisfied. Since first encryption authentication data (wA) to the sixth encryption authentication data (oA') are transmitted/received in an encryption state on a communication network, tapping or the like on the communication network can be deterred.

COPYRIGHT: (C)2008,JPO&INPIT