Owner authentication system and owner authentication procedure

Abstract

An owner authentication system (50) comprises an asset device, a data management server (2), and a user terminal device (3). The asset device includes an operational data holding unit that holds operational data, which is dynamic data that varies over time in the asset device; a first information delivery unit (11) that transmits device linking data to the data management server, in which first operational data is associated with device identification information; and a second information delivery unit (12) that transmits second operational data to a user terminal device.The user terminal includes an authentication request unit (31) that requests the data management server to perform authentication to determine whether the user terminal is a terminal corresponding to an owner of the plant device by transmitting user linkage data to the data management server, in which the second operational data is associated with user identification information. The data management server includes a match verification unit (23) that performs the authentication by comparing the first operational data with the second operational data.

Description

Area

[0001] The present disclosure relates to an owner authentication system and an owner authentication procedure for authenticating an owner of a plant device. background

[0002] An owner authentication system for authenticating the owner of a piece of equipment, such as an air conditioner, is applied, for example, to a control system where the air conditioner is remotely controlled by a user terminal, such as a smartphone. In the control system, a data management server allows the user terminal to remotely control the equipment only if the data server can authenticate the user based on identification information sent by the user terminal.

[0003] In a communication system disclosed in patent literature 1, a management device acquires identification information via each of two distinct paths through a relaying apparatus that communicates with a home automation device and verifies a user's communication terminal based on each piece of identification information. The management device verifies the user's communication terminal based on whether the identification information received from the relaying apparatus via a router of a wireless local area network (LAN) matches the identification information received from the relaying apparatus via the user's communication terminal. List of patent literature

[0004] Patent literature 1: Japanese patent application publication number 2018 - 182 452 Brief description of the invention: Problem to be solved by the invention

[0005] Unfortunately, the technique described in patent literature 1 has a problem in that if the communication terminal of a user who was previously the owner / possessor of the building system device and has been replaced by another user for reasons such as moving, transmits the previously recorded identification information to the management device, the management device mistakenly considers the former owner / possessor to be the current owner / possessor of the building system device.

[0006] The present disclosure was made in light of the above circumstances, and one purpose of the present disclosure is to provide an owner authentication system capable of correctly identifying a current owner / possessor of a plant device. Means of solving the task

[0007] To solve the problem described above and to complete the task, an owner authentication system of the present disclosure comprises: an equipment device; a data management server connected to the equipment device; and a user terminal device connectable to the equipment device and the data management server. The equipment device includes: a device identification information holding unit for holding / storing device identification information, which is identification information about the equipment device; and an operational data holding unit for holding / storing operational data, which is dynamic data that changes over time in the equipment device.The system device further comprises: a first information provision unit to transmit device linking data to the data management server, in which first operational data is assigned to the device identification information; and a second information provision unit to transmit second operational data to the user terminal device.The user terminal includes: a user identification information holding unit for holding / storing user identification information, which is identification information about the user terminal; and an authentication request unit to request the data management server to perform authentication as to whether the user terminal is a terminal corresponding to an owner / possessor of the plant device by transmitting user linkage data to the data management server, in which the second operational data is associated with the user identification information. The data management server includes a match verification unit to perform authentication by comparing the first operational data contained in the device linkage data with the second operational data contained in the user linkage data. Effects of the invention

[0008] The owner authentication system according to the present disclosure achieves the effect of correctly identifying the current owner / possessor of the plant equipment. Brief description of the drawings Fig. Figure 1 is a diagram that represents a schematic configuration of an owner authentication system according to one embodiment. Fig. Figure 2 is a flowchart that represents a processing procedure of initial processing performed by the owner authentication system according to the embodiment. Fig. Figure 3 is a diagram describing device identification information held in a device identification information holding unit of the owner authentication system according to the embodiment. Fig. Figure 4 is a flowchart that represents a processing procedure of a second processing step performed by the owner authentication system according to the embodiment. Fig. Figure 5 is a diagram describing user identification information held in a user identification information holding unit of the owner authentication system according to the embodiment. Fig. Figure 6 is a diagram illustrating exemplary configurations of parts of air conditioning operating data to be used for owner determination in the owner authentication system according to the embodiment. Fig. Figure 7 is a diagram describing a processing procedure to determine whether variation values ​​of parts of air conditioning operating data are consistent, wherein the processing is performed by the owner authentication system according to the embodiment. Fig. Figure 8 is a diagram that represents an exemplary configuration of correspondence information in which device identification information is linked to user identification information, the correspondence information being generated by the owner authentication system according to the embodiment. Fig. Figure 9 is a diagram that represents an exemplary configuration of a processing circuit in a case where a processor and a data storage device implement the processing circuit contained in a data management server according to the embodiment. Fig. Figure 10 is a diagram that represents an example of a processing circuit in a case where dedicated hardware implements the processing circuit included in the data management server according to the embodiment. Description of embodiments

[0009] The following is a detailed description, with reference to the drawings, of an owner authentication system and an owner authentication procedure according to an embodiment of the present disclosure. embodiment

[0010] Fig. Figure 1 is a diagram representing a schematic configuration of an owner authentication system according to one embodiment. An owner authentication system (air conditioning management system) 50 comprises an air conditioner 1, a data management server 2, and a user terminal 3. The air conditioner 1 is an example of a facility device. The data management server 2 is a data management device. The owner authentication system 50 is a system that authenticates (confirms the identity of) an owner / possessor of the air conditioner 1.

[0011] Data management server 2 determines, based on whether information sent by user device 3 matches information sent by air conditioner 1, whether the owner / possessor (user) operating user device 3 is the owner / possessor of air conditioner 1. Examples of user device 3 include a smartphone, a tablet, and the like.

[0012] The air conditioning unit 1 comprises a first information provisioning unit 11, a second information provisioning unit 12, a data measurement unit 13, an air conditioning operating data holding unit (operating data holding unit) 14, and a device identification information holding unit 15. The data management server 2 comprises a first information receiving unit 21, an authentication acceptance unit 22, a conformance verification unit 23, and a storage unit 26. The conformance verification unit 23 comprises an operating start determination unit 24 and a variation determination unit 25. The user terminal 3 comprises an authentication request unit 31, a second information receiving unit 32, and a user identification information holding unit 33.

[0013] Air conditioner 1 is connected to data management server 2. Additionally, user device 3 can be connected to both air conditioner 1 and data management server 2. Fig. 1 represents the user terminal 3, which is connected to the air conditioner 1 and the data management server 2.

[0014] Air conditioner 1 sends and receives data to and from data management server 2 via a first network communication path C1. Air conditioner 1 sends and receives data to and from user device 3 via a second network communication path C2. Data management server 2 sends and receives data to and from user device 3 via a third network communication path C3.

[0015] The data measurement unit 13 measures variation data. This variation data, which is data that varies within the air conditioner 1, is defined as air conditioner operating data (operating data about a system unit). The air conditioner operating data is dynamic data that changes over time. Examples of data that the data measurement unit 13 measures as air conditioner operating data include room temperature variation data, operating start data, and collection time data. The room temperature variation data indicates a variation in room temperature. The operating start data indicates the start and end of air conditioner operation. The collection time data indicates the time at which the room temperature was measured. The room temperature variation data is data that indicates a variation in the room temperature of a room in which an indoor unit of the air conditioner 1 is located. The data measurement unit 13 can measure the air conditioner operating data using a sensor, etc.or from a control unit (not shown) etc. of the air conditioning system 1.

[0016] The operating start data includes, for example, data indicating whether the air conditioning unit 1's operating power supply is in an ON or OFF state. Since the operating start data specifies the start and end of air conditioning operation, the continuously measured portions of this data can be used to determine whether the air conditioning unit is operating or not. The data measurement unit 13 transmits the measured portions of the air conditioning operating data to the air conditioning operating data hold unit 14.

[0017] The air conditioning operating data holding unit 14 holds / stores air conditioning operating data in which the room temperature variation data, the operating start data, and the collection time data are linked. The device identification information holding unit 15 holds / stores device identification information, which is information for identifying the air conditioning unit 1.

[0018] The first information delivery unit 11 reads the device identification information from the device identification information hold unit 15 and reads the air conditioning operating data from the air conditioning operating data hold unit 14. The first information delivery unit 11 sends data (hereinafter referred to as device linkage data, if necessary) to the data management server 2 via the first network communication path C1. The device linkage data is data in which the device identification information is mapped to the air conditioning operating data.

[0019] The second information provision unit 12 reads the air conditioning operating data from the air conditioning operating data hold unit 14. The second information provision unit 12 sends the air conditioning operating data to the user terminal 3 via the second network communication path C2.

[0020] The second information receiving unit 32 of the user terminal 3 receives the air conditioning operating data from the air conditioning unit 1. The second information receiving unit 32 sends the received air conditioning operating data to the authentication request unit 31. The user identification information holding unit 33 holds / stores user identification information to identify the user who is the owner / possessor of the user terminal 3.

[0021] The authentication request unit 31 reads the user identification information from the user identification information holding unit 33. By sending data (hereinafter referred to as user linkage data, if necessary) to the data management server 2, the authentication request unit 31 requests the data management server 2 to authenticate the user (to authenticate the user as the owner / possessor of the air conditioner 1). The user linkage data is data in which the user identification information is mapped to the air conditioner operating data.

[0022] The first information receiving unit 21 of the data management server 2 receives the device linking data from the air conditioner 1, in which the device identification information is mapped to the air conditioner operating data. The first information receiving unit 21 sends the received device linking data to the compliance verification unit 23.

[0023] The authentication acceptance unit 22 receives the user linking data from the user terminal device 3, in which the user identification information is linked to the air conditioning operating data. The authentication acceptance unit 22 sends the received user linking data to the compliance verification unit 23.

[0024] The conformance verification unit 23 authenticates the air conditioning operating data based on the device linkage data and the user linkage data. The conformance verification unit 23 compares the air conditioning operating data contained in the device linkage data with the air conditioning operating data contained in the user linkage data to verify whether these two pieces of air conditioning operating data match.

[0025] The start-up determination unit 24 of the conformance verification unit 23 receives the device linking data sent by the first information receiving unit 21. The start-up determination unit 24 also receives the user linking data sent by the authentication acceptance unit 22.

[0026] The start-up determination unit 24 determines a specific period from the start of operation of the air conditioner 1 based on the device linkage data or the user linkage data. This specific period can subsequently be referred to as the start-up period. The start-up period is a specific period (e.g., 15 minutes) immediately after the start of a test operation of the air conditioner. The start-up determination unit 24 sets the start-up period as the specific period immediately after the start of the test operation of the air conditioner because the air conditioner operating data varies significantly within this specific period immediately after the start of the test operation. The start-up determination unit 24 sends the set start-up period to the variation determination unit 25.

[0027] The variation determination unit 25 determines whether the variation (the characteristic) of the air conditioning operating data received by air conditioner 1 matches the variation (the characteristic) of the air conditioning operating data received by user terminal 3. Specifically, the variation determination unit 25 determines whether the room temperature variation data in the device linkage data, within the operating start period range, matches the room temperature variation data in the user linkage data. That is, the variation determination unit 25 determines whether the room temperature variation data received by air conditioner 1, within the operating start period range, matches the room temperature variation data received by user terminal 3, within the operating start period range.

[0028] The variation determination unit 25 determines that the owner of user terminal 3 is the owner of air conditioner 1 if, within the operating start period, the room temperature variation data in the device link data matches the room temperature variation data in the user link data. Otherwise, the variation determination unit 25 determines that the owner of user terminal 3 is not the owner of air conditioner 1 if, within the operating start period, the room temperature variation data in the device link data does not match the room temperature variation data in the user link data.

[0029] If it is determined that the owner / possessor of user terminal 3 is the owner / possessor of air conditioner 1, the variation determination unit 25 sends to the storage unit 26 the device identification information contained in the device linkage data and the user identification information contained in the user linkage data, with the device identification information and the user identification information linked together. That is, if, within the operating start period, the room temperature variation data in the device linkage data matches the room temperature variation data in the user linkage data, the variation determination unit 25 sends the device identification information and the user identification information linked together to the storage unit 26.The processing of linking the device identification information with the user identification information by the variation determination unit 25 corresponds to the processing of authenticating the user terminal device 3 that corresponds to / is associated with the user identification information. The storage unit 26 stores the device identification information and the user identification information in association with each other.

[0030] As described above, since the air conditioning system's operating data exhibits significant variation and a large amount of information immediately after operation begins, the owner authentication system 50 determines the owner / possessor using this data during the start-up period. Additionally, because the air conditioning system's operating data during the start-up period includes information that only the current owner / possessor can know, the owner authentication system 50 can authenticate the owner / possessor of air conditioning system 1 within a short period using this data, without requiring any user waiting time.

[0031] It should be noted that in the following description, the air conditioning operating data contained in the device link data can be referred to as first air conditioning operating data (first operating data), and the air conditioning operating data contained in the user link data can be referred to as second air conditioning operating data (second operating data).

[0032] In response to an authentication request from user device 3, air conditioner 1 sends the first air conditioner operating data to data management server 2 and the second air conditioner operating data to user device 3. Air conditioner 1 sends the collected air conditioner operating data to user device 3 and data management server 2, for example, in real time. That is, in response to an authentication request from user device 3, air conditioner 1 sends the collected air conditioner operating data to user device 3 and data management server 2 every time the air conditioner operating data is collected (e.g., every minute).

[0033] It should be noted that, in response to an authentication request from user device 3, air conditioner 1 can send the collected portions of air conditioner operating data in batches to user device 3 and data management server 2. For example, in response to an authentication request from user device 3, air conditioner 1 can send the portions of air conditioner operating data collected for 20 minutes in batches to user device 3 and data management server 2.

[0034] Next, a description of an operation of the owner authentication system 50 is given (a procedure of processing performed by the owner authentication system 50). First, a description of the processing (initial processing) is given when the data management server 2 receives and stores the initial air conditioner operating data (room temperature variation data, operating start data, and collection time data) from the air conditioner 1. Subsequently, a description of the processing (second processing) is given when the data management server 2 authenticates the user terminal 3 for the air conditioner 1.

[0035] Fig. Figure 2 is a flowchart depicting the initial processing procedure performed by the owner authentication system according to the embodiment. The air conditioner 1 starts a test operation in accordance with an instruction from a user who is the owner of the air conditioner 1. The data measurement unit 13 acquires the air conditioner operating data by measuring the air conditioner operating data at the time of the test operation start (step S10). The data measurement unit 13 measures the room temperature variation data, the operation start data (indicating the start and end of the air conditioner operation), and the collection time data as air conditioner operating data. The data measurement unit 13 sends the measured air conditioner operating data to the air conditioner operating data holding unit 14. The air conditioner operating data holding unit 14 holds / stores the air conditioner operating data.For example, air conditioner 1 continues to collect operating data regardless of whether the air conditioner's power supply is in an OFF or ON state. It should be noted, however, that air conditioner 1 may only collect operating data when the air conditioner's power supply is in an ON state.

[0036] The first information provision unit 11 assigns the first air conditioning operating data held / stored in the air conditioning operating data holding unit 14 to the device identification information held in the device identification information holding unit 15 (step S20).

[0037] Fig. Figure 3 is a diagram describing the device identification information held in the device identification information holding unit of the owner authentication system according to the embodiment. In the owner authentication system 50, the device identification information holding unit 15 holds / stores the device identification information for identifying the air conditioner 1.

[0038] The first information provisioning unit 11 sends the device linking data, in which the device identification information is assigned to the air conditioning operating data (first air conditioning operating data) (step S30), to the data management server 2 via the first network communication path C1.

[0039] Data Management Server 2 receives and holds / stores the device linking data sent by the first information delivery unit 11 (step S40). Specifically, the first information receiving unit 21 of Data Management Server 2 receives the device linking data, and the start-up determination unit 24 holds / stores the device linking data. Note that Data Management Server 2 can store the device linking data in storage unit 26 or in another storage unit (not shown).

[0040] Fig. Figure 4 is a flowchart representing a processing procedure of the second processing stage performed by the owner authentication system according to the embodiment. The user terminal 3 receives the air conditioning operating data from the air conditioning unit 1 (step S110). Specifically, the second information receiving unit 32 of the user terminal 3 receives the air conditioning operating data (room temperature variation data, operating start data, and collection time data) from the second information delivery unit 12 via the second network communication path C2. This data is held / stored in the air conditioning operating data holding unit 14 of the air conditioning unit 1.

[0041] The authentication request unit 31 assigns the second air conditioning operating data received from the air conditioning unit 1 to the user identification information held in the user identification information holding unit 33 (step S120).

[0042] Fig. Figure 5 is a diagram describing the user identification information held in the user identification information holding unit of the owner authentication system according to the embodiment. In the owner authentication system 50, the user identification information holding unit 33 holds / stores the user identification information for identifying the user (user terminal 3).

[0043] Authentication Request Unit 31 associates the user identification information with the air conditioner operating data (secondary air conditioner operating data) received from air conditioner 1. Authentication Request Unit 31 of user terminal 3 sends the user link data, in which the user identification information is associated with the secondary air conditioner operating data, to data management server 2, along with the authentication request to instruct data management server 2 to authenticate user terminal 3 as the owner / possessor of air conditioner 1. It should be noted that the user link data itself can constitute the authentication request. In this case, upon receiving the user link data, data management server 2 determines that the authentication request has also been received.The authentication request unit 31 sends the user linking data, including the authentication request, to the data management server 2 via the third network communication path C3. In this way, the authentication request unit 31 sends the user linking data and makes the authentication request (step S130).

[0044] Data Management Server 2 receives the user linkage data from user terminal device 3, in which the user identification information is linked to the air conditioning operating data, and holds / stores this data (step S140). Specifically, the authentication acceptance unit 22 of Data Management Server 2 receives the user linkage data, and the operation start determination unit 24 holds / stores the user linkage data. Note that Data Management Server 2 can store the user linkage data in storage unit 26 or in another storage unit (not shown).

[0045] The start-up determination unit 24 of the data management server 2 determines the start-up period (step S150) based on the air conditioning operating data in the device linkage data. Note that the start-up determination unit 24 can also determine the start-up period based on the air conditioning operating data in the user linkage data.

[0046] The start-up determination unit 24 of the data management server 2 extracts the first air conditioning operating data from the first air conditioning operating data in the start-up period (step S160) obtained in the processing of step S150.

[0047] Additionally, the start-up determination unit 24 extracts the second air conditioning system operating data from the second air conditioning system operating data in the start-up period obtained in the processing of step S150 (step S170).

[0048] The variation determination unit 25 determines whether the variation values ​​of the parts of air conditioning operating data that are the extracted data match each other (step S180). That is, variation determination unit 25 determines whether the variation value of the room temperature variation data contained in the first air conditioning operating data extracted in step S160 matches the variation value of the room temperature variation data contained in the second air conditioning operating data extracted in step S170.

[0049] A description is given of the configurations of the parts of air conditioning operating data to be compared by the variation determination unit 25. Fig. Figure 6 is a diagram illustrating exemplary configurations of parts of air conditioning operating data to be used for owner determination in the owner authentication system according to the embodiment.

[0050] The one on the left side of Fig. The air conditioning operating data shown in Figure 6 is an exemplary configuration of initial air conditioning operating data 41, and the data shown on the right side of Figure 6 is an example of the configuration shown. Fig. The air conditioning operating data shown in Figure 6 is an exemplary configuration of the second air conditioning operating data 42. Fig. Figure 6 presents examples of the first air conditioning operating data (41) and the second air conditioning operating data (42) when the air conditioning operating power supply changes from an OFF state to an ON state and then back to the OFF state after 15 minutes. It should be noted that the period during which the air conditioning operating power supply is in the ON state is not limited to 15 minutes and can be any period longer than or equal to the operating start period.

[0051] In both the first air conditioning operating data (41) and the second air conditioning operating data (42), collection time data, room temperature variation data, and operating start data are linked. The collection time data is the point in time at which air conditioning operating data is collected.

[0052] The first air conditioning operating data 41 are the air conditioning operating data stored in the device linking data, and the second air conditioning operating data 42 are the air conditioning operating data stored in the user linking data.

[0053] The first air conditioning operating data 41 contains the first air conditioning operating data 43, which are air conditioning operating data within the period during which the air conditioning operating power supply is in the ON state. The second air conditioning operating data 42 contains the second air conditioning operating data 44, which are air conditioning operating data within the period during which the air conditioning operating power supply is in the ON state. That is, an example of the first air conditioning operating data extracted from the first air conditioning operating data 41 by the operating start determination unit 24 is the first air conditioning operating data 43. Additionally, an example of the second air conditioning operating data extracted from the second air conditioning operating data 42 by the operating start determination unit 24 is the second air conditioning operating data 44.The variation determination unit 25 compares the first air conditioning operating data 43 with the second air conditioning operating data 44. If the owner / possessor of the user terminal 3 is identical to the owner / possessor of the air conditioning unit 1, the first air conditioning operating data 43 are the same as the second air conditioning operating data 44.

[0054] A description of the processing is given to determine whether the variation values ​​of the parts of air conditioning operating data are consistent. Fig. Figure 7 is a diagram describing a process for determining whether the variation values ​​of the parts of air conditioning operating data are consistent, wherein the processing is performed by the owner authentication system according to the embodiment. In the Fig. In the graph shown in Figure 7, the vertical axis represents room temperature, and the horizontal axis represents time. Fig. 7 represents a room temperature that changes over time.

[0055] Data Management Server 2 collects the device linking data via the first path, which is the first network communication path C1. The air conditioner operating data in the device linking data includes operating start data D1a and room temperature variation data D1b. The operating start data D1a indicates whether the air conditioner's operating power supply is in an ON or OFF state. Thus, based on the operating start data D1a, the variation determination unit 25 can determine whether the air conditioner 1 is performing a test operation or whether the air conditioner's operating power supply is in the OFF state. Additionally, based on the room temperature variation data D1b, the variation determination unit 25 can determine the transition (variation value) of the room temperature over time.

[0056] The start-up determination unit 24 of the data management server 2 determines the start-up period based on the start-up data D1a. The start-up determination unit 24 defines the start-up period as a specific period starting from the time the air conditioning system's power supply changes from the OFF state to the ON state.

[0057] Additionally, the data management server 2 collects the user linking data via the second path, which includes the second network communication path C2 and the third network communication path C3.

[0058] The air conditioning operating data in the user link data includes room temperature variation data. Fig. Section 7 presents room temperature variation data D2x, D2y, and D2z as an example of the room temperature variation data contained in the user linkage data of the air conditioning system operating data. The room temperature variation data D2x is a first pattern (first example) of the room temperature variation data, the room temperature variation data D2y is a second pattern (second example) of the room temperature variation data, and the room temperature variation data D2z is a third pattern (third example) of the room temperature variation data.

[0059] Since the room temperature variation data D2y, which is the second pattern of room temperature variation data, is the room temperature variation data outside the operating start period, the variation determination unit 25 does not recognize that the user terminal 3, which sent the user link data, is the owner / possessor of the air conditioner 1.

[0060] Since the variation value of the room temperature variation data D2z, which is the third pattern of the room temperature variation data, does not match the variation value of the room temperature variation data D1b of the device linking data, the variation determination unit 25 does not recognize that the user terminal 3, which sent the user linking data, is the owner / possessor of the air conditioner 1.

[0061] The room temperature variation data D2x, which is the first pattern of room temperature variation data, represents the room temperature variation data within the operating start period. Additionally, the variation value of the room temperature variation data D2x matches the variation value of the room temperature variation data D1b in the device linking data. In this case, the variation determination unit 25 recognizes that the user terminal 3, which sent the user linking data, is the owner of the air conditioner 1. Since, as described above, the variation value of the room temperature variation data D2x within the operating start period matches the variation value of the room temperature variation data D1b, the variation determination unit 25 recognizes that the user terminal 3, which sent the user linking data containing the room temperature variation data D2x, is the owner of the air conditioner 1.

[0062] If the variation values ​​of the air conditioner operating data components are determined to be a match (step S180, match), the variation determination unit 25 determines that the authentication of user terminal 3 is successful (step S190). Then, the variation determination unit 25 links the device identification information with the user identification information (step S200). That is, if the variation values ​​of the room temperature variation data components match within the operating start period, the variation determination unit 25 authenticates the owner / possessor (user) of user terminal 3, which sent the device identification information, as the owner / possessor (user) of the air conditioner 1 and links the device identification information with the user identification information.In this way, the variation determination unit 25 completes the processing of the authentication of the user terminal device 3.

[0063] On the other hand, if it is determined that the variation values ​​of the air conditioning operating data components do not match (step S180, no match), the variation determination unit 25 determines that the authentication of user terminal 3 is unsuccessful (step S210). That is, variation determination unit 25 determines that the owner / possessor (user) of user terminal 3, which sent the device identification information, is not the owner / possessor (user) of air conditioning 1. Subsequently, variation determination unit 25 terminates the processing of user terminal 3 authentication.

[0064] As described above, when the variation determination unit 25 of the data management server 2 authenticates the owner of the user terminal 3, which sent the device identification information, as the owner of the air conditioner 1, it generates correspondence information that links the device identification information with the user identification information. This correspondence information is stored in the storage unit (e.g., storage unit 26) within the data management server 2. The data management server 2 retains the correspondence information until the next user issues an authentication request to the air conditioner 1 and the authentication of the next user is successful.

[0065] Fig. Figure 8 is a diagram illustrating an exemplary configuration of the correspondence information, in which the device identification information is linked to the user identification information, the correspondence information being generated by the owner authentication system according to the embodiment. The data management server 2 generates and stores the correspondence information between the device identification information and the user identification information, in which correspondence information is linked to an authentication number, the device identification information, and the user identification information.

[0066] If authentication fails, Data Management Server 2 can delete from the correspondence information the correspondence information that includes the user identification information for the user terminal 3 that failed authentication, and the correspondence information that includes the device identification information for the air conditioner 1 that failed authentication. Data Management Server 2 updates the correspondence information when authentication is successful or failed.

[0067] In this way, the owner authentication system 50 can perform authentication between the user and the air conditioner 1 without using static information (e.g., a Media Access Control (MAC) address) and can thus uniquely distinguish a previous owner / possessor from a current owner / possessor.

[0068] Since the owner authentication system 50 uses the air conditioning operating data relating to air conditioning 1 as the dynamic data to perform authentication between the user and air conditioning 1, the owner authentication system 50 can distinguish the previous owner / possessor from the current owner / possessor without using additional hardware to generate the dynamic data.

[0069] It should be noted that in the present embodiment, the description was given using the example in which the conformity verification unit 23 of the data management server 2 comprises the two determination units (the start-up determination unit 24 and the variation determination unit 25). However, it is only necessary that the conformity verification unit 23 comprises any one of the start-up determination unit 24 and the variation determination unit 25.

[0070] For example, the start-up determination unit 24 can determine whether the owner of user terminal 3 is the owner of air conditioner 1. That is, the start-up determination unit 24 can determine, based on start date and time data—that is, data specifying the date and time at which operation began—whether the air conditioner operating data matches. Specifically, the start-up determination unit 24 can verify whether the two air conditioner operating data matches by comparing the start date and time contained in the device link data with the start date and time contained in the user link data. In this case, the match verification unit 23 does not necessarily need to include the variation determination unit 25.

[0071] If the match verification unit 23 does not include the start-up determination unit 24, the variation determination unit 25 determines whether, at any given period or date and time, a variation in the first air conditioning operating data matches a variation in the second air conditioning operating data. In this case, the variation determination unit 25 recognizes that the user terminal 3, which sent the user linking data, which is contained in Fig. The room temperature variation data D2y shown in 7 also includes the owner / possessor of the air conditioner 1.

[0072] In addition, in the present embodiment, the owner authentication system 50 comprises an air conditioner 1 and a user terminal 3. However, the air conditioner 1 and the user terminal 3 connected to the data management server 2 are not limited to exactly one each, and there may be two or more instances of the air conditioner 1 and / or the user terminal 3.

[0073] Additionally, in a case where the owner authentication system comprises 50 multiple air conditioners 1, the data management server 2, in response to the successful authentication of at least one user terminal 3, can simultaneously authenticate the other air conditioners connected via the same network communication path as the one for the air conditioner 1 for which authentication was successful. That is, if the authentication of a user terminal 3 is successful, the data management server 2 can recognize the user terminal 3 for which authentication was successful as the owner of all air conditioners 1 connected via the same network communication path as the user terminal 3.

[0074] Furthermore, according to the present embodiment, the data management server 2 uses the room temperature variation data as the dynamic data for authenticating the user terminal 3. However, the dynamic data to be used for authenticating the user terminal 3 can be data indicating a variation in an outside air temperature, a set temperature, change data in the set temperature, a compressor speed, a fan speed, a temperature in a refrigerant circuit piping, or data indicating a pressure in the refrigerant circuit piping. The compressor, the fan, and the refrigerant circuit piping, as referred to herein, are components of the air conditioner 1. The data indicating a variation in an outside air temperature are data indicating a variation in the outside air temperature at a location where an outdoor unit of the air conditioner 1 is situated.The setpoint temperature is a temperature (room temperature) to be set for air conditioner 1. The setpoint temperature change data is data that indicates a change history of the setpoint temperature.

[0075] In addition, according to the present embodiment, the data management server 2 uses room temperature variation data, which is one type of data, as dynamic data used to authenticate the user terminal 3. However, the user terminal 3 can be authenticated using two or more types of the dynamic data described above. This means that the data management server 2 can use at least one of the following as dynamic data for authenticating the user terminal 3: room temperature variation data, data indicating a variation in outside air temperature, the set temperature, change data of the set temperature, the compressor speed, the fan speed, the temperature in the refrigerant circuit piping, and data indicating the pressure in the refrigerant circuit piping.Data Management Server 2 can determine the owner / possessor with greater accuracy in a case where Data Management Server 2 determines the owner / possessor using two or more types of dynamic data than Data Management Server 2, which performs authentication using only one type of dynamic data.

[0076] Additionally, according to the present embodiment, the data management server 2 authenticates, as described in reference to Fig. As described in section 6, the user terminal 3 is identified as the owner / possessor of the air conditioner 1 if the first air conditioner operating data 43 completely matches the second air conditioner operating data 44. However, the data management server 2 can perform authentication after interpolating time data.

[0077] In addition, according to the present embodiment, the owner authentication system 50 holds / stores the ON state or the OFF state of the power supply as the operating start data, as described in Fig. 6 shown. However, the owner authentication system 50 can hold / store operating start time data or operating end time data and use as the first air conditioning operating data 43 and the second air conditioning operating data 44 portions of room temperature variation data collected in the period between the operating start time data and the operating end time data.

[0078] Furthermore, the description was provided using the example in which the owner authentication system 50, according to the present embodiment, extracts the operating start data for authenticating the user terminal 3 from the operating data at the time of the start of the test operation. However, the owner authentication system 50 can also extract the operating start data from the operating data at the time of the start of a normal cooling operation or a normal heating operation and use this data to authenticate the owner.

[0079] It should be noted that in the present embodiment, the description refers to the example where the system device is the air conditioner 1. However, the system device can be a different device than the air conditioner 1. For example, the system device can be a television, a surveillance camera, or the like.

[0080] As described above, the Owner Authentication System 50 does not only determine whether the current owner / possessor of the air conditioner 1 is the owner / possessor of the air conditioner 1 based on static data, but also authenticates the current owner / possessor of the air conditioner 1 based on the characteristics of variations in the dynamic data relating to the operation of the air conditioner 1. The Owner Authentication System 50 authenticates the current owner / possessor of the air conditioner 1 without using additional hardware to generate dynamic data. That is, since the Owner Authentication System 50 is configured to use the dynamic data involved in the air conditioner 1 for authentication between the air conditioner 1 and the user terminal 3, the Owner Authentication System 50 can authenticate the current owner / possessor without authenticating the previous owner / possessor.

[0081] This section describes the hardware configurations of air conditioner 1, data management server 2, and user terminal 3. It should be noted that, since air conditioner 1, data management server 2, and user terminal 3 have similar hardware configurations, this section describes the hardware configuration of data management server 2. Data management server 2 is implemented using a processing circuit. The processing circuit may include a data storage device and a processor that executes a program stored in the data storage device, or it may include dedicated hardware.

[0082] Fig. Figure 9 is a diagram illustrating an exemplary configuration of a processing circuit in a case where a processor and a data storage device implement the processing circuit included in the data management server according to the embodiment. The in Fig. The processing circuit 90 shown in Figure 9 comprises a processor 91 and a data memory 92. In this case, where the processing circuit 90 includes the processor 91 and the data memory 92, each function of the processing circuit 90 is implemented by software, firmware, or a combination of both. The software or firmware is described as a data management program and is stored in the data memory 92. In the processing circuit 90, the processor 91 reads the data management program stored in the data memory 92 and executes it to implement a specific function. That is, the processing circuit 90 includes the data memory 92 for storing the data management program, which is used to execute the processing of the data management server 2 as a result.It can also be said that this data management program is a program designed to cause the data management server 2 to execute a specific function implemented by the processing circuit 90. The data management program can be provided by a storage medium that stores the data management program, or it can be provided by other means, such as a communication medium.

[0083] The data management program has a modular configuration, which includes the conformance verification unit 23, and these are loaded onto and generated on a main memory device.

[0084] Here, the processor 91, for example, is a central processing unit (CPU), a processing unit, an arithmetic unit, a microprocessor, a microcomputer, a digital signal processor (DSP), or the like. Additionally, the data storage 92 corresponds, for example, to a non-volatile or volatile semiconductor memory, such as random access memory (RAM), read-only memory (ROM), flash memory, erasable programmable ROM (EPROM), or electrical EPROM (EEPROM, registered trademark), a magnetic disk, a flexible disk, an optical disk, a compact disk, a minidisc, a digital versatile disc (DVD), or the like.

[0085] Fig. Figure 10 is a diagram illustrating an example of a processing circuit in a case where dedicated hardware implements the processing circuitry included in the data management server according to the embodiment. The diagram in Fig.The processing circuit 93 shown in Figure 10 corresponds, for example, to a single circuit, a combined circuit, a programmed processor, a parallel programmed processor, an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or any combination thereof. Some functions of the processing circuit 93 may be implemented by dedicated hardware, and the other functions may be implemented by software or firmware. In this way, the processing circuit 93 can implement the functions described above using dedicated hardware, software, firmware, or any combination thereof.

[0086] As described above, in this embodiment, the air conditioner 1 sends the device linkage data, which links the first air conditioner operating data with the device identification information, to the data management server 2, and sends the second air conditioner operating data to the user terminal 3. The user terminal 3 then sends the user linkage data, which links the second air conditioner operating data with the user identification information, to the data management server 2. Additionally, the data management server 2 compares the first air conditioner operating data contained in the device linkage data with the second air conditioner operating data contained in the user linkage data to authenticate the air conditioner. Consequently, the data management server 2 can correctly identify the current owner / possessor of the air conditioner 1 based on the dynamic data, which varies over time.

[0087] The features shown in connection with the above embodiment are merely illustrative and can be combined with other known techniques or can be partially omitted or modified without leaving the scope of protection. Reference symbol list 1 air conditioner; 2 data management servers; 3 User terminal; 11 First Information Provisioning Unit; 12 second information delivery unit; 13 Data measurement unit; 14 Air conditioning operating data holding unit; 15 Device identification information holding unit; 21 first information receiving unit; 22 Authentication acceptance unit; 23 Match verification unit; 24 Start-up determination unit; 25 units of variation; 26 storage units; 31 Authentication request unit; 32 second information receiving unit; 33 User identification information holding unit; 50 Owner authentication system; 90, 93 Processing circuit; 91 processor; 92 data storage devices; D1a Operating start data; D1b, D2x, D2y, D2z Room temperature variation data. QUOTES INCLUDED IN THE DESCRIPTION

[0000] This list of documents cited by the applicant was automatically generated and is included solely for the reader's convenience. The list is not part of the German patent or utility model application. The DPMA accepts no liability for any errors or omissions. Cited patent literature

[0000] JP 2018 - 182 452

[0004]

Claims

[1] Owner authentication system comprising: a plant device; a data management server connected to the plant device; and a user terminal device that can be connected to the plant device and the data management server, wherein the plant device comprises: a device identification information holding unit for holding device identification information, which is identification information about the plant device; an operational data holding unit for holding operational data, which is dynamic data that varies over time in the plant device; a first information provisioning unit to transfer device linkage data to the data management server, in which initial operational data is mapped to the device identification information; and a second information provision unit to transmit second operational data to the user terminal, wherein the user terminal comprises: a user identification information holding unit for holding user identification information, which is identification information about the user terminal device; and an authentication request unit to request the data management server to perform authentication as to whether the user terminal is a terminal corresponding to an owner of the plant device by transmitting user association data to the data management server, in which the second operational data is associated with the user identification information, and the data management server includes: a matching verification unit to perform authentication by comparing the first operational data contained in the device linking data with the second operational data contained in the user linking data. [2] Owner authentication system according to claim 1, wherein The first operating data and the second operating data each include a start date and start time, which are the date and time at which the plant device started operating, and The conformity verification unit determines that the user terminal is the terminal corresponding to the owner of the plant equipment if a variation in the first operating data in an operating start period matches a variation in the second operating data in the operating start period, where the operating start period is a specific period from the start of operation of the plant equipment. [3] Owner authentication system according to claim 1, wherein The first operating data and the second operating data each include a start date and start time, which are the date and time at which the plant equipment started operating, and The conformity verification unit determines that the user terminal is the terminal corresponding to the owner of the plant device if the start date and start time contained in the first operating data match the start date and start time contained in the second operating data. [4] Owner authentication system according to claim 1, wherein The system unit is an air conditioner, and The first operating data and the second operating data each include at least one of the following data: data indicating a variation in the room temperature of a room in which an indoor unit of the air conditioner is located; data indicating a variation in the outdoor air temperature of a location where an outdoor unit of the air conditioner is located; a setpoint temperature to be set for the air conditioner; change data indicating a change history of the setpoint temperature; a speed of a compressor included in the air conditioner; a speed of a fan included in the air conditioner; a temperature in a line of a refrigerant circuit included in the air conditioner; and data indicating a pressure in the line of the refrigerant circuit. [5] Owner authentication system according to any one of claims 1 to 4, wherein the data management server further comprises: A storage unit for storing correspondence information in which the device identification information is linked to the user identification information when the correspondence verification unit determines that the user terminal is the terminal that corresponds to the owner of the plant device. [6] Owner authentication system according to claim 5, wherein the match verification unit updates the match information when the authentication is successful or unsuccessful. [7] Owner authentication procedure, comprising: a device identification information hold step for holding device identification information, which is identification information about the plant device, by a plant device; an operational data hold step to hold operational data, which is dynamic data that varies over time in the plant device, by the plant device; a first information provision step for the transfer of device linking data, in which initial operational data is assigned to the device identification information, by the plant device to a data management server; a second information provision step for transferring second operational data from the plant device to a user terminal device; a user identification information hold step for holding user identification information, which is identification information about the user terminal device, by the user terminal device; an authentication request step for the user terminal to request the data management server to perform authentication as to whether the user terminal is a terminal corresponding to an owner of the plant device by transmitting user association data to the data management server, in which the second operational data is mapped to the user identification information; and a matching verification step to perform authentication by the data management server by comparing the first operational data contained in the device linking data with the second operational data contained in the user linking data.

Images