Authentication system, authentication method, and program

Abstract

SOLUTION: An authentication system includes: an acquisition unit for acquiring an identification result of a user based on user information about the user and acquiring state information indicating a specific state of the user from a state detection device for detecting a specific state of the user; an authentication unit for authenticating that the state of the user satisfies predetermined conditions based on the identification result of the user and the state information; and an issuing unit for issuing a digital certificate indicating that the state of the user has been authenticated as satisfying the predefined conditions when the authentication unit authenticates that the state of the user satisfies the predefined conditions.SELECTED DRAWING: Figure 4

Description

[Technical field]

[0001] The present invention relates to an authentication system, an authentication method, and a program. [Background technology]

[0002] Patent Document 1 describes that the management system unit stores the authorization data of the breath sample and the result of matching the authorization information with the analysis result, and links these results to personal identification information. [Prior art document] [Patent documents] [Patent Document 1] U.S. Patent No. 10,229,549 [Patent Document 2] Patent No. 7209121 Specification Summary of the Invention [Problem to be solved by the invention]

[0003] It is desirable to ensure that a user's state information is correct. [Means for solving the problem]

[0004] An authentication system according to an aspect of the present invention may include an acquisition unit that acquires a user identification result based on user information related to a user, and acquires status information indicating a specific status of the user from a status detection device that detects a specific status of the user. The authentication system may include an authentication unit that authenticates that the status of the user satisfies a predetermined condition based on the user identification result and the status information.

[0005] The authentication system may include an issuing unit that, when the authentication unit certifies that the user's status satisfies the predetermined conditions, issues a certificate indicating that the user's status has been certified to satisfy the predetermined conditions.

[0006] In any of the authentication systems, the specific status may include at least one of a status related to the user's physical condition, a status related to the user's activity, a status related to the user's work, and a status related to the user's ability.

[0007] In any of the authentication systems, the user's physical condition may include at least one of breath alcohol concentration, blood alcohol concentration, body temperature, heart rate, pulse rate, respiratory rate, blood pressure, blood glucose level, coughing, voice, eye movement, electromyography, facial expression, staggering, and stress state.

[0008] In any of the authentication systems, the status regarding the user's activity may include at least one of meal times, meal contents, exercise records, sleep times, medication history, hospital visit history, and treatment history.

[0009] In any of the authentication systems, the user's work status may include at least one of working hours, overtime hours, time elapsed since the end of a previous shift, and number of consecutive days worked.

[0010] In any of the authentication systems, the user's ability status may include at least one of a cognitive ability and a motor ability check test.

[0011] Any of the authentication systems may further include a providing unit that provides the permit to a device that the user is permitted to operate based on the permit.

[0012] In any of the authentication systems, the authentication system may further include a change detection unit that detects that a user operating the device has been changed. In response to the change detection unit detecting that the user has been changed, the acquisition unit may newly acquire the status information and the identification result, and the authentication unit may authenticate that the status of the user satisfies the predetermined condition based on the new identification result and the new status information.

[0013] In any of the authentication systems, the device may be a vehicle driven by the user, the vehicle allowing the user to drive the vehicle if the permit for the user is provided.

[0014] In any of the authentication systems, the authentication system may further include a change detection unit that detects that a driver of the mobile body has been changed. In response to the change detection unit detecting that a driver of the mobile body has been changed, the acquisition unit may newly acquire the status information and the identification result, and the authentication unit may certify that the status of the user satisfies the predetermined condition based on the new identification result and the new status information.

[0015] In any of the authentication systems, the acquisition unit may further acquire mobile object information related to the mobile object from the mobile object. The authentication unit may authenticate that a state of the user satisfies the predetermined condition based on the mobile object information.

[0016] In any of the authentication systems, the acquisition unit may further acquire environmental information indicating a state of an environment around the user, and the authentication unit may authenticate that the state of the user satisfies the predetermined condition based on the environmental information.

[0017] In any of the authentication systems, the acquisition unit may further acquire location information indicating a location where the user is present. The authentication unit may authenticate that a state of the user satisfies the predetermined condition based on the location information.

[0018] In any of the authentication systems, a notification unit may be provided that notifies the user that the user has not been authenticated if the authentication unit does not certify that the user's status satisfies the predetermined condition.

[0019] In any one of the authentication systems, the authentication unit may store a result of the authentication in a storage unit.

[0020] In any of the authentication systems, the acquisition unit may acquire the identification result of the user from a user identification device that identifies the user. The user identification device may identify the user based on at least one of biometric authentication, ID authentication, and password authentication.

[0021] In any of the authentication systems, the state detection device may have a calibration unit that performs calibration of the state detection device. The acquisition unit may acquire management information including at least one of a calibration time when calibration should be performed by the calibration unit, a calibration date and time performed by the calibration unit, a calibration method, and information on a person who performed the calibration. The authentication unit may authenticate that the state of the user satisfies a predetermined condition based further on the management information.

[0022] In any of the authentication systems, the authentication unit may certify that the user's status satisfies predetermined conditions based on the user's identification result and the status information when the management information satisfies predetermined calibration conditions.

[0023] An authentication method according to one aspect of the present invention may include a step in which an acquisition unit acquires a user identification result based on user information related to a user. The authentication method may include a step in which the acquisition unit acquires status information indicating a specific status of the user from a status detection device that detects a specific status of the user. The authentication method may include a step in which an authentication unit authenticates that the status of the user satisfies a predetermined condition based on the user identification result and the status information. The authentication method may include a step in which an issuer issues a permit indicating that the status of the user has been authenticated as satisfying the predetermined condition, when the authentication unit authenticates that the status of the user satisfies the predetermined condition.

[0024] A program according to one aspect of the present invention may cause a computer to function as an acquisition unit that acquires a user identification result based on user information related to a user and acquires status information indicating a specific status of the user from a status detection device that detects a specific status of the user. The program may cause the computer to function as an authentication unit that authenticates that the status of the user satisfies a predetermined condition based on the user identification result and the status information. The program may cause the computer to function as an issuer that issues a permit indicating that the status of the user has been authenticated as satisfying the predetermined condition, when the authentication unit authenticates that the status of the user satisfies the predetermined condition.

[0025] The above summary of the invention does not list all of the features of the present invention. Also, subcombinations of these features may also be inventions. [Brief description of the drawings]

[0026] [Figure 1] FIG. 2 is a diagram illustrating an example of a functional block of the authentication system according to the present embodiment. [Diagram 2] FIG. 11 is a diagram illustrating a more specific configuration example of the authentication system. [Diagram 3] 2 is an example of a functional block of an authentication device. [Figure 4] 13 is a flowchart showing an example of an authentication procedure of the authentication device. [Diagram 5] 10 is a flowchart showing another example of an authentication procedure of the authentication device. [Figure 6] 2 is an example of a hardware configuration. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0027] The present invention will be described below through embodiments of the invention, but the following embodiments do not limit the scope of the invention according to the claims. Furthermore, not all of the combinations of features described in the embodiments are necessarily essential to the solution of the invention.

[0028] FIG. 1 is a diagram showing an example of a functional block of an authentication system 10 according to the present embodiment. The authentication system 10 includes a state detection device 20, a user identification device 30, and an authentication device 100. The state detection device 20, the user identification device 30, and the authentication device 100 are communicably connected to each other via a network 50 such as the Internet or an intranet. The state detection device 20, the user identification device 30, and the authentication device 100 may be configured as one device. Two of the state detection device 20, the user identification device 30, and the authentication device 100 may be configured as one device. That is, the state detection device 20 and the user identification device 30 may be configured as one device. The user identification device 30 and the authentication device 100 may be configured as one device. The state detection device 20 and the user identification device 30 may be configured as one device. The state detection device 20 and the user identification device 30 may be configured as one device. The state detection device 20 and the authentication device 100 may be configured as one device.

[0029] The state detection device 20 detects a specific state of a user. The user identification device 30 identifies a user based on user information related to the user. The user identification device 30 identifies a user based on at least one of biometric authentication, ID authentication, and password authentication. The authentication device 100 authenticates that the state of the user satisfies a predetermined condition based on state information indicating the specific state of the user provided by the state detection device 20 and the user identification result provided by the user identification device 30, and issues a permit. The permit certifies that the state information indicates the state of the specific user without tampering. The permit certifies that the state information is not the state of the specific user obtained illegally and indicated. By using such a permit, the authenticity of the information indicating the specific state of the user can be confirmed. By using such a permit, it is possible to accurately determine whether or not to permit the user to operate a specific device according to the state of the user.

[0030] The state detection device 20 may have a statistics generation unit 28 that performs statistical processing on the state information. The authentication device 100 may authenticate that the state of the user satisfies a predetermined condition based on state information indicating a specific state of the user provided from the state detection device 20 and statistically processed by the statistics generation unit 28, and the user identification result provided from the user identification device 30, and issue a permit. The statistical processing refers to generating at least one of the average value, maximum value, minimum value, variance, moment, and histogram of the measurement values.

[0031] 2 is a diagram showing a more specific configuration example of the authentication system 10. The authentication device 100 is provided in a moving body 80 such as an automobile. The moving body 80 is a concept that includes vehicles that move on the ground, flying bodies that move in the air, ships that move on the water, etc. The flying bodies that move in the air is a concept that includes airplanes, airships, helicopters, etc. that move in the air.

[0032] When the authentication device 100 is provided in an automobile, an ECU (Electronic Control Unit) that controls the automobile may function as the authentication device 100. The ECU may be configured to include a so-called microcomputer that includes a CPU, a ROM, a RAM, an input / output interface, etc. The ECU performs signal processing according to a program pre-stored in the ROM while utilizing the temporary storage function of the RAM.

[0033] The state detection device 20 detects at least one of a state related to the user's physical condition, a state related to the user's activity, a state related to the user's work, and a state related to the user's ability. The state related to the user's physical condition may include at least one of breath alcohol concentration, blood alcohol concentration, body temperature, heart rate, pulse rate, respiratory rate, blood pressure, blood glucose level, cough, voice, eye movement, electromyogram, facial expression, dizziness, and stress state. The state related to the user's activity may include at least one of meal time, meal content, exercise record, sleep time, medication history, hospital visit history, and treatment history. The state related to the user's work may include at least one of working hours, overtime hours, elapsed time since the end of the previous shift, and number of consecutive working days. The state related to the user's ability may include at least one of cognitive ability and motor ability check test.

[0034] The state detection device 20 may be a breathalyzer 200 that detects a breath alcohol concentration. When the state detection device 20 is a breathalyzer 200 that detects a breath alcohol concentration, the breathalyzer 200 is preferably an optical type breathalyzer because it can measure the alcohol concentration in the breath with high accuracy. The state detection device 20 may be, for example, a wearable terminal 202 that detects at least one of a blood alcohol concentration, a body temperature, a heart rate (RF measurement), a pulse rate, a respiratory rate, a blood pressure, a blood glucose level, a cough, a voice, an eye movement, an electromyogram, a facial expression, a stagger, and a stress state. The state detection device 20 may include the breathalyzer 200 and the wearable terminal 202. The state detection device 20 may include other devices such as a sensor that detects a specific state of the user in addition to the breathalyzer 200 and the wearable terminal 202. The state detection device 20 may be a sensor that is provided in a room of the moving body 80 and detects a specific state of the user.

[0035] When the state detection device 20 is an alcohol detector 200 that detects the breath alcohol concentration and has a statistics generation unit 28 that performs statistical processing of the measurement results of the alcohol detector 200, if the average value of the measurement results of the alcohol concentration in the user's breath falls below a reference value (e.g., 0.15 mg / L), the authentication device 100 may certify that the user is not in a drunk state.

[0036] If the status detection device 20 is a thermometer that detects the user's body temperature and has a statistics generation unit 28 that performs statistical processing of the thermometer's measurement results, the authentication device 100 may certify that the user has a normal body temperature if the thermometer's measurement results do not significantly deviate from a reference value estimated from the average value or variance of the measurement results over a certain period of time in the past, or if the measurement results are below a specific value (e.g., 37.5°C).

[0037] The condition detection device 20 may be a user activity management device that manages the user's activity status. The user management device may be a mobile terminal such as a smartphone that has at least one application that manages at least one of the following: mealtimes, meal contents, exercise records (number of steps or calories burned), sleep time, medication history, hospital visit history, and treatment history.

[0038] If the status detection device 20 is a user activity management device that manages the status related to the user's activities, the authentication device 100 may certify that the user is able to work if the user's most recent sleep time is equal to or longer than a certain period of time (e.g., 5 hours).

[0039] The status detection device 20 may be a time attendance management device that manages the status of a user related to work or school. The status detection device 20 may be a user ability management device that manages the status related to a user's abilities. The user ability management device may be a mobile terminal such as a smartphone that stores the results of cognitive ability, skill, and motor ability check tests.

[0040] If the status detection device 20 is an attendance management device that manages the user's work or academic status, the authentication device 100 may certify that the user is available to work (study) if a certain amount of time (e.g., 9 hours) or more has passed since the end of the user's last work shift (end of study), if the total working hours (end of study) in a month are less than a certain amount of time (e.g., 284 hours), if the user is in a certain area at a certain time, or if the continuous working hours (continuous study hours) are less than a certain amount of time (e.g., 4 hours).

[0041] When the state detection device 20 is a sensor that detects the breath alcohol concentration or the like, the state detection device 20 may include a measurement unit 22, a calibration unit 24, and a storage unit 26. The measurement unit 22 measures the state related to the user's physical condition, such as the breath alcohol concentration.

[0042] The calibration unit 24 calibrates the state detection device 20. When the state detection device 20 is a sensor, the characteristics of the sensor may change over time.

[0043] The calibration unit 24 may perform calibration based on an index indicating a specific state, such as the breath alcohol concentration measured by the measurement unit 22, and a reference index measured in advance when the user to be measured is in a specific state. The calibration unit 106 may correct a coefficient for calculating the measurement so that the measured index matches the reference index. The state detection device 20 may correct the coefficient so that the minimum value of the index calculated by itself within a predetermined period matches the reference index.

[0044] Furthermore, when the measurement unit 22 measures the breath alcohol concentration, the measurement value VM during the period when breath is not being blown may be set as the zero point, and the measurement unit 22 may be automatically zero-point calibrated. Specifically, the zero-point calibration is a correction by subtracting VM from the measurement value.

[0045] The storage unit 26 may store management information including at least one of the calibration timing when calibration should be performed by the calibration unit 24, the date and time of calibration performed by the calibration unit 24, the calibration method, information on the person who calibrated, the presence or absence of a malfunction, the cumulative number of uses, and the expiration date. The calibration method is a method of calibration performed by the calibration unit 24. The calibration method may include environmental information at the time of calibration (temperature, humidity, air pressure, and date and time).

[0046] The user identification device 30 includes a user information acquisition unit 32, an identification unit 34, and a storage unit 36. The user information acquisition unit 32 may be an imaging unit that captures an image showing the user's face, fingerprint, iris, or veins as user information related to the user for identifying the user. The user information acquisition unit 32 may be a microphone that records the user's voice as the user information. When the user information acquisition unit 32 acquires the user's voice, it may instruct the user to read aloud different words each time the user information is acquired, in order to prevent the user from posing as a legitimate user by playing back the recorded sound.

[0047] The user information acquisition unit 32 may be a reader that reads from a card that displays or stores a user ID. The card may be an ID card that displays or stores information that uniquely identifies a user, such as an employee ID or a driver's license. The user information acquisition unit 32 may be an input unit such as a touch panel or keyboard that accepts an ID and password from a user.

[0048] The identification unit 34 identifies a user based on the user information. The storage unit 36 ​​may store various information necessary for the identification unit 34 to identify a user. The storage unit 36 ​​stores user identification information that can identify a user from the user information. The identification unit 34 may identify a user by comparing the user information with the user identification information to determine whether the user is a legitimate user who has been authenticated in advance, a user who is permitted to perform the target process, a user who is permitted to operate the target device, an employee, a registered user, etc.

[0049] The user identification device 30 may be a mobile terminal such as a smartphone having a user authentication function such as a camera function, face authentication, or fingerprint authentication function. The user identification device 30 may be a camera or a microphone installed in the room of the mobile object 80.

[0050] 3 is an example of functional blocks of the authentication device 100. The authentication device 100 includes a control unit 110 and a storage unit .

[0051] The control unit 110 may be configured with a microprocessor such as a CPU or an MPU, a microcontroller such as an MCU, etc. The control unit 110 has an acquisition unit 112, an authentication unit 114, an issuance unit 116, a provision unit 118, an alteration detection unit 120, and a notification unit 122.

[0052] The acquisition unit 112 acquires the user's identification result from the user identification device 30, and acquires state information indicating a specific state of the user from the state detection device 20. The acquisition unit 112 also acquires common information that associates the user's identification result with the state information. When the state detection device 20 and the user identification device 30 are configured as the same device, the acquisition unit 112 may acquire the user's identification result and state information together with device information that uniquely identifies the device. The acquisition unit 112 may acquire the identification result including the device information and the state information including the device information separately. When the state detection device 20 and the user identification device 30 are not configured as the same device, the state detection device 20 and the user identification device 30 may be arranged adjacent to each other to such an extent that at least the user identification by the user identification device 30 and the detection of the user by the state detection device 20 can both be performed on the spot without the user moving to another location. The state detection device 20 and the user identification device 30 may be arranged at a distance that allows short-distance communication.

[0053] The status detection device 20 and the user identification device 30, which are arranged adjacent to each other, have common information, and the status detection device 20 may transmit status information including the common information to the authentication device 100, and the user identification device 30 may transmit the user identification result including the common information to the authentication device 100.

[0054] The authentication unit 114 authenticates that the user's state satisfies a predetermined condition based on the user's identification result and state information. If the user's identification result indicates that the user is a valid user, the state information indicates the state of the valid user, and the state of the user satisfies a predetermined allowable condition, the authentication unit 114 may authenticate that the user's state satisfies the predetermined condition.

[0055] For example, if the user identification result indicates that the user is authorized to drive a specific automobile, the status information indicates the breath alcohol content of the specific user, and the breath alcohol concentration of the specific user is below the standard value for acceptable driving, the authentication unit 114 may certify that the user's status satisfies predetermined conditions.

[0056] Furthermore, the measuring unit 22 may measure the breath CO2 concentration in addition to measuring the breath alcohol concentration. The CO2 concentration contained in human breath is about 4%, which is higher than the CO2 concentration in the atmosphere. Therefore, by the measuring unit 22 measuring the breath CO2 concentration, the authentication unit 114 can estimate that the object measured by the measuring unit 22 is not a fake gas but the user's breath.

[0057] Furthermore, the measurement unit 22 may measure the pressure in addition to measuring the breath alcohol concentration. By the measurement unit 22 measuring the pressure, the authentication unit 114 can estimate that the user has correctly blown breath.

[0058] Furthermore, the authentication unit 114 may use an image or video captured by a camera that captures an image of the user during authentication. By using the image or video captured by the camera, it is possible to determine whether the user is committing fraud and perform authentication.

[0059] Furthermore, when the conditions for authentication are set as authentication conditions, the authentication unit 114 may obtain amendments to laws and regulations via the Internet or the like, and change the authentication conditions in response to amendments to laws and regulations.

[0060] The authentication unit 114 may additionally certify that the state detection device 20 is maintained in an appropriate state, for example, that the state detection device 20 is regularly calibrated and maintained.

[0061] The authentication unit 114 may authenticate that the user's status satisfies predetermined conditions if the user identification result indicates that the user is authorized to drive a specific vehicle, the status information indicates the elapsed time since the specific user's last end of work, and the elapsed time since the specific user's last end of work is equal to or greater than a standard elapsed time for which driving is permitted.

[0062] The authentication unit 114 may authenticate that the user's state satisfies a predetermined condition by determining whether at least one of the mobile object information, the environmental information, and the location information, in addition to the user's state information and the user's identification result, satisfies a predetermined condition according to the characteristics of the device operated by the user.

[0063] If the user's status does not satisfy the predetermined condition, the authentication unit 114 may request the user to provide the user's status information and the user's identification result again. Furthermore, if the user's status does not satisfy the predetermined condition after the information is repeatedly provided, the authentication unit 114 may notify the user, a national or local certification body, a third party body, the user's employer, or the manufacturer of the authentication system that the user's status does not satisfy the predetermined condition.

[0064] When the authentication unit 114 certifies that the user's status satisfies the predetermined condition, the issuing unit 116 issues a permit indicating that the user's status has been certified to satisfy the predetermined condition. The permit may be an electronic certificate. The electronic certificate may be an electronic document to which an electronic signature of an approval authority is attached, indicating that the user's status has been certified to satisfy the predetermined condition. The approval authority may be an authentication authority designated by a national or local government, a third-party authority, the user's employer, the manufacturer of the authentication system, or an authority delegated by any of these authorities.

[0065] The providing unit 118 provides the permit to a device that the user is permitted to operate based on the permit. The providing unit 118 provides the permit to a moving body 80 that the user is permitted to drive based on the permit. The providing unit 118 may provide the permit to an ECU of the moving body 80 that the user is permitted to drive based on the permit. When the ECU of the moving body 80 functions as the authentication device 100, the providing unit 118 may provide the permit to a determination unit that the ECU of the moving body 80 has and that determines whether or not to permit driving of the moving body 80.

[0066] When the user's permit is provided, i.e., when the user's permit is issued, the ECU of the moving body 80 may permit the user to drive the moving body 80. When the user is permitted to drive the moving body 80, the ECU of the moving body 80 may permit the start of the drive source in response to turning on of the ignition switch. When the user is permitted to drive the moving body 80, the ECU of the moving body 80 may permit the unlocking of the driver's door of the moving body 80.

[0067] The change detection unit 120 detects that the user operating the device has been changed. In response to the change detection unit 120 detecting that the user has been changed, the acquisition unit 112 may newly acquire state information and a user identification result, and the authentication unit 114 may authenticate that the user's state satisfies the predetermined condition based on the new identification result and the new state information.

[0068] The change detection unit 120 may detect that the driver of the moving body 80 has been changed. The change detection unit 120 may detect that the driver of the moving body 80 has been changed based on face recognition based on an image captured by a camera that captures an image of the driver's seat of the moving body 80. The change detection unit 120 may detect that the driver of the moving body 80 has been changed based on a detection result of a seating sensor provided in the driver's seat of the moving body 80. The change detection unit 120 may detect that the driver of the moving body 80 has been changed based on a detection result of a millimeter wave detector provided in the moving body 80.

[0069] In response to the change detection unit 120 detecting that the driver of the moving body 80 has been changed, the acquisition unit 112 may newly acquire status information from the status detection device 20 and a user identification result from the user identification device 30, and the authentication unit 114 may re-authenticate that the user's status satisfies predetermined conditions based on the new user identification result and the new user's status information.

[0070] The acquisition unit 112 may further acquire mobile body information related to the mobile body 80 from the mobile body 80. The authentication unit 114 may authenticate that the user's state satisfies a predetermined condition based on the mobile body information. The mobile body information may be information such as a vehicle number that uniquely identifies the mobile body 80. The mobile body information may also include an inspection record of the mobile body 80 (inspection content, inspection date and time, inspector, operation manager, maintenance manager, measures taken after inspection, etc.), a mileage of the mobile body 80, and status information of the mobile body 80 (temperature of each component constituting the mobile body 80, remaining amount of coolant, tension and damage level of the fan belt, engine speed, amount of engine oil, motor output, gears used, blinking state, dirt and damage of the lighting device, disc wheel installation state, tire air pressure, tire wear, remaining amount of fuel, remaining amount of battery, amount of condensation and air pressure of the air tank, amount of brake fluid, remaining amount of brake pads, amount of washer fluid, degree of wear of the wipers, etc.). The authentication unit 114 may determine whether or not the user identified by the user identification result is a user permitted to drive a specific mobile object identified by information such as a vehicle identification number.

[0071] The acquisition unit 112 may further acquire environmental information indicating the state of the environment around the user. The authentication unit 114 may authenticate that the user's state satisfies a predetermined condition based on the environmental information. The environmental information may indicate at least one of gas concentration, dust amount, temperature, humidity, noise, illuminance, vibration, electromagnetic waves, X-ray dose, radiation dose, and ozone concentration. The gas concentration may be, for example, CO2 concentration. The accuracy of a specific state of the user detected by the state detection device 20 may vary depending on temperature. Therefore, the authentication unit 114 may authenticate that the user's state satisfies a predetermined condition based on whether or not the temperature indicated in the environmental information is included in a temperature range in which the detection accuracy of the state detection device 20 satisfies a reference value or more.

[0072] The acquisition unit 112 may further acquire location information indicating the location where the user is present. The authentication unit 114 authenticates that the state of the user satisfies a predetermined condition based on the location information. For example, the area in which a specific user is permitted to drive the mobile body 80 may be limited. Or, the accuracy of the specific state of the user detected by the state detection device 20 may change depending on the location. Therefore, the authentication unit 114 may authenticate that the state of the user satisfies a predetermined condition based on whether the location indicated by the location information is an area in which a specific user is permitted to drive the mobile body 80, or an area in which the accuracy of the specific state of the user detected by the state detection device 20 satisfies a reference value or more. In addition, the authentication unit 114 may change the authentication condition according to the location information. For example, in Japan, a breath alcohol concentration of 0.15 mg / L or more is considered drunk driving, but in Germany, a breath alcohol concentration of 0.25 mg / L or more is considered a violation of the law, so the authentication unit 114 may change the authentication condition according to the location information.

[0073] The authentication unit 114 stores the authentication result in the storage unit 130. The authentication unit 114 may store the authentication result in another storage unit, such as the storage unit 26 of the status detection device 20 or the storage unit 36 ​​of the user identification device 30, in addition to the storage unit 130, as a backup.

[0074] The acquisition unit 112 may acquire management information from the state detection device 20, including at least one of the calibration timing when the calibration unit 24 should perform calibration, the calibration date and time performed by the calibration unit 24, the calibration method, and calibrator information, the presence or absence of a malfunction, the cumulative number of uses, and the expiration date. The authentication unit 114 may certify that the state of the user satisfies a predetermined condition based on the management information. The accuracy of the state information provided by the state detection device 20 in which calibration has not been performed correctly may be reduced. Therefore, the authentication unit 114 may certify that the state of the user satisfies a predetermined condition based on the management information and further based on whether the calibration of the state detection device 20 satisfies a predetermined calibration condition. When the management information satisfies the predetermined calibration condition, the authentication unit 114 may certify that the state of the user satisfies a predetermined condition based on the user's identification result and the state information. For example, the management information satisfies the predetermined calibration condition may be that the state detection device 20 has been calibrated by a certified calibrator using an appropriate calibration method within one year.

[0075] If the management information does not satisfy the predetermined calibration conditions, the user, a certification body designated by the national or local government, a third-party body, the user's employer, and the manufacturer of the certification system may be notified that the management information does not satisfy the predetermined calibration conditions.

[0076] If the authentication unit 114 does not authenticate that the user's state satisfies a predetermined condition, the notification unit 122 notifies the user that the user has not been authenticated. The notification unit 122 may notify the user that the user has not been authenticated via a mobile terminal of the user or an indoor display of the mobile object 80.

[0077] FIG. 4 is a flowchart showing an example of an authentication procedure of authentication device 100.

[0078] The acquisition unit 112 acquires a user identification result from the user identification device 30 (S100). Furthermore, the acquisition unit 112 acquires user status information from the status detection device 20. The acquisition unit 112 may acquire information including the user identification result and the user status information from a single device having the functions of the status detection device 20 and the user identification device 30.

[0079] The authentication unit 114 executes a user authentication process based on the user identification result and the user status information (S102). The authentication unit 114 may compare the common information included in the user identification result with the common information included in the user status information to determine whether the status detection device 20 and the user identification device 30 are disposed adjacent to each other to such an extent that the user can identify the user by the user identification device 30 and detect the user by the status detection device 20 on the spot without moving from one place to another. The authentication unit 114 may authenticate that the user status satisfies a predetermined condition based on the user identification result and the user status information when the user identification result indicates that the user is a legitimate user, the status information indicates the status of the legitimate user, and the status of the user satisfies a predetermined acceptable condition.

[0080] If the authentication unit 114 has successfully authenticated that the user's status satisfies the predetermined condition, the issuing unit 116 issues a permit indicating that the user's status has been authenticated to satisfy the predetermined condition (S108). On the other hand, if the authentication unit 114 has not successfully authenticated that the user's status satisfies the predetermined condition, the notifying unit 122 notifies an error indicating that the user has not been authenticated (S110).

[0081] FIG. 5 is a flowchart showing another example of the authentication procedure of the authentication device 100. In FIG.

[0082] The acquisition unit 112 acquires management information from the state detection device 20 (S200). The authentication unit 114 determines whether or not the information on the calibration by the state detection device 20 satisfies a predetermined calibration condition based on the information on the calibration by the calibration unit 24 indicated in the management information (S202). If the information on the calibration does not satisfy the predetermined calibration condition, the authentication unit 114 requests the user to calibrate the state detection device 20 (S204).

[0083] If the information on the calibration satisfies a predetermined calibration condition, the acquisition unit 112 acquires a user identification result from the user identification device 30 (S206). Furthermore, the acquisition unit 112 acquires user status information from the status detection device 20 (S208). The authentication unit 114 executes user authentication processing based on the user identification result and the user status information (S210).

[0084] If the authentication unit 114 succeeds in authenticating that the user's status satisfies the predetermined condition, the issuing unit 116 issues a certificate indicating that it has been authenticated that the user's status satisfies the predetermined condition (S214).

[0085] If the authentication unit 114 is not successful in the authentication, the authentication unit 114 judges whether the number of times the authentication process has been executed reaches a prescribed number (S216). If the number of times the authentication process has been executed has not reached the prescribed number, the authentication device 100 repeats the processes from step S206 onwards so that the authentication unit 114 executes the authentication process again. If the number of times the authentication process has been executed reaches the prescribed number, the notification unit 122 notifies an error indicating that the user has not been authenticated (S218).

[0086] As described above, when a permit is issued by the issuing unit 116, the authenticated user may be permitted to operate a specific device. For example, when it is proven that a breath alcohol concentration test has been properly administered to the user, the user is permitted to drive a car.

[0087] According to the authentication system 10 of the present embodiment, it is possible to prevent unauthorized processing of state information indicating a specific state, such as the user's breath state, etc. Therefore, it is possible to accurately determine permission to operate a specific device based on the specific state.

[0088] 6 shows an example of a computer 1200 in which aspects of the present invention may be embodied in whole or in part. A program installed on the computer 1200 may cause the computer 1200 to perform operations associated with an apparatus according to an embodiment of the present invention or one or more "parts" of the apparatus. Alternatively, the program may cause the computer 1200 to execute the operations or one or more "parts". The program may cause the computer 1200 to execute a process or steps of the process according to an embodiment of the present invention. Such a program may be executed by the CPU 1212 to cause the computer 1200 to execute specific operations associated with some or all of the blocks of the flowcharts and block diagrams described herein.

[0089] The computer 1200 according to this embodiment includes a CPU 1212 and a RAM 1214, which are connected to each other by a host controller 1210. The computer 1200 also includes a communication interface 1222 and an input / output unit, which are connected to the host controller 1210 via an input / output controller 1220. The computer 1200 also includes a ROM 1230. The CPU 1212 operates according to programs stored in the ROM 1230 and the RAM 1214, thereby controlling each unit.

[0090] The communication interface 1222 communicates with other electronic devices via a network. The hard disk drive may store programs and data used by the CPU 1212 in the computer 1200. The ROM 1230 stores a boot program executed by the computer 1200 when activated and / or a program that depends on the hardware of the computer 1200. The programs are provided via a computer-readable recording medium such as a CD-ROM, a USB memory, or an IC card, or a network. The programs are installed in the RAM 1214, which is also an example of a computer-readable recording medium, or the ROM 1230, and executed by the CPU 1212. The information processing described in these programs is read by the computer 1200, and brings about cooperation between the programs and the various types of hardware resources. An apparatus or method may be configured by implementing an operation or processing of information according to the use of the computer 1200.

[0091] For example, when communication is performed between the computer 1200 and an external device, the CPU 1212 may execute a communication program loaded in the RAM 1214 and instruct the communication interface 1222 to perform communication processing based on the processing described in the communication program. Under the control of the CPU 1212, the communication interface 1222 reads transmission data stored in a transmission buffer area provided in the RAM 1214 or a recording medium such as a USB memory, transmits the read transmission data to a network, or writes reception data received from the network to a reception buffer area or the like provided on the recording medium.

[0092] Furthermore, the CPU 1212 may cause all or a necessary portion of a file or database stored in an external recording medium such as a USB memory to be read into the RAM 1214, and may perform various types of processing on the data on the RAM 1214. The CPU 1212 may then write back the processed data to the external recording medium.

[0093] Various types of information, such as various types of programs, data, tables, and databases, may be stored in the recording medium and undergo information processing. The CPU 1212 may perform various types of processing on the data read from the RAM 1214, including various types of operations, information processing, conditional judgment, conditional branching, unconditional branching, information search / replacement, etc., as described throughout this disclosure and specified by the instruction sequence of the program, and write back the results to the RAM 1214. The CPU 1212 may also search for information in a file, database, etc. in the recording medium. For example, when a plurality of entries each having an attribute value of a first attribute associated with an attribute value of a second attribute are stored in the recording medium, the CPU 1212 may search for an entry that matches a condition, in which the attribute value of the first attribute is specified, from among the plurality of entries, read the attribute value of the second attribute stored in the entry, and thereby obtain the attribute value of the second attribute associated with the first attribute that satisfies a predetermined condition.

[0094] The above-described programs or software modules may be stored in a computer-readable storage medium on the computer 1200 or in the vicinity of the computer 1200. Also, a recording medium such as a hard disk or a RAM provided in a server system connected to a dedicated communication network or the Internet can be used as a computer-readable storage medium, thereby providing the programs to the computer 1200 via the network.

[0095] A computer-readable medium may include any tangible device capable of storing instructions that are executed by a suitable device. As a result, a computer-readable medium having instructions stored thereon comprises an article of manufacture that includes instructions that can be executed to create means for performing the operations specified in the flowchart or block diagram. Examples of computer-readable media may include electronic storage media, magnetic storage media, optical storage media, electromagnetic storage media, semiconductor storage media, and the like. More specific examples of computer-readable media may include floppy disks, diskettes, hard disks, random access memories (RAMs), read-only memories (ROMs), erasable programmable read-only memories (EPROMs or flash memories), electrically erasable programmable read-only memories (EEPROMs), static random access memories (SRAMs), compact disk read-only memories (CD-ROMs), digital versatile disks (DVDs), Blu-ray (RTM) disks, memory sticks, integrated circuit cards, and the like.

[0096] The computer readable instructions may include either source code or object code written in any combination of one or more programming languages. The source code or object code includes conventional procedural programming languages. The conventional procedural programming languages ​​may be assembler instructions, instruction set architecture (ISA) instructions, machine instructions, machine dependent instructions, microcode, firmware instructions, state setting data, or object oriented programming languages ​​such as Smalltalk®, JAVA®, C++, etc., and the “C” programming language or similar programming languages. The computer readable instructions may be provided to a processor or programmable circuitry of a programmable data processing apparatus locally or over a wide area network (WAN) such as a local area network (LAN), the Internet, etc. The processor or programmable circuitry may execute the computer readable instructions to create means for performing the operations specified in the flowcharts or block diagrams.

[0097] Here, the computer may be a computer such as a PC (personal computer), a tablet computer, a smartphone, a workstation, a server computer, or a general-purpose computer, or may be a computer system in which multiple computers are connected. Such a computer system in which multiple computers are connected is also called a distributed computing system, and is a computer in the broad sense. In a distributed computing system, each of the multiple computers executes a part of a program, and the multiple computers collectively execute a program by transferring data during program execution between the computers as necessary.

[0098] Examples of processors include computer processors, central processing units (CPUs), processing units, microprocessors, digital signal processors, controllers, microcontrollers, etc. A computer may have one processor or multiple processors. In a multiprocessor system with multiple processors, each processor executes a part of a program, and the multiple processors collectively execute a program by passing data during program execution between the processors as necessary. For example, in executing multitasks, each of the multiple processors may execute a part of each task in small chunks by switching tasks for each time slice. In this case, which part of a program each processor executes changes dynamically. Also, which part of a program each of the multiple processors executes may be statically determined by programming that takes the multiprocessor into consideration.

[0099] Although the present invention has been described above using the embodiments, the technical scope of the present invention is not limited to the scope described in the above embodiments. It is clear to those skilled in the art that various modifications and improvements can be made to the above embodiments. It is clear from the description of the claims that such modifications and improvements can also be included in the technical scope of the present invention.

[0100] It should be noted that the order of execution of each process, such as operations, procedures, steps, and stages, in the devices, systems, programs, and methods shown in the claims, specifications, and drawings is not specifically stated as "before," "prior to," etc., and may be realized in any order unless the output of a previous process is used in a later process. Even if the operational flow in the claims, specifications, and drawings is explained using "first," "next," etc. for convenience, it does not mean that it is essential to perform the process in this order. [Explanation of symbols]

[0101] 10 Authentication System 20 Status detection device 22 Measurement section 24 Proofreading Department 26 Memory section 28 Statistics generation section 30 User Identification Device 32 User information acquisition unit 34 Identification section 36 Memory section 50 Network 80 Mobile 100 Authentication Device 106 Proofreading Department 110 Control section 112 Acquisition Department 114 Authentication Department 116 Publishing Department 118 Provision Department 120 Change detection unit 122 Notification Department 130 Storage section 200 Breathalyzer 202 Wearable Devices 1200 Computer 1210 Host Controller 1212 CPU 1214 RAM 1220 Input / Output Controller 1222 Communication Interface 1230 ROM

Claims

1. an acquisition unit that acquires a user identification result based on user information related to the user, and acquires state information indicating a specific state of the user from a state detection device that detects a specific state of the user; an authentication unit that authenticates that the user's status satisfies a predetermined condition based on the user identification result and the status information; An authentication system comprising:

2. an issuing unit that issues a certificate indicating that the user's state has been authenticated as satisfying the predetermined condition when the authenticating unit authenticates that the user's state satisfies the predetermined condition; The authentication system of claim 1 further comprising:

3. The authentication system according to claim 1 , wherein the specific status includes at least one of a status related to the user's physical condition, a status related to the user's activity, a status related to the user's work, and a status related to the user's ability.

4. The authentication system according to claim 3 , wherein the condition related to the user's physical condition includes at least one of breath alcohol concentration, blood alcohol concentration, body temperature, heart rate, pulse rate, respiratory rate, blood pressure, blood glucose level, coughing, voice, eye movement, electromyography, facial expression, staggering, and stress state.

5. The authentication system according to claim 3 , wherein the status regarding the user's activity includes at least one of meal times, meal contents, exercise records, sleep times, medication history, hospital visit history, and treatment history.

6. The authentication system according to claim 3 , wherein the work-related status of the user includes at least one of working hours, overtime hours, elapsed time since the end of a previous shift, and number of consecutive working days.

7. The authentication system according to claim 3 , wherein the user's ability-related status includes at least one of a cognitive ability and a physical ability check test.

8. The authentication system according to claim 2 , further comprising a providing unit that provides the certificate to a device that is permitted to be operated by the user based on the certificate.

9. A change detection unit detects that a user who operates the device has been changed, 9. The authentication system of claim 8, wherein in response to the change detection unit detecting that the user has been changed, the acquisition unit newly acquires the status information and the identification result, and the authentication unit certifies that the user's status satisfies the predetermined condition based on the new identification result and the new status information.

10. 9. The authentication system of claim 8, wherein the device is a vehicle driven by the user, the vehicle allowing the user to drive the vehicle if the permit for the user is provided.

11. A change detection unit detects that the driver of the moving body has been changed, The authentication system of claim 10, wherein in response to the change detection unit detecting that the driver of the moving body has been changed, the acquisition unit newly acquires the status information and the identification result, and the authentication unit certifies that the user's status satisfies the predetermined condition based on the new identification result and the new status information.

12. The acquisition unit further acquires mobile object information related to the mobile object from the mobile object; The authentication system according to claim 10 , wherein the authentication unit authenticates that a state of the user satisfies the predetermined condition, further based on the mobile unit information.

13. The acquisition unit further acquires environmental information indicating a state of an environment around the user, The authentication system according to claim 1 , wherein the authentication unit authenticates that the state of the user satisfies the predetermined condition, further based on the environmental information.

14. The acquisition unit further acquires location information indicating a location where the user is present; The authentication system according to claim 1 , wherein the authentication unit authenticates that the state of the user satisfies the predetermined condition, further based on the location information.

15. The authentication system according to claim 1 , further comprising a notification unit that notifies the user that the user has not been authenticated when the authentication unit does not authenticate that the user's status satisfies the predetermined condition.

16. The authentication system according to claim 1 , wherein the authentication unit stores a result of the authentication in a storage unit.

17. The authentication system according to claim 1 , wherein the acquisition unit acquires the user identification result from a user identification device that identifies the user, and the user identification device identifies the user based on at least one of biometric authentication, ID authentication, and password authentication.

18. The state detection device has a calibration unit that performs calibration of the state detection device, the acquiring unit acquires management information including at least one of a calibration time when the calibration unit should perform calibration, a calibration date and time performed by the calibration unit, a calibration method, and proofreader information; The authentication system according to claim 1 , wherein the authentication unit authenticates that the state of the user satisfies a predetermined condition based further on the management information.

19. The authentication system according to claim 18 , wherein the authentication unit certifies that the user's status satisfies a predetermined condition based on the user's identification result and the status information when the management information satisfies a predetermined calibration condition.

20. an acquisition unit acquiring a user identification result based on user information relating to the user; a step of the acquisition unit acquiring state information indicating a specific state of the user from a state detection device that detects the specific state of the user; an authentication unit authenticating that the user's status satisfies a predetermined condition based on the user's identification result and the status information; An authentication method comprising:

21. an acquisition unit that acquires a user identification result based on user information related to the user, and acquires state information indicating a specific state of the user from a state detection device that detects a specific state of the user; an authentication unit that authenticates that the user's status satisfies a predetermined condition based on the user identification result and the status information; A program that allows a computer to function.

Images