User access certification program user access authentication system, and user access authentication method

摘要

PROBLEM TO BE SOLVED: To sufficiently attain protection of privacy such as personal information and to prevent service users from using around an assertion or a fishing action performed by spoofing a regular service provider.;SOLUTION: A service management apparatus compares a line ID corresponding to an address specified by inquiring a network management device with a registered line ID specified based on a link ID and on a condition that both the line IDs match, an assertion is generated which includes a link ID contained in an assertion request received from a user terminal, a latest challenge and an electronic signature generated by a signature generation key held in advance for a signature object including the link ID and the latest challenge. Encrypted presentation information is generated by a presentation information encryption key held in advance for presentation information corresponding to the link ID and the registered line ID, and transmitted to the user terminal as a response to the assertion request.;COPYRIGHT: (C)2008,JPO&INPIT