Abstract: An information processing device according to the present application includes a control unit. The control unit acquires, from an authentication server, a generation request of a key pair for FIDO authentication transmitted from a user terminal including an authenticator for the FIDO authentication to the authentication server, generates a generation instruction for causing the authenticator to generate the key pair based on the generation request, and notifies the authenticator of the generation instruction via the authentication server.

Abstract: A network-based user authentication device, method, and program securely authenticate a user's identity by using a pre-registered authenticator in a remote portable terminal of the user. The device, method, and program transmit an identity verification request that requests verification of the user's identity by a pre-registered authenticator to the remote portable terminal, and receive, in response to the verification request, authentication information from the remote portable terminal. The authentication information identifies the user of the remote portable terminal and includes a secret key. The device, method, and program validate the authentication information by comparing the received secret key with a validation code associated with the user in a memory, and, when the received secret key and the validation code associated with the user correspond, generate identity verification information confirming the identity of the user.