JPWO2006109752A1 - User authentication system for RSS reader - Google Patents

Abstract

When the web browser (40) includes a cookie DB (41) that stores user authentication information of the web server (21) and a web page received from the web server (21), a reception request for new arrival information is included. Request means (step S46) for requesting the RSS reader (42) to receive the new arrival information in response to the request. The RSS reader (42) logs in to the web server (21) based on the user authentication information stored in the cookie DB (41) in response to the request by the request means (step S48), and from the web server New arrival information receiving means for receiving the new arrival information is included (step S49). Thus, user authentication in the RSS reader is automated.

Description

  The present invention relates to an RSS reader user authentication system, an RSS reader user authentication method, a program, and an information storage medium, and more particularly to sharing of user information between an RSS reader and a web browser.

  In recent years, an increasing number of people browse websites using personal computers. When browsing a website, a web page published on a website on the Internet is displayed with characters and images on the screen of a personal computer using browsing software.

  This browsing software is called a web browser, downloads HTML (Hyper Text Markup Language) files, image files, music files, etc. from the Internet, analyzes the layout of web pages, and lays out characters and images as appropriate. To display.

  Many users who use the Internet search and collect information published on websites. However, since the number of sites transmitted by individuals is enormous, it is a huge amount of work to access and confirm whether or not the information on each site is newly updated.

  Therefore, recently, a site or keyword to be searched is registered in advance in an RSS (RDF (Resource Description Framework) Site Summary) reader, and only updated information is automatically collected by the RSS reader. Can be done.

  Here, the RSS reader is software (computer) that receives new arrival information (update information) in a format such as RSS and displays it in the form of a link list as to whether or not the information of the site to be searched is newly updated. Program). RSS is a kind of XML (eXtensible Markup Language) based language format, and is used to describe new arrival information of a website. In this specification, software that receives and displays newly arrived information in an RSS-derived format such as ATOM is also referred to as an RSS reader.

  Sites with high news properties such as web logs and news sites often provide new arrival information by RSS. The document described in RSS can describe the title, address, headline, summary, update time, etc. of each page of the website. By using the RSS document, new arrival information of many websites can be unified. Can be grasped efficiently by simple methods.

  However, at present, since user authentication information is not shared between the RSS reader and the web browser, when user authentication is requested for both the delivery of the web page to the web browser and the delivery of the new information to the RSS reader. The user must log in by inputting user authentication information such as a user name, a user ID, and a password in both the RSS reader and the web browser.

  In recent years when privacy issues such as protection of personal information are screamed, there are users who hesitate to send user authentication information in a detour. For example, for users familiar with the Internet, the user authentication information is input to the login page displayed by the web browser without feeling resistance, but the user authentication information is displayed on a new authentication screen displayed by the RSS reader. You may feel anxious about re-entry.

  Particularly in recent years, phishing scams that pretend to be real websites and send e-mails that exploit user authentication information have become popular, so it is not desirable to force users to input user authentication information repeatedly.

  This invention is made in view of such a point, The objective is to grasp | ascertain efficiently the new arrival information of many websites by a unified method by automating the user authentication in an RSS reader. An RSS reader user authentication system, an RSS reader user authentication method, a program, and an information storage medium are provided.

  In order to solve the above-described problems, an RSS reader user authentication system according to the present invention includes a web browser and an RSS reader that are connected to a web server through a communication network. The web browser stores the user authentication information of the web server, and if the web page received from the web server includes a new arrival information reception request, the web browser responds to the reception request to the RSS reader. Requesting means for requesting to receive the new arrival information. In addition, the RSS reader logs in to the web server based on the user authentication information stored in the storage unit and receives the new arrival information from the web server in response to a request from the request unit. Including receiving means.

  According to the present invention, the RSS reader automatically logs into the website based on the user authentication information stored by the web browser when the web page received from the web server includes a request for receiving newly arrived information. You can receive new information.

  In one aspect of the present invention, the web server includes means for delivering a web page on condition of confirmation of the user authentication information, and means for delivering the new arrival information on condition of confirmation of the user authentication information.

  In one aspect of the present invention, the web browser transmits user authentication information to the web server in accordance with a login page transmitted from the web server, and transmits the user authentication information to the web server. User authentication information updating means for updating the user authentication information stored in the storage means when the user authentication information transmitted by the means is confirmed by the web server.

  In this case, when the RSS reader fails to log in to the web server based on the user authentication information stored in the storage unit, the RSS reader receives the login page from the web server again to the web browser. It may further include a login page re-reception request means for requesting to do so. In this way, the user can input the user authentication information on the login page displayed by the web browser, and does not put a psychological burden on the user to input the user authentication information on the screen displayed by different software. I'll do it.

  At this time, the web server further includes a login URL transmission unit that transmits the URL of the login page to the RSS reader when the RSS reader fails to log in based on the user authentication information stored in the storage unit. May include. In this way, the RSS reader can notify the URL of the login page to the web browser and request re-reception of the login page.

  The web browser may further include login page requesting means for requesting the login page from the web server in response to a request from the login page re-reception requesting means. Alternatively, the web browser notifies the user that the login to the web server based on the user authentication information stored in the storage unit has failed in response to a request by the login page re-reception request unit. Output means for performing output may be further included.

  In one aspect of the present invention, the web server transmits a web page including a reception request for the new arrival information to the web browser when confirming the user authentication information transmitted by the user authentication information transmitting unit. Web page transmitting means for further including. In this way, when new user authentication information is confirmed, the RSS reader immediately receives new arrival information. This aspect has an advantage that the RSS reader can reliably receive the new arrival information particularly when an expiration date is set in the user authentication information.

  In the aspect of the invention, the new arrival information reception request includes a URL of the new arrival information. In this way, the web browser can notify the RSS reader of the URL of the new arrival information, and can request the RSS reader to receive the new arrival information.

  The RSS reader user authentication method according to the present invention includes a storage step in which a web browser stores user authentication information of a web server in a storage unit, and a web page received from the web server includes a new information reception request. A request step for requesting the RSS reader to receive the new arrival information in response to the reception request, and the RSS reader in the storage means in response to the request in the request step. A new arrival information receiving step of logging in to the web server based on the stored user authentication information and receiving the new arrival information from the web server.

  The program according to the present invention requests an RSS reader to receive the new arrival information in response to the reception request when the web page received by the web browser from the web server includes a new arrival information reception request. In response to the request in the request step and the request step, the RSS reader is logged in to the web server based on the user authentication information of the web server stored in the storage means by the web browser, and A program for causing a computer to execute a new arrival information receiving step of receiving the new arrival information from a web server. An information storage medium according to the present invention is an information storage medium storing the program.

It is a figure which shows the whole structure of the user authentication system for RSS readers concerning embodiment of this invention. It is a figure which shows the hardware structural example of the user computer utilized for the user authentication system for RSS readers concerning embodiment of this invention. It is a flowchart which shows the authentication process of the user authentication system for RSS readers concerning embodiment of this invention. It is a flowchart which shows the recovery process from the authentication error of the user authentication system for RSS readers concerning embodiment of this invention.

[Summary]
According to the RSS reader user authentication system according to the present embodiment, the user authentication information is shared between the RSS reader and the web browser.

  The web server performs user authentication using cookies, and user authentication information used for user authentication is stored in the user's computer. The RSS reader reads out the user authentication information at an appropriate timing, uses it to log in to the web server, and receives new arrival information.

  Here, a cookie is a file created by a website, and refers to information transmitted from a web server to a user's web browser and stored in the hard disk of the user computer. Cookies can store personal information such as name, email address, address, and phone number that can be used to identify and contact the user.

  In this embodiment, when the RSS reader fails to log in to the web server due to the expiration of the cookie or the expiration of the user authentication information, the RSS reader itself requests input of the user authentication information. Instead, the web browser displays the screen. For this reason, the RSS reader makes a re-login request to the web browser when the login to the web server fails. In response to this request, the web browser accesses the web server again to request re-login, and in response to this, displays a login page transmitted from the web server on the computer display. In this way, the user can input user authentication information on an authentication screen displayed by a familiar web browser. When an error screen with a display for re-login instruction such as a button image or an anchor associated with the URL of the log-in page is displayed by the RSS reader, and a re-login instruction is performed by the user according to the display The web browser may access the web server again to display the login page.

  Hereinafter, embodiments of the present invention will be described in more detail based on the drawings.

[overall structure]
FIG. 1 is a diagram showing an overall configuration of an RSS reader user authentication system according to an embodiment of the present invention.

  In FIG. 1, an RSS reader user authentication system 10 includes a web server 21 and a user computer (computer used by a user) 31 connected via a wired or wireless communication network 51 such as the Internet. The user computer 31 can send and receive information on websites on the Internet. Note that the wired or wireless communication network 51 may be of any type, and may include an information communication network represented by a LAN or a public line in addition to the Internet.

  The user computer 31 is a computer connectable to the Internet or the like. A large number of user computers may be connected to the communication network 51. Here, for convenience, one user computer 31 is taken up.

  The user computer 31 includes any computer that can be connected to the communication network 51, such as a personal computer, PHS, mobile phone, satellite mobile phone, PDA, electronic notebook, and the like.

[Hardware configuration of user computer]
FIG. 2 is a block diagram showing an example of the hardware configuration of the user computer 31 used in the RSS reader user authentication system according to the present embodiment.

  The user computer 31 includes a central processing unit (hereinafter referred to as a CPU) 32 that performs comprehensive information processing, a storage device unit 35 including a RAM 33, a ROM 34, and the like, and a peripheral device and the storage device unit 35. A transfer device 36 that controls transmission of information while synchronizing, an input device unit 37 that controls instruction input from a keyboard or pointing device, an output device unit 38 that controls a screen displayed on a CRT display, etc. The communication device unit 39 includes a NIC (network interface card) and transmits / receives various data via the communication network 51.

  The storage unit 35 includes a RAM (Random Access Memory) 33 that functions as a main memory or work area of the CPU 32, and a ROM (Read Only Memory) that functions as a storage for a boot program, a network management program, and the like. 34.

  An RSS reader program and a web browser program are installed in the user computer 31. Then, a web browser program is executed in response to an instruction input by the user, data of a desired web page is received from a website built in the web server 21, and the web page is displayed on the display of the user computer. It has become. Also, the RSS reader program is resident, and regularly accesses a website to receive new arrival information therefrom. Each program is stored in a computer-readable information storage medium such as a CD-ROM or DVD-ROM, and is installed in the user computer 31 therefrom. Then, when the user computer 31 executes the program stored in the information storage medium, various processes according to the present embodiment such as the processes of FIGS. 3 and 4 are realized. Of course, each program may be downloaded from another computer to the user computer 31 through various communication networks such as the Internet.

  The user authentication information (cookie) of the website constructed in the web server 21 is stored in the cookie DB (see FIGS. 3 and 4) constructed in the storage device unit 35 by the transfer device 36 and stored in the cookie DB. The user authentication information is transmitted to the web server 21 by the communication device unit 39. As described above, the cookie as the user authentication information stored in the cookie DB is used by both the RSS reader program and the web browser program. That is, the web server 21 uses the common user authentication information to restrict access for new information distribution and web page distribution.

[Login procedure]
FIG. 3 is a flowchart showing an authentication process of the RSS reader user authentication system according to the present embodiment.

  The flow of processing when the web server 21 and the user computer 31 access a website that performs authentication using cookies will be described with reference to FIG.

  First, the web browser 40 requests the web server 21 to transmit a login page (step S41). Specifically, when the user starts the web browser (program) 40 installed in the user computer 31 and inputs the URL of the login page, a request for the login page is made to the web server 21 specified by the URL. Sent.

  In response to this request, the web server 21 returns a login page to the web browser 40 of the user computer 31 (step S42). The login page is a data file (such as an HTML file) stored in the web server 21 and indicates a form for inputting user authentication information and requesting the web server 21 to log in.

  The web browser 40 displays the login page received from the web server 21. When the user inputs a user name and password, which are user authentication information, to the login page, they are transmitted to the web server 21 (step S43).

  Here, the user authentication is performed using the user name and the password, but the mode of user authentication such as fingerprint authentication is not limited. Further, the method for transmitting the user authentication information may be transmission by a cryptographic technique such as SSL (Secure Socket Layer), a public key cryptosystem, a secret key cryptosystem, a digital certificate, or a hash function.

  The web server 21 determines whether or not the user authentication information (user name and password) transmitted from the web browser 40 of the user computer 31 is correct, that is, whether or not it matches the user name and password stored in advance. To do. If the user authentication information is correct, that is, if the user authentication information is confirmed by the web server 21, a cookie and a login completion page are transmitted to the web browser 40 (step S44). Here, the cookie includes user authentication information transmitted from the web browser 40 of the user computer 31 in step S43 or separate user authentication information that is alternative information (for example, an identification code indicating an authenticated user). Is included. The login completion page is a page for notifying the user that the login has been completed. In particular, a new arrival information re-reception request is included as meta information in a header (HTTP response header) or content, for example. This new information re-reception request includes the URL of the new information to be received by the RSS reader 42.

  The web browser 40 stores the cookie received from the web server 21 in the cookie DB 41 in the user computer 31 (step S45).

  Further, the web browser 40 searches the web page (login completion page) received from the web server 21 to determine whether or not a new arrival information re-reception request is included. The re-reception request for newly arrived information is transferred (step S46).

  The RSS reader 42 reads a cookie (user authentication information) stored in the cookie DB 41 (step S47), attaches the read cookie, and transmits a new arrival information transmission request to the web server 21 (step S48). ). At the time of this request, the URL included in the re-reception request transferred from the web browser 40 is used as the URL of the new arrival information. The RSS reader 42 may store in advance the URL of a website that the user has instructed to regularly receive new arrival information. In this case, the re-reception request transferred from the web browser 40 Only when the URL included in the URL is included in the URL stored in this manner, the transmission request for new arrival information is transmitted to the web server 21.

  The web server 21 compares the cookie transmitted from the RSS reader 42 of the user computer 31 with the user authentication information stored in advance, performs user authentication, and if the user authentication information is confirmed, the new information is displayed. A reply is sent to the RSS reader 42 (step S49). The RSS reader 42 accesses a site designated by the user from the websites described in the new arrival information (step S50).

  Note that the RSS reader 42 may not be in the user computer 31. For example, there may be a web browser 40 in the user computer 31 and an RSS reader 42 in a mobile device such as a mobile phone. In this case, a cookie or user information re-reception request as user authentication information may be transferred from the user computer 31 to the RSS reader 42. The mobile device may be a portable personal computer, a PHS (Personal Handy phone System), a mobile phone, a satellite mobile phone, a PDA (Personal Data Assistance), an electronic notebook, or the like.

[Recovery procedure from authentication error]
As described above, the RSS reader 42 periodically accesses the web server 21 and receives new arrival information. Also at this time, the RSS reader 42 logs in to the web server 21 with the cookie (user authentication information) stored in the cookie DB 41 attached. However, login may fail due to expiration of cookies or expiration of authentication information. In this case, an authentication error is transmitted from the web server 21 to the RSS reader 42.

  FIG. 4 is a flowchart showing a recovery process from the authentication error of the RSS reader user authentication system according to the present embodiment. This figure shows the flow of processing when the RSS reader 42 fails to log in to the web server 21 using a cookie.

  First, the RSS reader 42 reads a cookie (user authentication information) stored in the cookie DB 41 (step S61), attaches the read cookie, and requests the web server 21 to transmit new arrival information (step S62). ).

  The web server 21 collates the cookie (user authentication information) with the information stored in advance, and when the collation fails, returns authentication error data to the RSS reader 42 (step S63). This authentication error data includes the URL of the login page for the web browser 40 of the web server 21.

  The RSS reader 42 that has received the authentication error data from the web server 21 requests the web browser 40 to display a login page (step S64). At this time, the RSS reader 42 notifies the web browser 40 of the URL of the login page included in the authentication error data. Note that an error screen may be displayed on the RSS reader 42, and when a UI such as a button included in the error screen is operated, the web browser 40 may be requested to display a login page.

  Upon receiving the re-login request, the web browser 40 may automatically access the web server 21 and make a login page transmission request. Alternatively, after the user's instruction, the web server 21 may be accessed and a login page transmission request may be made. In the latter case, it is preferable that the web browser 40 displays on the display that an authentication error has occurred when the RSS reader 42 accesses the web server 21 at least until the user gives an instruction. When the login page data is transmitted from the web server 21 in response to the login page transmission request, the web browser 40 receives it and displays the login page on the display. Since the processing after the web browser 40 sends a login page transmission request to the web server 21 is the same as steps S41 to S50 in the login procedure shown in FIG. 3, further explanation is omitted here.

  According to the present invention, since the user authentication information is shared between the RSS reader and the web browser, it is possible to save the trouble of inputting the user authentication information when logging in to the website using the RSS reader. A simple web system.

Claims (15)

A web browser and an RSS reader that are connected to a web server via a communication network;
The web browser
Storage means for storing user authentication information of the web server;
A request means for requesting the RSS reader to receive the new arrival information in response to the reception request when the web page received from the web server includes a new arrival information reception request;
The RSS reader is
In response to a request by the request means, the log-in to the web server based on the user authentication information stored in the storage means, and a new arrival information receiving means for receiving the new arrival information from the web server,
An RSS reader user authentication system characterized by the above. In the RSS reader user authentication system according to claim 1,
The web server is
Means for delivering a web page on condition of confirmation of the user authentication information;
Means for delivering the new arrival information on condition of confirmation of the user authentication information;
A user authentication system for an RSS reader, comprising: In the RSS reader user authentication system according to claim 1 or 2,
The web browser
User authentication information transmitting means for transmitting the user authentication information to the web server according to a login page transmitted from the web server;
User authentication information updating means for updating the user authentication information stored in the storage means when the user authentication information transmitted by the user authentication information transmitting means is confirmed by the web server;
An RSS reader user authentication system, further comprising: In the RSS reader user authentication system according to claim 3,
The RSS reader is
When the login to the web server based on the user authentication information stored in the storage unit fails, the login page re-reception that requests the web browser to receive the login page from the web server again. Further comprising request means,
This is a user authentication system for RSS readers. In the RSS reader user authentication system according to claim 4,
The web server is
A log-in URL transmitting unit that transmits the URL of the log-in page to the RSS reader when the RSS reader fails to log in based on the user authentication information stored in the storage unit;
This is a user authentication system for RSS readers. In the RSS reader user authentication system according to claim 4 or 5,
The web browser
In response to a request by the login page re-reception request means, further includes a login page request means for requesting the login page to the web server,
This is a user authentication system for RSS readers. In the RSS reader user authentication system according to claim 4 or 5,
The web browser
In response to a request from the login page re-reception request means, an output means for performing an output for notifying the user that login to the web server based on the user authentication information stored in the storage means has failed. Including,
This is a user authentication system for RSS readers. In the RSS reader user authentication system according to any one of claims 1 to 7,
The web server is
When confirming the user authentication information transmitted by the user authentication information transmission means, further comprising a web page transmission means for transmitting a web page including the new information reception request to the web browser.
This is a user authentication system for RSS readers. In the RSS reader user authentication system according to any one of claims 1 to 8,
The new information reception request includes a URL of the new information,
This is a user authentication system for RSS readers. A storage step in which the web browser stores the user authentication information of the web server in the storage means;
A request step for requesting the RSS reader to receive the new arrival information in response to the reception request when the web page received from the web server includes a new arrival information reception request;
In response to the request in the request step, the RSS reader logs in to the web server based on the user authentication information stored in the storage means and receives the new arrival information from the web server. Steps,
An RSS reader user authentication method comprising: In the RSS reader user authentication method according to claim 10,
When the RSS reader fails to log in to the web server based on the user authentication information stored in the storage unit, the RSS reader again returns the login page from the web server to the web browser. A login page re-reception request step for requesting reception;
An RSS reader user authentication method characterized by the above. A request step for requesting an RSS reader to receive the new arrival information in response to the reception request when the web page received by the web browser from the web server includes a new arrival information reception request;
In response to the request by the requesting step, the RSS reader is made to log in to the web server based on the user authentication information of the web server stored in the storage means by the web browser, and from the web server, the A new information receiving step for receiving new information;
A program that causes a computer to execute. In the program according to claim 12,
When the RSS reader fails to log in to the web server based on the user authentication information stored in the storage unit, the RSS reader receives the login page from the web server to the web browser again. A program for causing the computer to further execute a login page re-reception requesting step for requesting the user to perform a login page. A request step for requesting an RSS reader to receive the new arrival information in response to the reception request when the web page received by the web browser from the web server includes a new arrival information reception request;
In response to the request by the requesting step, the RSS reader is made to log in to the web server based on the user authentication information of the web server stored in the storage means by the web browser, and from the web server, the A new information receiving step for receiving new information;
An information storage medium storing a program for causing a computer to execute. In the information storage medium according to claim 14,
When the RSS reader fails to log in to the web server based on the user authentication information stored in the storage unit, the RSS reader receives the login page from the web server to the web browser again. An information storage medium storing a program, further causing the computer to execute a login page re-reception requesting step for requesting the login page to be received.

Images