Authentication device and authentication method

Abstract

The invention relates to an authentication apparatus and an authentication method. The present invention is provided with: an authentication unit (213) that authenticates a regular user; a short-range communication unit (211) that acquires an advertisement signal; a companion identification unit (214) that identifies the presence or absence of a companion of the normal user when the authentication of the normal user by the authentication unit (213) is established; a companion information specifying unit (215) that specifies information of the companion on the basis of the advertisement signal acquired by the short-range communication unit (211) when it is specified that the companion is present; and a permission imparting unit (217) that imparts permission to the accompanying person to use the target device using the information of the identified accompanying person, and the authentication unit (213) establishes the authentication for the accompanying person to which the permission has been imparted by the permission imparting unit (217) at the time of subsequent authentication.

Description

[0001] CROSS-REFERENCE TO RELATED APPLICATIONS

[0002] This application is based on Japanese Patent Application No. 2022-88383 filed in Japan on May 31, 2022, and the contents of the basic application are cited in their entirety by reference. Technical Field

[0003] The present disclosure relates to an authentication device and an authentication method. Background Art

[0004] A technology is known for granting permission to use a predetermined device even to an unregistered user who is not registered as a regular user. Patent document 1 discloses a technology for allowing a temporary user to drive with a temporary key based on an operation input of a registered driver determined by a biometric authentication system.

[0005] Patent Document 1: Japanese Patent Application Publication No. 2008-120284

[0006] In the technology disclosed in Patent Document 1, in order to allow a temporary user to drive with a temporary key, it is necessary to register the operation input of the driver. Here, in order to reduce the trouble of the user, it is considered to automate the permission of driving with a temporary key. However, when the permission of driving with a temporary key is automated, it is necessary not to grant permission to a user who should not be given permission. Summary of the invention

[0007] One object of the disclosure is to provide an authentication device and an authentication method that can further improve security in authentication and also improve convenience when giving permission to use a device to an unregistered user who is not registered as a regular user.

[0008] The above-mentioned object is achieved by the combination of features described in the independent claims, and the dependent claims specify more advantageous specific examples disclosed. The reference numerals in parentheses in the claims indicate the correspondence with the specific units described in the embodiments described later as one mode, and do not limit the technical scope of the present disclosure.

[0009] In order to achieve the above-mentioned purpose, the authentication device disclosed in the present invention comprises: an authentication unit, which authenticates a regular user who is granted the authority to use a specified device; an information acquisition unit, which acquires information obtained around the device, that is, device surrounding information; an accompanying person determination unit, which determines whether there is an accompanying person for the regular user when the authentication of the regular user is established in the authentication unit; an accompanying information determination unit, which determines the information of the accompanying person based on the device surrounding information acquired by the information acquisition unit when the accompanying person determination unit determines that there is an accompanying person; and an authority granting unit, which uses the accompanying person's information determined by the accompanying information determination unit to grant the accompanying person the authority to use the device, and for the accompanying person to whom the authority is granted by the authority granting unit, the authentication unit makes the authentication established at the next authentication or thereafter.

[0010] In order to achieve the above-mentioned purpose, the authentication method disclosed in the present invention includes the following processes executed by at least one processor: an authentication process, which performs authentication of a regular user who is granted the authority to use a specified device; an information acquisition process, which acquires information obtained around the device, namely, device peripheral information; an escort determination process, which determines whether there is an escort for the regular user when the authentication of the regular user is established in the authentication process; an escort information determination process, which determines the information of the escort based on the device peripheral information acquired through the information acquisition process when it is determined that there is an escort through the escort determination process; and an authority granting process, which uses the information of the escort determined through the escort information determination process to grant the escort the authority to use the device, and in the authentication process, for the escort who is granted authority through the authority granting process, the authentication is established at the next authentication or thereafter.

[0011] Accordingly, when the authentication of a regular user is established, and when it is determined that there is an escort of the regular user, the escort is also granted the authority to use the device. Moreover, at the next authentication thereafter, the authentication is established for the escort who has been granted the authority. Thus, even if the regular user does not perform the operation for granting the authority, the escort can be granted the authority to use the device. In addition, since the escort is granted the authority to use the device using the information of the escort determined based on the device surrounding information obtained around the device, it is possible to suppress the granting of authority even to users who should not be granted the authority. As a result, in the case where the authority to use the device is also granted to unregistered users who are not registered as regular users, the security in the authentication can be further improved, and the convenience is also improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] Figure 1 It is a diagram showing an example of a schematic configuration of the authentication system 1 .

[0013] Figure 2 It is a diagram showing an example of a schematic configuration of the vehicle-side unit 2 .

[0014] Figure 3 2 is a diagram showing an example of a schematic configuration of the imaging-side control unit 20 .

[0015] Figure 4 It is a diagram showing an example of a schematic configuration of the communication-side control unit 21 .

[0016] Figure 5 1 is a flowchart showing an example of the flow of processing related to authority granting in the imaging-side control unit 20 .

[0017] Figure 6 1 is a flowchart showing an example of the flow of processing related to authority granting in the communication-side control unit 21 .

[0018] Figure 7 1 is a flowchart showing an example of the flow of the post-assignment related processing in the communication-side control unit 21 .

[0019] Figure 8 It is a diagram showing an example of a schematic configuration of the imaging-side control unit 20 a.

[0020] Fig. 9 It is a diagram showing an example of a schematic configuration of the authentication system 1b.

[0021] Fig.10 It is a diagram showing an example of a schematic configuration of the facility-side unit 2b.

[0022] Fig.11 It is a diagram showing an example of a schematic configuration of the imaging-side control unit 20 b.

[0023] Fig.12 It is a diagram showing an example of a schematic configuration of the communication-side control unit 21b. DETAILED DESCRIPTION

[0024] The multiple embodiments disclosed are described with reference to the accompanying drawings. In addition, for the convenience of description, sometimes between multiple embodiments, the same reference numerals are added to the parts having the same functions as the parts shown in the drawings used in the previous description, and the description thereof is omitted. The parts with the same reference numerals can refer to the descriptions in other embodiments.

[0025] (Implementation Method 1)

[0026] <Schematic structure of authentication system 1>

[0027] Hereinafter, Embodiment 1 of the present disclosure will be described with reference to the drawings. Figure 1The authentication system 1 shown includes a vehicle-side unit 2, a mobile terminal 4, and a mobile terminal 6. The vehicle-side unit 2 is used in a vehicle Ve. In the example of the present embodiment, the vehicle Ve is, for example, a car. The vehicle Ve using the vehicle-side unit 2 is not necessarily limited to a car.

[0028] The mobile terminal 4 is a communication terminal carried by the user. The mobile terminal 4 is a mobile terminal carried by the regular user AU of the vehicle Ve. The regular user AU can be set as the manager of the vehicle Ve, for example. For example, a multifunctional mobile phone such as a smart phone can be used as the mobile terminal 4. The mobile terminal 4 implements wireless communication based on the Bluetooth Low Energy (Bluetooth is a registered trademark) standard. Hereinafter, the wireless communication is referred to as BLE communication. In BLE communication, the mobile terminal 4 wirelessly transmits a wireless signal containing the transmission source information at a specified transmission interval. Thus, the mobile terminal 4 advertises the existence of the terminal. The wireless transmission is a broadcast communication. The communication range of BLE communication is about tens to one hundred meters. Hereinafter, the wireless signal sent regularly for the purpose of advertising is referred to as an advertising signal. The advertising signal can also be said to be information sent from the mobile terminal without the need for user operation. In addition, the transmission source information is the inherent identification information assigned to the mobile terminal 4 (hereinafter referred to as the terminal ID). In BLE communication, if pairing based on user operation is performed with other devices, unicast communication between the paired devices can be performed. Pairing refers to the execution of the key exchange protocol.

[0029] The mobile terminal 6 is a communication terminal carried by the companion CP of the regular user AU. For example, a multifunctional mobile phone such as a smartphone may be used as the mobile terminal 6. The mobile terminal 6 has the same functions as the mobile terminal 4. In other words, the mobile terminal 6 also transmits advertisement signals periodically.

[0030] It is preferred that the mobile terminal 4 pre-stores the time during which the advertisement signal transmitted from the mobile terminal 6 can be continuously received. This time is hereinafter referred to as the Adv reception time. The Adv reception time is stored in association with the terminal ID of the mobile terminal 6 included in the advertisement signal. Furthermore, when the mobile terminal 4 performs unicast communication with the vehicle-side unit 2, the Adv reception time and the terminal ID are sent to the vehicle-side unit 2.

[0031] As described above, the vehicle-side unit 2 is used in the vehicle Ve. The details of the vehicle-side unit 2 will be described below.

[0032] <Schematic Configuration of Vehicle-Side Unit 2>

[0033] Next, use Figure 2 , the schematic structure of the vehicle side unit 2 is described. Figure 2As shown, the vehicle side unit 2 includes: a shooting side control unit 20, a communication side control unit 21, a wide area communication module 22, a locator 23, a map database (hereinafter referred to as DB) 24, a vehicle state sensor 25, an HCU (Human Machine Interface Control Unit) 26, a user input device 27, an indoor camera 28, an outdoor camera 29, a vehicle control unit 30, and a drive unit 31. For example, the shooting side control unit 20, the communication side control unit 21, the wide area communication module 22, the locator 23, the map DB 24, the vehicle state sensor 25, the HCU 26, the vehicle control unit 30, and the drive unit 31 are configured to communicate with the in-vehicle LAN (refer to Figure 1 In addition, the indoor camera 28 and the outdoor camera 29 may be connected to the LAN.

[0034] The wide area communication module 22 transmits and receives information with a center outside the vehicle Ve via wireless communication. In other words, it performs wide area communication. The wide area communication module 22 receives traffic congestion information and the like from the center via wide area communication.

[0035] The locator 23 has a GNSS (Global Navigation Satellite System) receiver and an inertial sensor. The GNSS receiver receives positioning signals from multiple positioning satellites. The inertial sensor includes, for example, a gyroscope sensor and an acceleration sensor. The locator 23 locates the vehicle Ve equipped with the locator 23 one by one by combining the received positioning signals and the measurement results of the inertial sensor. For example, the vehicle position can be represented by the coordinates of latitude and longitude.

[0036] The map DB 24 is a non-volatile memory that stores map data. The map data includes, for example, link data, node data, and road attribute data. In addition, the map data distributed from the center may be received via the wide area communication module 11 and stored in the map DB 24. In this case, the map DB 24 may be used as a volatile memory.

[0037] The vehicle state sensor 25 is a sensor group for detecting various states of the vehicle. As the vehicle state sensor 25, there are a vehicle speed sensor, a steering sensor, a seating sensor, etc. The vehicle speed sensor detects the speed of the vehicle Ve. The steering sensor detects the steering angle of the vehicle Ve. The seating sensor detects whether each seat of the passengers of the vehicle Ve is occupied. As a seating sensor, for example, a pressure-sensitive sensor embedded in the seating surface of each seat can be used. The vehicle state sensor 25 outputs the detected sensing information to the in-vehicle LAN. In addition, it can also be configured to output the sensing information detected by the vehicle state sensor 25 to the in-vehicle LAN via the ECU mounted on the vehicle Ve.

[0038] The HCU 26 performs various processes related to the exchange of the system and the passenger of the vehicle Ve. The HCU 26 performs the processes by executing a control program stored in a nonvolatile memory. The HCU 26 receives input from the passenger of the vehicle Ve via the user input device 27 .

[0039] The user input device 27 accepts input from the user. The user input device 27 is equivalent to an input acceptance device. The user here is a passenger of the vehicle Ve. The user input device 27 can be set as an operating device that accepts operation input from the user. As an operating device, it can be a mechanical switch or a touch switch that is integrated with a display. As displays, the instrument MID (Multi Information Display), CID (Center Information Display) and the like are listed. In addition, the user input device 27 is not limited to an operating device that accepts operation input. For example, it can also be a voice input device that accepts input of voice commands from the user.

[0040] The indoor camera 28 captures a predetermined range in the cabin of the vehicle Ve. The indoor camera 28 captures a range including each seat of the vehicle Ve. There may be multiple indoor cameras 28. The indoor camera 28 includes, for example, a near-infrared light source and a near-infrared camera. The indoor camera 28 captures the passengers irradiated with near-infrared light by the near-infrared light source through the near-infrared camera.

[0041] The outdoor camera 29 captures a predetermined range outside the vehicle Ve. The outdoor camera 29 captures the surroundings of the vehicle Ve including the vicinity of the door of the vehicle Ve. The door may be limited to the driver's door, for example. The door may also be the passenger door, the trunk door, etc. There may be multiple outdoor cameras 29. The outdoor camera 29 may include, for example, a near-infrared light source and a near-infrared camera. The outdoor camera 29 captures a person irradiated with near-infrared light by the near-infrared light source through the near-infrared camera. The outdoor camera 29 may also be, for example, a color camera using a CCD (Charge Coupled Device).

[0042] The vehicle control unit 30 permits the use of equipment of the vehicle Ve. The equipment that will be the object of permission for use is hereinafter referred to as the object equipment. The vehicle control unit 30 confirms the authentication of the shooting side control unit 20 and the communication side control unit 21. Moreover, when it is confirmed that the authentication of any one of the shooting side control unit 20 and the communication side control unit 21 is established, the use of the object equipment is permitted. As the object equipment, a door lock motor and a driving source for travel are listed. They are equivalent to equipment mounted on the vehicle. The permission for the use of the door lock motor is equivalent to the permission for unlocking the door. The permission for the use of the driving source is equivalent to the permission for starting the driving source. When the vehicle control unit 30 detects a prescribed trigger, the authentication of the shooting side control unit 20 and the communication side control unit 21 is confirmed.

[0043] The vehicle control unit 30, for example, may authenticate and confirm the permission to unlock when the operation of the locking and unlocking SW is detected. The locking and unlocking SW is a switch used to request the locking and unlocking of the doors of the vehicle Ve. For the doors of the driver's seat and the front passenger's seat, the locking and unlocking SW is, for example, provided on the outer door handle. For the trunk door, the locking and unlocking SW is, for example, provided on the rear bumper. The locking and unlocking SW may be either a touch switch or a mechanical button switch. In addition, the operation of the locking and unlocking SW may be used as a trigger to authenticate and confirm the permission to unlock.

[0044] The vehicle control unit 30 may, for example, authenticate the permission to start the driving source when the operation of the start SW is detected. The start SW is a switch for requesting the start of the driving source of the vehicle Ve. The start SW is, for example, provided in front of the driver's seat. As the start SW, for example, a mechanical push button switch may be used.

[0045] The drive unit 31 drives the target device that is permitted to be used by the vehicle control unit 30. When the unlocking is permitted, the drive unit 31 unlocks the door lock. The door lock can be unlocked by outputting an unlocking signal to the door lock motor. When the start of the travel drive source is permitted, the drive unit 31 starts the travel drive source. Examples of the travel drive source include an internal combustion engine, an electric generator, and the like.

[0046] The shooting side control unit 20, for example, includes a processor, a memory, an I / O, and a bus connecting them. Moreover, various processes related to authentication are performed by executing a control program stored in the memory. The shooting side control unit 20 performs user authentication based on information obtained from the indoor camera 28 or the outdoor camera 29. In addition, the memory mentioned here is a non-transitorytangible storage medium that can be read by a computer and stores programs and data non-temporarily. In addition, the non-transitorytangible storage medium is implemented by a semiconductor memory or the like. The details of the shooting side control unit 20 are described later.

[0047] The communication side control unit 21 includes, for example, a processor, a memory, an I / O, and a bus connecting them. Moreover, various processes related to authentication are performed by executing a control program stored in the memory. The communication side control unit 21 performs user authentication based on information obtained from the mobile terminal 4 or the mobile terminal 6. In addition, the memory mentioned here is a non-transitorytangible storage medium that can be read by a computer and stores programs and data non-temporarily. In addition, the non-transitorytangible storage medium is implemented by a semiconductor memory or the like. The details of the communication side control unit 21 are described later.

[0048] <Schematic Configuration of Imaging-Side Control Unit 20 >

[0049] Next, use Figure 3 , the schematic structure of the shooting side control unit 20 is described. Figure 3 As shown, the shooting side control unit 20 has an image information acquisition unit 201, a registration unit 202, an authentication unit 203, an accompanying person determination unit 204, an accompanying information determination unit 205, a seating area determination unit 206, an authority granting unit 207, a setting unit 208 and a restriction unit 209 as functional modules. The shooting side control unit 20 is equivalent to an authentication device. In addition, executing the processing of each functional module of the shooting side control unit 20 by a computer is equivalent to executing an authentication method. In addition, part or all of the functions performed by the shooting side control unit 20 may also be constituted in hardware by one or more ICs, etc. In addition, part or all of the functional modules of the shooting side control unit 20 may also be implemented by a processor executing a combination of software and hardware components.

[0050] The image information acquisition unit 201 acquires information obtained around the target device (hereinafter referred to as device surrounding information). The image information acquisition unit 201 is equivalent to the information acquisition unit. The processing in the image information acquisition unit 201 is equivalent to the information acquisition process. The image information acquisition unit 201 acquires the image captured by the indoor camera 28 as the device surrounding information. The image information acquisition unit 201 acquires the image captured by the outdoor camera 29 as the device surrounding information. The indoor camera 28 and the outdoor camera 29 are equivalent to the shooting device. Preferably, the image information acquisition unit 201 acquires the device surrounding information sequentially. The image acquired by the image information acquisition unit 201 is hereinafter referred to as the acquired image.

[0051] The registration unit 202 registers authentication information of the authorized user AU in advance. A non-volatile memory may be used as the registration unit 202. The authorized user AU refers to a user who is given the right to use the target device. The authentication information may be set to the feature value of the face of the authorized user AU. The feature value may be detected by a facial image recognition technology.

[0052] The authentication unit 203 performs authentication. The processing in the authentication unit 203 is equivalent to the authentication process. The authentication of the regular user AU is performed. The authentication unit 203 can perform authentication when there is a request from the vehicle control unit 30. The authentication unit 203 extracts a facial image of a person from the acquired image. The authentication unit 203 detects the feature quantity of the face based on the extracted facial image. The authentication unit 203 compares the feature quantity of the detected face with the feature quantity of the face of the regular user AU registered in the registration unit 202. When there is a facial image whose feature quantity is consistent with that of the regular user AU, the authentication unit 203 makes the authentication established. On the other hand, when there is no facial image whose feature quantity is consistent with that of the regular user AU, the authentication unit 203 does not make the authentication established. The consistency of the feature quantity mentioned here can be set as consistency above a threshold. In other words, the authentication unit 203 performs facial authentication. In addition, the information used for authentication may not be the feature quantity of the face, but the facial image. In this case, the authentication unit 203 can also detect the feature quantity of the face based on the facial image and compare it.

[0053] The authentication unit 203 sends the authentication result to the vehicle control unit 30. The vehicle control unit 30 confirms the authentication based on the authentication result sent from the authentication unit 203. When the vehicle control unit 30 receives the result that the authentication is successful, it confirms that the authentication is successful. On the other hand, when the vehicle control unit 30 receives the result that the authentication is not successful, it confirms that the authentication is not successful. When confirming that the authentication is successful, the vehicle control unit 30 allows the use of the target device. On the other hand, when confirming that the authentication is not successful, the vehicle control unit 30 does not allow the use of the target device. In addition, the processing of detecting the feature amount of the face from the facial image can be configured to be undertaken by the control units of the indoor camera 28 and the outdoor camera 29.

[0054] When the authentication of the regular user AU is established in the authentication unit 203, the companion determination unit 204 determines whether there is a companion CP of the regular user AU. The processing in the companion determination unit 204 is equivalent to the companion determination process. When the companion determination unit 204 recognizes a facial image other than the regular user AU from the image acquired by the image information acquisition unit 201, it can determine that there is a companion. The facial image other than the regular user AU can be set as a facial image whose feature value is inconsistent with the regular user AU. The facial image other than the regular user AU is equivalent to the facial image of the companion CP. The companion determination unit 204 can also determine that there is a companion when the above-mentioned seating sensor detects that two or more seats are occupied.

[0055] When the companion determination unit 204 determines that there is a companion, the companion information determination unit 205 determines the information of the companion CP. The companion information determination unit 205 determines the information of the companion CP based on the device surrounding information acquired by the image information acquisition unit 201. The processing in the companion information determination unit 205 is equivalent to the companion information determination step. The companion information determination unit 205 can determine the facial image other than the regular user recognized based on the acquired image as the information of the companion CP. Preferably, the companion information determination unit 205 determines the information of the companion CP sequentially based on the acquired images obtained successively.

[0056] When the companion determination unit 204 determines that there is a companion, the seating area determination unit 206 determines the seating area of ​​the companion CP in the vehicle Ve. The seating area may be set to the area of ​​each seat, for example. For example, a seat other than the driver's seat detected by the seating sensor is determined as the seating area of ​​the companion CP. In addition, the seating area determination unit 206 may also determine the seating area of ​​the companion CP based on the position of the facial image of the companion CP that can be recognized in the acquired image.

[0057] The authority granting unit 207 uses the information of the companion CP determined by the companion information determining unit 205 and also grants the companion CP the authority to use the object device. The processing in the authority granting unit 207 is equivalent to the authority granting process. As an example, the facial feature of the companion CP is registered in the registration unit 202 as authentication information. For the companion CP whose facial feature is registered in the registration unit 202, the authentication is established at the next authentication. In other words, for the companion CP to whom the authority is granted by the authority granting unit 207, the authentication unit 203 makes the authentication established at the next authentication.

[0058] According to this, even if the regular user AU does not perform the operation for granting permission, the companion CP can be granted permission to use the object device. In addition, the companion CP is granted permission to use the object device using the information of the companion CP determined based on the device surrounding information obtained around the object device. Therefore, it is possible to suppress the granting of permission even to users who should not be granted permission. As a result, in the case where the permission to use the device is also granted to unregistered users who are not registered as regular users, the security in authentication can be further improved, and the convenience is also improved.

[0059] Preferably, the permission granting unit 207 grants permission to use the object device to the companion CP when the information of the same companion CP is determined by the companion information determination unit 205 for more than a prescribed time. When the permission granting unit 207 is unable to determine the information of the same companion CP for more than a prescribed time, the permission granting unit 207 does not grant permission to use the object device to the companion CP. The prescribed time can be set arbitrarily. For example, the prescribed time can be set to five minutes. A user who accompanies a regular user AU in the same room for more than a fixed period of time is presumed to have a trust relationship with the regular user AU. According to the above structure, permission to use the object device can be limited to users who are presumed to have a trust relationship with the regular user AU. As a result, security is further improved.

[0060] The permission granting unit 207 preferably limits the permission of the companion CP to use the object device in the seating area in the vehicle Ve. In this case, the permission granting unit 207 also registers the seating area that allows the use of the object device in association with the authentication information of the companion CP in the registration unit 202. Hereinafter, the seating area that allows the use of the object device is referred to as the permission area. For the permission area, for example, it can also be set in advance from the user via the user input device 27. Moreover, it is preferred that the authentication unit 203 does not establish the authentication when the seating area of ​​the companion CP determined by the seating area determination unit 206 is not the seating area to which the permission is granted. On the other hand, the authentication unit 203 can establish the authentication when the seating area of ​​the companion CP is the seating area to which the permission is granted. Accordingly, the permission to use the object device given to the companion CP can be limited according to the seating area of ​​the companion CP. For example, when the companion CP is seated outside the driver's seat, the permission to start the driving source can be denied.

[0061] It is preferable that the setting unit 208 sets the above-mentioned predetermined time based on the input accepted through the user input device 27. Thereby, the user can freely set the predetermined time.

[0062] The restriction unit 209 preferably sets a restriction on the period of permission to use the object device granted to the companion CP. Hereinafter, this period is referred to as the permission granting period. The restriction unit 209 preferably makes the permission to use the object device granted to the companion CP disappear when a set time has passed since the permission was granted. The period from the granting of permission to the passing of the set time is equivalent to the permission granting period. According to the above structure, the permission to use the object device granted to other than the regular user AU can be made a temporary permission. The permission granting period can be set to a value that can be set arbitrarily. For example, the default permission granting period can be set to 12 hours. The restriction unit 209 can determine the end of the permission granting period by a timer circuit or the like. When the permission granting period for a companion CP ends, the restriction unit 209 can delete the authentication information of the companion CP registered in the registration unit 202.

[0063] Preferably, the restriction unit 209 cancels the permission to use the target device given to the companion CP according to the input received through the user input device 27. Hereinafter, the input requesting the cancellation of the permission is referred to as the cancellation input. In this way, the permission to use the target device given to the companion CP can be cancelled according to the wishes of the regular user AU.

[0064] Preferably, the restriction unit 209 extends the period of permission to use the object device granted to the companion CP each time the information of the same companion CP is determined by the companion information determination unit 205 as the authentication of the regular user AU is established in the authentication unit 203. In other words, the more companions CP accompany the regular user AU when using the object device, the longer the permission granting period can be set. For example, a certain time can be added to the default permission granting period. Accordingly, the more opportunities the companion CP has to accompany the regular user AU, the less trouble it will have to accept permission again. In addition, in the restriction unit 209, the setting value of the permission granting period can also be stored for the companion CP whose permission disappears after the permission granting period. Moreover, each time the regular user AU accompanies the companion CP when using the object device, the setting value of the permission granting period of the companion CP can be added. The setting value can be stored in a non-volatile memory.

[0065] <Schematic Configuration of Communication-Side Control Unit 21>

[0066] Next, use Figure 4 , the schematic structure of the communication side control unit 21 is described. Figure 4 As shown, the communication side control unit 21 has a short-distance communication unit 211, a registration unit 212, an authentication unit 213, an escort determination unit 214, an escort information determination unit 215, a driving-related information acquisition unit 216, an authority granting unit 217, a setting unit 218, and a restriction unit 219 as functional modules. The communication side control unit 21 is also equivalent to an authentication device. In addition, executing the processing of each functional module of the communication side control unit 21 by a computer is also equivalent to executing the authentication method. In addition, part or all of the functions performed by the communication side control unit 21 can also be constituted by one or more ICs or the like in hardware. In addition, part or all of the functional modules of the communication side control unit 21 can also be implemented by a processor executing a combination of software and hardware components.

[0067] The short-distance communication unit 211 performs wireless communication in accordance with the Bluetooth Low Energy standard via an antenna. The short-distance communication unit 211 performs unicast communication with the paired mobile terminals 4 and 6. The short-distance communication unit 211 obtains device peripheral information obtained around the target device. The short-distance communication unit 211 is equivalent to an information acquisition unit. The processing in the short-distance communication unit 211 is also equivalent to an information acquisition process. The short-distance communication unit 211 obtains advertising signals sent successively from the mobile terminals 4 and 6 as device peripheral information.

[0068] The authentication information of the authorized user AU is registered in advance in the registration unit 212. A nonvolatile memory may be used as the registration unit 212. The authentication information may be the terminal ID of the mobile terminal 4 of the authorized user AU.

[0069] The authentication unit 213 performs authentication. The processing in the authentication unit 213 also corresponds to the authentication process. Authentication of the regular user AU is performed. The authentication unit 213 can perform authentication in the same manner as the authentication unit 203 when there is a request from the vehicle control unit 30. The authentication unit 213 extracts the terminal ID from the advertisement signal obtained by the short-distance communication unit 211. The authentication unit 213 compares the extracted terminal ID with the terminal ID of the regular user AU registered in the registration unit 212. When there is a terminal ID that is consistent with the terminal ID of the regular user AU, the authentication unit 213 establishes the authentication. On the other hand, when there is no terminal ID that is consistent with the terminal ID of the regular user AU, the authentication unit 213 does not establish the authentication. In other words, the authentication unit 213 performs ID authentication. The authentication unit 213 sends the authentication result to the vehicle control unit 30. The vehicle control unit 30 confirms the authentication in the same manner as the case based on the authentication result sent from the authentication unit 203. When the vehicle control unit 30 receives the result of the authentication establishment, it confirms that the authentication is established.

[0070] When the authentication of the regular user AU is established in the authentication unit 213, the companion determination unit 214 determines whether there is a companion CP of the regular user AU. The processing in the companion determination unit 214 is also equivalent to the companion determination process. The companion determination unit 214 can determine that there is a companion when the short-range communication unit 211 obtains an advertising signal containing a terminal ID other than the regular user AU. The companion determination unit 214 can also determine that there is a companion when the above-mentioned seating sensor detects that two or more seats are occupied.

[0071] When the companion determination unit 214 determines that there is a companion, the companion information determination unit 215 determines the information of the companion CP. The companion information determination unit 215 determines the information of the companion CP based on the advertising signal obtained by the short-distance communication unit 211. The processing in the companion information determination unit 215 is equivalent to the companion information determination process. The companion information determination unit 215 determines the terminal ID contained in the advertising signal other than the regular user AU obtained by the short-distance communication unit 211 as the information of the companion CP. The advertising signal other than the regular user AU mentioned here refers to an advertising signal that does not contain the terminal ID of the regular user AU. In other words, it is an advertising signal of the companion CP. Preferably, the companion information determination unit 215 determines the terminal ID of the companion CP one by one based on the advertising signals obtained one by one.

[0072] The driving related information acquisition unit 216 acquires information about the driving condition of the vehicle Ve (hereinafter referred to as driving related information). As driving related information, traffic congestion information is listed. The driving related information acquisition unit 216 can acquire the traffic congestion information via the wide area communication module 22. As driving related information, the speed of the vehicle Ve is listed. The driving related information acquisition unit 216 can acquire the speed from the above-mentioned speed sensor. As driving related information, the steering angle of the vehicle Ve is listed. The driving related information acquisition unit 216 can acquire the steering angle from the above-mentioned steering control sensor. As driving related information, the vehicle position of the vehicle Ve is listed. The driving related information acquisition unit 216 can acquire the vehicle position from the locator 23.

[0073] The authority granting unit 217 uses the information of the companion CP determined by the companion information determination unit 215 to grant the companion CP the authority to use the object device. The processing in the authority granting unit 217 is equivalent to the authority granting process. As an example, the terminal ID of the companion CP is registered in the registration unit 212 as authentication information. For the companion CP whose terminal ID is registered in the registration unit 212, the authentication is established at the next authentication or later. In other words, for the companion CP to whom the authority is granted by the authority granting unit 217, the authentication unit 213 establishes the authentication at the next authentication or later. As a result, when the authority to use the device is also granted to unregistered users who are not registered as regular users, the security in the authentication can be further improved, and the convenience is also improved.

[0074] Preferably, the permission granting unit 217 grants permission to use the target device to the companion CP based on the advertisement signal that the companion information determining unit 215 has continuously determined the same companion CP for a predetermined time or longer. The processing in the permission granting unit 217 may be the same as that in the permission granting unit 207. Thus, the permission to use the target device can be limited to users who are presumed to have a trust relationship with the authorized user AU.

[0075] Preferably, the authority granting unit 217 also grants the authority to use the object device to the companion CP based on the fact that the accompanying information determination unit 215 has determined the advertising signal of the same companion CP for more than the above-mentioned prescribed time during the driving of the vehicle Ve at a prescribed speed or above. The short-distance communication unit 211 can also receive advertising signals other than the regular user AU and the companion CP. Therefore, even in the case where the same advertising signal can be determined by the accompanying information determination unit 215 for more than the prescribed time, there is a case where the advertising signal is not the companion CP. In contrast, by setting the driving of the vehicle Ve at a prescribed speed or above as a condition, it is possible to suppress the erroneous granting of authority to users who are not riding with the vehicle Ve. As a result, the security in authentication can be further improved. The prescribed speed can be set to a value used to distinguish it from driving during traffic congestion. As an example, the prescribed speed can be set to 20 km / h. The authority granting unit 217 uses the driving related information obtained by the driving related information acquisition unit 216 to determine that the vehicle Ve is driving at a prescribed speed or above. In this case, the driving related information can be set to the speed of the vehicle Ve.

[0076] Preferably, the permission granting unit 217 also adds the condition of granting permission to the accompanying person CP object device when the vehicle Ve has made more than a specified number of left and right turns. When the vehicle Ve has made more than a specified number of left and right turns, the possibility of the accompanying information determination unit 215 continuously determining the advertising signal of the user who is not riding with the vehicle Ve for more than a specified time is low. Therefore, according to the above structure, it is possible to further suppress the erroneous granting of permission to the user who is not riding with the vehicle Ve. Therefore, the security in authentication can be further improved.

[0077] The authority granting unit 217 may grant the companion CP the authority to use the target device by limiting the seating area in the vehicle Ve, similarly to the authority granting unit 207. Preferably, the setting unit 218 sets the above-mentioned prescribed time based on the input received through the user input device 27, similarly to the setting unit 208. Thus, the user can freely set the prescribed time.

[0078] The restriction unit 219 preferably sets a limit on the period of permission to use the companion CP target device similarly to the restriction unit 209. The restriction unit 219 may delete the authentication information of the companion CP registered in the registration unit 212 when the permission granting period of a companion CP expires.

[0079] Preferably, the restriction unit 219 cancels the permission to use the target device granted to the companion CP in accordance with the cancellation input received through the user input device 27, similarly to the restriction unit 209. Thus, the permission to use the target device granted to the companion CP can be canceled according to the desire of the authorized user AU.

[0080] Preferably, similarly to the restriction unit 209 , the restriction unit 219 extends the period of permission to use the target device granted to the companion CP every time the companion information identification unit 215 identifies the same companion CP as the authentication of the authorized user AU is established by the authentication unit 213 .

[0081] Preferably, the restriction unit 219 temporarily extends the period of permission granting for the companion CP when pairing is performed between the mobile terminal 6 and the short-range communication unit 211. The pairing is generated by the operation of the mobile terminal 6. In other words, it is a pairing caused by the input from the companion CP. The extension of the temporary permission granting period refers to the temporary extension of the permission granting period for the companion CP in the permission granting. The temporary extension mentioned here refers to the extension of the period limited to the granting of permission until it disappears. Accordingly, the permission to use the object device granted to the companion CP can be temporarily extended according to the wishes of the companion CP.

[0082] Preferably, the restriction unit 219 temporarily extends the permission granting period for the companion CP when the short-range communication unit 211 obtains specific information about the companion CP from the mobile terminal 4 of the regular user AU. The specific information of the companion CP refers to the Adv reception time when the mobile terminal 4 receives the advertising signal of the same companion CP for more than a specified time. The specified time mentioned here can be set to a value that can be set arbitrarily. For example, the specified time can be set to five minutes. For example, consider an event in which the companion CP who also acts with the regular user AU after getting off the vehicle Ve returns to the vehicle Ve due to an action different from that of the regular user AU. Here, if the permission granting period for the companion CP has passed, the convenience is reduced. In contrast, according to the above structure, since such a permission granting period for the companion CP can be temporarily extended, the convenience is improved.

[0083] <Processing related to authority granting in the imaging-side control unit 20>

[0084] Next, use Figure 5 The flowchart of FIG. 1 will be used to explain an example of the process of processing related to the authority to use the target device given to the companion CP in the imaging-side control unit 20 (hereinafter referred to as authority granting related processing). Figure 5 The flowchart is configured to start when there is a request for authentication from the vehicle control unit 30 .

[0085] First, in step S1, the image information acquisition unit 201 acquires an image captured by the indoor camera 28 or the outdoor camera 29. In step S2, the authentication unit 203 performs face authentication using feature amounts detected based on the image acquired in S1.

[0086] In step S3, if the authentication of the authorized user AU is successful (S3: Yes), the process proceeds to step S4. On the other hand, if the authentication of the authorized user AU is not successful (S3: No), the authorization granting process is terminated. In addition, the imaging-side control unit 20 responds to the vehicle control unit 30 regarding the authentication result.

[0087] In step S4, the accompanying person determination unit 204 determines whether there is an accompanying person CP of the regular user AU. And, if it is determined that there is an accompanying person (S4: Yes), the process moves to step S5. On the other hand, if it is determined that there is no accompanying person (S4: No), the authorization granting related process ends. In step S5, the accompanying information determination unit 205 determines the facial image other than the regular user recognized from the acquired image as the information of the accompanying person CP.

[0088] In step S6, if the facial image of the same accompanying person CP is identified by the accompanying information identification unit 205 for a period of time exceeding the prescribed time (S6: Yes), the process proceeds to step S7. On the other hand, if the facial image of the same accompanying person CP is not identified for a period of time exceeding the prescribed time (S6: No), the authorization granting process is terminated. In step S7, the accompanying person CP whose facial image is identified for a period of time exceeding the prescribed time is granted the authorization to use the target device.

[0089] In step S8, if the number of times the permission is granted to the companion CP granted permission in S7 is accumulated (S8: Yes), the process moves to step S9. On the other hand, if the number of times the permission is granted is not accumulated (S8: No), the permission granting related process is terminated. In step S9, the set value of the permission granting period of the companion CP granted permission in S7 is added. Then, the permission granting related process is terminated.

[0090] <Processing related to authority granting in the communication-side control unit 21>

[0091] Next, use Figure 6 An example of the process of authority granting related processing in the communication side control unit 21 is described with reference to the flowchart of FIG. Figure 6 The flowchart is configured to start when there is a request for authentication from the vehicle control unit 30 .

[0092] First, in step S21, when the short-distance communication unit 211 obtains the advertising signal (S21: Yes), the process moves to step S22. On the other hand, when the short-distance communication unit 211 is unable to obtain the advertising signal (S21: No), the authorization-granting related processing is terminated. As an example, when the short-distance communication unit 211 is unable to obtain the advertising signal within a set time after receiving the authentication request, the authorization-granting related processing is terminated. In step S22, the authentication unit 213 performs ID authentication using the terminal ID contained in the advertising signal obtained in S21.

[0093] In step S23, if the authentication of the authorized user AU is successful (S23: Yes), the process proceeds to step S24. On the other hand, if the authentication of the authorized user AU is not successful (S23: No), the authorization granting process is terminated. In addition, the communication control unit 21 responds to the vehicle control unit 30 regarding the authentication result.

[0094] In step S24, the companion determination unit 214 determines whether there is a companion CP of the regular user AU. And, if it is determined that there is a companion (S24: Yes), it moves to step S25. On the other hand, if it is determined that there is no companion (S24: No), the authority granting related processing is terminated. In step S25, the companion information determination unit 215 determines the terminal ID included in the advertisement signal other than the regular user AU obtained by the short-range communication unit 211 as the information of the companion CP.

[0095] In step S26, if the accompanying information identification unit 215 has identified the advertisement signal of the same accompanying person CP for a period of time or longer (S26: Yes), the process proceeds to step S27. On the other hand, if the advertisement signal of the same accompanying person CP has not been identified for a period of time or longer (S26: No), the permission granting process is terminated. In step S27, permission to use the target device is granted to the accompanying person CP who has been able to identify the advertisement signal for a period of time or longer.

[0096] In step S28, if the number of times the permission has been granted to the companion CP granted permission in S27 is accumulated (S28: Yes), the process moves to step S29. On the other hand, if the number of times the permission has been granted is not accumulated (S28: No), the permission granting-related process ends. In step S29, the set value of the permission granting period for the companion CP granted permission in S27 is added. Then, the permission granting-related process ends.

[0097] <Post-assignment related processing in the communication-side control unit 21>

[0098] Next, use Figure 7The flowchart of will now be described as an example of the flow of processing related to the granting of authority to the companion CP (hereinafter referred to as post-granting related processing) in the communication side control unit 21. Figure 7 The flowchart may be configured to start when the communication-side control section 21 grants the companion CP the authority to use the target device.

[0099] First, in step S40, if the authority granting period has passed (S40: Yes), the process proceeds to step S41. On the other hand, if the authority granting period has not passed (S40: No), the process proceeds to step S42. In step S41, the restriction unit 219 cancels the authority granted to the companion CP. Then, the post-granting related processing ends.

[0100] In step S42, if the user input device 27 accepts the disappearance input (S42: Yes), the process proceeds to S41. On the other hand, if the user input device 27 does not accept the disappearance input (S42: No), the process proceeds to step S43. The restriction unit 219 determines whether the user input device 27 accepts the disappearance input.

[0101] In step S43, if the mobile terminal 6 of the companion CP is paired with the short-distance communication unit 211 (S43: Yes), the process proceeds to step S44. On the other hand, if the pairing is not performed (S43: No), the process proceeds to step S45. In step S44, the restriction unit 219 temporarily extends the authorization period for the companion CP.

[0102] In step S45, if the short-distance communication unit 211 obtains the above-mentioned specific information about the companion CP from the mobile terminal 4 of the authorized user AU (S45: Yes), the process moves to step S46. On the other hand, if the specific information is not obtained (S45: No), the process returns to S40 and repeats the process. In step S46, the restriction unit 219 temporarily extends the authorization period for the companion CP. Then, the process returns to S40 and repeats the process.

[0103] In the first embodiment, the vehicle side unit 2 includes both the imaging side control unit 20 and the communication side control unit 21, but the present invention is not necessarily limited to this. For example, the vehicle side unit 2 may include only one of the imaging side control unit 20 and the communication side control unit 21.

[0104] (Implementation Method 2)

[0105] The structure of the embodiment 1 is not limited thereto, and the structure of the following embodiment 2 may be used. An example of the structure of the embodiment 2 is described below using a figure. The authentication system 1 of the embodiment 2 is the same as the authentication system 1 of the embodiment 1 except that the imaging side control unit 20 included in the vehicle side unit 2 is replaced with an imaging side control unit 20a.

[0106] Here, use Figure 8 , the schematic structure of the shooting side control unit 20a is described. Figure 8 As shown, the photographing-side control unit 20a includes an image information acquisition unit 201, a registration unit 202a, an authentication unit 203a, an accompanying person determination unit 204, an accompanying information determination unit 205, a seating area determination unit 206, an authority granting unit 207a, a setting unit 208, and a restriction unit 209 as functional modules. The photographing-side control unit 20a is the same as the photographing-side control unit 20 of Embodiment 1 except that the registration unit 202a, the authentication unit 203, and the authority granting unit 207 are replaced by the registration unit 202a, the authentication unit 203, and the authority granting unit 207. The photographing-side control unit 20a is also equivalent to the authentication device. In addition, the processing of each functional module of the photographing-side control unit 20a executed by a computer is also equivalent to executing the authentication method.

[0107] The authority granting unit 207a is the same as the authority granting unit 207 of the first embodiment, except that the type of the object device to which the companion CP is given permission to use is changed according to the seating area in the vehicle Ve. As an example, the driver's seat may be given either permission to unlock or to start the driving source. On the other hand, for seats other than the driver's seat, although the permission to unlock is given, the permission to start the driving source is not given. The authority granting unit 207a may register the type of the object device allowed to be used in the registration unit 202a in association with the authentication information of the companion CP according to the seating area. The registration unit 202a is the same as the registration unit 202 of the first embodiment, except for this point.

[0108] The authentication unit 203a, when authenticating the companion CP to whom the authority is granted by the authority granting unit 207a, establishes authentication for the use of the object device of the type corresponding to the seating area of ​​the companion CP. The seating area of ​​the companion CP may be determined by the seating area determining unit 206. Thus, the types of object devices to which the companion CP is authorized to use can be limited according to the seating area of ​​the companion CP.

[0109] (Implementation method 3)

[0110] The present invention is not limited to the above-mentioned embodiment, and the following embodiment 3 may be used. For example, the authentication of the authorized user AU may also utilize the smart entry system. In this case, the authentication of the authorized user AU is performed by the smart entry system. On the other hand, the authentication of the authorized companion CP is performed as described in the above-mentioned embodiment.

[0111] (Implementation 4)

[0112] The present invention is not limited to the above-described embodiment, and may be configured as the following embodiment 4. An example of the configuration of the embodiment 4 will be described below using drawings.

[0113] <Schematic structure of authentication system 1b>

[0114] Fig. 9 The authentication system 1b shown includes a facility side unit 2b, a mobile terminal 4b, and a mobile terminal 6. The facility side unit 2b is used in the facility Fc. The facility Fc may be, for example, a house of an authorized user AU. The details of the facility side unit 2b will be described later. The mobile terminal 4b is a communication terminal carried by the authorized user AU. The mobile terminal 4b is the same as the mobile terminal 4 of the first embodiment except that the Adv reception time is not stored and transmitted.

[0115] <Schematic Structure of Facility-Side Unit 2b>

[0116] Next, use Fig.10 , the schematic structure of the facility side unit 2b is described. Fig.10 As shown, the facility side unit 2b includes: a shooting side control unit 20b, a communication side control unit 21b, an HCU (Human Machine Interface Control Unit) 26, a user input device 27, an indoor camera 28b, an outdoor camera 29b, a facility side control unit 30b, and a drive unit 31b. For example, the shooting side control unit 20b, the communication side control unit 21b, the HCU 26b, the facility side control unit 30b, and the drive unit 31b are configured to be connected to a LAN. In addition, the indoor camera 28b and the outdoor camera 29b may also be configured to be connected to a LAN.

[0117] The HCU 26 executes various processes related to the exchange between the system and the user of the facility Fc. The HCU 26 is the same as the HCU 26 of the first embodiment except that the HCU 26 is used in the facility Fc instead of the vehicle Ve.

[0118] The user input device 27 receives input from a user. The user here is a user of the facility Fc. The user input device 27 is the same as the user input device 27 of the first embodiment except that it is used in the facility Fc instead of the vehicle Ve.

[0119] The indoor camera 28b captures a predetermined range of the indoor area of ​​the facility Fc. There may be multiple indoor cameras 28b. The indoor camera 28b may be, for example, a color camera. The indoor camera 28b may also include, for example, a near-infrared light source and a near-infrared camera. A camera attached to a device used in the facility Fc may also be used as the indoor camera 28b.

[0120] The outdoor camera 29b captures a predetermined range of the outdoor of the facility Fc. The outdoor camera 29b captures the surroundings of the facility Fc including the vicinity of the door of the facility Fc. The door may be limited to the entrance door, for example. There may be multiple outdoor cameras 29b. The outdoor camera 29b may be a color camera or a near-infrared camera.

[0121] The facility side control unit 30b performs permission for the use of the equipment of the facility Fc. The equipment that is the object of permission for use will be referred to as the object equipment below. The facility side control unit 30b confirms the authentication of the shooting side control unit 20b and the communication side control unit 21b. Then, when it is confirmed that the authentication is established in either the shooting side control unit 20b or the communication side control unit 21b, permission for the use of the object equipment is performed. Examples of the object equipment include door lock motors, etc. Permission for the use of the door lock motor is equivalent to permission for unlocking the door. When a prescribed trigger is detected, the facility side control unit 30b confirms the authentication of the shooting side control unit 20b and the communication side control unit 21b.

[0122] The facility-side control unit 30b may, for example, perform authentication confirmation of unlocking permission when the operation of the locking and unlocking SW is detected. The locking and unlocking SW is a switch for requesting locking and unlocking of the door of the facility Fc. The facility-side control unit 30b may, for example, use the detection of a person within a predetermined distance from the door of the facility Fc by an infrared sensor as a trigger for authentication confirmation.

[0123] The drive unit 31b drives the target device that is permitted to be used by the facility-side control unit 30b. The drive unit 31b unlocks the lock when the unlocking is permitted. The door lock can be unlocked by outputting an unlocking signal to the door lock motor.

[0124] The imaging control unit 20b is the same as the imaging control unit 20 of Embodiment 1 except that some processing is different. The imaging control unit 20b performs user authentication based on information obtained from the indoor camera 28b or the outdoor camera 29b. The imaging control unit 20b will be described in detail later.

[0125] The communication control unit 21b is the same as the communication control unit 21 of Embodiment 1 except that some processes are different. The communication control unit 21b performs user authentication based on information obtained from the mobile terminal 4b or the mobile terminal 6. The details of the communication control unit 21b will be described later.

[0126] <Schematic Configuration of Imaging-Side Control Unit 20b>

[0127] Next, use Fig.11 , the schematic structure of the shooting side control unit 20b is described. Fig.11 As shown, the photographing side control unit 20b includes an image information acquisition unit 201, a registration unit 202, an authentication unit 203, an accompanying person determination unit 204, an accompanying information determination unit 205, an authority granting unit 207b, a setting unit 208, and a restriction unit 209 as functional modules. The photographing side control unit 20b is different from the photographing side control unit 20 in that it does not include a seating area determination unit 206. The photographing side control unit 20b is different from the photographing side control unit 20 in that it includes an authority granting unit 207b instead of the authority granting unit 207. Except for the above points, the photographing side control unit 20b is the same as the photographing side control unit 20. The photographing side control unit 20b is also equivalent to an authentication device. In addition, the processing of each functional module of the photographing side control unit 20b executed by a computer is also equivalent to executing the authentication method.

[0128] The image information acquisition unit 201 acquires images from the indoor camera 28b and the outdoor camera 29b. Except for this point, the image information acquisition unit 201 is the same as the image information acquisition unit 201 of Embodiment 1. The indoor camera 28b and the outdoor camera 29b also correspond to the imaging device.

[0129] The authentication unit 203 sends the authentication result to the facility control unit 30b. The facility control unit 30b confirms the authentication based on the authentication result sent from the authentication unit 203, similarly to the vehicle control unit 30. When confirming that the authentication is successful, the facility control unit 30b permits the use of the target device.

[0130] When the authentication of the regular user AU is established in the authentication unit 203, the accompanying person determination unit 204 determines whether there is an accompanying person CP of the regular user AU. The processing in the accompanying person determination unit 204 corresponds to the accompanying person determination step. When a facial image other than the regular user AU is recognized from the image acquired by the image information acquisition unit 201, the accompanying person determination unit 204 determines that there is an accompanying person.

[0131] The authority granting unit 207b is the same as the authority granting unit 207 except that it does not perform a process using the seating area specified by the seating area specifying unit 206. The process in the authority granting unit 207b also corresponds to the authority granting step.

[0132] <Schematic Configuration of Communication-Side Control Unit 21b>

[0133] Next, use Fig.12 , the schematic structure of the communication side control unit 21b is described. Fig.12 As shown, the communication side control unit 21b has a short-distance communication unit 211, a registration unit 212, an authentication unit 213, an escort determination unit 214, an escort information determination unit 215, an authority granting unit 217b, a setting unit 218, and a restriction unit 219 as functional modules. The communication side control unit 21b is different from the communication side control unit 21 in that it does not have a travel-related information acquisition unit 216. The communication side control unit 21b is different from the communication side control unit 21 in that it has an authority granting unit 207b instead of the authority granting unit 207. Except for the above points, the communication side control unit 21b is the same as the communication side control unit 21. The communication side control unit 21b is also equivalent to an authentication device. In addition, the processing of each functional module of the communication side control unit 21b executed by a computer is also equivalent to executing the authentication method.

[0134] The short-distance communication unit 211 performs unicast communication with the paired mobile terminals 4b and 6. The short-distance communication unit 211 acquires advertisement signals successively transmitted from the mobile terminals 4b and 6. Except for these points, the short-distance communication unit 211 is the same as the short-distance communication unit 211 of the first embodiment.

[0135] The authentication unit 213 sends the authentication result to the facility-side control unit 30b. When the authentication of the authorized user AU is established in the authentication unit 213, the companion determination unit 214 determines whether there is a companion CP of the authorized user AU. When the companion determination unit 214 obtains an advertisement signal including a terminal ID other than the authorized user AU through the short-range communication unit 211, it can be determined that there is a companion.

[0136] The authority granting unit 217b is the same as the authority granting unit 217 except that it does not perform processing using the travel-related information identified by the travel-related information acquiring unit 216. The processing in the authority granting unit 217b also corresponds to the authority granting step.

[0137] Even in the structure of the fourth embodiment, even if the regular user AU does not perform the operation for granting permission, the companion CP can be granted permission to use the object device. In addition, the companion CP is granted permission to use the object device using the information of the companion CP determined based on the device surrounding information obtained around the object device. Thus, it is possible to suppress the granting of permission even to users who should not be granted permission. As a result, in the case where the permission to use the device is also granted to unregistered users who are not registered as regular users, the security in authentication can be further improved, and the convenience is also improved.

[0138] (Implementation 5)

[0139] In the above-mentioned embodiment, BLE communication is shown as an example of wireless communication between the short-range communication unit 211 and the mobile terminals 4, 4b and 6, but it is not necessarily limited to this. For example, wireless communication based on the Bluetooth standard can also be used. In addition, wireless communication other than these can also be used.

[0140] In addition, the present disclosure is not limited to the above-mentioned embodiments, and various changes can be made within the scope indicated by the claims. The embodiments obtained by appropriately combining the technical means disclosed in different embodiments are also included in the technical scope of the present disclosure. In addition, the control unit and the method described in the present disclosure can also be implemented by a dedicated computer that is programmed to execute one or more functions concretized by a computer program. Alternatively, the device and the method described in the present disclosure can also be implemented by a dedicated hardware logic circuit. Alternatively, the device and the method described in the present disclosure can also be implemented by one or more dedicated computers composed of a combination of a processor that executes a computer program and one or more hardware logic circuits. In addition, the computer program can also be stored in a computer-readable non-migratable tangible recording medium as an instruction executed by a computer.

[0141] (Public technical ideas)

[0142] The specification discloses multiple technical ideas recorded in the following multiple items. Some items are sometimes recorded by selectively referring to multiple dependent forms of previous items in subsequent items. In addition, some items are sometimes recorded by referring to multiple dependent forms of items of other multiple dependent forms (a multiple dependent form referring to another multiple dependent form). These items recorded in multiple dependent forms define multiple technical ideas.

[0143] Technical Thought 1

[0144] An authentication device, comprising:

[0145] An authentication unit (203, 203a, 213) authenticates a legitimate user who has been granted the right to use a prescribed device;

[0146] An information acquisition unit (201, 211) acquires information obtained around the above-mentioned device, namely, device peripheral information;

[0147] an accompanying person determining unit (204, 214) for determining whether there is an accompanying person of the regular user when the authentication of the regular user is established by the authentication unit;

[0148] an accompanying information determination unit (205, 215) for determining information of the accompanying person based on the device surrounding information acquired by the information acquisition unit when the accompanying person determination unit determines that there is an accompanying person; and

[0149] The authority granting unit (207, 207a, 207b, 217, 217b) uses the information of the accompanying person determined by the accompanying information determining unit to grant the accompanying person authority to use the device.

[0150] The authentication unit establishes authentication for the companion to whom the authority is granted by the authority granting unit at the next authentication or later.

[0151] Technical Thought 2

[0152] According to the authentication device described in technical idea 1,

[0153] The information acquisition unit acquires at least an image captured by a camera (28, 28b, 29, 29b) capturing the periphery of the device as the device periphery information.

[0154] The accompanying information specifying unit specifies a facial image other than the regular user recognized from the image as the information of the accompanying person.

[0155] Technical Thought 3

[0156] According to the authentication device described in technical idea 2,

[0157] The information acquisition unit acquires the peripheral information of the device one by one.

[0158] The accompanying information determining unit sequentially determines the information of the accompanying person based on the device surrounding information acquired by the information acquiring unit.

[0159] When the accompanying information specifying unit specifies the information of the same accompanying person for a predetermined period of time or longer, the authority granting unit also grants the accompanying person authority to use the device.

[0160] Technical Thought 4

[0161] According to the authentication device described in technical idea 2 or 3,

[0162] The above equipment is equipment installed in vehicles.

[0163] The permission granting unit (207) limits the seating area in the vehicle to grant permission for the accompanying person to use the device.

[0164] The authentication device comprises a seating area determination unit (206) for determining the seating area of ​​the companion when the companion determination unit determines that the companion exists.

[0165] The authentication unit (203) does not establish authentication for the accompanying person who has been granted authority by the authority granting unit to limit the seating area, if the seating area of ​​the accompanying person determined by the seating area determining unit is not the seating area to which the authority is granted.

[0166] Technical Thought 5

[0167] According to the authentication device described in technical idea 2 or 3,

[0168] The above equipment is equipment installed in vehicles.

[0169] There are multiple types of devices that are authorized to use.

[0170] The authority granting unit (207a) changes the type of the device to which the accompanying person is authorized to use according to the seating area in the vehicle,

[0171] The authentication device comprises a seating area determination unit (206) for determining the seating area of ​​the companion when the companion determination unit determines that the companion exists.

[0172] The authentication unit (203a) authenticates the companion to whom the authority is granted by the authority granting unit, and establishes authentication for use of the device of a type corresponding to the seating area of ​​the companion determined by the seating area determining unit.

[0173] Technical Thought 6

[0174] An authentication device according to any one of technical concepts 1 to 5, wherein:

[0175] The information acquisition unit (211) acquires at least an advertisement signal, which is sequentially transmitted from a mobile terminal carried by a person and is used to notify the surroundings of the existence of the mobile terminal, as the device surrounding information.

[0176] The accompanying information determination unit (215) determines the advertisement signal other than the regular user that can be acquired by the information acquisition unit as the information of the accompanying person.

[0177] Technical Thought 7

[0178] According to the authentication device described in technical idea 6,

[0179] The above-mentioned authority granting unit (217, 217b) also grants the companion the authority to use the above-mentioned device based on the fact that the above-mentioned advertising signal of the same companion is determined by the above-mentioned companion information determination unit to be the above-mentioned companion for more than a specified time, wherein the above-mentioned advertising signal of the above-mentioned companion is the above-mentioned advertising signal other than the above-mentioned regular user.

[0180] Technical Thought 8

[0181] According to the authentication device described in technical idea 7,

[0182] The above equipment is equipment installed in vehicles.

[0183] The authentication device comprises a driving related information acquisition unit (216) for acquiring information related to the driving condition of the vehicle, i.e., driving related information.

[0184] The authority granting unit (217) uses the driving-related information obtained by the driving-related information obtaining unit, and based on the fact that the accompanying information determining unit has determined that the advertising signal of the same accompanying person has continued for more than the prescribed time while the vehicle is traveling at a speed above a prescribed speed, the accompanying person is also granted authority to use the device.

[0185] Technical Thought 9

[0186] According to the authentication device described in technical idea 8,

[0187] The above-mentioned permission granting unit uses the above-mentioned driving-related information obtained by the above-mentioned driving-related information acquiring unit, and when the above-mentioned accompanying information determining unit determines the above-mentioned advertising signal of the same above-mentioned accompanying person for more than a prescribed time while the above-mentioned vehicle is driving at a speed above a prescribed speed and has made more than a prescribed number of left and right turns, the above-mentioned accompanying person is also granted permission to use the above-mentioned device.

[0188] Technical Thought 10

[0189] According to the authentication device described in technical idea 3 or 7,

[0190] A setting unit (208, 218) is provided for setting the predetermined time based on input received by an accepting device (27, 27b) for accepting input from a user.

[0191] Technical Thought 11

[0192] An authentication device according to any one of technical concepts 1 to 10, wherein:

[0193] A restriction unit (209, 219) is provided to set restrictions on the period of time during which the accompanying person is given permission to use the device.

[0194] Technical Thought 12

[0195] According to the authentication device described in technical idea 11,

[0196] The restriction unit cancels the permission to use the device given to the companion based on the input accepted by the input acceptance device (27, 27b) that accepts the input from the user.

[0197] Technical Thought 13

[0198] According to the authentication device described in technical idea 11,

[0199] The restriction unit cancels the permission granted to the accompanying person to use the device when a set time has passed after the permission has been granted.

[0200] Technical Thought 14

[0201] According to the authentication device described in technical idea 13,

[0202] The restriction unit extends a period of permission to use the device granted to the accompanying person every time the accompanying information specifying unit specifies the information of the same accompanying person as the authentication of the authorized user is established by the authentication unit.

[0203] Technical Thought 15

[0204] According to the authentication device described in technical idea 13 or 14,

[0205] acquiring at least an advertisement signal transmitted sequentially from a mobile terminal carried by a person and used to notify the surroundings of the presence of the mobile terminal as the device surrounding information,

[0206] The accompanying information determination unit (215) determines the advertisement signal other than the regular user that can be obtained by the information acquisition unit (211) as the information of the accompanying person.

[0207] When the mobile terminal and the device are paired, the restriction unit (219) temporarily extends the period of permission for the companion to use the device, and the pairing is performed by executing a key exchange protocol resulting from input from the user of the mobile terminal, i.e., the companion.

[0208] Technical Thought 16

[0209] An authentication device according to any one of technical concepts 13 to 15, wherein:

[0210] acquiring at least an advertisement signal transmitted sequentially from a mobile terminal carried by a person and used to notify the surroundings of the presence of the mobile terminal as the device surrounding information,

[0211] The accompanying information determination unit (215) determines the advertisement signal other than the regular user that can be obtained by the information acquisition unit (211) as the information of the accompanying person.

[0212] When information indicating that the advertising signal of the same companion has been received on the mobile terminal of the regular user for more than a specified period of time is obtained from the mobile terminal of the regular user through the information acquisition unit, the restriction unit (219) temporarily extends the period of permission for the companion to use the device.

[0213] Technical Thought 17

[0214] An authentication method,

[0215] The method comprises the following steps executed by at least one processor:

[0216] The authentication process is to authenticate the legitimate user who is given the authority to use the specified equipment;

[0217] An information acquisition step of acquiring information obtained around the above-mentioned device, namely, device peripheral information;

[0218] an accompanying person determining step of determining whether or not there is an accompanying person for the regular user when the authentication of the regular user is established in the authentication step;

[0219] an accompanying information determining step, when it is determined in the accompanying person determining step that there is the accompanying person, determining information of the accompanying person based on the device surrounding information acquired in the information acquiring step; and

[0220] the permission granting step, using the information of the accompanying person determined by the accompanying person information determining step, and also granting the accompanying person permission to use the device,

[0221] In the authentication step, authentication is established for the companion to whom the authority is granted in the authority granting step at the next authentication or later.

Claims

1. An authentication device comprising: An authentication unit (203, 203a, 213) authenticates a legitimate user who has been granted the right to use a prescribed device; An information acquisition unit (201, 211) acquires information obtained around the above-mentioned device, namely, device peripheral information; an accompanying person determining unit (204, 214) for determining whether there is an accompanying person of the regular user when the authentication of the regular user is established by the authentication unit; an accompanying information determination unit (205, 215) for determining information of the accompanying person based on the device surrounding information acquired by the information acquisition unit when the accompanying person determination unit determines that there is an accompanying person; and The authority granting unit (207, 207a, 207b, 217, 217b) uses the information of the accompanying person determined by the accompanying information determining unit to grant the accompanying person authority to use the device. The authentication unit establishes authentication for the accompanying person to whom the authority is granted by the authority granting unit at the next authentication or later.

2. The authentication device according to claim 1, wherein: The information acquisition unit acquires at least an image captured by a camera (28, 28b, 29, 29b) capturing the periphery of the device as the device periphery information. The accompanying information specifying unit specifies a facial image other than the regular user recognized from the image as the information of the accompanying person.

3. The authentication device according to claim 2, wherein: The information acquisition unit acquires the peripheral information of the device one by one. The accompanying information determining unit sequentially determines the information of the accompanying person based on the device surrounding information acquired by the information acquiring unit. When the accompanying information specifying unit specifies the information of the same accompanying person for a predetermined period of time or longer, the authority granting unit also grants the accompanying person authority to use the device.

4. The authentication device according to claim 2, wherein: The above equipment is equipment installed in vehicles. The permission granting unit (207) limits the seating area in the vehicle to grant permission for the accompanying person to use the device. The authentication device comprises a seating area determination unit (206) for determining the seating area of ​​the companion when the companion determination unit determines that the companion exists. The authentication unit (203) does not establish authentication for the accompanying person who has been granted authority by the authority granting unit to limit the seating area, if the seating area of ​​the accompanying person determined by the seating area determining unit is not the seating area to which the authority is granted.

5. The authentication device according to claim 2, wherein: The above equipment is equipment installed in vehicles. There are multiple types of devices that are authorized to use. The authority granting unit (207a) changes the type of the device to which the accompanying person is authorized to use according to the seating area in the vehicle, The authentication device comprises a seating area determination unit (206) for determining the seating area of ​​the companion when the companion determination unit determines that the companion exists. The authentication unit (203a) authenticates the companion to whom the authority is granted by the authority granting unit, and establishes authentication for use of the device of a type corresponding to the seating area of ​​the companion determined by the seating area determining unit.

6. The authentication device according to claim 1, wherein: The information acquisition unit (211) acquires at least an advertisement signal, which is sequentially transmitted from a mobile terminal carried by a person and is used to notify the surroundings of the existence of the mobile terminal, as the device surrounding information. The accompanying information determination unit (215) determines the advertisement signal other than the regular user that can be acquired by the information acquisition unit as the information of the accompanying person.

7. The authentication device according to claim 6, wherein: The above-mentioned authority granting unit (217, 217b) also grants the companion the authority to use the above-mentioned device based on the fact that the above-mentioned advertising signal of the same companion is determined by the above-mentioned companion information determination unit to be the above-mentioned companion for more than a specified time, wherein the above-mentioned advertising signal of the above-mentioned companion is the above-mentioned advertising signal other than the above-mentioned regular user.

8. The authentication device according to claim 7, wherein: The above equipment is equipment installed in vehicles. The authentication device comprises a driving related information acquisition unit (216) for acquiring information related to the driving condition of the vehicle, i.e., driving related information. The authority granting unit (217) uses the driving-related information obtained by the driving-related information obtaining unit, and based on the fact that the accompanying information determining unit has determined that the advertising signal of the same accompanying person has continued for more than the prescribed time while the vehicle is traveling at a speed above a prescribed speed, the accompanying person is also granted authority to use the device.

9. The authentication device according to claim 8, wherein: The above-mentioned permission granting unit uses the above-mentioned driving-related information obtained by the above-mentioned driving-related information acquiring unit, and when the above-mentioned accompanying information determining unit determines the above-mentioned advertising signal of the same above-mentioned accompanying person for more than a prescribed time while the above-mentioned vehicle is driving at a speed above a prescribed speed and has made more than a prescribed number of left and right turns, the above-mentioned accompanying person is also granted permission to use the above-mentioned device.

10. The authentication device according to claim 3 or 7, wherein: A setting unit (208, 218) is provided for setting the predetermined time based on input received by an input receiving device (27, 27b) for receiving input from a user.

11. The authentication device according to claim 1, wherein: A restriction unit (209, 219) is provided to set restrictions on the period of time during which the accompanying person is given permission to use the device.

12. The authentication device according to claim 11, wherein: The restriction unit cancels the permission to use the device given to the companion based on the input accepted by the input acceptance device (27, 27b) that accepts the input from the user.

13. The authentication device according to claim 11, wherein: The restriction unit cancels the permission to use the device granted to the accompanying person when a set time has elapsed since the permission was granted.

14. The authentication device according to claim 13, wherein: The restriction unit extends a period of permission to use the device granted to the accompanying person every time the accompanying information specifying unit specifies the information of the same accompanying person as the authentication of the authorized user is established by the authentication unit.

15. The authentication device according to claim 13, wherein: acquiring at least an advertisement signal transmitted sequentially from a mobile terminal carried by a person and used to notify the surroundings of the presence of the mobile terminal as the device surrounding information, The accompanying information determination unit (215) determines the advertisement signal other than the regular user that can be obtained by the information acquisition unit (211) as the information of the accompanying person. When the mobile terminal and the device are paired, the restriction unit (219) temporarily extends the period of permission for the companion to use the device, and the pairing is performed by executing a key exchange protocol resulting from input from the user of the mobile terminal, i.e., the companion.

16. The authentication device according to claim 13, wherein: acquiring at least an advertisement signal transmitted sequentially from a mobile terminal carried by a person and used to notify the surroundings of the presence of the mobile terminal as the device surrounding information, The accompanying information determination unit (215) determines the advertisement signal other than the regular user that can be obtained by the information acquisition unit (211) as the information of the accompanying person. When information indicating that the advertising signal of the same companion has been received on the mobile terminal of the regular user for more than a specified period of time is obtained from the mobile terminal of the regular user through the information acquisition unit, the restriction unit (219) temporarily extends the period of permission for the companion to use the device.

17. An authentication method, The method comprises the following steps executed by at least one processor: The authentication process is to authenticate the legitimate user who is given the authority to use the specified equipment; An information acquisition step of acquiring information obtained around the above-mentioned device, namely, device peripheral information; an accompanying person determining step of determining whether or not there is an accompanying person for the regular user when the authentication of the regular user is established in the authentication step; an accompanying information determining step, in the case where it is determined in the accompanying person determining step that there is the accompanying person, determining information of the accompanying person based on the device surrounding information acquired in the information acquiring step; as well as the permission granting step, using the information of the accompanying person determined by the accompanying person information determining step, and also granting the accompanying person permission to use the device, In the authentication step, authentication is established for the companion to whom the authority is granted in the authority granting step at the next authentication or later.

Images