JP2002334055A - Device, method and program for providing last log-in information, program for displaying last log-in information and storage medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a server, etc., which can speedily find an illegal log-in to an account in such a case as to an Internet bank wherein a plurality of terminal devices can be set for one account. SOLUTION: A user is able to set a plurality of terminal devices for one account. For each terminal device, a discrimination file for discriminating it from other terminal devices set for the same account is stored. It is read in the terminal device by a server by using a cookie, etc. When the user logs in from the terminal device, the server reads the discrimination file written in the terminal device to specify the terminal device and stores it together with the log-in data and time. When the user logs in, the server can presents the data and time of the last log-in and the terminal device which is used by the user by using the stored information.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a previous login information providing server apparatus, a previous login information providing method, a previous login information providing program, a previous login information display program, and a storage medium. For those who provide services.

[0002]

2. Description of the Related Art Traditionally, bank customers have been required to deposit, transfer,
They often went to banks to receive various services provided by banks, such as loans. For example, when performing a transfer of a fee or an inquiry of a deposit balance, an ATM (Automatic Teller) installed in a bank or a street is used.
Machine). In addition, it was necessary to go directly to a bank to close a time deposit account or open a new account.

However, with the recent development of communication infrastructure and the advancement and spread of Internet technology, customers log in to a bank server from a personal computer (hereinafter referred to as a PC) at home to transfer money, cancel accounts, and open new accounts. Various bank services, such as opening and balance inquiry, have become available on the network. As described above, when the Internet is used, a customer can access a bank server from a client terminal device such as a PC or a mobile terminal installed at home or at work.

[0004]

However, despite the fact that a user can access an account from a plurality of client terminal devices as described above, conventionally, when a user logs into a bank server, Information as to whether the user logged in from the terminal device was not presented. Therefore, it is difficult for the user to grasp the past access history, and there is a security problem. That is, there is a problem that even if a third party accesses the account illegally from any terminal of the user without permission, the user does not easily notice the unauthorized access.

[0005] Therefore, an object of the present invention is to provide a banking service via the Internet, which reduces the risk of information leakage from a client terminal device to a third party and the risk of unauthorized access by the third party. It is an object to provide an information providing server device, a previous login information providing method, a previous login information providing program, a previous login information display program, and a storage medium.

[0006]

According to the present invention, in order to achieve the above object, according to the first aspect of the present invention, receiving means for receiving a login to one account from one or more client terminal devices; When the accepting unit accepts a login from the client terminal device,
Specific information obtaining means for obtaining specific information for specifying a client terminal device that has previously logged in to an account of
Specific information obtained by the specific information obtaining means, the information relating to the client terminal apparatus previously logged in to the account, and display information to be displayed on the client terminal apparatus which has received the current login by the receiving means. Last time login information providing server, comprising: a display information obtaining unit that obtains the display information by using the display information obtaining unit; and a display information transmitting unit that transmits the display information obtained by the display information obtaining unit to the client terminal device. Provide equipment. Note that login to an account means, for example, that a client terminal device can access a transaction database existing in a customer-related system such as a transaction database provided in a server device, and a transaction specified by an account number or the like. It is to enable reading and writing of information. In the invention according to claim 2, the information transmitted by the display information transmitting unit includes the specific information acquired by the specific information acquiring unit.
Is provided.
According to the third aspect of the present invention, the receiving means may be configured to perform the first operation.
When receiving a login from the client terminal device to the account of the specific information receiving means for receiving specific information for specifying the client terminal device from the client terminal device, the specific information receiving means received by the specific information receiving unit Specific information holding means for holding specific information, wherein the specific information obtaining means is configured to output specific information for specifying the client terminal device that previously logged in to the one account from the specific information holding means. The previous login information providing server apparatus according to claim 1, wherein the server apparatus obtains the previous login information. In the invention according to claim 4,
Confirmation information for confirming whether or not the client terminal device has identification information for identifying the client terminal device when accepting a login from the client terminal device for the one account by the accepting means. Confirmation information acquiring means for acquiring, the write information acquiring means for acquiring write information for writing specific information for identifying the client terminal device to the client terminal device, and the write information acquiring means for acquiring Write information transmitting means for transmitting the write information to the client terminal device, wherein the identification information for identifying the client terminal device by the client terminal device from the confirmation information acquired by the confirmation information acquisition means. If it is confirmed that no information is held, the write information acquisition Providing last login information providing server device according at the write information acquired said write information transmitting means in claim 1, characterized in that transmitted to the client terminal device at. The invention according to claim 5, further comprising a previous login date and time obtaining means for obtaining a date or date and time when a login to the one account was previously received, and wherein the transmitting means is the client terminal apparatus which has received the current login. The last login information providing server device according to claim 1, wherein a date or a date and time obtained by the previous login date and time obtaining means is transmitted to the server. The invention according to claim 6 is characterized in that the specific information is configured by a code other than a code input by a user when logging in, and includes account specific information for specifying the one account. A previous login information providing server device according to claim 1 is provided. In the invention according to claim 7, the number of the client terminal devices that can hold the same account identification information is limited to a predetermined number or less. provide. The invention according to claim 8, further comprising a name holding unit for holding a name arbitrarily set by the user for the client terminal device, wherein the display information includes the client held by the name holding unit. 2. A server device for providing previous login information according to claim 1, wherein the server device includes a name of the terminal device. In the invention according to claim 9, a first step of accepting a login to one account from one or more client terminal devices, and when accepting a login from the client terminal device in the first step, A second step of acquiring specific information that identifies a client terminal device that has previously logged in to the one account; and information relating to the client terminal device that has previously logged in to the one account, the first step. A third step of obtaining display information to be displayed on the client terminal device that has received the login at this time by using the specific information obtained in the second step, and obtaining the display information in the third step. A fourth step of transmitting the display information to the client terminal device. To provide emissions information providing method. In the invention according to claim 10, a receiving function for receiving a login from one or more client terminal devices for one account, and, when the login is received from the client terminal device by the receiving function, the one account. A specific information obtaining function for obtaining specific information specifying a client terminal device that has previously logged in, and information regarding the client terminal device that has previously logged in to the one account, and the current login is received by the receiving function. A display information obtaining function for obtaining display information for displaying on the client terminal device using the specific information obtained by the specific information obtaining function; and the display information obtaining function for obtaining the display information obtained by the display information obtaining function. Display information transmission function to be transmitted to the terminal device and the previous log to be realized by the computer To provide emissions information providing program. According to the eleventh aspect of the present invention, the one provided in the server device
A login function for logging in to one account provided in the server device, and a login function for logging in to one account, for identifying and identifying the client terminal device from other client terminal devices. A holding function for holding the specific information, a transmission function for transmitting the specific information held by the holding function to the server device, and information for specifying the client terminal device that has previously logged in to the one account is displayed. And a display function for displaying the display information received by the display information receiving function in the client terminal device. Provide an information display program. According to the twelfth aspect of the present invention, one account for one account
A receiving function for receiving a login from one or more client terminal devices, and specifying information for specifying a client terminal device that has previously logged in to the one account when receiving a login from the client terminal device with the receiving function. The specific information acquisition function to be acquired, and the display information to be displayed on the client terminal device that has received the current login by the accepting function, the display information being information on the client terminal device that has previously logged in to the one account. A display information acquisition function to acquire using the specific information acquired by the specific information acquisition function, and a display information transmission function to transmit the display information acquired by the display information acquisition function to the client terminal device, Computer that stores the previous login information providing program to be realized To provide only take storage medium.
In the invention according to claim 13, a previous login information display program for logging in to one account provided in the server device, the login function for logging in to one account provided in the server device, and the client A holding function for holding specific information for identifying and specifying a terminal device from another client terminal device, a transmitting function for transmitting the specific information held by the holding function to the server device, A display information receiving function of receiving display information for displaying information identifying the client terminal device that has logged in to the first account from the server device; and displaying the display information received by the display information receiving function. The display function and the computer which has stored the previous login information display program for realizing the client terminal device can be read. It provides a storage medium capable taken.

[0007]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Preferred embodiments of the present invention will be described below in detail with reference to FIGS. FIG. 1 is a diagram showing a configuration example of a network to which a client terminal device 5 and a bank system 7 according to the present embodiment are applied. The bank system 7 includes an authentication server, a banking server for performing banking services, a previous login information providing server for providing previous login information to the client terminal device 7, and the like, and is connected to the Internet 7. Further, a plurality of client terminal devices 5, 5, 5,.
.. Are also connected to the Internet 6. These client terminal devices 5, 5, 5,... Are composed of, for example, personal computers (hereinafter, PCs).

The bank system 7 manages and manages bank accounts of a plurality of users, and provides various bank services such as confirmation of deposit balance and transfer. Each user can access the Internet 6 from the client terminal device 5, 5, 5,.
, The user can log in to the bank system 7 and use services provided by the bank.

When a user logs in to the bank system 7, it is necessary to input data such as a user ID and a password, a login account and a password to the bank system 7, which can authenticate the user. . After these input data have been authenticated by the authentication server, the user can log in to the bank system 7. Each user has up to three client terminal devices 5, 5, 5,...
You can register to. As a result, the user can install up to three client terminal devices 5, 5, 5,...

In this embodiment, a description will be given assuming that a user can set up to three client terminal devices 5, 5, 5,... In the bank system 7, but the present invention is not limited to this. The above configuration or a configuration in which less than three client terminal devices can be set can be configured. Further, the number of client terminal devices that can be set for each user may be different. In the present embodiment, the client terminal devices 5, 5,.
Are described as being constituted by a PC. For example, this includes a mobile phone, a notebook PC, other mobile terminals, a workstation, a digital television capable of two-way communication, and a communication function. You can also use a word processor you have.

In the following, the client terminal devices 5, 5, 5,...
Is connected via a LAN (Local Area Network), for example.
k), WAN (Wide Area Network),
The connection can also be made via a cable television network capable of two-way communication, a digital television broadcasting network capable of two-way communication, or another network configured with a dedicated communication line network or the like.

Also, a number of client terminal devices 5, 5, 5,... Are connected to the Internet 6, and in the following description, one of the client terminal devices 5 will be described. The configuration of the other client terminal devices 5, 5, 5,... Is the same as that of the client terminal device 5.

FIG. 2 is a block diagram showing an example of a hardware configuration of the client terminal device 5. The control unit 11 includes a CPU (central processing unit) 12, a ROM (memory for reading data only) 13, and a RAM (memory for reading and writing as needed) 14, and controls the entire client terminal device 5. The ROM 13 stores programs and parameters for the CPU 12 to perform various calculations and controls. The RAM 14 is used to provide a working memory to the CPU 12 and read and load files and programs stored in the storage device 20.

The CPU 12 performs various calculations, determines conditions, controls each component, and the like according to programs stored in the ROM 13 and the RAM 14. For example, the browser 23 stored in the storage device 20 is loaded into the RAM 14 or the HTML transmitted from the bank system 7 is transmitted.
(Hypertext Markup Language)
e) The file of the format is displayed on the display device 17 according to the program of the browser.
5 and the data input using the mouse 16
9 to the bank system 7.

[0015] HTML is the WWW of the Internet.
(World Wide Web) is a language for describing a home page in a server. Characters, still images, and the like are displayed on a display device 17 using a browser (software for displaying an HTML file or the like) provided in a terminal device.
Videos and the like can be displayed.

The keyboard 15 includes character keys, numeric keys,
Function keys and the like are provided, and the user operates these keys to make the user system
D, a password, or the like, or the name of the client terminal device 5 can be input and set.

The mouse 16 is a pointing device, and can operate corresponding functions by clicking various buttons and icons displayed on the display device 17. The display device 17 is, for example, a CRT.
(Cathode Ray Tube) is composed of a display, a liquid crystal display, a plasma display, and the like, and includes a login screen transmitted as an HTML format file from the bank system 7, a previous login information display screen described later, a client terminal registration screen, and the like. And a result input by the user using the keyboard 15 or the mouse 16 or the like.

The printer 18 is a printing device for performing various types of printing on paper, and includes, for example, a laser printer, a dot printer, an ink jet printer, a page printer, a thermal printer, a thermal transfer printer, and the like. Based on the data received from the CPU 12, the printer 18 can print, for example, the client terminal device 5 used at the time of the previous login and the previous login information indicating the date and time of the login. The communication control device 19 is, for example, a modem or the like, and is a control device for connecting a network between the client terminal device 5 and the bank system 7. In addition, the client terminal device 5
Is connected to the Internet 6 via a digital line, for example, TA (Terminal Adapter)
device) may be used.

The storage medium drive 21 includes a CPU 12
This is a driving device for reading a program, other files, and the like stored in a storage medium. Examples of the storage medium include a magnetic storage medium such as a floppy (registered trademark) disk (magnetic disk) and a magnetic tape, and a CD-RO.
There are a storage medium such as M and a magneto-optical disk from which information can be read optically, a semiconductor storage medium such as a memory chip and an IC card, and a storage medium using paper such as a paper card and a paper tape.

The input / output interface 22 is, for example, a U
SB (Universal Serial Bus),
RS232C (Recommended Standard)
d232C) Another input / output interface, which is used, for example, when connecting an externally connected device such as a joystick to the client terminal device 5.

The storage device 20 comprises a readable and writable storage medium and a drive for reading and writing programs, data, and the like to and from the storage medium, and for example, comprises a hard disk. The storage device 20 stores a browser 23, an identification information file 24, other programs 25, other data 26, and the like. The browser 23 is software that displays a screen defined by HTML (a type of computer language) on the display device 17. The browser 23 displays the previous login information display screen and the client terminal registration screen (both are created in HTML format files) downloaded from the bank system 7 on the display device 17.

The identification information file 24 is stored in the bank system 7
Is a file including identification information written in the storage device 20 to identify and specify the client terminal device 5 from other client terminal devices 5. The other program 25 is an OS (Operating System) which is a basic program for operating the client terminal device 5.
system) and other programs.

The other data 26 stores various data such as communication records between the client terminal device 5 and the bank system 7. The bus line 27 is a transmission line for transmitting data and signals between the above components. The configuration of the other client terminal devices 5 is almost the same as the above configuration.

FIG. 3 is a block diagram showing an example of the configuration of the bank system 7. As shown in FIG. The bank system 7 is roughly divided into a previous login information providing server 31, an authentication server 32,
It comprises a banking server 33 and the like. When receiving the user's login to the bank system 7, the previous login information providing server 31 transmits the previous login information to the client terminal device 5 and relays the information to the authentication server 32 and the banking server 33. The configuration relationship between these servers is merely an example. For example, the banking server 33 may be connected to the Internet 6 via a firewall, or the banking server 33 may be connected.
May be connected to the authentication server 32.

The authentication server 32 authenticates a user by acquiring, for example, a login account, a user ID, a password, and the like input from the client terminal device 5. In the present embodiment, the user inputs the user ID and the password, but the user is not limited to this. For example, the user logs in to the account such as a personal identification number, a bank account number, and user identification information for identifying the user. Anything that can identify the user may be used. The banking server 33
It is a server that performs banking operations such as transfer, balance inquiry, account opening and cancellation, etc., based on a user's input from the client terminal device 5, and provides services to the user after the user is authenticated by the authentication server 32.

Next, the operation of the previous login information providing server 31 will be described. Last login information server 3
1 accepts registration of up to three client terminal devices for one account. Since the security problem arises when the number of client terminal devices 5 that can access one account increases, the upper limit of the number of client terminal devices 5 that can be registered is three. The user can register a manufacturer, a model name, and any other name of the PC such as “Sunny Power PC (home)” in each client terminal device 5. The name registered by the user is used as the name of the client terminal device 5 when the user confirms the login information last time.

When the client terminal device 5 has logged in the last time, the login information providing server 31 checks whether the client terminal device 5 is a registered terminal device. If the client terminal device 5 has been registered, the date and time of the previous login to the account and the name of the client terminal device 5 used at that time (name arbitrarily set by the user) are displayed on the client terminal device 5. . If the client terminal device 5 has not been registered, a client terminal registration screen is displayed on the client terminal device 5 to urge the user to register the client terminal device. At the time of login, the user can check the date and time of previous login and the name of the client terminal device 5 used at that time, and can check unauthorized access by a third party.

Next, the configuration of the previous login information providing server 31 will be described. The previous login information providing server 31
It comprises a control unit 34, communication control units 35 and 37, a storage device 36, a display device 38, an input / output unit 39, and the like. The control unit 34 includes a CPU, a RAM, a ROM, and the like, and is a component that controls the entire login information providing server 31 last time. The functions of CPU, RAM, ROM
CPU of control unit 11 (FIG. 2) of client terminal device 5
12, the ROM 13, and the RAM 14. That is, R
The OM stores programs and parameters to be executed by the CPU. The RAM loads the previous login information providing program 41 stored in the storage device 36 and provides a working memory to the CPU. The CPU performs various calculations and determinations of conditions and controls each component according to a program stored in the ROM or a previous login information providing program loaded in the RAM.

The communication control device 35 is composed of, for example, a modem, and connects the Internet 6 and the previous login information providing server 31. The previous login information providing server 31 can communicate with the client terminal device 5 via the communication control device 35 and the Internet 6. The communication control device 37 is a device that provides an interface between the authentication server 32, the banking server 33, and the previous login information providing server 31. The authentication server 32
The login information providing server 31 receives the user ID and password obtained from the user the previous time via the communication control device 37 and authenticates the user ID and password. The banking server 33 acquires information input by the user from the client terminal device 5 via the communication control device 37, and performs banking.

The display device 38 is composed of, for example, a CRT display, a liquid crystal display, a plasma display, etc., and can display various screens.
For example, the maintenance screen is displayed when the administrator of the login information providing server 31 performs maintenance last time,
If a failure has occurred in the login information providing server 31 last time, an error code is displayed or the storage device 36
A list of files stored in the login information providing server 31 is displayed, and a screen thereof is displayed when application software installed in the login information providing server 31 is activated last time. The input / output unit 39 is connected to input devices such as a keyboard and a mouse, output devices such as a printer, and input / output devices such as a storage medium drive. The functions of these devices are the same as those of the client terminal device 5.

The storage device 36 is composed of a large-capacity readable / writable storage medium and a drive device for reading / writing data from / to the storage medium, and is composed of, for example, a large-capacity hard disk. The storage device 36 stores the previous login information providing program 36, the terminal information database 42,
A login history database 43 is provided.

After the previous login information providing program 41 is loaded into the RAM of the control unit 34, the CP
Performed by U. Thereby, the previous login information providing server 31 can exhibit various functions such as presenting the previous login information to the client terminal device 5. The terminal information database 42 is a database that stores terminal information 64. The terminal information 64 is information for identifying and specifying a plurality of client terminal devices 5 set in the account.

The log-in history database 43 stores log-in history data which is a log-in history for each account. The log-in history includes the date and time of log-in, the client terminal device 5 used for log-in, and the like. The login history database 43 may store not only the login history but also the history of accesses made to the bank system 7 by the user. In this case, the most recent login record is retrieved from the login history database 43 in which various access records are stored and provided to the client terminal device 5.

Next, referring to FIG.
4, terminal information 64 and login history data 67 will be described. FIG. 4A is a diagram illustrating a configuration of the identification information file 24. The identification information file 24 is stored in the storage device 20 of the client terminal device 5. The identification information file 24 includes an identification information file symbol 62 and a terminal identification symbol 63. Identification information file symbol 62
Is a code uniquely assigned to each account, and has a one-to-one correspondence with the user ID. When a user has a plurality of accounts, a user ID is issued for each account.

The terminal identification code 63 is information on the number of the client terminal device 5 for identifying the number of the terminal device used in the account. 3 for each account
Up to the client terminal devices 5 can be set. The terminal identification symbol 63 is the client terminal device 5
Is the first device, the second device, or the third device. When the login information providing server 31 last logs in from the client terminal device 5, the identification information file symbol 62 and the terminal identification symbol 6
If you read 3, which client terminal device 5 of which user
You can know if it is a login from.

In place of the identification information file symbol 62, for example, a user ID (a login account when a login account is used at the time of login) can be registered in the identification information file 24. The reason that the file symbol 62 was not used as the user ID is as follows.
This is to increase security. That is, since the identification information file 24 remains in the client terminal device 5, there is a possibility that the identification information file 24 may be illegally decrypted by a third party, and a value different from the user ID is used in order to prevent unauthorized access. . Thus, even if the identification information file symbol 62 is decrypted by a third party, the third party cannot log in using this value.

FIG. 4B is a diagram showing the structure of the terminal information 64. The terminal information 64 is stored in the terminal information database 42 provided in the previous login information providing server 31. The terminal information 64 includes a user ID 65, an identification information file symbol 66, terminal identification symbols 1, 2, and 3, and terminal name information 1, 2, and 3. Note that user I
D65 may use other user identification symbols that can identify the user. The terminal information 64 is created for each user. When the user has a plurality of accounts, the terminal information 64 is created for each account. In this case, a user ID is issued for each account. Further, the above configuration is not limited to the one that issues a user ID for each account.
May be configured to allow login to a plurality of accounts.
In this case, when the user logs in to one of the plurality of accounts, an extension corresponding to the account is added to the user ID, and the terminal information 64 is added using the user ID with the extension.
Should be created.

The identification information file symbol 66 is a user ID.
65 is a value associated with the identification information file symbol 62 of the identification information file 24 in a one-to-one manner. The previous login information providing server 31 searches for the identification information file symbol 66 of the terminal information 64 using the identification information file symbol 66 obtained from the client terminal device 5, and thereby obtains the user ID of the user who has logged in to the account.
65 can be obtained.

Each of the terminal identification symbols 1, 2, and 3 is constituted by the number information for identifying the number of the three client terminal devices 5 set by the user.
The terminal name information 1, 2, and 3 store the name given when the user registered each client terminal device 5. This name is arbitrarily registered by the user for recognizing the client terminal device 5, such as "first device-for home" or "notebook computer (company)". The previous login information providing server 31 can search for the terminal name information (the name given by the user) from the terminal identification symbol (the number of the terminal device) of the terminal information 64.

FIG. 4C is a diagram showing the structure of the login history data 67. The login history data 67 is stored in the login history database 43 of the previous login information providing server 31. Login history data 67
Is composed of a set of a user ID, a terminal identification symbol of the client terminal device 5 used for login, and a login date and time. It is also possible to add information of the service provided to the user, for example, "balance inquiry" to the set. The previous login information providing server 31 can specify the date and time when the user last logged in and the client terminal device 5 used by referring to the login history data 67. In addition, by querying the terminal identification code specified by the login history data 67 with the terminal information 64, the name given by the user to the client terminal device 5 that has logged in previously can be obtained.

FIG. 5 is a block diagram showing the configuration of a module realized by the previous login information providing program 41. These modules are stored in the RAM of the control unit 34 (FIG. 3) by the previous login information providing program 41.
And is realized as software. Each of these modules works in cooperation with hardware such as a CPU to realize predetermined functions.

The control module 51 is a module for controlling and adjusting the operation of each module. The control module 51 analyzes signals obtained from each module, and allocates predetermined processing to other modules according to the result. The input / output module 59 is a module that provides an interface between the control module 51, the display module 55, the identification information acquisition module 53, the identification information writing module 58, and the communication control device 35.

The display module 56 is connected to the Internet 6
And a module for displaying a login screen, a previous login information display screen, a client terminal registration screen, and the like on the display device 17 of the client terminal device 5 via the. The login screen is, for example, a screen configured to input a user ID and a password.
7 is a screen displayed on the display device 17 of the client terminal device 5 when the user first accesses the.

The previous login information display screen is a screen for displaying the date and time of previous login to the client terminal device 5 and the name of the client terminal device 5 used when the user logged in. Details of this screen will be described later. The client terminal registration screen shows the bank system 7
7 is a screen displayed when registering the client terminal device 5 to be used in [1]. The details of this screen will also be described later.

More specifically, these screens are H
The display module 56 defines these files in the TML format, and the display module 56
To send to. The client terminal device 5 can display these screens defined by the HTML format file on the display device 17 using the browser 23.

The authentication server connection module 52 is a module that provides an interface between the authentication server 32 and the previous login information providing server 31. When the user inputs a user ID and a password from the login screen and transmits the user ID and the password to the bank system 7, the user ID and the password are transmitted to the authentication server 32 via the input / output module 59, the control module 51, and the authentication server module 52. Be authenticated. The authentication server 32 checks the user ID and the password against the user ID and the password stored in the database in advance, and determines whether the user ID and the password are registered. The judgment result is the authentication server connection module 52
Is transmitted to the control module 51 via the.

When the control module 51 receives from the authentication server 32 that the user ID and the password have not been registered, the client module 5
Will not accept logins from. Also, the user ID
If the password has been registered, the subsequent procedure is continued. After the user is authenticated, the identification information acquisition module 53 searches the storage device 20 of the client terminal device 5 to check whether or not the identification information file 24 exists, and if the identification information file 24 exists, the identification information file 24 is recorded therein. This is a module for acquiring the identification information file symbol 62 and the terminal identification symbol 63 (FIG. 4A). The identification information acquisition module 53 transmits a signal indicating the presence or absence of the identification information file 24 to the control module 51, and if the identification information file 24 exists, the identification information file symbol 62 and the terminal identification symbol 63 are converted to the control module 51. Pass to.

When the control module 51 receives a signal indicating that there is no identification information file 24 (ie, when the client terminal device 5 used by the user has not been registered),
The display module 56 displays the client terminal registration screen on the display device 17 of the client terminal device 5. Thus, the previous login information providing server 31 notifies the user that the client terminal device 5 has not been registered and prompts the user to register the client terminal device 5. The user inputs an arbitrary name from the client terminal registration screen to enter the client terminal device 5.
Can be named. Thereafter, the previous login information of the client terminal device 5 is presented to the user with this name.

Data input by the user from the client terminal registration screen is sent to the control module 51 via the input / output module 59. The control module 51 determines from the terminal information 64 in the terminal information database 42 the number of the client terminal device 5 to be newly registered by the user (for example, if the user has two client terminal devices 5, If the registration is found from the terminal information 64, the newly registered client terminal device 5 is the third device), the terminal identification symbol 62 is generated, and the user ID acquired when the user logs in is obtained. From the terminal information database 42 to obtain the identification information file symbol 63 corresponding to the user ID.

The identification information writing module 58 acquires the terminal identification symbol 62 and the identification symbol file symbol 63 from the control module 51, and generates the identification information file 24.
Then, the identification information writing module 58 writes the generated identification information file 24 into the storage device 20 of the client terminal device 5. A cookie is used to write the identification information file 24. A cookie is a mechanism for storing user identification information in a user's computer so that the WWW server can identify the user.

The search module 54 is a module for searching the terminal information database 42 and the login history database 43. The search module 54 receives the identification information file symbol 62 and the terminal identification symbol 63 acquired by the identification information acquisition module 53 from the control module 51,
The terminal information database 42 is searched.

The search module 54 specifies a user ID from the searched terminal information 64 and searches the log-in history database 43 using the user ID. And
The search module 54 stores the login history database 43
The login history data 67 of the user is obtained from the user, and the login history data of, for example, the past four times is passed to the control module 51.

The control module 51 passes this data to the display module 56. Then, the display module 56 creates a previous login information screen by using this data and displays it on the display device 17 of the client terminal device 5. When only the record accessed last time is displayed on the client terminal device 5, only the login history data for the previous time need be passed to the control module 51. In this example, the login history of the past four times is displayed,
About four past log-in history data items are passed to the control module 51.

The update module 56 is a module for updating the terminal information database 42 and the login history database 43. When the client terminal device 5 used by the user for access is registered, the update module 55 sends the identification information file symbol 62 and the terminal identification symbol 63 (the identification information acquisition module 53 to the control module 51 ).

The update module 55 searches the terminal information database 42 using the identification information file symbol 62 obtained from the control module 51, and
To get. Then, the update module 55 specifies the user ID from the retrieved terminal information 64. Next, the update module 55 updates the log-in history data 67 using the specified user ID and the terminal identification symbol 63 acquired from the control module 11.

If the client terminal device 5 used for access by the user is unregistered, the update module 55 sends the user ID entered at the time of login from the user, the terminal identification code specified from the user ID, , And the name of the client terminal device 5 input by the user from the control module 51 to update the terminal information 64, and then update the login history data 67. The update module 55 can also receive information (processing such as balance inquiry and transfer) performed on the user from the banking server 33 and add the information to the log-in history data 67.

The bank service server connection module 57 is a module that provides an interface for connecting the bank service server 33 and the previous login information providing server 31. The control module 51 connects to the client terminal device 5 and the banking server 33 via the banking server connection module 57 after the previous presentation of the login information display screen to the user is completed. Thereafter, the user can use various services provided by the banking server 33.

FIG. 6 is a diagram showing a previous login information display screen 71 displayed on the display device 17 of the client terminal device 5 by the display module 56. The previous login information display screen 71 has a usage information column 72 and a recent transaction column 73
It has. The use information column 72 displays the login date and time when the user last logged in, and the previous login information including the name of the client terminal device 5 used. This is created from the login history data 67 searched by the search module 54 from the login history database 43.

Further, in the recent transaction column 73, a transaction history when the user logs in two or more times before is displayed. This is obtained by displaying past transaction records from the database of the banking server 33 and displaying them. Specifically, the transaction date, the transaction content, the client 5 used for the transaction, the channel used, and the like are used. The channel is a route used when a user accesses his or her account. When the Internet is used as the route, “WEB” is displayed, and when the ATM is used, “ATM” is displayed. In addition, the log-in history data 67 may be configured to record transaction contents, and may be displayed using the display module 56. Previous login information display screen 7
A confirmation button 74 is displayed below 1. When the user clicks this button, the control module 51 activates the banking server connection module 57, and the banking server 33 is connected to the client terminal device 5.

FIG. 7 is a diagram showing a client terminal registration screen 91. This screen is displayed by the display module 56 on the display device 17 of the client terminal device 5. More specifically, the display module 56 is an HTML
After the screen data generated as the file of the format is downloaded to the client terminal device 5, the browser 23
Is displayed on the display device 17. The client terminal registration screen 91 indicates that the client terminal device 5 used by the user to connect to the bank system 7 is unregistered (the identification information acquisition module 53 identifies the client device 5 in the storage device 20 of the client terminal device 5). When the information file 24 cannot be found), the display module 5
6 is indicated.

The client terminal registration screen 91 has a registered personal computer column 92 and a registration column 93. In the registered personal computer column 92, the content recorded in the terminal information 64 searched by the search module 54 from the terminal information database 42 is displayed. That is, the number information (information of the number of the terminal) is obtained from the terminal identification symbol of the terminal information, and the name of the client terminal device 5 named by the user is obtained and displayed from the terminal name information.

The registration field 93 is a field for inputting the name of the client terminal device 5 to be newly registered this time. When the user enters an arbitrary name in this field and clicks the registration button 95, this name is sent to the control module 51.
The control module 51 generates terminal information from the name and sends it to the update module 55 together with the terminal identification symbol. The update module 55 updates the terminal information database 42 with the terminal identification symbol and the terminal information. To cancel the registration, click the cancel button 94 before clicking the registration button 95.

FIG. 8 shows the previous login information providing server 31.
5 is a flowchart for explaining the operation of FIG. First, when the user logs in to the bank system 7 from the client terminal device 5, the display module 56 displays a login screen on the display device 17 of the client terminal device 5. Next, when the user inputs a user ID and a password from the login screen, the control module 51 obtains these and sends them to the authentication server 32 via the authentication server connection module 52 (step 10).

If the user is not authenticated by the authentication server 32 (Step 20; N), the control module 51 refuses the login from the client terminal device 5 (Step 30). If the user is authenticated (step 2
0; Y), the identification information acquisition module 53 stores the identification information file 24 in the storage device 20 of the client terminal device 5
Is searched (step 40). When the identification information file 24 is present in the storage device 20 (Step 40; Y), the identification information acquisition module 53 reads the identification information file 24 and reads the identification information file symbol 62 and the terminal identification symbol 63.
Is acquired (step 50).

Next, the search module 54 searches for the login history data 67 in the login history database 43 using the identification information file symbol 62 and the terminal identification symbol 63 (step 60). If there is the login history data 67 (step 100; Y), the login history data 67
Is obtained from the search module 54 to the display module 56 via the control module 51. The display module 56 generates a previous login information screen 71 using the login history, and displays the previous login information screen 71 on the display device 17 of the client terminal device 5 (step 110).

When there is no log-in history data 67 (step 100; N), or after the previous log-in information display screen 71 is displayed in step 110, the terminal identification symbol is stored in the log-in history database 43 using the update module 55. The login date and time are recorded and updated (step 120). If the identification information file 24 does not exist in the storage device 20 in Step 40 (Step 40;
N), the display module 56 displays the client terminal registration screen 91 on the display device 17 of the client terminal device 5 (Step 70).

The control module 51 acquires terminal name information and the like input by the user from the client terminal device 5,
This is passed to the update module 55. The update module updates the terminal information database 42 using the terminal information (Step 80). Next, the control module 51 searches for and obtains a terminal identification symbol corresponding to the updated terminal information by using the search module 54, and uses this to store the identification information file 2 in the storage device 20 of the client terminal device 5.
Write 4.

In the present embodiment, the following effects can be obtained. When the user has set a plurality of client terminal devices 5 for his / her account, the user can easily know the date and time of previous access and the client terminal device 5 used for access from the previous login information display screen 71. It is possible to easily detect improper access such as spoofing.

Further, a plurality of client terminal devices 5
Can be given their own descriptive name by each user. When a new client terminal device 5 is to be registered, it can be easily registered from the client terminal registration screen 91. By limiting the number of client terminal devices 5 that can be set to three or less, it is possible to suppress a decrease in security due to an increase in the number of client terminal devices 5 that can be set for one account.

Further, by using a cookie, the identification information file 24 can be easily written in the client terminal device 5. In addition, since the identification information file symbol 62 having a correspondence relationship with the user ID is used in the identification information file 24, the user ID and the password need not be left in the client terminal device 5, and the security effect can be enhanced.

Although the configuration and operation of the present embodiment have been described above, the present invention is not limited to these embodiments, and various modifications may be made within the scope of the invention described in the claims. Is possible. For example, in the present embodiment, the account is a bank account as an example. However, the present invention is not limited to this. For example, the present invention can be applied to an account such as a securities trading account established by a securities company. Further, for example, even when a third party logs in using his / her own membership number on a membership site, unauthorized access can be easily found.

Further, in the present embodiment, the identification information file 24 is left in the client terminal device 5 by using a cookie, but this is done by leaving the identification information file 24 in the client terminal device 5 by using another means. May be configured. Also, a login screen, a previous login information display screen 7
1. The generation of the client terminal registration screen 91 is performed in HTML
Instead of the language, another language may be used.

[0073]

According to the present invention, it is possible to reduce the risk of information leakage from a client terminal device to a third party and unauthorized access by the third party when providing banking services via the Internet. it can.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration example of a network to which a client terminal device 5 and a bank system 7 according to the present embodiment are applied.

FIG. 2 is a block diagram illustrating a hardware configuration of a client terminal device.

FIG. 3 is a block diagram showing a configuration of a bank system.

FIG. 4A is a diagram illustrating a configuration of an identification information file, FIG. 4B is a diagram illustrating a configuration of terminal information,
(C) is a diagram showing a configuration of a login history.

FIG. 5 is a block diagram showing a configuration of a previous login information providing program.

FIG. 6 is a diagram showing a previous login information display screen.

FIG. 7 is a diagram showing a client terminal registration screen.

FIG. 8 is a flowchart illustrating the operation of the previous login information providing server.

[Explanation of symbols]

 Reference Signs List 5 Client terminal device 6 Internet 7 Banking system 11 Control unit 12 CPU 13 ROM 14 RAM 15 Keyboard 16 Mouse 17 Display device 18 Printer 19 Communication control unit 20 Storage device 21 Storage medium drive device 22 Input / output interface 23 Browser 24 Identification information file 25 program storage unit 26 data storage unit 27 bus line 31 previous login information providing server 32 authentication server 33 banking server 34 control unit 35 communication control unit 36 storage device 37 communication control unit 38 display device 39 input / output unit 40 bus line 41 last time Login information providing program 42 Terminal information database 43 Login history database 51 Control module 52 Authentication server connection module 53 Identification information acquisition module 54 Search module 55 update module 56 display module 57 banking server connection module 58 identification information writing module 59 input / output module 71 previous login information display screen 91 client terminal registration screen

 ──────────────────────────────────────────────────続 き Continued on the front page F term (reference) 5B017 AA03 BB00 CA16 5B082 AA05 EA07 5B085 BC01 BE07 BG07

Claims (13)

[Claims] 1. An accepting unit for accepting a login from one or more client terminal devices to one account, and when the accepting unit accepts a login from the client terminal device, a previous login to the one account is performed. Specific information acquiring means for acquiring specific information for identifying the client terminal device, and information on the client terminal device which previously logged in to the one account, wherein the client terminal which has received the current login by the receiving means Display information obtaining means for obtaining display information to be displayed on the device using the specific information obtained by the specific information obtaining means; and transmitting the display information obtained by the display information obtaining means to the client terminal device. Last time login information providing server, comprising: Location. 2. The previous login information providing server device according to claim 1, wherein the information transmitted by the display information transmitting unit includes the specific information acquired by the specific information acquiring unit. 3. A specific information receiving means for receiving specific information for specifying the client terminal device from the client terminal device when the accepting device receives a login to the one account from the client terminal device. And a specific information holding means for holding the specific information received by the specific information receiving means, wherein the specific information obtaining means has previously logged into the one account from the specific information holding means. The previous login information providing server device according to claim 1, wherein the server acquires specific information for specifying the client terminal device. 4. When the accepting means accepts a login from the client terminal device for the one account, the client terminal device holds identification information for identifying the client terminal device. Confirmation information acquisition means for acquiring confirmation information for confirming, write information acquisition means for acquiring write information for writing specific information for identifying the client terminal device in the client terminal device, and the write information acquisition Write information transmitting means for transmitting the write information acquired by the means to the client terminal device, wherein the client terminal device determines the client terminal device from the confirmation information acquired by the confirmation information acquisition device. If it is confirmed that no specific information is specified, 2. The previous login information providing server device according to claim 1, wherein the write information acquired by the embedded information acquisition unit is transmitted to the client terminal device by the write information transmission unit. 5. The apparatus according to claim 1, further comprising: a previous log-in date and time obtaining unit that obtains a date or a date and time when a log-in to the one account was previously received; The previous login information providing server device according to claim 1, wherein the date or date and time acquired by the date and time acquiring means is transmitted. 6. The method according to claim 1, wherein the specific information is constituted by a code other than a code inputted by a user when logging in, and includes account specific information for specifying the one account. The previous login information providing server device described. 7. The previous login information providing server device according to claim 6, wherein the number of client terminal devices that can hold the same account specifying information is limited to a predetermined number or less. 8. The client terminal device further includes name holding means for holding a name arbitrarily set by the user for the client terminal device, wherein the display information includes a name of the client terminal device held by the name holding device. 2. The previous login information providing server device according to claim 1, wherein the server includes: 9. A first step of receiving a login from one or more client terminal devices for one account, and the step of receiving the login from the client terminal device in the first step. A second step of acquiring specific information that specifies a client terminal device that has previously logged in, and information relating to the client terminal device that has previously logged in to the one account. A third step of obtaining display information to be displayed on the client terminal device that has received the information using the specific information obtained in the second step; and the display information obtained in the third step. And a fourth step of transmitting the last login information to the client terminal device. Method. 10. A receiving function for receiving a log-in from one or more client terminal devices to one account, and when receiving a log-in from the client terminal device by the receiving function, previously log in to the one account. A specific information obtaining function of obtaining specific information for specifying the client terminal device that has performed the authentication, and information relating to the client terminal device that has previously logged in to the one account, wherein the client terminal that has received the current login by the receiving function A display information obtaining function for obtaining display information for display on the device using the specific information obtained by the specific information obtaining function; and transmitting the display information obtained by the display information obtaining function to the client terminal device. Display information transmission function and the previous login information Program. 11. A previous login information display program for logging in to one account provided in a server device, comprising: a login function for logging in to one account provided in a server device; A holding function for holding specific information for identifying and specifying from the client terminal device; a transmitting function for transmitting the specific information held by the holding function to the server device; A display information receiving function of receiving display information for displaying information identifying the logged-in client terminal device from the server device; a display function of displaying the display information received by the display information receiving function; A previous login information display program for realizing a client terminal device. 12. An accepting function for accepting a log-in from one or more client terminal devices to one account, and when accepting a log-in from the client terminal device with the accepting function, previously logging in to the one account. A specific information obtaining function of obtaining specific information for specifying the client terminal device that has performed the authentication, and information relating to the client terminal device that has previously logged in to the one account, wherein the client terminal that has received the current login by the receiving function A display information obtaining function for obtaining display information for display on the device using the specific information obtained by the specific information obtaining function; and transmitting the display information obtained by the display information obtaining function to the client terminal device. Display information transmission function and the previous login information The stored computer-readable storage medium a program. 13. A previous log-in information display program for logging in to one account provided in a server device, comprising: a log-in function for logging in to one account provided in the server device; A holding function for holding specific information for identifying and specifying from the client terminal device; a transmitting function for transmitting the specific information held by the holding function to the server device; A display information receiving function of receiving display information for displaying information identifying the logged-in client terminal device from the server device; a display function of displaying the display information received by the display information receiving function; Can be read by a computer that has stored a previous login information display program to realize the client terminal device Storage media.