Authentication system and authentication method

Abstract

To provide an authentication system that can shorten a time required for authentication while ensuring good security.SOLUTION: A portable terminal includes an authentication request unit that generates a one-time password using a one-time password generation key and individual difference information of the portable terminal when requesting a second authentication process, and transmits an authentication request including the one-time password and the individual difference information. The authentication device includes a key generation transmission unit that generates a one-time password generation key required for the second authentication process using a unique key and internal information when authentication of the portable terminal is successful by the first authentication process, and transmits the one-time password generation key to the portable terminal, and an authentication unit that, when receiving an authentication request from the portable terminal, performs authenticity determination to determine the authenticity of the received one-time password using the individual difference information included in the authentication request and the internal information and unique key used to generate the one-time password generation key, and authenticates the portable terminal.SELECTED DRAWING: Figure 4

Description

[Technical field]

[0001] The present disclosure relates to an authentication system and method. [Background technology]

[0002] The authentication system described in Patent Document 1 is used in, for example, a security system for crime prevention at a home, and includes a portable tag, which is a portable terminal carried by a user, and an authentication device that authenticates the portable tag. The authentication device includes a storage unit that stores individual difference information, which is information related to individual differences of the portable terminal, and an authentication unit. In this authentication system, an authentication request signal is transmitted from the portable terminal to the authentication device by wireless communication. The authentication request signal includes identification information for identifying the terminal itself, and a one-time password that follows a predetermined rule determined in advance between the authentication device and reflects the individual differences of the terminal that change over time.

[0003] Then, when the authentication unit receives the authentication request signal, it identifies the portable terminal that sent the authentication request signal based on the identification information, judges the authenticity of the one-time password based on the individual difference information stored in the storage unit, and authenticates the portable terminal based on the judgment result. This makes it possible to shorten the time required for authentication as much as possible, since authentication is performed only by one-way communication from the portable tag to the authentication device, rather than by two-way communication between the authentication device and the portable tag. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2020-14149 A Summary of the Invention [Problem to be solved by the invention]

[0005] However, in general, in authentication by one-way transmission, signals containing information for authentication such as one-time passwords are transmitted more frequently than in authentication by two-way communication, and the risk of the signals being intercepted increases. Therefore, the above authentication system that performs authentication by only one-way communication has a problem in that a malicious third party may intercept (wiretap) the signal transmitted from the mobile tag to the authentication device.

[0006] The present disclosure has been made in consideration of the above circumstances, and its purpose is to provide an authentication system that can ensure good security while shortening the time required for authentication. [Means for solving the problem]

[0007] The present disclosure has been made to solve at least a part of the above-mentioned problems, and can be realized in the following forms.

[0008] (1) According to one embodiment of the present disclosure, an authentication system is provided, comprising: a plurality of portable terminals carried by a user; and an authentication device that performs a first authentication process for authenticating the portable terminals using a first communication method between the portable terminals and the authentication device, and a second authentication process for authenticating the portable terminals using a second communication method with the portable terminals that has a lower security level than the first communication method, wherein the portable terminals have a terminal-side storage unit that stores a one-time password generation key received from the authentication device, and when requesting the second authentication process, the portable terminals generate a one-time password using the stored one-time password generation key and individual difference information of the portable terminal, and transmit an authentication request including the one-time password and the individual difference information. the authentication device has an authentication request unit, and the authentication device has a device-side memory unit that stores a unique key and internal information of the device that changes over time, a key generation and transmission unit that, when authentication of the mobile terminal is successful by the first authentication process, generates the one-time password generation key required for the second authentication process using the unique key and the internal information and transmits the one-time password generation key to the mobile terminal, and an authentication unit that, when receiving the authentication request from the mobile terminal, performs an authenticity determination to determine the authenticity of the received one-time password using the individual difference information included in the authentication request and the internal information and the unique key used to generate the one-time password generation key, thereby authenticating the mobile terminal. According to this form of authentication system, the one-time password generated by the mobile terminal is generated using a one-time password generation key and individual difference information of the mobile terminal. Then, in the second authentication process, the authentication unit of the authentication device uses the internal information, individual difference information, and unique key to determine the authenticity of the one-time password and authenticate the mobile terminal. This makes it possible to improve security in the second authentication process in which communication is assumed to take place in a low-security communication environment. (2) In the authentication system of the above type, the key generation and transmission unit may generate the one-time password generation key using a time measured by the device itself as the internal information, and the authentication request unit may generate the one-time password using a time measured by the device itself as the individual difference information. According to this aspect, security can be easily ensured by using the time measured by the authentication device as the internal information. (3) In the authentication system of the above form, the authentication request unit may generate the one-time password using the elapsed time from receiving the one-time password generation key to generating the one-time password as the individual difference information, and the authentication unit may receive the authentication request from the mobile terminal including the elapsed time and a one-time password generation time, which is the time when the one-time password was generated, as the internal information used to generate the one-time password generation key. According to this embodiment, a one-time password is generated using the elapsed time as individual difference information. For example, a "mobile device ID" as individual difference information reflecting individual differences is fixed information although there are individual differences between devices. By using information that is difficult to predict and changes over time, such as "elapsed time," rather than fixed information, to generate a one-time password, it becomes difficult to derive a unique key by reverse calculation. This can further improve security. Also, the authentication unit can calculate a key generation time using the one-time password generation time and the elapsed time received from the mobile device. (4) In the authentication system of the above form, the authentication unit performs an elapsed time determination to determine whether the time when the one-time password generation key was generated is shorter than a predetermined specified time, and if the authenticity determination or the elapsed time determination determines that authentication is not possible, the first authentication process is performed, and the key generation and transmission unit may transmit the one-time password generation key newly generated after the first authentication process to the mobile terminal. According to this embodiment, for example, if the time when the one-time password generation key was generated is equal to or longer than a predetermined specified time, i.e., if the one-time password generation key is old, authentication of the mobile terminal is not permitted. (5) In the authentication system of the above type, the authentication unit may perform an error judgment to determine whether the difference between the time when the one-time password was generated and the current time measured by the authentication device is smaller than a predetermined error tolerance, and if the authenticity judgment or the error judgment determines that authentication is not possible, the first authentication process may be performed. According to this embodiment, for example, if the difference between the time when the one-time password was generated and the current time measured by the authentication device is equal to or greater than the allowable error value, the mobile terminal is not allowed to be authenticated. For example, if the timer count of the mobile terminal is inaccurate and the one-time password is generated using an inaccurate "elapsed time," the authenticity of the one-time password cannot be correctly determined, and therefore authentication of the mobile terminal in such a case can be denied. (6) In the authentication system of the above form, the first authentication process may be a high-speed process in which authentication is performed in a state in which the mobile terminal and the authentication device are paired, and the second authentication process is a high-speed process in which authentication is performed in a state in which the mobile terminal and the authentication device are not paired. According to this embodiment, the first authentication process can be performed in a state where the portable terminal and the authentication device are paired, and the second authentication process can be performed at high speed in a state where the portable terminal and the authentication device are not paired. (7) In the authentication system of the above type, there may be a plurality of authentication devices, the unique key may be common to each of the authentication devices, and the authentication unit may perform the authenticity determination using the internal information used to generate the one-time password generation key calculated based on the one-time password generation time and the elapsed time. According to this aspect, in an authentication system having a plurality of authentication devices, it is possible to suppress an increase in communication traffic during authentication processing in each authentication device. (8) According to a second aspect of the present disclosure, there is provided an authentication method using an authentication system including a plurality of portable terminals carried by a user, and an authentication device that performs a first authentication process for authenticating the portable terminals using a first communication method between the portable terminals and the portable terminals, and a second authentication process for authenticating the portable terminals using a second communication method with the portable terminals that has lower security than the first communication method, in which the portable terminals store a one-time password generation key received from the authentication device, and when requesting the second authentication process, the portable terminals generate a one-time password using the stored one-time password generation key and individual difference information of the portable terminal, and and the authentication device stores a unique key and internal information of its own device which changes over time. If authentication of the mobile terminal is successful through the first authentication process, it generates the one-time password generation key required for the second authentication process using the unique key and the internal information and transmits the one-time password generation key to the mobile terminal. Upon receiving the authentication request from the mobile terminal, it performs an authenticity determination to determine the authenticity of the received one-time password using the individual difference information included in the authentication request and the internal information and unique key used to generate the one-time password generation key, and authenticates the mobile terminal. [Brief description of the drawings]

[0009] [Figure 1] 1 is a diagram illustrating a schematic configuration of an entrance / exit management security system according to a first embodiment of the present disclosure. [Diagram 2] 1 is a functional block diagram showing the configuration of a mobile terminal and an authentication device in the entrance / exit management security system. [Diagram 3] FIG. 1 is a sequence diagram illustrating an overview of an authentication flow in an entrance / exit management security system. [Figure 4] FIG. 2 is a diagram for explaining a series of authentication processing steps executed by the entrance / exit management security system. [Diagram 5]10 is a flowchart illustrating a process executed by an authentication device in the entrance / exit management security system. [Figure 6] FIG. 11 is a diagram illustrating a concept of a portion of an entrance / exit management security system according to a second embodiment of the present disclosure. [Figure 7] FIG. 13 is a sequence diagram illustrating a part of the authentication flow of the entrance / exit management security system according to the third embodiment of the present disclosure. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] Hereinafter, an embodiment will be described with reference to the drawings. A. First embodiment: A1. Overall configuration of entrance / exit management security system 1: The first embodiment will be described with reference to Figs. 1 to 5. First, the overall configuration of an entrance / exit management security system 1 will be described with reference to Fig. 1. Fig. 1 is a diagram that illustrates a schematic configuration of the entrance / exit management security system 1 in the first embodiment of the present disclosure. The entrance / exit management security system 1 illustrated in Fig. 1 is a system that performs security management to, for example, manage the entrance / exit of employees to a plurality of specific security areas 5A, 5B in a company, and to prevent unauthorized persons from entering the security areas 5A, 5B. The entrance / exit management security system 1 corresponds to an example of an "authentication system." The security areas 5A, 5B are areas that are subject to entrance management.

[0011] 1, an entrance / exit management security system 1 includes a portable terminal 3 carried by a user 2, and multiple authentication devices 4A, 4B that authenticate the portable terminal 3. The first authentication device 4A is an authentication device provided corresponding to a first security area 5A, and the second authentication device 4B is an authentication device provided corresponding to a second security area 5B. Hereinafter, when there is no particular distinction between the multiple authentication devices 4A, 4B, they will simply be referred to as "authentication device 4," and when there is no particular distinction between the multiple security areas 5A, 5B, they will simply be referred to as "security area 5."

[0012] The authentication devices 4A and 4B are provided corresponding to the security areas 5A and 5B, respectively. Fig. 1 shows a schematic diagram of an embodiment in which the same user 2 is first authenticated by a first authentication device 4A, and then, after a time lag, is authenticated by a second authentication device 4B different from the first authentication device 4A.

[0013] The authentication device 4 is provided on the doors 6A, 6B of the security areas 5A, 5B that are the object of entrance and exit management, or in the vicinity of the doors 6A, 6B, for example, on a wall located next to the doors 6A, 6B. The authentication device 4 has an operation unit 42 that can be operated by the user 2 by waving his / her hand. The authentication device 4 is normally in a sleep state. The authentication device 4 is configured to wake up (start up) when the user 2 performs a hand-waving operation over the operation unit 42. Details of authentication will be described later. The mobile terminal 3 and the authentication device 4 are capable of wireless communication with each other. The authentication device 4 determines whether the mobile terminal 3 can be authenticated and controls the unlocking of the door 6.

[0014] 1 shows two authentication devices 4 and two doors 6, but this is just an example, and three or more authentication devices 4 and doors 6 may be provided corresponding to three or more security areas 5. Also, in FIG. 1, one user 2 carrying a mobile terminal 3 is shown, but this is just an example, and such a system is usually assumed to be used by two or more users 2.

[0015] The entrance / exit management security system 1 is capable of both "terminal-holding authentication," in which authentication processing is performed while holding the mobile terminal 3 over the authentication device 4, and "hands-free authentication," in which authentication processing is performed in a hands-free state where the mobile terminal 3 is carried in a pocket or bag and is not held over the authentication device 4. "Hands-free authentication" is authentication that is performed when the mobile terminal 3 is not held over the authentication device 4 and is present within an authenticatable area.

[0016] The mobile terminal 3 is compliant with the BLE (Bluetooth (registered trademark) Low Energy) standard and transmits a beacon signal periodically, for example, every second. The mobile terminal 3 is, for example, a smartphone or the like carried by each user 2. The beacon signal transmitted from the mobile terminal 3 includes identification information for identifying the mobile terminal 3, one-time password related information, and the like.

[0017] The "identification information" is information for identifying the terminal itself, and is, for example, an identification number or serial number including model information set for each portable terminal 3 held by the user 2. Furthermore, the identification information may include an ID number or employee number assigned to each user 2. The "one-time password related information" will be described in detail later, and is information including a one-time password generated in the portable terminal 3. The one-time password is a password that is valid only once for a short period of time, and in this embodiment, it follows a predetermined rule established in advance between the authentication device 4 and reflects individual differences that change over time of the terminal itself. The generation of the one-time password will be described in detail later.

[0018] A2. Configuration of the mobile terminal 3 and the authentication device 4: [Configuration of mobile device 3] FIG. 2 is a functional block diagram showing the configuration of the mobile terminal 3 and authentication device 4 in the entrance / exit management security system 1. The above-mentioned mobile terminal 3 and authentication device 4 are configured to have the functions shown in FIG. 2. These functions may be realized by software or hardware. As shown in FIG. 2, the mobile terminal 3 includes functional units, such as a control unit 31, an operation unit 32, a communication unit 33, a storage unit 34, and a display unit 35. The control unit 31 executes a program stored in the storage unit 34 and controls the overall operation of the mobile terminal 3. The control unit 31 is a processor such as a CPU (Central Processing Unit).

[0019] The control unit 31 has a clock 36 and a one-time password generation unit 37. Note that in FIG. 2 and the following description, "one-time password" may be abbreviated to "one-pass." Therefore, hereinafter, the "one-time password generation unit" will be referred to as the "one-pass generation unit." The one-pass generation unit 37 uses a one-pass generation key and elapsed time to generate a one-time password using a generation formula stored in advance. Details will be described later. The clock 36 corresponds to the mobile terminal clock, and measures the elapsed time.

[0020] The mobile terminal 3 includes operation buttons (not shown), and the operation unit 32 receives operations on such operation buttons and outputs an operation reception signal indicating the result to the control unit 31. When the control unit 31 receives the operation reception signal, it executes various processes according to the operation reception signal.

[0021] The communication unit 33 performs wireless communication with the authentication device 4. As the communication unit 33, for example, a wireless module having a wireless communication interface such as BLE, ZigBee (registered trademark), or Wi-fi (registered trademark) is used. The communication unit 33 transmits a beacon signal including identification information of the user 2 to the authentication device 4 via wireless communication. The control unit 31 and the communication unit 33 correspond to an "authentication request unit."

[0022] The storage unit 34 stores a program for controlling the portable terminal 3 and performing calculations executed by the control unit 31. The storage unit 34 also stores in advance identification information of the user 2 who owns the portable terminal 3, identification information of the authentication device 4, a generation formula used to generate a one-time password, and the like. Furthermore, a generation formula used when generating a one-time password, which will be described later, is stored. The generation formula is, for example, an arithmetic expression expressed by an arbitrary function.

[0023] The storage unit 34 can have a semiconductor memory such as a RAM (Random Access Memory), a ROM (Read Only Memory), or an EPROM (Erasable Programmable ROM). The storage unit 34 may also have any type of storage device such as a flash memory, a magnetic storage device, or an optical storage device. The storage unit 34 corresponds to a "terminal side storage unit."

[0024] The display unit 35 is a display device such as a liquid crystal panel or an organic EL display, and displays information received from the authentication device 4 on the display device to notify the user 2, for example.

[0025] [Configuration of authentication device 4] The authentication device 4 includes functional units, such as a control unit 41, an operation unit 42, a communication unit 43, and a storage unit 44. The control unit 41 executes a program stored in the storage unit 44 and controls the overall operation of the authentication device 4. The control unit 41 is a processor such as a CPU.

[0026] The operation unit 42 accepts an operation such as a hand wave by the user 2, and outputs an operation acceptance signal indicating the result to the control unit 41. When the operation acceptance signal is given to the control unit 41, the control unit 41 executes various processes according to the operation acceptance signal. The communication unit 43 receives a beacon signal transmitted from the portable terminal 3 via wireless communication, and outputs the received beacon signal to the control unit 41.

[0027] The communication unit 43 performs wireless communication with the portable terminal 3. As the communication unit 43, for example, a wireless module having a wireless communication interface such as BLE, ZigBee (registered trademark), or Wi-fi is used. The communication unit 43 receives a beacon signal from the portable terminal 3 by wireless communication. The communication unit 43 corresponds to a "key generation and transmission unit."

[0028] The memory unit 44 stores a program for controlling and calculating the authentication device 4 executed by the control unit 41. The memory unit 44 also stores in advance identification information of an authenticable mobile terminal 3. The memory unit 44 also stores entry record information (user name, permitted entry time, etc.) indicating that entry has been permitted for the user 2. The memory unit 44 stores a generation formula, a property unique key, etc. for generating a one-pass generation key. The memory unit 44 corresponds to the "device-side memory unit."

[0029] The property unique key is expressed in hexadecimal, for example, and is a fixed encryption key that is uniquely set for each property, such as a company. The generation formula is an arithmetic expression expressed by an arbitrary function, and is the same as the generation formula stored in the memory unit 34 of the mobile terminal 3. The same property unique key and generation formula are shared by all authentication devices 4. In addition to the above, the memory unit 44 appropriately stores the key generation time, the one-pass generation key, etc., when authenticating the mobile terminal 3. Note that if the key is created at the time the mobile terminal 3 is authenticated, the "key generation time" will be the same as the terminal authentication time.

[0030] The storage unit 44 can include semiconductor memory such as RAM, EPROM, etc. The storage unit 44 may also include any type of storage device such as flash memory, magnetic storage device, optical storage device, etc.

[0031] The control unit 41 includes an acquisition unit 45, a clock 46, a one-pass generation key generation unit 47, a one-pass generation unit 48, an authentication unit 49, and an electric lock control unit 51. The acquisition unit 45 acquires identification information and one-pass related information transmitted by the mobile terminal 3. The clock 46 is an authentication device side clock and measures time. When the authentication device 4 functions as the first authentication device 4A, the one-pass generation key generation unit 47 substitutes the key generation time and the property unique key into a generation formula to create a one-pass generation key. When the authentication device 4 functions as the second authentication device 4B, the one-pass generation unit 48 generates a one-time password for authenticity determination using the property unique key and one-pass related information. This will be described in detail later.

[0032] The authentication unit 49 performs authentication judgment of the portable terminal 3. Based on various information stored in the storage unit 44, the authentication unit 49 judges whether or not the portable terminal 3 that transmitted the beacon signal can be authenticated, that is, whether authentication is successful or not. Although details will be described later, the authentication unit 49 appropriately selects and executes an authentication method between "normal processing" and "high-speed processing". The "normal processing" is authentication processing in a state where the portable terminal 3 and the authentication device 4 are paired, and corresponds to the "first authentication processing". The "high-speed processing" is authentication processing in a state where the portable terminal 3 and the authentication device 4 are not paired, and corresponds to the "second authentication processing".

[0033] The electric lock control unit 51 controls the locking and unlocking of an electric lock (not shown) of the door 6. The electric lock control unit 51 is connected to the electric lock of the door 6 wirelessly or via a wire, and has an interface circuit that controls the locking and unlocking of the electric lock of the door 6. For communication between the electric lock control unit 51 and the electric lock of the door 6, the communication unit 43 may be used.

[0034] A3.Certification: [Overall authentication process] Next, the authentication process using the entrance / exit management security system 1 described above will be described in detail. In the entrance / exit management security system 1 configured as above, authentication is performed in the flow shown in FIG. 3. FIG. 3 is a sequence diagram for explaining an outline of the authentication flow in the entrance / exit management security system 1. In this embodiment, a case will be described in which a user 2 is first authenticated by a first authentication device 4A, and then, for example, 30 minutes later, the same user 2 is authenticated by a second authentication device 4B different from the first authentication device 4A. The first authentication device 4A executes normal processing. The second authentication device 4B executes high-speed processing.

[0035] When the user 2 enters an authenticable area within a certain distance, for example, 2 to 3 m from the first authentication device 4A, the first authentication device 4A receives a beacon signal transmitted from the portable terminal 3, and is started up when the user 2 holds his / her hand over the first authentication device 4A (hereinafter, referred to as a "touch operation") as a final confirmation of the user's intention to enter. After that, when the first authentication device 4A receives a beacon signal again, it executes a connection process.

[0036] The connection process is a process of determining whether or not the mobile terminal 3 that transmitted the beacon signal is a device paired with the device itself by performing mutual communication with the mobile terminal 3. The "mutual communication" corresponds to an example of the "first communication method". In contrast, the "one-way communication" corresponds to an example of the "second communication method". One-way communication has lower security than two-way communication. If the first authentication device 4A determines, as a result of the connection process, that the mobile terminal 3 that transmitted the beacon signal is a paired device, it executes the authentication process. Specifically, the authentication unit 49 determines whether or not the authentication is possible by comparing the identification information included in the beacon signal of the mobile terminal 3 with the identification information stored in the storage unit 44. This is a process in which authentication is performed by mutual communication between the mobile terminal 3 and the first authentication device 4A.

[0037] The process from when the first authentication device 4A is started to when authentication is completed corresponds to the "normal process." The normal process takes a relatively long time of about 2 to 3 seconds. The "normal process" is "a process for authenticating the mobile terminal 3 by performing mutual communication between the mobile terminal 3 and the authentication device 4A," and may include at least the connection process and the authentication process.

[0038] If the authentication process results in normal completion of authentication of the portable terminal 3 that transmitted the beacon signal, i.e., authentication is OK, the first authentication device 4A unlocks the electric lock and permits entry into the first security area 5A. Note that a message indicating permission may be output to the portable terminal 3 to inform the user 2. If the authentication process results in unsuccessful completion of authentication of the portable terminal 3 that transmitted the beacon signal, i.e., authentication is NG, the first authentication device 4A does not unlock the electric lock. Note that a message indicating permission may be output to the portable terminal 3 to inform the user 2.

[0039] FIG. 3 shows a case where the authentication is OK in the first authentication device 4A, and after normal processing, the first authentication device 4A transmits "one-pass generation information" to the mobile terminal 3. The "one-pass generation information" includes a "one-pass generation key" and a "key generation time" described later. The second authentication device 4B is started when the user 2 enters an area where authentication is possible by the second authentication device 4B and holds his / her hand over the second authentication device 4B as a final confirmation of the intention to enter the second security area 5B. Then, the second authentication device 4B receives a beacon signal including one-pass related information transmitted from the mobile terminal 3 and starts authentication processing. Note that, before the touch operation, the beacon signal may be received first at the timing when the user 2 enters the area where authentication is possible by the second authentication device 4B. Then, the authentication processing may be started by the touch operation.

[0040] The second authentication device 4B receives "One Pass related information" from the portable terminal 3 of the user 2 approaching the second authentication device 4B. The "One Pass related information" and the authentication process by the second authentication device 4B will be described in detail later. The process from when the second authentication device 4B is started to when the authentication is completed corresponds to "high speed processing". The time required for high speed processing is a relatively short time, for example, less than one second. That is, in high speed processing, authentication can be completed in a shorter time than the normal processing by the first authentication device 4A. The authentication procedure in the second authentication device 4B after the normal processing by the first authentication device 4A will be described in more detail below.

[0041] [Procedure after normal processing] FIG. 4 is a diagram for explaining a series of authentication process steps executed by the entrance / exit management security system 1. In FIG. 4, the property unique key K1 shared by each authentication device 4 is illustrated by a black key illustration, and the one-pass generation key K2 created by the first authentication device 4A is illustrated by a white key illustration. The property unique key K1 is transmitted in advance from a higher-level device (see FIG. 3) to each authentication device 4 by the system administrator and is stored in the storage unit 44 of each authentication device 4. The property unique key K1 itself is not transmitted or received between the mobile terminals 3 or between the authentication devices 4 during the authentication process. The property unique key K1 does not change over time and cannot be changed except by the system administrator. The one-pass generation key K2 is generated by the first authentication device 4A and transmitted to the mobile terminal 3.

[0042] As shown in the upper center of FIG. 4, the one-pass generation key generating unit 47 of the first authentication device 4A generates the one-pass generation key K2 by substituting the key generation time and the property unique key K1 into a generation formula stored in advance. In this embodiment, the one-pass generation key K2 is generated at the timing when the authentication is OK in the normal processing of the first authentication device 4A. Therefore, the key generation time is the same as the terminal authentication time. The one-pass generation key K2 may be generated after a predetermined time, for example, several seconds, has elapsed from the terminal authentication time. The communication unit 43 of the first authentication device 4A transmits the generated one-pass generation key K2 and the key generation time to the mobile terminal 3.

[0043] Here, for example, if the key generation time in the first authentication device 4A of the user 2 is "2023-03-15 09:00:00", the information of the key generation time is converted to a numerical value of "20230315090000". Then, a one-pass generation key K2 for the user 2 is generated using this numerical value and the property unique key K1. On the other hand, if the key generation time in the first authentication device 4A of another user (for convenience, user 2B) is "2023-03-15 09:05:00", the information of the key generation time is converted to a numerical value of "20230315090500". Then, a one-pass generation key K2 for the user 2B is generated using this numerical value and the property unique key K1. Note that such a conversion is merely an example, and various conversion methods can be applied as the numerical value conversion process.

[0044] In this embodiment, as described above, a time-varying parameter, the key generation time, is used, and a one-pass generation key K2 is created for each authentication timing of each portable terminal 3, so that a different one-pass generation key K2 is generated for each portable terminal 3 possessed by user 2 and user 2B.

[0045] [High-speed processing procedure in the second authentication device 4B] Next, the authentication procedure in the second authentication device 4B will be described when the user 2, who has been authenticated by the first authentication device 4A, performs authentication by the second authentication device 4B, for example, 30 minutes later, at "March 15, 2023, 09:30:00". As shown on the left side of FIG. 4, the one-pass generation unit 37 of the mobile terminal 3 generates a one-time password by substituting the elapsed time and the one-pass generation key K2 into a generation formula. Here, the "elapsed time" is the elapsed time from the time when the mobile terminal 3 of the user 2A received the one-pass generation key K2 from the first authentication device 4A. The elapsed time is measured by the mobile terminal side clock 36. In the example of this embodiment, the elapsed time is "30 minutes".

[0046] Here, when multiple users 2 use the system 1, the "elapsed time" is different for each portable terminal 3, and so the generated one-time password reflects the individual differences of the portable terminals 3. In this embodiment, the "elapsed time" corresponds to an example of "individual difference information." Note that the individual difference information may be a time that is different for each portable terminal 3, and may be, for example, the operating time of each portable terminal 3.

[0047] Then, as shown in the lower part of FIG. 4, the communication unit 33 of the mobile terminal 3 transmits one-pass related information to the second authentication device 4B. Here, the "one-pass related information" includes the generated one-time password, the elapsed time, and the one-time password generation time (hereinafter referred to as "one-pass generation time"). The "one-pass generation time" is the time when the one-time password is generated in the mobile terminal 3, and is measured by the mobile terminal side clock 36. In this example, the one-pass generation time is "March 15, 2023, 09:30:00." In this embodiment, the elapsed time and the one-pass generation time correspond to "key generation time related information" related to the key generation time.

[0048] The second authentication device 4B performs high-speed processing to authenticate entry into the second security area 5B using the one-pass related information received from the mobile terminal 3 and the pre-stored property unique key K1. Fig. 5 is a flowchart explaining the authentication processing executed by the control unit 41 of the second authentication device 4B in the entrance and exit management security system 1. The processing shown in Fig. 5 is mainly performed by the authentication unit 49.

[0049] After the second authentication device 4B is started, when the second authentication device 4B receives a beacon signal including one-pass related information from the mobile terminal 3, the second authentication device 4B executes the authentication process shown in Fig. 5. First, in S101, it is determined whether or not the one-pass generation time acquired by the acquisition unit 45 is different from the current time. Here, the current time is the current time measured by the clock 46 of the second authentication device 4B.

[0050] Specifically, the determination in S101 is made by comparing the difference between the one-password generation time and the current time with a predetermined error tolerance stored in the storage unit 44. If the difference is smaller than the error tolerance, it is determined that there is no deviation (S101: True), and it is determined that authentication using a one-time password may continue, and the process proceeds to the next step. On the other hand, if the difference is equal to or greater than the error tolerance, it is determined that there is a deviation (S101: False), and the mobile terminal 3 is not authenticated (S108). The error tolerance is set to, for example, 5 seconds.

[0051] As described above, the portable terminal 3 generates a one-time password when the second authentication device 4B receives a beacon signal from the portable terminal 3, so the one-pass generation time and the current time should be approximately the same within the error range (at most about 1 second) between the portable terminal clock 36 and the authentication device clock 46. Nevertheless, if the one-pass generation time and the current time differ by, for example, 5 seconds or more, it is presumed that the timer count function of the portable terminal clock 36 is not operating accurately, or that either the portable terminal clock 36 or the authentication device clock 46 is not measuring time remarkably accurately. The authentication device 4 may receive the elapsed time and the key generation time from the portable terminal 3, and compare the time obtained by adding the elapsed time to the key generation time with the current time.

[0052] The process of S101 is basically a process performed to determine whether or not the timer count function of the clock 36 of the mobile terminal 3 is accurate, assuming that the mobile terminal 3 and the multiple authentication devices 4 are time-synchronized. The process of S101 corresponds to an error determination that determines whether or not the difference between the one-pass generation time and the current time is smaller than the error tolerance. Note that "authentication is determined to be impossible by the error determination" means that the difference between the one-pass generation time and the current time is equal to or larger than the error tolerance in the error determination.

[0053] In S101, if it is determined that the one-pass generation time and the current time are not different (S101: True), the process proceeds to S102, where it is determined whether the elapsed time is shorter than a specified time. The specified time is set in the range of, for example, 1 to 3 hours. From a security standpoint, it is not preferable to set this specified time to a long period such as one month, but the setting can be changed appropriately within a time range that is considered safe from a security standpoint. From a security standpoint, it is preferable to set the specified time to about several hours. Furthermore, the authentication device 4 may receive the key generation time from the mobile terminal 3, and determine whether the difference between the key generation time and the current time is shorter than the specified time. Note that "determined that authentication is not possible in the elapsed time determination" means that the elapsed time is equal to or longer than the specified time in the elapsed time determination.

[0054] Here, if the elapsed time is equal to or longer than the specified time, that is, if the one-pass generation key K2 is old. Using a past one-pass generation key K2 from which too much time has passed is undesirable from a security standpoint, since there is a possibility that the one-pass generation key K2 may be stolen during that time. Therefore, the process in S102 is a process for excluding authentication of a one-time password using such an old one-pass generation key K2.

[0055] In S102, if the elapsed time is shorter than the specified time (S102: Yes), the process proceeds to S103, where the key generation time is calculated. The key generation time is obtained by subtracting the elapsed time from the one-pass generation time. In this example, "2023-03-15 09:30:00" is calculated by subtracting "30 minutes" from "2023-03-15 09:00:00". Next, in S104, the one-pass generation key generating unit 47 generates a one-pass generation key K2. In S104, the second authentication device 4B generates a one-pass generation key K2 by substituting the property unique key K1 stored in advance and the key generation time calculated in S103 into a generation formula. Then, in S105, a one-time password is generated. The one-time password is generated by substituting the one-pass generation key K2 generated in S104 and the received elapsed time into a generation formula.

[0056] Then, in S106, it is determined whether the one-time password received from the mobile terminal 3 (hereinafter referred to as the "mobile-side one-time password") matches the one-time password generated by the second authentication device 4B in S105 (hereinafter referred to as the "authentication-side one-time password"). The process of S106 corresponds to an authenticity determination for determining the authenticity of the received one-time password. In S106, if the mobile-side one-time password matches the authentication-side one-time password (S106: Yes), the process proceeds to S107, where it is determined that the mobile terminal 3 that transmitted the beacon signal has been authenticated, that is, the authentication is OK.

[0057] On the other hand, in S106, if the mobile-side one-time password and the authentication-side one-time password do not match (S106: No), the process proceeds to S108, where it is determined that the mobile terminal 3 that transmitted the beacon signal could not be authenticated, i.e., authentication is NG. After S107 or S108 is executed, the authentication process ends.

[0058] In the high-speed processing described above, the process of S101 corresponds to an error judgment. The process of S102 corresponds to an elapsed time judgment. The process of S106 corresponds to an authenticity judgment. The judgment process includes these three judgments, and when all the judgments are satisfied, the authentication of the portable terminal 3 is OK. That is, when it is judged in S101 that the one-pass generation time is different from the current time (S101: False), or when it is judged in S102 that the elapsed time is equal to or longer than a specified time (S102: No), it is determined that neither of the judgment conditions is satisfied, and the process proceeds to S108, where the authentication is judged as NG. The second authentication device 4B authenticates the portable terminal 3 using the judgment result of the judgment process.

[0059] In this embodiment, if it is determined in S108 that authentication is NG, authentication is switched to mutual communication with the portable terminal 3. That is, authentication is performed by mutual communication with the portable terminal 3, for example, using the identification information of the portable terminal 3 received together with the one-pass related information. This process is equivalent to the above-mentioned normal process by the first authentication device 4A. It is also possible to notify the portable terminal 3 of the user 2 that authentication was not possible at high speed processing, and to request the portable terminal 3 to resend the identification information of the portable terminal 3.

[0060] In the above example, an example is described in which two authentication devices 4 are provided in the system 1, and the authentication device 4 that performs normal processing as the first authentication is referred to as the "first authentication device 4A" for convenience, and the authentication device 4 that performs high-speed processing as the second authentication after the normal processing is referred to as the "second authentication device 4B" for convenience. However, as described above, when the elapsed time becomes longer than the specified time, the authentication device 4 resets the one-pass generation key K2 generated in the first normal processing, so that the second authentication by the second authentication device 4B may also perform normal processing. In this case, the one-pass generation key K2 is generated again in the second authentication. In this way, the one-pass generation key K2 is reset every specified time.

[0061] Furthermore, three or more authentication devices 4 may be provided, and other authentication devices 4 performing the third and subsequent authentications may function as the first authentication device 4A and execute normal processing, or as the second authentication device 4B and execute high-speed processing. Whether each of the multiple authentication devices 4 executes normal processing or executes high-speed processing as the second authentication device 4B in Fig. 5 can be determined, for example, by configuring the device to execute high-speed processing when the beacon signal from the mobile terminal 3 includes one-pass related information, and to execute normal processing when the beacon signal from the mobile terminal 3 does not include one-pass related information.

[0062] A4.Effects: According to the entrance / exit management security system 1 of the first embodiment, the first authentication device 4A executes normal processing by two-way communication with the mobile terminal 3, and the second authentication device 4B executes high-speed processing using authenticity determination of the one-time password by one-way communication from the mobile terminal 3. This makes it possible to shorten the time required for authentication by the second authentication device 4B.

[0063] In the above, the second authentication by the second authentication device 4B different from the first authentication device 4A has been described, but if the authentication conditions of the judgment process including the authenticity determination of the one-time password are satisfied, high-speed processing is possible by the third, fourth, etc. authentication devices, and authentication into different security areas 5 can be performed continuously at high speed.

[0064] Furthermore, since multiple time-synchronized authentication devices 4 can perform high-speed authentication processing using a one-time password with a simple configuration having a common property-specific key K1, there is no need to store individual difference information of each mobile terminal 3 in each authentication device 4 or share it through transmission and reception. Therefore, the amount of information held by each authentication device 4 can be small, and the processing load can be reduced. In the entrance and exit management security system 1, an increase in traffic can be suppressed.

[0065] According to the entrance / exit management security system 1 of the first embodiment, a one-time password is generated using a one-password generation key K2 generated using a changing key generation time, rather than a property-specific key K1. This makes cryptographic analysis of the one-time password difficult, and security can be maintained at a good level. Furthermore, a parameter called "elapsed time" is used in generating the one-time password. The elapsed time is individual difference information that reflects the individual differences of each mobile terminal 3, and is a parameter that changes over time and is difficult to predict.

[0066] Generally, in authentication by one-way transmission, signals including information for authentication such as a one-time password are transmitted more frequently than in authentication by two-way communication, and the risk of the signal being intercepted increases. Therefore, in a configuration in which authentication is performed only by one-way communication, a malicious third party can relatively easily intercept (wiretap) the signal transmitted from the mobile terminal 3 to the authentication device 4, and as a result, the information for authentication such as a password and the one-pass generation key K2 can be relatively easily known. In addition, in authentication by two-way communication, authentication processing can be performed using a communication method with high security by using encrypted communication, but authentication by one-way communication uses unencrypted communication, which means that security is lower than that of two-way communication, and therefore the information for authentication can be relatively easily known.

[0067] However, in the first embodiment, the "elapsed time", which is a parameter that varies over time and differs for each portable terminal 3, is used in conjunction with the "one-password generation key K2" to generate a one-time password. In other words, since a one-time password is generated using two pieces of variable information, security is not reduced compared to authentication by mutual communication, and security can be improved synergistically.

[0068] According to the entrance / exit management security system 1 of the first embodiment, in authentication by the second authentication device 4B, the elapsed time judgment shown in S102 is executed. Therefore, if the elapsed time is longer than a specified time, that is, if the one-time password generating key is old and there is a concern about the security of the one-time password on the mobile terminal side, it is possible to configure so that the authentication of the mobile terminal 3 is not allowed without performing the authenticity judgment.

[0069] According to the entrance / exit management security system 1 of the first embodiment, in authentication by the second authentication device 4B, an error judgment shown in S101 is executed. Therefore, for example, when the timer function for measuring the elapsed time in the mobile terminal 3 is not working properly and the mobile one-time password that should be generated is not generated correctly, it is possible to prevent authenticity judgment from being executed using an inaccurate mobile one-time password.

[0070] According to the entrance / exit management security system 1 of the first embodiment, if authentication is not successful in the high-speed processing by the second authentication device 4B (S108), normal authentication is performed through mutual communication with the mobile terminal 3. This improves the convenience for the user 2.

[0071] B. Second embodiment: Next, an entrance / exit management security system according to a second embodiment of the present disclosure will be described with reference to Fig. 6. Note that the same reference numerals are used for configurations substantially similar to those of the first embodiment, and descriptions thereof will be omitted. Fig. 6 is a diagram for explaining the concept of a portion of the entrance / exit management security system according to the second embodiment.

[0072] The entrance / exit management security system of the first embodiment manages the entrance / exit of a user 2 to security areas 5A and 5B managed by authentication devices 4A and 4B having the same property unique key, but the entrance / exit management security system of the second embodiment, as shown in Fig. 6, assumes that there are two different companies, Company A and Company B, and that the entrance / exit management of visitors to a specific security area in each company is performed. The specific security area in each company is provided with authentication devices 401 and 402, as in the first embodiment. However, since the two companies have different properties, the property unique key K1 stored in the authentication device 401 held by Company A is different from the property unique key K3 stored in the authentication device 402 held by Company B.

[0073] In this entry / exit management security system, an example is assumed in which a temporary worker, as user 2, enters and leaves two properties: company A, the source of the temporary worker, and company B, the destination of the temporary worker. When the mobile terminal 3 of user 2 communicates with authentication devices 401, 402 having different property unique keys K1, K3, and has already been initially authenticated with the authentication devices 401, 402 of the respective companies, the mobile terminal 3 of user 2 holds multiple one-time passwords (two in this embodiment). One is a one-time password based on the property unique key K1, and the other is a one-time password based on the property unique key K3.

[0074] In order to prevent a problem that the mobile terminal 3 does not know which one-time password it should send among the one-time passwords it holds during the second or subsequent rapid authentication, in the second embodiment, during the initial normal authentication process, the authentication devices 401, 402 send a property code to the mobile terminal 3 in addition to the one-pass generation information. The property code is property-specific information that can identify each company. The "property-specific information" may be, for example, a property code assigned to each contracting party that has installed the authentication device 4, information assigned to each company, or information assigned to each department in the same company. The one-pass generation information and the property code may be sent separately.

[0075] The mobile terminal 3 stores the one-time password generated using the one-pass generation information in association with the property code. The authentication devices 401 and 402 transmit a beacon signal including the property code at regular intervals. As a method for transmitting the property code, the property code may be transmitted when a human is detected by a motion sensor or the like. In this case, the motion sensor may be provided in the authentication device 4 or may be disposed outside the authentication device 4. The property code and the beacon signal may be transmitted separately. Then, when the mobile terminal 3 receives a beacon including the property code from the authentication devices 401 and 402 during the authentication process, the mobile terminal 3 transmits the one-time password associated with the received property code to the authentication devices 401 and 402.

[0076] According to the entrance / exit management security system of the second embodiment, the mobile terminal 3 transmits a one-time password corresponding to the property to the authentication device based on the received property code. Therefore, in an authentication system having multiple authentication devices 4 in which different property-specific keys are set, authentication corresponding to each property can be automatically performed. The number of properties may be three or more.

[0077] C. Third embodiment: Next, an entrance / exit management security system according to a third embodiment of the present disclosure will be described with reference to Fig. 7. Fig. 7 is a sequence diagram illustrating a part of the authentication flow of the entrance / exit management security system according to the third embodiment of the present disclosure. The third embodiment is a modified example of the second embodiment.

[0078] In the second embodiment, the property that the user 2 wants to enter and leave is the A company. However, if the mobile terminal 3 receives an unexpected beacon signal from the B company, which is a different property close to the A company, the mobile terminal 3 may mistakenly transmit a one-time password associated with the B company to the A company's authentication device 401. In this case, there is a possibility that the user 2 may not be able to enter or leave the property that he or she wants to enter and leave. This may occur, for example, when the radio wave strength of the beacon signal from the B company's authentication device 402 is greater than the radio wave strength of the beacon signal from the A company's authentication device 401. Since the radio wave strength varies greatly depending on the receiving location and the position of radio wave obstructions such as human bodies, the radio wave strength of the beacon signal changes depending on the receiving location and the receiving environment. For this reason, for example, even if the A company's authentication device 401 is closer, if its signal is obstructed and not obstructed by the B company's authentication device 402, the radio wave strength of the beacon signal may be reversed.

[0079] In order for the mobile terminal 3 to automatically switch between properties, each of the authentication devices 401 and 402 transmits a beacon signal including a property code at regular intervals, as in the second embodiment. In the third embodiment, the mobile terminal 3 performs reception judgment of the received beacon signal. In the reception judgment, the judgment is started first when the beacon signal from the authentication device is received with a radio wave strength equal to or higher than a certain level. The radio wave strength here is assumed to be the radio wave strength of the beacon signal received by the mobile terminal 3 when the distance between the mobile terminal 3 and the authentication device is about 7 m, for example. Then, when the moving average value of the radio wave strength of the beacon signal multiple times (about 2 to 5 times) exceeds a predetermined radio wave strength, the one-time password is transmitted. The radio wave strength here is assumed to be the radio wave strength of the beacon signal received by the mobile terminal 3 when the distance between the mobile terminal 3 and the authentication device is about 5 m, for example. FIG. 7 shows an example in which the beacon signal from the authentication device 402 of company B satisfies the condition, and the mobile terminal 3 transmits a one-time password corresponding to the property code of company B to the authentication device 402.

[0080] According to the third embodiment, reception is judged using a beacon signal whose moving average value of radio wave strength exceeds a predetermined radio wave strength, and a one-time password corresponding to a property code contained in the beacon signal is transmitted, so that even if beacon signals are received simultaneously from a plurality of properties, the property to which the user 2 wishes to enter or leave can be automatically and accurately switched. In other words, the convenience of the user 2 can be improved.

[0081] D. Other embodiments: (D1) In the entrance / exit management security system 1 of the first embodiment described above, "elapsed time" is used as individual difference information indicating individual differences among multiple portable terminals 3. "Elapsed time" is information that changes over time, and is the time from receiving the one-pass generation key K2 to generating a one-time password. Instead of this "elapsed time", for example, a fixed value that does not change over time, such as the identification ID of each portable terminal 3, may be used as individual difference information. Even with this configuration, security is guaranteed because the one-pass generation key K2 uses at least one piece of information that changes over time, namely the key generation time.

[0082] The key generation time may be generated using internal information of the device itself that changes depending on the timing of generating the one-pass generation key K2. For example, the one-pass generation key K2 may be generated using the number of times the one-pass generation key K2 is generated or the number of times the authenticity is verified.

[0083] In addition, the authentication device 4 may associate the identification information of a mobile terminal 3 that has been determined to be authenticated OK in normal processing with the internal information used to generate the one-time password generation key sent to that mobile terminal 3, and share and store the information among multiple authentication devices 4.When an authentication request for high-speed processing is received from a mobile terminal 3, the authentication device 4 may read out the internal information corresponding to the identification information of the received mobile terminal 3 from the memory unit 44, and perform authenticity determination and elapsed time determination.

[0084] (D2) In the entrance / exit management security system 1 of the first embodiment, the identification information is checked in normal processing and not checked in high-speed processing, but this is not limited to this. For example, the one-time password and the identification information may be transmitted from the mobile terminal 3, and the authentication device 4 may check the identification information in addition to making an authentication decision.

[0085] In addition, as a measure against unauthorized users who infiltrate by masquerading as legitimate users, the authentication device 4 may generate the one-pass generation key K2 using identification information that has been determined to be authenticated OK in normal processing in addition to the unique key and key generation time. The mobile terminal 3 transmits the one-time password, elapsed time, one-pass generation time, and identification information to the authentication device 4, and the authentication device 4 performs authentication determination using the received information. This ensures that only pre-authenticated terminals are authenticated, and unauthorized users who use arbitrary identification information can be identified with greater accuracy.

[0086] (D3) In the entrance / exit management security system 1 of the first embodiment described above, in S103, the key generation time is calculated by subtracting the elapsed time from the one-pass generation time, but for example, the key generation time may be transmitted from the first authentication device 4A to the second authentication device 4B without going through the mobile terminal 3. In this configuration, the process of S103 may be omitted, and the one-pass generation key K2 may be generated using the key generation time received from the first authentication device 4A in S104.

[0087] (D4) In the entrance / exit management security system 1 of the first embodiment, the authenticity determination for determining the authenticity of the one-time password is performed in S106 by comparing the mobile one-time password with the authentication one-time password. The authenticity determination only needs to be able to determine the authenticity of the mobile one-time password, and the method is not limited to generating the authentication one-time password. For example, in a configuration in which the elapsed time is obtained by decrypting the received mobile one-time password using the property unique key K1, the authenticity determination may be performed by comparing the obtained plain text indicating the elapsed time with the information on the elapsed time received from the mobile terminal 3.

[0088] (D5) In the entry / exit management security system 1 of the first embodiment, the hands-free authentication is started (the authentication process starts) when a hand is held over the door 6, but this is not limited to the above. For example, the hands-free authentication may be started when a human sensor or an image is used to detect the presence of the user 2 near the door 6. The hands-free authentication may also be started when the radio wave intensity of the beacon signal received from the mobile terminal 3 exceeds a predetermined threshold.

[0089] (D6) In the entrance / exit management security system 1 of the first embodiment, with respect to the error determination in S101 and the elapsed time determination in S102, both or either one of the determinations may be omitted.

[0090] (D7) In the entrance / exit management security system 1 of the first embodiment, the mobile terminal 3 is not limited to a smartphone, and various types of terminals, such as a tablet terminal, can be used.

[0091] (D8) In the entrance / exit management security system 1 of the first embodiment, the wireless communication between the mobile terminal 3 and the authentication device 4 is not limited to that conforming to the BLE standard, and wireless communication of various standards can be adopted.

[0092] (D9) In the entrance / exit management security system 1 of the first embodiment, each process in the control unit 41 of the authentication device 4 may be performed in a physically different central management system. For example, the authentication unit 49 and the storage unit 44 of the authentication device 4 may be provided in a central management server.

[0093] The present disclosure is not limited to the above-mentioned embodiment, and can be realized in various configurations without departing from the spirit of the present disclosure. For example, the technical features in each embodiment corresponding to the technical features in the form described in the Summary of the Invention column can be appropriately replaced or combined in order to solve some or all of the above-mentioned problems or to achieve some or all of the above-mentioned effects. Furthermore, if the technical feature is not described as essential in this specification, it can be appropriately deleted. [Explanation of symbols]

[0094] 1...Entry / exit management security system, 2...User, 3...Mobile terminal, 4A...First authentication device, 4B...Second authentication device, 5A...First security area, 5B...Second security area, 6A, 6B...Door, 31...Control unit, 32...Operation unit, 33...Communication unit, 34...Memory unit, 35...Display unit, 36...Mobile terminal clock, 37...One-time password generation unit, 41...Control unit, 42...Operation unit, 43...Communication unit, 44...Memory unit, 45...Acquisition unit, 46...Authentication device clock, 47...One-pass generation key generation unit, 48...One-time password generation unit, 49...Authentication unit, 51...Electric lock control unit, 401, 402...Authentication device, K1, K3...Property-specific key, K2...One-pass generation key

Claims

1. An authentication system including: a plurality of portable terminals carried by a user; and an authentication device that performs a first authentication process for authenticating the portable terminals using a first communication method between the portable terminals and the authentication device; and a second authentication process for authenticating the portable terminals using a second communication method between the portable terminals and the authentication device, the second communication method being lower in security than the first communication method, The mobile terminal includes: a terminal-side storage unit that stores a one-time password generation key received from the authentication device; an authentication request unit that, when requesting the second authentication process, generates a one-time password using the stored one-time password generation key and individual difference information of the terminal itself, and transmits an authentication request including the one-time password and the individual difference information; The authentication device includes: a device-side storage unit that stores a unique key and internal information of the device itself that changes over time; a key generation and transmission unit that, when authentication of the portable terminal is successful through the first authentication process, generates the one-time password generation key required for the second authentication process using the unique key and the internal information, and transmits the one-time password generation key to the portable terminal; an authentication unit that, upon receiving the authentication request from the portable terminal, performs an authenticity determination for determining the authenticity of the received one-time password by using the individual difference information included in the authentication request and the internal information and the unique key used for generating the one-time password generation key, thereby authenticating the portable terminal; An authentication system having the above configuration.

2. the key generation and transmission unit generates the one-time password generation key by using a time measured by the device itself as the internal information; the authentication request unit generates the one-time password by using a time measured by the terminal itself as the individual difference information. The authentication system according to claim 1 .

3. the authentication request unit generates the one-time password by using, as the individual difference information, a time elapsed from receiving the one-time password generation key to generating the one-time password; the authentication unit receives the authentication request from the portable terminal, the authentication request including the elapsed time and a one-time password generation time, which is a time when the one-time password is generated, as the internal information used for generating the one-time password generation key. The authentication system according to claim 2 .

4. the authentication unit performs an elapsed time determination to determine whether or not the time when the one-time password generation key was generated is shorter than a predetermined specified time, and when it is determined that authentication is not possible in the authenticity determination or the elapsed time determination, performs the first authentication process; the key generation and transmission unit transmits the one-time password generation key newly generated after the first authentication process to the mobile terminal.

4. An authentication system according to claim 2 or 3.

5. the authentication unit performs an error judgment to judge whether or not a difference between a time when the one-time password was generated and a current time measured by the authentication device is smaller than a predetermined error allowance, and when it is determined that authentication is not possible in the authenticity judgment or the error judgment, performs the first authentication process. The authentication system according to claim 3.

6. the first authentication process is performed in a state where the portable terminal and the authentication device are paired with each other; the second authentication process is a high-speed process for performing authentication between the portable terminal and the authentication device in a state where they are not paired. An authentication system according to any one of claims 1 to 3.

7. There are a plurality of authentication devices, the unique key is common to each of the authentication devices, the authentication unit performs the authenticity determination using the internal information used for generating the one-time password generation key, the internal information being calculated based on the one-time password generation time and the elapsed time. The authentication system according to claim 3.

8. An authentication method using an authentication system including a plurality of portable terminals carried by a user, and an authentication device that performs a first authentication process for authenticating the portable terminals using a first communication method between the portable terminals and the authentication device, and a second authentication process for authenticating the portable terminals using a second communication method with the portable terminals, the second communication method having a lower security level than the first communication method, The mobile terminal includes: storing a one-time password generating key received from the authentication device; When requesting the second authentication process, a one-time password is generated using the stored one-time password generation key and individual difference information of the terminal itself, and an authentication request including the one-time password and the individual difference information is transmitted; The authentication device includes: storing a unique key and internal information of the device itself which changes over time; if authentication of the mobile terminal is successful in the first authentication process, generating a one-time password generation key required for the second authentication process using the unique key and the internal information, and transmitting the one-time password generation key to the mobile terminal; when receiving the authentication request from the portable terminal, an authenticity determination is performed to determine the authenticity of the received one-time password by using the individual difference information included in the authentication request and the internal information and the unique key used for generating the one-time password generation key, thereby authenticating the portable terminal. Authentication method.

Images