User authentication system

1. A user authentication system managing authentication for a predetermined account and a dummy account corresponding to the predetermined account, the user authentication system comprising:

a processor; and

a memory, comprising:

a login receiving module, which when executed by the processor receives an account login request from a user terminal device along with account identification information and authentication information;

an authentication processing module, which when executed by the processor determines whether or not the combination of the account identification information and the authentication information received by the login receiving module matches a pre-stored combination of predetermined account identification information and authentication information, and, in the event of a match, authenticates said user terminal device;

a fraud determination module, which when executed by the processor detects fraud in the login request from the user terminal device based on the access history of the user terminal device; and

a response control module, which when executed by the processor

allows the user of the said user terminal device to log in to the predetermined account if the fraud determination module does not detect fraud in the login request from the user terminal device and the authentication processing module has authenticated the user terminal device,

allows the user of said user terminal device to log in to the dummy account in accordance with predetermined criteria if the fraud determination module detects fraud in the login request from the user terminal device and the authentication processing module was unable to authenticate the user terminal device, and

does not allow said user terminal device to log in to the predetermined account or the dummy account and delivers an error notification to said user terminal device if the fraud determination module detects fraud in the login request from the user terminal device and the authentication processing module has authenticated the user terminal device.

2. The user authentication system according to claim 1 , wherein the response control module, when executed by the processor, allows the user of the user terminal device to log in to a dummy account if the predetermined criteria are satisfied and, on the other hand, delivers an error notification to said user terminal device if said predetermined criteria are not satisfied if the fraud determination module detects fraud in a login request from the user terminal device and the authentication processing module was unable to authenticate the user terminal device.

3. The user authentication system according to claim 1 , wherein said memory further comprises a success probability calculation module which when executed by the processor, in the event of detection of fraud in a login request from the user terminal device by the fraud determination module, uses an access history of the user terminal device and the authentication results obtained by the authentication processing module to calculate the probability of success with which login requests from said user terminal device to a single account are authenticated, and the response control module, in the event of detection of fraud in a login request from the user terminal device by the fraud determination module, uses the probability of success calculated by the success probability calculation module to decide whether or not to allow the user of the user terminal device to log in to the dummy account.

4. The user authentication system according to claim 1 , wherein the predetermined criteria are that the number of login requests from the user terminal device to a single account is equal to or greater than a predetermined number or that a predetermined time elapses after the fraud determination module determines that the login request from user terminal device is fraudulent.

5. The user authentication system according to claim 1 , wherein the memory further comprises a fraudulent account information storage module, which when executed by the processor, stores the account identification information and the authentication information received from said user terminal device in association with the dummy account as fraudulent information when the response control module allows the user terminal device to log in to the dummy account, and the response control module allows the user of said user terminal device to log in to the dummy account associated with said fraudulent information when the combination of the account identification information and the authentication information received by the login receiving module matches the fraudulent information stored in the fraudulent account information storage module.

6. The user authentication system according to claim 1 , wherein the memory further basic user information used for the dummy account, and when the user of said user terminal device is allowed to log in to the dummy account, the response control module generates a dummy user account page from the basic user information used for the dummy account and provides the page to said user terminal device.

7. A non-transitory computer readable medium having machine-executable instructions with which a computer having a storage and a hardware processor connected via a network to a user terminal device, the instructions comprising:

managing authentication for a predetermined account and a dummy account corresponding to the predetermined account,

receiving an account login request from the user terminal device along with account identification information and authentication information;

determining whether or not the combination of the account identification information and the authentication information matches a pre-stored combination of predetermined account identification information and authentication information, and, in the event of a match, authenticates said user terminal device;

detecting fraud in the login request from the user terminal device based on the access history of the user terminal device; and

conducting response control, the conducting response control comprising:

allowing the user of the said user terminal device to log in to the predetermined account if fraud is not detected in the login request from the user terminal device and the user terminal device is authenticated,

allowing the user of said user terminal device to log in to the dummy account in accordance with predetermined criteria if fraud is detected in the login request from the user terminal device and the user terminal device is not authenticated, and

not allowing said user terminal device to log in to the predetermined account or the dummy account and delivering an error notification to said user terminal device if fraud is not detected in the login request from the user terminal device and the user terminal device is authenticated.