| 摘要 |
PROBLEM TO BE SOLVED: To provide a user authentication method of a communication system capable of simplifying the operation of a user and simultaneously authenticating both of the user and a terminal equipment. SOLUTION: When the user inputs a password for a card to the terminal equipment 120, the terminal equipment 120 transmits a connection request including a terminal equipment ID to a communication network 130 and a server 140 confirms the validity/invalidity of the terminal equipment 120 from the terminal equipment ID and then returns a challenge. Then, the terminal equipment 120 calculates a one-time password by using a seed inside the challenge, a password number and a terminal password and sends it to an IC card 100 together with the password for the card and a random number. The IC card 100 checks the password for the card, then ciphers data including the one-time password and the random number and sends them through the terminal equipment 120 to the server 140. The server 140 deciphers the received data and then, checks the terminal password, the random number and the one-time password. |
