Authentication system, wearable terminal, display, authentication method, and computer-readable recording medium

Abstract

An authentication system (1) has a wearing terminal (100), a registration device (200), and a display (300), the wearing terminal (100) has a wearing-off detection unit (102), a wearing terminal information storage unit that stores wearing terminal information including terminal identification information and a detection result, and a wearing terminal information transmission unit that transmits the wearing terminal information, the registration device (200) has a wearing terminal information reception unit that receives the wearing terminal information, an authentication information acquisition unit that acquires authentication information of a user, and a determination unit (204) that confirms the legitimacy of the user, generates correspondence information that associates user identification information and terminal identification information, the display (300) has an operation input unit that receives an operation to a production device, a terminal information reception unit that receives the wearing terminal information, a wearing-off determination unit, and an authentication unit (304) that, in a case where it is determined that the wearing terminal (100) is being worn, performs authentication of whether to allow the received operation based on authority information.

Description

Technical Field

[0001] This invention relates to authentication systems, wearable terminals, displays, authentication methods, and computer-readable recording media. Background Technology

[0002] In the manufacturing industry, techniques are known for allowing operation of production equipment to a limited number of users. For example, Patent Document 1 discloses an authentication system comprising: a wearable device that, upon detecting that the device body is worn on the wrist, receives and stores input authentication data for connection to an external device; and an external device that determines whether authentication is possible based on the authentication data received from the wearable device.

[0003] Patent Document 1: Japanese Patent Application Publication No. 2000-200315 Summary of the Invention

[0004] This authentication system stores personal and biometric data for authentication in wearable devices, posing a risk of data leakage due to loss or theft. Therefore, from the perspective of ensuring security and conducting user authentication more securely, there is room for improvement.

[0005] The present invention was made in view of the problems mentioned above, and its object is to provide an authentication system, wearable terminal, display, authentication method and procedure that can perform user authentication more securely.

[0006] To achieve the above objectives, the authentication system of the present invention includes: a wearable terminal worn by a user; a registration device for registering the user; and an authentication apparatus connected to production equipment for authenticating whether operation on the production equipment is permitted. In the authentication system, the wearable terminal includes: a removal detection unit for detecting whether the wearable terminal is being worn; a wearable terminal information storage unit for storing wearable terminal information, including terminal identification information uniquely identifying the wearable terminal and the detection result obtained by the removal detection unit; and a wearable terminal information transmitting unit for transmitting the wearable terminal information stored in the wearable terminal information storage unit. The registration device includes: a wearable terminal information receiving unit for receiving wearable terminal information; an authentication information acquisition unit for acquiring the user's authentication information; and a determination unit for determining the authentication information based on the acquired authentication information. The authentication device verifies the legitimacy of the user, generates corresponding information, and sends it to the authentication unit. The corresponding information is information that associates the user identification information that uniquely identifies the verified legitimate user with the terminal identification information contained in the received wearable terminal information. The authentication unit has: an operation input unit that receives operations to the production equipment; a terminal information receiving unit that receives wearable terminal information; a don / don't determination unit that determines whether the wearable terminal is being worn based on the received wearable terminal information; and an authentication unit that, if the wearable terminal is being worn, determines the user wearing the wearable terminal based on the terminal identification information contained in the received wearable terminal information and the corresponding information sent by the determination unit, and authenticates whether the operation received by the operation input unit is allowed based on permission information indicating whether each user has the right to operate the production equipment.

[0007] The effects of the invention

[0008] According to the present invention, the wearable terminal worn by the user sends wearable terminal information, including terminal identification information and a detection result indicating whether the wearable terminal is being worn, to the authentication device. The authentication device determines the user based on corresponding information sent from a registration device that has verified the user's legitimacy. Based on the determined user's permission information, the authentication device authenticates whether operation on the production equipment is permitted. Therefore, user authentication can be performed more securely. Attached Figure Description

[0009] Figure 1 This is a diagram illustrating the structure of the authentication system according to Embodiment 1 of the present invention.

[0010] Figure 2 It means Figure 1 The diagram shows an example of wearable terminal status information stored in the data storage unit of the wearable terminal.

[0011] Figure 3 It means Figure 1The diagram shows an example of an operator correspondence table stored in the data storage unit of the registration device.

[0012] Figure 4 It means Figure 1 The diagram shows an example of the operation permission information stored in the data storage unit of the registration device.

[0013] Figure 5 It means Figure 1 The diagram shows the physical structure of the wearable terminal.

[0014] Figure 6 It means Figure 1 A block diagram showing the physical structure of the registration device and display.

[0015] Figure 7 This is a flowchart representing the registration process performed by the authentication system.

[0016] Figure 8 It is a flowchart representing the authentication process performed by the authentication system. Detailed Implementation

[0017] Hereinafter, with reference to the accompanying drawings, the authentication system, wearable terminal, display, authentication method, and procedure according to embodiments of the present invention will be described. Furthermore, in the drawings, identical or equivalent parts are labeled with the same reference numerals.

[0018] The authentication system described in this embodiment is used in production sites such as factories and workshops to authenticate whether operators have the authority to operate the manufacturing equipment located in the production site. For example... Figure 1 As shown, the authentication system 1 includes: a wearable terminal 100, which is worn as part of the operator's body; a registration device 200, which registers the operator wearing the wearable terminal 100 and the unique ID of the wearable terminal 100; and a display 300, which is connected to the manufacturing equipment 400 and displays information related to the control of the manufacturing equipment 400 for operations including parameter input, which are used to control the manufacturing equipment 400. The display 300 reads the unique ID of the wearable terminal 100 and determines whether operation on the operation panel of the display 300 is permitted.

[0019] The wearable terminal 100 can be worn on a part of the worker's body, such as the wrist or ankle, and is shaped like a wristband. The wearable terminal 100 includes, for example, an NFC tag and a wear detection sensor to detect whether it is being worn or removed. The wearable terminal 100 detects whether it is being worn by the worker and saves the detected wearing status, a removal history indicating when the wearable terminal 100 has been removed, and the wearable terminal 100's unique ID. The registration device 200 obtains the worker's biometric information to identify the worker, associates the identified worker with the wearable terminal 100's unique ID, registers this association, and sends it to the display 300. The display 300 reads the unique ID from the wearable terminal 100 worn by the worker and, referring to the worker's pre-set operating permissions on the registration device 200, determines whether operation on the control panel is permitted. Additionally, the display 300 reads the removal history indicating when the wearable terminal 100 has been removed; if a removal history is detected, authentication is not performed, and operation is rejected.

[0020] Next, the functional structures of the wearable terminal 100, the registration device 200, and the display 300 will be explained respectively.

[0021] The wearable terminal 100 includes: a sensor unit 101 that acquires information necessary for identifying the wearing status of the wearable terminal 100; a don / put detection unit 102 that detects the don / put on of the wearable terminal 100 by an operator; a power generation unit 103 that supplies power to the don / put detection unit 102; a data control unit 104 that stores the wearing status and don / put history of the wearable terminal 100 in a data storage unit 105; a data storage unit 105 that stores the wearing status, don / put history, and unique identification information of the wearable terminal 100, i.e., a unique ID; an antenna unit 106 that transmits and receives wireless signals for wireless communication with the registration device 200 and the display 300; an RF control unit 107 that controls the transmission of information stored in the data storage unit 105 from the antenna unit 106; and a voltage generation unit 108 that generates a voltage for driving the data control unit 104 and the data storage unit 105.

[0022] The sensor unit 101 acquires information necessary to identify the wearing status of the wearable terminal 100 for the operator. The sensor unit 101 includes, for example, a temperature sensor that identifies body temperature and detects temperature changes when removing the device; a pressure sensor that identifies the fit of a part of the operator's body and detects pressure based on the fit when removing the device; and a light sensor that detects the intensity of light when removing the device.

[0023] The don / remove detection unit 102 detects whether the operator has put on or removed the wearing terminal 100 based on information obtained from the sensor unit 101. Specifically, the don / remove detection unit 102 detects whether the wearing terminal 100 has been put on or removed based on changes in temperature, pressure, light, etc., detected by the sensor unit 101.

[0024] The power generation unit 103 supplies power to the don-wear detection unit 102. Specifically, the power generation unit 103 has a power generation module that generates power using body temperature. If the wearable terminal 100 is worn, the power generation unit 103 generates power using the temperature difference between the worker's body temperature and the external temperature, and supplies power to the don-wear detection unit 102.

[0025] The data control unit 104 stores the wearing status detection results obtained by the wearing / removal detection unit 102 in the data storage unit 105. Specifically, the data control unit 104 stores the wearing status information detected by the wearing / removal detection unit 102, indicating whether the operator has worn or removed the wearing terminal 100, in the data storage unit 105.

[0026] The data storage unit 105 stores wearable terminal information, which includes unique identification information for the wearable terminal 100, namely its unique ID, the wearing status of the wearable terminal 100, and the history of when the wearable terminal 100 has been removed. For example... Figure 2 As illustrated, the wearable terminal information includes an "inherent ID" representing the inherent ID of the wearable terminal 100, a "wearing status" representing the wearing status of the wearable terminal 100, and a "removal history" representing the history of when the wearable terminal 100 was removed. In the "wearing status" field, a flag is stored indicating either "1" indicating that the operator is wearing the wearable terminal 100, or "0" indicating that the operator has removed the wearable terminal 100. In the "removal history" field, a flag is stored indicating either "1" indicating that there is a history of the wearable terminal 100 being removed after being worn, or "0" indicating that there is no history of the wearable terminal 100 being removed after being worn. Furthermore, the data storage unit 105 is an example of a wearable terminal information storage unit, the inherent ID is an example of terminal identification information, and the removal history is an example of removal history information.

[0027] Return to Figure 1 The antenna section 106 transmits and receives wireless signals for wireless communication with the registration device 200 and the display 300. Furthermore, the antenna section 106 is an example of a wearable terminal information transmission section.

[0028] The RF control unit 107 controls the transmission of wearable terminal information stored in the data storage unit 105 from the antenna unit 106. Specifically, if the wear-off detection unit 102 detects that the wearable terminal 100 is worn by the operator, the RF control unit 107 controls the transmission of carrier waves from the antenna unit 106 at preset intervals or continuously. Conversely, if the wear-off detection unit 102 detects that the wearable terminal 100 has been removed, the RF control unit 107 stops transmitting carrier waves from the antenna unit 106.

[0029] The voltage generation unit 108 generates a voltage for driving the data control unit 104 and the data storage unit 105. Specifically, the voltage generation unit 108 generates a voltage for driving the data control unit 104 and the data storage unit 105 based on an electrical signal received from the antenna unit 106, for example, using a preamble portion of the electrical signal, and supplies the voltage to the data control unit 104 and the data storage unit 105.

[0030] The registration device 200 includes: an antenna unit 201 that transmits and receives wireless signals for wireless communication with the wearable terminal 100; an RF control unit 202 that converts the wireless signals received by the antenna unit 201 into digital data; a biometric information acquisition unit 203 that acquires biometric information; a determination unit 204 that authenticates whether the operator is legitimate; a data control unit 205 that generates an operator mapping table that associates authenticated legitimate operators with the unique ID of the wearable terminal 100; a data storage unit 206 that stores various types of information; and a network control unit 207 that transmits and receives data with the display 300.

[0031] The antenna section 201 transmits and receives wireless signals for wireless communication with the wearable terminal 100. Furthermore, the antenna section 201 is an example of an information receiving section for the wearable terminal.

[0032] The RF control unit 202 converts the wireless signal received by the antenna unit 201 into digital data. Specifically, the RF control unit 202 obtains data from the wearable terminal 100 via the antenna unit 201. Figure 2 The wearable terminal status information is then transferred to the determination unit 204.

[0033] The biometric information acquisition unit 203 acquires the operator's biometric information. Specifically, the biometric information acquisition unit 203 includes a fingerprint sensor or a biometric information reading device that reads biometric information such as veins, voiceprints, and irises to acquire the operator's biometric information. Furthermore, the biometric information acquisition unit 203 is an example of an authentication information acquisition unit.

[0034] The determination unit 204 determines whether the operator is legitimate. Specifically, the determination unit 204 determines the legitimacy of the operator by judging whether the biometric information obtained by the biometric information acquisition unit 203 has been pre-registered in the registration device 200. The determination unit 204 refers to the biometric data correspondence information stored in the data storage unit 206, which associates the information that uniquely identifies the operator (i.e., operator ID) with biometric data such as fingerprint data, vein patterns, voiceprint patterns, and iris patterns, to determine whether there is biometric data consistent with the acquired biometric information. If it is determined that there is biometric data consistent with the acquired biometric information, the determination unit 204 determines that the operator possessing the acquired biometric information is legitimate. Furthermore, the operator ID is an example of user identification information, and the biometric data correspondence information is an example of authentication correspondence information.

[0035] The data control unit 205 generates an operator mapping table, which associates operators authenticated as legitimate by the determination unit 204 with the unique ID of the wearable terminal 100. For example... Figure 3 As illustrated, the operator mapping table contains information that uniquely identifies the operator as an "operator ID" and uniquely identifies the wearer of the terminal 100 as an "inherent ID". The data control unit 205 stores the generated operator mapping table in the data storage unit 206. Furthermore, the operator mapping table is an example of mapping information.

[0036] Return to Figure 1 The data storage unit 206 stores information related to operator authentication and operation permission information representing the operation permissions of each operator. Specifically, the data storage unit 206 stores information generated by the data control unit 205. Figure 3 The example operator correspondence table, Figure 4 The illustrated operation permission information is stored. As shown in the figure, the operation permission information includes a "Worker ID" that uniquely identifies the operator, a "Device ID" that uniquely identifies the manufacturing equipment 400, and "Operation Permissions" that indicate whether operation permissions have been granted. In each item of the "Operation Permissions" field, a "1" indicates that the operator has been granted operation permissions, while a "0" indicates that no operation permissions have been granted. In the illustrated example, the operator with operator ID "A0001" is granted the operation permissions of "Login," "Start," "Run," and "Stop" for equipment ID "X01," i.e., manufacturing equipment 400, but not the operation permission of "Setting Change." Furthermore, the data storage unit 206 is an example of an authentication-corresponding information storage unit.

[0037] Return to Figure 1The network control unit 207 and the display 300 exchange data. Specifically, the network control unit 207 sends the operator correspondence table generated by the data control unit 205 and the operation permission information of the operators certified as legitimate by the judgment unit 204 to the display 300.

[0038] The display 300 includes: an antenna unit 301 that transmits and receives wireless signals for wireless communication with the wearable terminal 100; an RF control unit 302 that converts the wireless signals received by the antenna unit 301 into digital data; a data control unit 303 that generates data to be transmitted to the registration device 200; an authentication unit 304 that authenticates whether operation of the production equipment is permitted; a data storage unit 305 that stores various information; and a network control unit 306 that transmits and receives data with the registration device 200.

[0039] The antenna section 301 transmits and receives wireless signals for wireless communication with the wearable terminal 100. The antenna section 301 is an example of a terminal information receiving section.

[0040] The RF control unit 302 converts the wireless signal received by the antenna unit 301 into digital data. Specifically, the RF control unit 302 obtains data from the wearable terminal 100 via the antenna unit 301. Figure 2 The wearable device status information is then transferred to the certification department 304.

[0041] Return to Figure 1 The data control unit 303 generates data to be sent to the registration device 200. Specifically, if the authentication unit 304 determines that there is a history of the wearable terminal 100 worn by the operator being removed, the data control unit 303 generates a message notifying the operator of this situation.

[0042] The certification department 304 determines whether the wearable terminal 100 is being worn, whether there is a history of the wearable terminal 100 being removed, and whether operation on the production equipment is permitted. Specifically, the certification department 304 reads the data obtained from the RF control department 302. Figure 2 The illustrated wearable device status information indicates that wearable device 100 is being worn when the wearable status is "1", and is removed when the wearable status is "0". Furthermore, the authentication department 304 determines that a removed record exists when the removal record is "1", and that no removed record exists when the removal record is "0". The authentication department 304 determines that operation from that operator is not permitted when it determines that wearable device 100 has been removed or that a removed record exists. If the operation is deemed not permitted, the authentication department 304 performs actions such as making the control panel completely black, not displaying operation buttons, and ignoring operations on the operation buttons.

[0043] Furthermore, if the certification department 304 determines that the wearable terminal 100 is being used and that the record has not been removed, it will refer to the information obtained from the registration device 200. Figure 4 The operation permission information shown determines whether input to the operation panel is permitted. For example, if an operator with operator ID "A0001" logs in to the display 300 connected to the manufacturing equipment 400 with device ID "X01", the authentication unit 304, referring to the operation permission information, allows the operation since the operator has been granted permission to log in to device ID "X01". Furthermore, the authentication unit 304 is an example of a donning / wearing determination unit or a determination unit, and the operation panel is an example of an operation input unit.

[0044] Return to Figure 1 The data storage unit 305 receives data sent by the network control unit 207 of the registration device 200. Figure 3 The operator correspondence table shown Figure 4 The operation permission information shown is stored.

[0045] Return to Figure 1 The network control unit 306 transmits and receives data with the display 300. Specifically, the network control unit 306 receives data from the network control unit 207 of the registration device 200. Figure 3 The operator correspondence table shown Figure 4 The system receives the operation permission information shown and sends a message generated by the data control unit 303 indicating that the wearable terminal 100 has been removed to the registration device 200. Furthermore, the network control unit 306 is an example corresponding to the information acquisition unit.

[0046] Next, refer to Figure 5 The physical structure of the wearable terminal 100 will be described. The wearable terminal 100 has a processor 11 that performs processing according to a program, a memory 12 that stores various programs, and a wireless communication unit 13 that transmits and receives information, which are connected via an internal bus 99.

[0047] The processor 11 reads and executes the program stored in the memory 12. The processor 11 includes various processing devices such as a CPU (Central Processing Unit) and an MPU (Micro-processing Unit). As the main functions provided by the program, the processor 11 performs the processing performed by the data control unit 104.

[0048] The memory 12 includes storage elements such as ROM (Read Only Memory) and RAM (Random Access Memory). The memory 12 stores control programs in advance and stores the status information of the wearable terminal. The memory 12 functions as a data storage unit 105.

[0049] The wireless communication unit 13 is, for example, a communication interface for conducting wireless communication in accordance with wireless communication standards such as Wi-Fi, Bluetooth (registered trademark), NFC, and Zigbee (registered trademark). The wireless communication unit 13 operates as the antenna unit 106 and the RF control unit 107.

[0050] Next, refer to Figure 6 The physical structure of the registration device 200 and the display 300 will be described. The registration device 200 and the display 300 include: a processor 21 that executes program processing; RAM 22, which is volatile memory; ROM 23, which is non-volatile memory; a storage unit 24 that stores data; an input unit 25 that receives information input; a display unit 26 that displays information in a visual manner; and a communication unit 27 that transmits and receives information. They are connected via an internal bus 99.

[0051] Processor 21 includes a CPU. Processor 21 executes various processes by reading the program stored in storage unit 24 into RAM 22. As the main functions provided by the program, processor 21 executes the processes performed by RF control unit 202, decision unit 204, data control unit 205, data control unit 303, and authentication unit 304.

[0052] RAM 22 is used as the CPU's working area. ROM 23 stores control programs executed by the CPU to register the basic operations of device 200 and display 300, BIOS (Basic Input Output System), etc.

[0053] Storage unit 24 has a hard disk drive, which stores programs executed by the CPU and various data used during program execution. Storage unit 24 functions as data storage unit 206 and data storage unit 305.

[0054] The input unit 25 is a user interface that includes a keyboard, mouse, touch panel, etc. The input unit 25 functions as an operation panel of the display 300.

[0055] Display unit 26 is a display device such as a liquid crystal display or an organic EL (ElectroLuminescence) display that displays information in a visual manner.

[0056] The communication unit 27 is a network terminal device or wireless communication device connected to a network, and a serial interface or LAN (Local Area Network) interface connected to it. The communication unit 27 receives signals from the outside and outputs the data represented by the signals to the processor 21. The communication unit 27 functions as the antenna unit 201, RF control unit 202, network control unit 207, antenna unit 301, RF control unit 302, and network control unit 306.

[0057] Next, the operation of the authentication system 1 with the above-described structure will be explained. The authentication system 1 performs registration and authentication processes. The registration process verifies the legitimacy of the operator wearing the wearable terminal 100 and associates the wearable terminal 100 with the verified operator. The authentication process authenticates whether the operator wearing the wearable terminal 100 is permitted to operate the operation panel on the display 300. Here, firstly, referring to… Figure 7 The procedures for registration and processing are explained.

[0058] (Registration Processing)

[0059] In the data storage unit 206 of the registration device 200, the administrator pre-stores the operating permissions defined for each operator. Figure 4 The operation permission information shown is as follows. The manager considers the operating schedules of each manufacturing device 400, operator shifts, etc., and creates operation permission information for each operating day of the factory, storing it in the data storage unit 206. Additionally, the data storage unit 206 contains a pre-stored biometric information table that associates operator IDs with biometric information. If an operator is assigned to the factory, the manager obtains the operator's fingerprint data, voiceprint, iris scan, and other biometric data, generates a biometric information table, and stores it in the data storage unit 206.

[0060] If a worker wears the wearable terminal 100 in, for example, a factory changing room, the power generation unit 103 of the wearable terminal 100 generates electricity using the temperature difference between the worker's body temperature and the external temperature, supplying power to the wear-off detection unit 102. The wear-off detection unit 102 detects whether the worker is wearing the wearable terminal 100 based on temperature changes, fit, etc., detected by the sensor unit 101, and changes the detection level from the initial value of "Low" to "High". The data control unit 104 generates... Figure 2 The wearable terminal status information shown is stored in the data storage unit 105. The wearable terminal status information includes a pre-set unique ID for the wearable terminal 100 and wearing information for identifying the wearer of the wearable terminal 100.

[0061] The worker wearing the wearable terminal 100 causes the registration device 200 to perform a registration process that associates the wearable terminal 100 with the worker. If an electromagnetic wave is received from the antenna section 201 of the registration device 200, the RF control section 107 of the wearable terminal 100 sends wearable terminal status information via the antenna section 106 (step S11).

[0062] Next, the RF control unit 202 of the registration device 200 receives the wearable terminal status information via the antenna unit 201 (step S12). The RF control unit 202 obtains the unique ID and wearing status from the received wearable terminal status information.

[0063] Next, the biometric information acquisition unit 203 acquires the operator's biometric information (step S13). Specifically, the biometric information acquisition unit 203 acquires the operator's biometric information through a fingerprint sensor or a biometric information reading device that reads biometric information such as veins, voiceprints, and irises.

[0064] Next, the determination unit 204 refers to the biometric information table pre-stored in the data storage unit 206 and determines whether the operator is legitimate based on whether the acquired biometric information has been registered (step S14). If the determination unit 204 determines that the acquired biometric information has been registered in the biometric information table (step S14; Yes), it associates the operator ID contained in the biometric information table with the unique ID obtained in step S12 to generate... Figure 3 The example operator mapping table is stored in the data storage unit 206 (step S15). Specifically, the determination unit 204 adds the mapping relationship between the operator ID of a newly confirmed legitimate operator and the unique ID of the wearable terminal 100 to the operator mapping table that stores the association relationship between the operator ID of a confirmed legitimate operator and the unique ID of the wearable terminal 100.

[0065] Next, the network control unit 207 sends the operator correspondence table generated in step S15 and the operation permission information defining the operation permissions of the authenticated operators to the display 300 (step S16). The display 300 saves the received operator correspondence table and operation permission information in the data storage unit 305 (step S17).

[0066] Next, the data control unit 205 reads the removal history from the wearable terminal status information received in step S12 and determines whether there is a "1" indicating that a removal history exists. If it is determined that there is a "1" in the removal history, the data control unit 205 rewrites the removal history to "0" via the antenna unit 201 (step S18) and ends the process.

[0067] On the other hand, returning to step S14, if the wearing status obtained through step S12 is "0" indicating that it has been removed, or if it is determined that the biometric information obtained through step S13 has not been registered in the biometric information table, the determination unit 204 determines that the operator is not legitimate (step S14; No), outputs a message meaning "the operator is not legitimate" (step S19), displays it on the display unit 26, and ends the process.

[0068] (Authentication processing)

[0069] Next, refer to Figure 8 This indicates that the display 300 performs authentication processing to determine whether the operator is allowed to perform operations on the control panel.

[0070] After registration and processing, if the dosing / wearing detection unit 102 detects that the worker has removed the wearing terminal 100, then... Figure 2 The "Wearing Status" of the wearable terminal status information is changed to "0", and the "Removal History" is changed to "1". Subsequently, if the removal detection unit 102 detects that the operator has worn the wearable terminal 100 again, it changes the "Wearing Status" of the wearable terminal status information to "1". In this case, the "Removal History" remains "1". Therefore, with both "Wearing Status" and "Removal History" at "1", it is possible that after registration processing, the wearable terminal 100 may be removed from an operator whose legitimacy has been confirmed and worn by another operator.

[0071] Return to Figure 8 The RF control unit 107 of the wearable terminal 100 transmits wearable terminal status information via the antenna unit 106 (step S21).

[0072] Next, the RF control unit 302 of the display 300 receives the wearable terminal 100's unique ID, wear status information, and removal history via the antenna unit 301. The authentication unit 304 reads the received wear status information and determines whether the wearable terminal 100 is being worn (step S22). Specifically, the authentication unit 304, upon obtaining the... Figure 2 If the wear status of the illustrated wearable terminal is "1", it is determined that the device is being worn (step S22; Yes), and the process proceeds to step S23. On the other hand, if the wear status is "0", the authentication unit 304 determines that the device is not being worn (step S22; No), and determines that the input operation is not allowed (step S33), and ends the process.

[0073] Return to Figure 8 Next, the authentication department 304 determines whether there is a history of the wearing terminal 100 being removed (step S23). Specifically, the authentication department 304, upon obtaining the... Figure 2If the detachment history of the wearable terminal status information is "1", it is determined that there is a detached history (step S23; Yes). If the detachment history is "0", it is determined that there is no detached history (step S23; No).

[0074] Return to Figure 8 If the certification department 304 determines that the resume has not been removed (step S23; No), it reads the operator's operation content (step S24). Specifically, the operator obtains operation content such as logging into the display 300, starting the manufacturing equipment 400, changing settings, running, and stopping by operating the operation panel.

[0075] Return to Figure 8 Next, the authentication unit 304 determines whether the operation content obtained in step 24 is permitted (step S25). Specifically, the authentication unit 304, through registration processing, refers to the information obtained from the registration device 200. Figure 3 The operator correspondence table shown Figure 4 The operation permission table shown determines whether an operator has the permission to perform the operation. For example, if an operator with operator ID "A0001" logs in to the display 300 connected to the manufacturing equipment 400 with device ID "X01", the authentication unit 304 determines that the operation is allowed (step S25; Yes) based on the operator ID "A0001" having the permission to log in to device ID "X01", and allows the execution of the operation (step S26).

[0076] On the other hand, if the authentication department 304 determines that the operator does not have the authority to perform the operation obtained through step 14 (step S25; No), it will not allow the execution of the operation (step S29).

[0077] Return to Figure 8 Next, the authentication unit 304 determines whether there are other operations (step S27). Specifically, if no operation input is received for a period of time greater than or equal to a preset time, the authentication unit 304 determines that there are no other operations (step S27; No), cancels the operator's authentication (step S28), and ends the process. On the other hand, if the operator inputs an operation within a preset time, the authentication unit 304 determines that there are other operations (step S27; Yes), returns to step S24, and obtains the operation content.

[0078] Returning to step S23, if the authentication unit 304 determines that there is a history of the wearable terminal 100 being removed (step S23; Yes), it determines that the input operation is not allowed (step S30). Next, the authentication unit 304 sends the existence of the detachment history along with the unique ID to the registration device 200 via the RF control unit 302 (step S31). The registration device 200 then... Figure 3 Extract the received unique ID from the operator mapping table shown, delete the association between the unique ID and the operator ID from the operator mapping table (step S32), and end the process.

[0079] As described above, in the authentication process to determine whether an operator has operating rights to the display 300, the authentication system 1 uses the registration device 200 to determine whether the unique ID of the wearable terminal 100 is associated with a validly authenticated operator. Therefore, authentication can be performed even when the wearable terminal 100 does not store personal information such as biometric data. This allows for more secure operator authentication.

[0080] Furthermore, the don / remove detection unit 102 of the wearable terminal 100 is powered by a power generation unit 103 having a power generation module that generates electricity using body heat. Therefore, the wearable terminal 100 does not require a battery or other power source. Additionally, the wearable terminal 100 stores its unique ID, wearing status, and don / remove history. Therefore, compared to structures where the wearable terminal 100 stores biometric information, personal information, etc., and has its own authentication function, a small-capacity memory is sufficient, and a high-performance processor is not required. Therefore, the wearable terminal 100 can be manufactured at a low cost.

[0081] The embodiments of the present invention have been described above, but the present invention is not limited to the above embodiments.

[0082] In the above embodiments, the manufacturing equipment 400 is not limited to equipment for manufacturing finished products or components; it can also be production equipment or machines for producing goods, or control devices for controlling machines. In this case, for each piece of production equipment, each production machine, and each control device... Figure 4 The operation permission information shown is stored in the data storage unit 206 of the registration device 200. The authentication unit 304 of the display 300 can authenticate whether the operation is allowed based on the operation permission information of each production device, each production machine, and each control device.

[0083] Furthermore, in the above embodiment, the display 300, which is connected to the manufacturing equipment 400 and displays information related to the control of the manufacturing equipment 400, determines the operator's permissions, but is not limited to this. For example, the operation panel itself may have the function of determining the operator's permissions, or an authentication device different from the display 300 may determine the operator's permissions based on the operation content entered into the input device.

[0084] In the above embodiment, the authentication unit 304 determines that there is no other operation if there is no input for a period of time greater than or equal to a preset time, and then cancels the operator's authentication, but it is not limited to this. For example, the authentication unit 304 may also cancel the operator's authentication if it determines that the distance between the wearable terminal 100 and the display 300 is greater than or equal to a preset threshold. For example, the authentication unit 304 periodically determines whether communication with the wearable terminal 100 is possible. If there is a response from the wearable terminal 100, it determines that the distance between the wearable terminal 100 and the display 300 is less than the threshold; if there is no response, it determines that the distance between the wearable terminal 100 and the display 300 is greater than or equal to the threshold, and then cancels the operator's authentication.

[0085] Furthermore, in the above embodiment, the registration device 200 obtains the operator's biometric information to verify the operator's legitimacy. However, it is not limited to this; instead of biometric information, it can verify legitimacy using any authentication information such as a login ID or password. In this case, the operator ID and authentication information are stored together in the data storage unit 206 of the registration device 200, and the determination unit 204 verifies legitimacy based on the obtained authentication information and the information storing the operator ID and authentication information together in the data storage unit 206.

[0086] Additionally, during the authentication process, the display 300 may also display only the operation buttons for performing the operations authorized to the operator on the operation panel. Specifically, after step S23, refer to... Figure 3 The operator correspondence table shown and Figure 4 The operation permission table shown confirms the operation permissions for each operation of the operator. Only the operation buttons for operations that the operator is allowed to perform are displayed on the operation panel, while the operation buttons for operations that are not allowed are set to not be displayed.

[0087] In the above embodiments, the functions of the registration device 200 and the display 300 are executed by one computer, but this is not a limitation; multiple computers may also be used to execute each process. Alternatively, the functions of the registration device 200 and the display 300 may be executed by one computer.

[0088] Alternatively, the registration device 200 and the display 300 may not each have their own data storage unit 206 and data storage unit 305. Alternatively, the data stored in data storage units 206 and 305 may be centrally managed by a cloud server located on a network, and the registration device 200 and the display 300 may access the cloud server to read and write information as needed.

[0089] Furthermore, the functions of the registration device 200 and the display 300 are not limited to dedicated devices and can be implemented using a conventional computer system. For example, the programs used to implement the functions of the registration device 200 and the display 300 can be stored on computer-readable recording media such as CD-ROM (Compact Disc Read Only Memory) or DVD-ROM (Digital Versatile Disc Read Only Memory) and distributed. By installing the program on a computer, a computer capable of implementing the aforementioned functions can be constructed.

[0090] Alternatively, when functions are implemented through a sharing of workload between the OS and applications, or through collaboration between the OS and applications, it is also possible to store only the applications on the recording medium.

[0091] As long as the spirit of the invention is not departed from, the structures described in the above embodiments can be selectively chosen and appropriately modified into other structures.

[0092] Furthermore, the present invention can be implemented and modified in various ways without departing from its broad spirit and scope. Also, the above-described embodiments are for illustrative purposes only and are not intended to limit the scope of the invention. That is, the scope of the invention is defined not by the embodiments, but by the claims. Moreover, various modifications implemented within the scope of the claims and their equivalents are considered to fall within the scope of the invention.

[0093] Explanation of the label

[0094] 1. Authentication System; 100. Wearable Terminal; 200. Registration Device; 300. Display; 400. Manufacturing Equipment; 101. Sensor Unit; 102. Done / Removed Detection Unit; 103. Power Generation Unit; 104. Data Control Unit; 105. Data Storage Unit; 106. Antenna Unit; 107. RF Control Unit; 108. Voltage Generation Unit; 201. Antenna Unit; 202. RF Control Unit; 203. Biometric Information Acquisition Unit; 204. Judgment Unit; 205. Data Control Unit; 206. Data Storage Unit; 207. Network Control Unit; 301. Antenna Unit; 302. RF Control Unit; 303. Data Control Unit; 304. Authentication Unit; 305. Data Storage Unit; 306. Network Control Unit; 11, 21. Processor; 12. Memory; 13. Wireless Communication Unit; 22. RAM; 23. ROM; 24. Storage Unit; 25. Input Unit; 26. Display Unit; 27. Communication Unit; 99. Internal bus.

Claims

1. An authentication system comprising: a wearable terminal worn by a user; The device is registered, and it registers the user. And an authentication device, which is connected to the production equipment, to authenticate whether operation of the production equipment is permitted. In this authentication system, the wearable terminal has: The don-wear detection unit detects whether the wearable device is being worn. A wearable terminal information storage unit stores wearable terminal information, which includes terminal identification information that uniquely identifies the wearable terminal and detection results obtained by the wear-off detection unit; and The wearable terminal information transmitting unit transmits the wearable terminal information stored in the wearable terminal information storage unit. The registration device has: A wearable terminal information receiving unit, which receives the wearable terminal information; The authentication information acquisition department acquires the authentication information of the user. as well as The determination unit, based on the obtained authentication information, confirms the legitimacy of the user, generates corresponding information, and sends it to the authentication device. This corresponding information is information that associates the user identification information uniquely identifying the confirmed legitimate user with the terminal identification information contained in the received wearable terminal information. The authentication device has: An operation input unit receives operations directed to the production equipment; Terminal information receiving unit, which receives the wearable terminal information; The wearing / unwearing determination unit determines whether the wearing terminal is being worn based on the received wearing terminal information; and The authentication department, upon determining that the user is wearing the wearable terminal, identifies the user based on the terminal identification information contained in the received wearable terminal information and the corresponding information sent by the determination department. Based on permission information indicating whether each user has operating rights to the production equipment, it then authenticates whether the operation received by the operation input department is permitted. The registration device and the authentication device are independent of the wearable terminal.

2. The authentication system according to claim 1, wherein, The wearable terminal information also includes detachment history information indicating when the wearable terminal was removed. The authentication unit determines whether there is a history of the wearable terminal being removed based on the removal history information contained in the wearable terminal information received by the terminal information receiving unit. If the history is determined to exist, the operation received by the operation input unit is not allowed.

3. The authentication system according to claim 1 or 2, wherein, The registration device also has: The authentication correspondence information storage unit stores authentication correspondence information that associates each user's authentication information with their user identification information. The determination unit determines the legitimacy of the user based on the authentication correspondence information stored in the authentication correspondence information storage unit and the authentication information obtained by the authentication information acquisition unit.

4. The authentication system according to claim 1 or 2, wherein, The permission information includes information indicating whether or not there are operation permissions for each operation of the production equipment. The authentication department determines whether the user's operation on the production equipment is included in the operation permissions granted to the user. If it is determined that it is included, the execution of the operation is allowed.

5. The authentication system according to claim 3, wherein, The permission information includes information indicating whether or not there are operation permissions for each operation of the production equipment. The authentication department determines whether the user's operation on the production equipment is included in the operation permissions granted to the user. If it is determined that it is included, the execution of the operation is allowed.

6. A wearable terminal, which is worn by a user, The wearable terminal has: The don-wear detection unit detects whether the wearable device is being worn. A wearable terminal information storage unit stores wearable terminal information, which includes terminal identification information that uniquely identifies the wearable terminal and detection results obtained by the wear-off detection unit; and The wearable terminal information sending unit sends the wearable terminal information stored in the wearable terminal information storage unit to the authentication device. The authentication device determines the user wearing the wearable terminal based on the corresponding information generated by the registration device that registers the user and the terminal identification information contained in the wearable terminal information, and authenticates whether the user is allowed to operate the production equipment. The authentication device is a device independent of the wearable terminal, and the corresponding information is information that associates the user identification information that uniquely identifies the user with the terminal identification information.

7. A display, which is independent of a wearable terminal, the display having: The operation input unit receives operations directed to the production equipment; The display unit displays the operation content received by the operation input unit; The terminal information receiving unit receives wearable terminal information, which includes terminal identification information that uniquely identifies the wearable terminal worn by the user and wearing information indicating whether the wearable terminal is being worn. The corresponding information acquisition unit acquires corresponding information that associates the user identification information that uniquely identifies the user with the terminal identification information; The wearing / removal determination unit determines whether the wearing terminal is being worn based on the received wearing terminal information; as well as The authentication department, upon determining that the wearable terminal is being worn, identifies the user wearing the wearable terminal based on the terminal identification information contained in the received wearable terminal information and the obtained corresponding information, and performs authentication on whether to allow the operation received by the operation input department based on the permission information indicating whether each user has the right to operate the production equipment.

8. An authentication method comprising the following steps: A computer independent of the wearable terminal obtains wearable terminal information, which includes terminal identification information that uniquely identifies the wearable terminal worn by the user and detection results obtained by detecting whether the wearable terminal is being worn; The computer obtains the user's authentication information; The computer verifies the legitimacy of the user based on the obtained authentication information and generates corresponding information. This corresponding information is information that associates the user identification information that uniquely identifies the user as legitimate with the terminal identification information contained in the obtained wearable terminal information. The computer receives commands from the production equipment; The computer determines whether the wearable device is being worn based on the wearable device information. as well as If it is determined that the user is wearing the wearable terminal, the computer determines the user wearing the wearable terminal based on the terminal identification information and the corresponding information contained in the wearable terminal information, and performs authentication on whether to allow the received operation based on the permission information indicating whether each user has the right to operate the production equipment.

9. A computer-readable recording medium storing a program that causes a computer, independent of a wearable terminal, to perform the following processes: Obtain wearable terminal information, which includes terminal identification information that uniquely identifies the wearable terminal worn by the user and detection results obtained by detecting whether the wearable terminal is being worn; Obtain the user's authentication information; The legitimacy of the user is confirmed based on the obtained authentication information, and corresponding information is generated. This corresponding information is information that associates the user identification information that uniquely identifies the confirmed legitimate user with the terminal identification information contained in the obtained wearable terminal information. Receive operations from the production equipment; Based on the wearable device information, it is determined whether the wearable device is being worn; as well as If it is determined that the user is wearing the wearable terminal, the user wearing the wearable terminal is identified based on the terminal identification information and the corresponding information contained in the wearable terminal information. Based on the permission information indicating whether each user has the right to operate the production equipment, authentication is performed to determine whether the received operation is allowed.

10. A computer-readable recording medium storing a program that causes a computer, acting as a registration device for registering users, to perform the following processes: Obtain wearable terminal information, which includes terminal identification information that uniquely identifies the wearable terminal worn by the user and is independent of the registration device, and detection results obtained by detecting whether the wearable terminal is being worn. Obtain the user's authentication information; and The legitimacy of the user is confirmed based on the obtained authentication information, corresponding information is generated, and the corresponding information is sent to the authentication device connected to the production equipment. The corresponding information is information that associates the user identification information that uniquely identifies the confirmed legitimate user with the terminal identification information contained in the obtained wearable terminal information. Based on the terminal identification information contained in the wearable terminal information obtained from the wearable terminal and the corresponding information, the authentication device determines the user wearing the wearable terminal and authenticates whether the user is allowed to operate the production equipment.

Images