Indoor location authentication method, indoor location authentication system, and indoor location authentication device

Abstract

Multiple wireless devices located indoors and transmitting wireless signals for acquiring location information are authenticated. A terminal device acquiring location information based on wireless signals received from the authenticated wireless devices obtains information about the number of authenticated wireless devices, which are the source of the wireless signals used to acquire the location information. The location information acquired by the terminal device is then authenticated based on the acquired information about the number of wireless devices.

Description

Technical Field

[0001] The present invention relates to an indoor position authentication method, an indoor position authentication system and an indoor position authentication device for authenticating an indoor position. Background Art

[0002] Conventionally, in positioning technology using the Global Navigation Satellite System (GNSS), a technology for authenticating a location using a digital signature is disclosed in Patent Document 1. However, this technology cannot authenticate a location indoors where satellite positioning navigation signals cannot reach.

[0003] Patent Document 2 discloses a system for tracking the location of individuals such as children. However, in order to perform location tracking, this technology requires the installation of transmitters and receivers for transmitting and receiving signals dedicated to the system at various locations, which results in high installation costs.

[0004] Prior art literature

[0005] Patent Literature

[0006] Patent Document 1: Japanese Patent No. 6425722

[0007] Patent Document 2: Japanese Patent No. 6373905 Summary of the Invention

[0008] Problems to be solved by the invention

[0009] Thus, the above-mentioned conventional technology cannot perform indoor position authentication. Alternatively, in order to perform position authentication, a new system for acquiring the indoor position must be introduced, which has the problem of high equipment cost.

[0010] The present invention is created in view of the above-mentioned actual situation, and one of its purposes is to provide an indoor location authentication method, an indoor location authentication system and an indoor location authentication device that can perform indoor location authentication with a relatively low equipment cost.

[0011] Means for solving problems

[0012] One embodiment of the present invention for solving the problems of the above-mentioned conventional examples is an indoor location authentication method, which authenticates multiple wireless devices that are arranged indoors and send wireless signals for obtaining location information, obtains information on the number of wireless devices that are the source of the wireless signals serving as the basis for obtaining the location information, i.e., the number of the authenticated wireless devices, from a terminal device that obtains location information based on the wireless signals received from the authenticated wireless devices, and authenticates the location information obtained by the terminal device based on the obtained information on the number of the wireless devices.

[0013] Effects of the Invention

[0014] According to the present invention, an indoor location authentication system can be constructed using an existing wireless LAN system or other device capable of wireless communication, thereby enabling indoor location authentication at a low equipment cost. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] Figure 1 This is a block diagram showing a configuration example of an indoor location authentication system according to an embodiment of the present invention.

[0016] Figure 2 This is an explanatory diagram showing an example of the content of a database used by the indoor position authentication device according to the embodiment of the present invention.

[0017] Figure 3 This is a flowchart showing an example of the operation of the indoor location authentication device according to the embodiment of the present invention.

[0018] Figure 4 This is a flowchart showing an example of the operation of a wireless transceiver that communicates with the indoor location authentication device according to the embodiment of the present invention.

[0019] Figure 5 This is a block diagram showing another configuration example of the indoor location authentication system according to the embodiment of the present invention. DETAILED DESCRIPTION

[0020] The embodiments of the present invention will be described with reference to the accompanying drawings. Figure 1 The illustrated indoor location authentication system 1, as an example of an embodiment of the present invention, includes at least one wireless transceiver 100, an indoor location authentication device 200 communicatively connected to the wireless transceiver 100 via a network or the like, and a user device 300 carried by a user who is the subject of location authentication. The at least one wireless transceiver 100 is located within a station, a facility such as a department store, or other indoor space.

[0021] The wireless transceiver 100 includes a control unit 101 , a storage unit 102 , an interface unit 103 , a management unit 104 , and a wireless transceiver 105 .

[0022] The control unit 101 is a program-controlled device such as a CPU, and operates according to a program stored in the storage unit 102. In the present embodiment, the control unit 101 of the wireless transceiver 100 executes a device authentication process and a position authentication process.

[0023] Specifically, the control unit 101 performs device authentication processing according to instructions input from the indoor location authentication device 200. Furthermore, the control unit 101 controls the establishment and disconnection of channels with user devices 300 within the communication range of the wireless transceiver unit 105 (described later) according to instructions input from the indoor location authentication device 200. These detailed operations of the control unit 101 will be described later.

[0024] The storage unit 102 holds a program executed by the control unit 101 . The program may be provided by being stored in a computer-readable and non-transitory recording medium, and copied and stored in the storage unit 102 .

[0025] The storage unit 102 also stores various parameters required for processing by the control unit 101 and functions as a working memory for the control unit 101. For example, the storage unit 102 stores a separate database that associates a device name (Device Name), a device identifier (ID), identification information unique to a specific indoor area (area identification information: Area), an RSSI value, other specified flag information, and data.

[0026] The area identification information recorded in the individual database is pre-set as unique information for each facility and for each of the multiple indoor areas within the facility. Furthermore, the RSSI value here represents the strength of the signal received by the wireless transceiver 100 storing the individual database from other devices and is recorded in association with the device identifier that identifies the other device that is the source of the signal.

[0027] The interface unit 103 is an interface for receiving information input from the user, and includes, for example, a biometric authentication device such as a fingerprint authentication device, a touch sensor, a display, and the like.

[0028] The management unit 104 manages the wireless signals transmitted and received by the wireless transmission and reception unit 105 in accordance with instructions input from the control unit 101 .

[0029] The wireless transceiver 105 transmits and receives any wireless signal such as a GNSS signal, a wireless LAN signal, a Bluetooth (registered trademark) signal, or a mobile phone communication network signal (3G, 4G, 5G, etc.).

[0030] Indoor location authentication device 200 is a computer-controlled device that transmits and receives various information to and from wireless transceiver 100 via a network. It includes at least one program-controlled device such as a processor and a storage unit such as a disk device or memory device. In one embodiment, indoor location authentication device 200 performs device authentication and location authentication through the operation of one or more processors included in indoor location authentication device 200.

[0031] In one example of this embodiment, the wireless transceiver 100 may be a wireless LAN access point, a mobile phone communication base station, or various IoT devices configured indoors.

[0032] The indoor location authentication device 200 controls a plurality of wireless transceivers 100 placed indoors. The indoor location authentication device 200 communicates with the target wireless transceiver 100, authenticates the position of the target wireless transceiver, and controls the communication.

[0033] like Figure 1 As illustrated, the indoor location authentication device 200 includes a control unit 201 , a storage unit 202 , and a communication unit 203 .

[0034] The control unit 201 is a program-controlled device such as a CPU, and operates according to the program stored in the storage unit 202. This control unit 201 corresponds to one or more processors of the present invention. In this embodiment, the control unit 201 performs device authentication and location authentication. These operations of the control unit 201 will be described in detail below.

[0035] The storage unit 202 holds a program executed by the control unit 201 . The program may be provided by being stored in a computer-readable non-transitory recording medium, and copied and stored in the storage unit 202 .

[0036] In addition, if Figure 2 As illustrated, the storage unit 202 stores a device database that stores, in association with each other, at least information identifying the wireless transceiver 100 communicating with the indoor location authentication device 200 (if it is information specific to the wireless transceiver 100, this may be any information such as a name, device identifier, or network address), identification information specific to the indoor area where the wireless transceiver 100 is installed (area identification information), and whether the wireless transceiver 100 has become authenticated (whether it is a "host"). Furthermore, the database may further store information identifying the location of the wireless transceiver 100 within the area (e.g., information identifying the store where the wireless transceiver 100 is installed) for various data, including fixed-location wireless transceivers.

[0037] The communication unit 203 is a network interface or the like, and transmits and receives information between the communication unit 203 and each wireless transceiver 100 in accordance with an instruction input from the control unit 201 .

[0038] The user equipment 300 is a mobile phone terminal or the like, and can be carried and moved by a user.

[0039] [Device authentication processing]

[0040] Next, the device authentication process performed by the control unit 101 of the wireless transceiver 100 and the control unit 201 of the indoor location authentication device 200 will be described. In one example of this embodiment, the correctness of the location of n or more wireless transceivers 100 (n being an integer greater than or equal to 2) located indoors in a facility or the like is authenticated based on whether or not they can communicate with each other. For example, if three wireless transceivers 100 can communicate with each other, these wireless transceivers 100 are authenticated as being located in the same room.

[0041] Therefore, in this embodiment, the control units 101 and 201 of the wireless transceiver 100 and the indoor location authentication apparatus 200 repeatedly execute the subsequent device authentication process at each predetermined timing.

[0042] That is, Figure 3 As illustrated, the control unit 201 of the indoor location authentication device 200 resets the counter i to zero ( S10 ), sequentially selects each of the wireless transceivers 100 specified according to the information stored in the database of the storage unit 202 , and repeats the following processing.

[0043] The control unit 201 resets the counter N to zero. The control unit 201 transmits information identifying the selected wireless transceiver 100 (hereinafter referred to as the wireless transceiver of interest) and various information associated with this information, including area identification information, to the wireless transceiver of interest. The various information including the area identification information may also include flag information such as whether it is a "host." The control unit 201 then instructs the wireless transceiver of interest 100 to broadcast this information (broadcast instruction: S11). This broadcast is performed in different ways depending on whether the wireless signal from the wireless transceiver 105 of the wireless transceiver 100 is from a wireless LAN access point, a mobile phone communication base station, or the like.

[0044] At this time, the control unit 201 may temporarily set the flag information stored in the device database corresponding to the wireless transceiver of interest to "off" (information indicating "not a host").

[0045] The control unit 201 receives the information broadcasted by the wireless transceiver of interest from the wireless transceiver other than the wireless transceiver of interest 100 (S12). Furthermore, the wireless transceiver other than the wireless transceiver of interest 100 that receives the information broadcasted by the wireless transceiver of interest transmits RSSI information indicating the strength of the received signal from the wireless transceiver of interest together with the received information to the indoor location authentication device 200, as will be described later.

[0046] The control unit 201 then compares the received information with the information sent in step S11 (S13). Specifically, the control unit 201 checks whether the area identification information included in the information sent in step S11 and the information received in step S12 is consistent. If they are consistent, the control unit 201 increments the counter N by "1" (S14) and determines whether the counter N is equal to or greater than a predetermined integer threshold value n (e.g., n = 2) (S15).

[0047] In the process S15, if the counter N becomes greater than the specified integer threshold n, the control unit 201 rewrites the flag information associated with the information identifying the wireless transceiver of interest stored in the information stored in the device database to "on" (information indicating "it is a host") and updates the device database, increasing the counter i by "1" (S16).

[0048] The control unit 201 then checks whether the value of the counter i is greater than or equal to a predetermined threshold value P, which represents the number of wireless transceivers to be authenticated (S17). Hereinafter, this threshold value P is referred to as the device authentication threshold. In one example of this embodiment, the device authentication threshold value P is set to an integer greater than or equal to 3. If the value of the counter i is greater than or equal to the device authentication threshold value P in step S17, the control unit 201 terminates the process.

[0049] On the other hand, in step S17 , when the value of the counter i is lower than the device authentication threshold, the control unit 201 selects the next wireless transceiver 100 as the wireless transceiver of interest and returns to step S11 to continue the process.

[0050] Furthermore, when the counter N is lower than the predetermined integer threshold value n in step S15 , the control unit 201 returns to step S12 and further waits for receiving information from another wireless transceiver 100 .

[0051] Moreover, as far as the control unit 201 is concerned, when the standby time in step S12 exceeds the preset time, or when the area identification information contained in the information sent in step S11 and the information received in step S12 are inconsistent in step S13, the repeated processing of steps S12 to S14 is terminated, the next wireless transceiver 100 is selected as the wireless transceiver of interest, and the process returns to step S11 to continue.

[0052] Furthermore, after all the wireless transceivers 100 registered in the device database are sequentially selected as the wireless transceiver of interest and the processes of steps S11 to S17 are performed, the control unit 201 ends the process.

[0053] Furthermore, when the indoor location authentication device 200 controls the wireless transceivers 100 in a plurality of areas identified by different area identification information, the indoor location authentication device 200 performs the above-described processing on the wireless transceivers 100 in each area.

[0054] On the other hand, the control unit 101 of the wireless transceiver 100 operating together with the indoor location authentication device 200 selects the area identification information with the largest number of received area identification information among the area identification information broadcasted by multiple different wireless transceivers 100 and received by itself, and stores the selected area identification information as the area identification information of the area where itself is located in the storage unit 102. In addition, as far as the control unit 101 is concerned, Figure 4 As illustrated, upon receiving area identification information from the indoor location authentication device 200 (S21), the indoor location authentication device 200 compares the area identification information included in the received information with the area identification information stored in its own storage unit 102 (S22). If the two do not match, it is possible that the wireless transceiver 100 has been moved abnormally, and the indoor location authentication device 200 interrupts the following processing.

[0055] On the other hand, in step S22, if the area identification information included in the received information matches the area identification information stored in its own storage unit 102, the information received in step S21 is broadcasted to the surrounding area by wireless means (S23).

[0056] When the control unit 101 of the wireless transceiver 100 receives information broadcasted by another wireless transceiver 100 , it transmits the information and the strength of the wireless signal when the information is received to a predetermined indoor location authentication device 200 .

[0057] Through these operations, the indoor location authentication device 200 finds at least P (P is an integer greater than or equal to 3) wireless transceivers 100 in each area that are within the pre-registered area and records them as authenticated wireless transceivers 100 (host transceivers).

[0058] [Device authentication status changes over time]

[0059] The wireless transceiver 100 that becomes the master transceiver may not always function as the master transceiver. For example, if a store has the wireless transceiver 100, the power supply of the wireless transceiver 100 may be turned off when the store closes.

[0060] In this embodiment, as described above, by repeatedly executing the device authentication process of the wireless transceiver 100 at predetermined timings (eg, every 10 minutes), the master transceiver 100 is ensured as much as possible, thereby improving the availability of the system of this embodiment.

[0061] For example, suppose that three wireless transceivers 100a, 100b, 100c, and 100d are registered as master transceivers in an area where four wireless transceivers 100a, 100b, 100c, and 100d are located. In this case, if the wireless transceiver 100a cannot communicate for some reason, at the timing of the next device authentication process, the indoor location authentication device 200 will issue a broadcast instruction ( Figure 3 In step S11), the wireless transceiver 100a will not respond, but the other wireless transceivers 100b, 100c, and 100d will respond to the instruction and sequentially broadcast information including area identification information identifying the areas where these wireless transceivers 100 are located.

[0062] In this example, the information broadcast by wireless transceiver 100b is received by wireless transceivers 100c and 100d, and thus wireless transceivers 100c and 100d each transmit the received information to indoor location authentication device 200. Indoor location authentication device 200 refers to the information received by wireless transceivers 100c and 100d, and if it is confirmed that the information is consistent with the information broadcast by wireless transceiver 100b, then wireless transceiver 100b is recorded as the authenticated host transceiver based on the fact that the information broadcast by wireless transceiver 100b is received by two or more other wireless transceivers 100c and 100d (other than wireless transceiver 100b).

[0063] Similarly, the information broadcast by the wireless transceiver 100c is received by the wireless transceivers 100b and 100d, and the information broadcast by the wireless transceiver 100d is received by the wireless transceivers 100b and 100c. Therefore, the indoor location authentication device 200 records the three wireless transceivers 100a, 100b, and 100c as master transceivers.

[0064] Thus, the indoor location authentication device 200 maintains the availability of the location authentication process (described below) in the area where the wireless transceivers 100a, 100b, 100c, and 100d are located.

[0065] [Location Authentication Process]

[0066] Next, the location authentication process for user device 300 carried by the user will be described. In this embodiment, user device 300 executes an application for location authentication and receives information such as area identification information and "host" flag information, which are broadcast by wireless transceiver 100 during device authentication, based on instructions from indoor location authentication device 200.

[0067] The user device 300 accumulates and stores the received information. Specifically, the user device 300 is a smartphone, etc., which receives the broadcast signal, demodulates the received signal, and extracts the broadcast information. Furthermore, the user device 300 uses the information identifying the wireless transceiver 100 as a key to accumulate and record the extracted information (received information). Furthermore, at this point, the user device 300 may also record the received signal strength (RSSI value) of the broadcast signal received from the wireless transceiver 100, in association with the information identifying the wireless transceiver 100, which is the source of the broadcast information.

[0068] The user device 300 presumes that the area identification information included in the last received information is information identifying the area in which it is currently located (location area information), and reads out information from the above-mentioned recorded information that contains area identification information consistent with the location area information and is associated with information identifying different wireless transceivers 100.

[0069] The user device 300 refers to the flag information indicating whether it is a master included in the read information, and counts the number N of information (referred to as certification information) associated with information identifying different wireless transceivers 100 and indicating that the flag information is a master.

[0070] When the number N is lower than a preset threshold (the threshold is set to be greater than the device authentication threshold. In the description here, N=3 is assumed when a specific value is required), the user equipment 300 repeats the process of receiving the information broadcast by the wireless transceiver 100 .

[0071] Furthermore, when the number N exceeds the threshold, the user device 300 records at least a portion of the certification information (e.g., a set of information identifying the N wireless transceivers 100, or a set of information identifying the N wireless transceivers 100 and RSSI values ​​recorded in association therewith). This record indicates that the user device 300 was in the area indicated by the location information. Furthermore, it is determined that the user device 300 is in the area identified by the area identification information included in the certification information (location information is obtained).

[0072] Furthermore, the user device 300 may also transmit the recorded information (the information identifying the N wireless transceivers 100 and the sets of RSSI values ​​recorded in association with each of the N wireless transceivers 100) along with the information identifying the user device 300 to an external server such as the indoor location authentication device 200, and record the information. The external server that receives the information records at least a portion of the certification information (e.g., the set of information identifying the N wireless transceivers 100) in association with the information identifying the user device 300 (e.g., the telephone number of the user device 300).

[0073] As an example, when the user equipment 300 transmits a pair of information identifying N wireless transceivers 100 and RSSI values ​​recorded in association with each of the information to the indoor location authentication apparatus 200 , the indoor location authentication apparatus 200 may operate as follows.

[0074] Specifically, the indoor location authentication device 200 in this example stores information about the installed locations of each wireless transceiver 100 within the area in a device database. Furthermore, based on the information received from the user device 300, the indoor location authentication device 200 can estimate the distance of the user device 300, the source of the information, from each wireless transceiver 100 identified by the information contained in the information, based on the corresponding RSSI value, and thereby estimate the location of the user device 300 within the area.

[0075] [Pseudo-random information]

[0076] Furthermore, in one example of this embodiment, the indoor location authentication device 200 may include a pseudo-random value in the instruction broadcast to the wireless transceiver 100 as information to be broadcast along with information identifying the wireless transceiver 100. This pseudo-random value may be determined by a random number or may be time information (time information kept by the indoor location authentication device 200) encrypted with a pre-set secret key.

[0077] Furthermore, when performing broadcasting, the wireless transceiver 100 broadcasts the pseudo-random value together with area identification information and flag information such as whether the device is a "host" or not.

[0078] The indoor location authentication device 200 stores and records the pseudo-random value in association with information identifying the wireless transmitter / receiver 100 that instructed the broadcast.

[0079] User device 300 and other devices also receive the pseudo-random value broadcast by wireless transceiver 100, and the recorded information includes the pseudo-random value included in the certification information. In this example, when subsequently authenticating the location of user device 300, the recorded information is verified to be consistent with the pseudo-random value emitted by indoor location authentication device 200 at the corresponding time, thereby improving the reliability of the recorded information.

[0080] [action]

[0081] The indoor position authentication system 1 according to an example of the present embodiment basically has the above-described configuration and operates as follows.

[0082] In the following example, a plurality of wireless transceivers 100 capable of wirelessly transmitting and receiving information are arranged in an indoor area to be authenticated. The wireless transceivers 100 are communicatively connected to an indoor location authentication device 200.

[0083] In the indoor location authentication device 200, a database is pre-maintained for the wireless transceivers 100 corresponding to each area. The database at least associates information identifying the wireless transceiver 100, area identification information inherent to the area where the wireless transceiver 100 is configured, and flag information indicating whether the wireless transceiver 100 has become an authenticated state (whether it is a "host").

[0084] In this state, the indoor location authentication device 200 repeatedly executes the device authentication process for the wireless transceiver 100 at every predetermined timing. In this process, each wireless transceiver 100 specified by the information stored in the database is sequentially selected for each area, and the subsequent process is repeated.

[0085] The indoor location authentication device 200 identifies the selected wireless transceiver 100 as a target wireless transceiver and transmits information identifying the target wireless transceiver, associated area identification information, and flag information indicating whether it is a host, etc., as a broadcast instruction to the target wireless transceiver. Furthermore, the indoor location authentication device 200 sets the flag information associated with the wireless transceiver 100 in the database to off ("not a host").

[0086] Upon receiving a broadcast instruction from the indoor location authentication device 200, the wireless transceiver of interest compares the area identification information contained in the instruction with the area identification information stored in its own storage unit 102. If the information matches, the wireless transceiver of interest broadcasts the received information identifying the wireless transceiver of interest, the area identification information, and a flag indicating whether the device is a host, as instructed. The broadcast method varies depending on the communication method of the wireless transceiver 100, but any method can be used as long as it is not restricted to an address and can be received by any device with reception capabilities compatible with the communication method.

[0087] If another wireless transceiver 100 (for convenience, referred to as a receiving-side device) that is different from the wireless transceiver of interest and is configured in the same area as the area where the wireless transceiver of interest is configured receives information broadcast by the wireless transceiver of interest, it sends the received information and information on the strength of the wireless signal when the information is received to a pre-set indoor location authentication device 200.

[0088] Whenever the indoor location authentication device 200 receives information from a receiving device indicating that the receiving device received the information from the wireless transceiver of interest and the corresponding signal strength information, it compares the information received from the receiving device as information received from the wireless transceiver of interest with the information previously sent to the wireless transceiver of interest. Furthermore, the device counts the number N of receiving devices whose information matches. When this count N exceeds a predetermined threshold value n (e.g., n=2), the device sets the flag associated with the information identifying the wireless transceiver of interest in the database to on.

[0089] Through this process, the wireless transceiver 100 arranged for each area is registered as a master when it is able to communicate with a predetermined number or more of other wireless transceivers 100 and enters an authenticated state.

[0090] The indoor location authentication device 200 periodically repeats the above process for each area so that the number of master wireless transceivers 100 does not fall below a preset number (eg, three).

[0091] Furthermore, user devices 300 in the area where these wireless transceivers 100 are deployed receive information such as area identification information and "host" flag information broadcast by the wireless transceivers 100 in response to instructions from the indoor location authentication apparatus 200 during device authentication processing.

[0092] The user equipment 300 uses the information for identifying the wireless transceiver 100 as a key, and accumulates and stores the received information.

[0093] In addition, the user device 300 presumes that the area identification information contained in the last received information is information identifying the area in which it is currently located (location area information), and reads out information from the accumulated information that contains area identification information consistent with the location area information and is associated with information identifying different wireless transceivers 100.

[0094] The user device 300 then refers to the flag information indicating whether it is a master included in the read information, and counts the number N of certification information associated with information identifying different wireless transceivers 100 and indicating that the flag information indicates a master status.

[0095] When the number N is less than a preset threshold (the threshold is set to be 3 or greater, and is set to “3” in the description here), the user equipment 300 repeats the process of receiving the information broadcast by the wireless transceiver 100 .

[0096] Furthermore, when the number N exceeds the threshold, the user device 300 records at least a portion of the certification information (e.g., a set of information identifying the N wireless transceivers 100). This record can be used later, for example, as information indicating that the user device 300 was in the area indicated by the location information.

[0097] [Effects of the embodiment]

[0098] According to this embodiment, an existing indoor system such as a wireless LAN system can be utilized and a location authentication system can be constructed by updating the software of its access point, thereby authenticating the indoor location of a user's device at a low deployment cost.

[0099] [Example of authenticating the location of an NFC card, etc.]

[0100] In addition, if Figure 5 As illustrated, the indoor location authentication system 1 of the present embodiment can also be used when authenticating the location of a near field communication type card.

[0101] In this Figure 5 In the example shown, an NFC card reader 400 that reads information from an NFC card C is placed in an area where it can communicate with the wireless transceiver 100. A unique reading identifier is pre-set in each NFC card reader 400. This NFC card reader 400 may be, for example, an automatic ticket gate installed at a train station.

[0102] In addition, in this example, in addition to maintaining a device database of information related to the wireless transceiver 100, the indoor location authentication device 200 also maintains a reading database and a card database for the NFC card reader 400. The reading database records the reading identifier and the area identification information of the area where the NFC card reader 400 identified according to the reading identifier is set in association with each other, and the card database is used to record information identifying the area where each NFC card is located.

[0103] The NFC card reader 400 obtains the area identification information of the area where the NFC card reader 400 is located through the same process as the location authentication process of the user device 300 described above. The NFC card reader 400 sends a reader identifier identifying itself and the obtained area identification information to the indoor location authentication device 200, which records the information in a linked manner in the reader database.

[0104] When the NFC card reader 400 reads the identification information (card identification information) of the contacted NFC card C, it transmits a reading identifier identifying the NFC card reader 400 itself and the read card identification information to the indoor location authentication device 200 .

[0105] Upon receiving the reader identifier identifying the NFC reader 400 and the card identification information read by the NFC reader 400 , the indoor location authentication device 200 refers to the reader database to obtain the area identification information associated with the NFC reader 400 .

[0106] The indoor location authentication device 200 stores the acquired area identification information and a flag (off flag) indicating that the user is not authenticated in the area identified by the area identification information in the card database in association with the card identification information.

[0107] The indoor location authentication device 200 then searches the device database for information identifying the wireless transceiver 100 associated with the acquired area identification information, i.e., information identifying the wireless transceiver 100 whose flag information has been changed to "on" (authenticated). The indoor location authentication device 200 checks whether the number of pieces of information identifying the wireless transceiver 100 found through the search exceeds a predetermined threshold (e.g., "3"). If the number of pieces of information identifying the wireless transceiver 100 found through the search exceeds the predetermined threshold, the indoor location authentication device 200 changes the authentication flag, indicating whether the card identification information received from the NFC card reader 400, previously recorded in the card database to on (indicating an authenticated state), overwriting and updating the information.

[0108] That is, in this embodiment, the information about the area where the NFC card C is placed on the NFC card reader 400 is set as the (authenticated) area identification information of the NFC card reader 400. Furthermore, at the time the NFC card C is placed, in the area identified by the area identification information, the area where the NFC card reader 400 is located is authenticated, and the NFC card C being read by the NFC card reader 400 is authenticated, based on the condition that the number of wireless transceivers 100 (whose locations are authenticated) that are hosts for authenticating the area where the NFC card reader 400 is located is equal to or greater than three.

[0109] In addition, here, the NFC card reader device 400 is set as an automatic ticket checking device, but the NFC card reader device 400 does not need to be an automatic ticket checking device, and may be, for example, an automatic vending machine.

[0110] [History of the database]

[0111] Furthermore, in the indoor location authentication system 1 of this embodiment, the indoor location authentication device 200 may also maintain a history of updates (submissions) to various databases, such as the device database, the reading database, and the card database. Furthermore, this history may be used to estimate the movement path of the user device 300 and the like, and further used in billing based on this movement path.

[0112] The indoor location authentication system 1 including the indoor location authentication device 200 of this example can be used as a ticket inspection system in, for example, a railway, etc. Specifically, in this example, a database (location information conversion database) is prepared in advance in which the area identification information used in this embodiment and information indicating the location of station ticket gates, etc. used in the ticket inspection system are correlated with each other.

[0113] For example, in one example, the location information conversion database is set as:

[0114] Area identification information: Information that identifies ticket gates, etc.

[0115] 800: JR East - Tohoku Shinkansen - Tokyo Station Ticket Gate

[0116] 801: JR East - Tohoku Shinkansen - Tokyo Station Shinkansen Platform

[0117] 802: JR East - Tohoku Shinkansen - Omiya Station Ticket Gate

[0118] …….

[0119] In this example, if a user of the indoor location authentication system 1 of this embodiment carrying a user device 300 (identification information is set to "300") approaches the Tohoku Shinkansen ticket gate at Tokyo Station, the device's identification information, area identification information, authentication information, etc. are recorded in the database as follows:

[0120] Device identification information: Area identification information: Authentication: ...

[0121] 100a:800:Open:……

[0122] 100b:800:Open:……

[0123] 100c:800:open:……

[0124] 300:800:Open:……

[0125] 101a:801:Open:……

[0126] …….

[0127] For the sake of convenience, colons are used to separate the items such as device identification information, area identification information, authentication, etc. The first row shows the item names.

[0128] At this time, the indoor location authentication device 200 stores the following record as a record of database update determination:

[0129] Device identification information: Area identification information: Authentication: ...

[0130] 300:800:Open…….

[0131] This record indicates a state in which the user device 300 is authenticated to be in the area of ​​the area identifier "800" where three authenticated (master) wireless transceivers 100 are located.

[0132] In addition, if the user moves to the Shinkansen platform, the database record is updated and confirmed as follows:

[0133] Device identification information: Area identification information: Authentication: ...

[0134] …

[0135] 100c:800:open:……

[0136] 300:801:Open:……

[0137] 101a:801:Open:……

[0138] …….

[0139] At this time, the record of update determination related to the user device 300 changes as follows:

[0140] Device identification information: Area identification information: Authentication: ...

[0141] 300:800:Open...

[0142] 300:801:Open…….

[0143] Next, if the user arrives at Sendai Station (assuming the area identification information of the ticket gate is 805 and the area identification information of the platform is 806) and gets off the Shinkansen, the database is updated by the indoor location authentication device 200, and the database record is updated and confirmed as follows:

[0144] Device identification information: Area identification information: Authentication: ...

[0145] …

[0146] 100x:806:Open:……

[0147] 300:806:Open:……

[0148] …….

[0149] At this time, the record of update determination related to the user device 300 changes as follows:

[0150] Device identification information: Area identification information: Authentication: ...

[0151] 300:800:Open...

[0152] 300:801:Open...

[0153] 300:806:Open…….

[0154] Furthermore, when the user passes through the ticket gate at Sendai Station, the user is authenticated as being in the area near the ticket gate. Therefore, the database is updated by the indoor location authentication device 200 to be:

[0155] …

[0156] 100y:805:Open:……

[0157] 300:805:Open:……

[0158] ...,

[0159] The record of the update determination related to the user device 300 changes in the following manner:

[0160] Device identification information: Area identification information: Authentication: ...

[0161] 300:800:Open...

[0162] 300:801:Open...

[0163] 300:806:Open...

[0164] 300:805:Open…….

[0165] As a result, the authenticated user moved from Tokyo Station ticket gate → Tokyo Station Shinkansen platform → Sendai Station Shinkansen platform → Sendai Station ticket gate, etc.

[0166] In addition, in the historical records determined by the update, by simply converting the area identification information into the location information of the ticket checking system with reference to the location information conversion database, it is possible to authenticate that the user entered the Shinkansen ticket gate at Tokyo Station and boarded the train, and exited the station at the ticket gate at Sendai Station. Therefore, railway companies, etc. can also use it for billing and other processing.

[0167] That is, in this embodiment, fare calculation and payment can be performed without using a system equipped with an automatic door opener, an NFC card reader, etc. as a ticket gate. Furthermore, since the use of this system is also clear, incentives such as fare discounts can be provided to users only when using the system of this embodiment.

[0168] Furthermore, as described above, in this embodiment, conventional portable terminals such as smartphones can also be used as user equipment 300. Specifically, to use the indoor location authentication system of this embodiment, user equipment 300 only needs to have some wireless communication capabilities, and no additional infrastructure is required.

[0169] [Modification]

[0170] In the description so far, the threshold value related to the number of wireless transceivers 100 that are in an area identified by the same area identifier and can communicate with each other, used for authenticating the location, has been described as not depending on the wireless communication method of the wireless transceivers 100. However, this embodiment is not limited to this.

[0171] For example, if the wireless transceiver 100 is a mobile phone communication base station, it is conceivable that it is difficult to move abnormally. Therefore, the threshold value in this case can be set to a smaller value than that of a device such as a wireless LAN access point that can move abnormally.

[0172] Description of Reference Numerals

[0173] 1 Indoor Location Authentication System

[0174] 100 Wireless Transceiver

[0175] 101 Control Department

[0176] 102 Storage Department

[0177] 103 Interface

[0178] 104 Management Department

[0179] 105 Wireless Transceiver Unit

[0180] 200 Indoor Location Authentication Device

[0181] 201 Control Department

[0182] 202 Storage Department

[0183] 203 Ministry of Communications

[0184] 300 user devices

[0185] 400 NFC card reader

Claims

1. An indoor location authentication method, characterized in that: Perform the following processing: authenticating at least some of a plurality of wireless devices located indoors and transmitting wireless signals for calculating position information based on whether they can communicate with a predetermined threshold number or more of other wireless devices; Processing for acquiring, from a terminal device that acquires location information based on a wireless signal received from the authenticated wireless device, information on the number of authenticated wireless devices that are transmission sources of the wireless signal serving as a basis for acquiring the location information; as well as A process of authenticating the location information acquired by the terminal device based on the acquired information on the number of authenticated wireless devices.

2. An indoor location authentication system, comprising: Multiple wireless devices are deployed indoors; A terminal device, located indoors, receives wireless signals sent by the wireless device; and an indoor location authentication device, connected to the wireless device and the terminal device in a communicative manner; The indoor location authentication system is characterized in that: The wireless device sends a wireless signal for obtaining location information. The terminal device acquires location information based on a wireless signal received from the wireless device, and outputs information identifying at least a portion of the wireless device that is a transmission source of the wireless signal serving as a basis for acquiring the location information. The indoor location authentication device includes at least one processor, and one or more of the processors performs the following processing: a first authentication process of authenticating at least some of the wireless devices based on whether they can communicate with a predetermined threshold number or more of other wireless devices; an acquisition process of acquiring, from the terminal device, information on the number of authenticated wireless devices among wireless devices that are transmission sources of wireless signals serving as a basis for acquiring location information of the terminal device; as well as The second authentication process authenticates the location information acquired by the terminal device based on the acquired information on the number of the authenticated wireless devices.

3. The indoor location authentication system according to claim 2, characterized in that: When the wireless device can receive a wireless signal serving as a basis for acquiring position information from outdoors at the configured position, the wireless device receives the wireless signal. Based on the received wireless signal, a wireless signal to be transmitted is generated.

4. An indoor location authentication device, connected to a plurality of wireless devices arranged indoors in a communicative manner, characterized in that: The system has at least one processor, and one or more of the processors performs the following processing: a device authentication process of authenticating at least some of the plurality of wireless devices that transmit wireless signals for acquiring location information based on whether they can communicate with a predetermined threshold number or more of other wireless devices; a process of acquiring, from a terminal device that acquires location information based on wireless signals received from the authenticated wireless device, information on the number of authenticated wireless devices that are transmission sources of wireless signals serving as a basis for acquiring the location information; as well as The location authentication process authenticates the location information acquired by the terminal device based on the acquired information on the number of the authenticated wireless devices.

5. The indoor location authentication device according to claim 4, characterized in that: The indoor location authentication device records the authenticated location information obtained by the terminal device and maintains a history of the recorded location information. The retained history is provided to a process of estimating a movement path of the terminal device or a billing process based on the movement path.

Images