Information processing apparatus

Abstract

To simplify authentication for the operation of external apparatuses.SOLUTION: A control unit of an information processing apparatus causes, if a vehicle user is successfully authenticated by an in-vehicle apparatus, an external apparatus located outside the vehicle to omit the execution of a user authentication process. In this case, the control unit of the information processing apparatus outputs vehicle information of the vehicle to the external apparatus, thereby causing the external apparatus to execute a vehicle authentication process. Then, the control unit of the information processing apparatus causes, if the vehicle is successfully authenticated based on the vehicle information, the external apparatus to execute a predetermined operation.SELECTED DRAWING: Figure 3

Description

[Technical Field]

[0001] The present disclosure relates to an information processing device. [Background technology]

[0002] Patent Document 1 discloses an electronic key system with an onboard control unit that permits or executes the operation of onboard devices on the condition that wireless communication is established between an onboard communication device installed in the vehicle and an electronic key. The electronic key system disclosed in Patent Document 1 includes a signal strength detection unit that detects the signal strength of a wireless signal exchanged between the onboard communication device and the electronic key, an opening / closing detection unit that detects the opening / closing of the vehicle door, and a door lock device that switches between a locked state that restricts the opening and closing of the vehicle door and an unlocked state that allows the opening and closing of the vehicle door. In the electronic key system, the electronic key wirelessly transmits information unique to itself to the onboard communication device.

[0003] The in-vehicle control unit then identifies the seat position of the user entering the vehicle based on the position information of the vehicle door that has transitioned from a closed state to an open state. The in-vehicle control unit also identifies the user entering the vehicle based on a comparison of the signal strength detected between the time the vehicle door is switched from a locked state to an unlocked state and the time the vehicle door is opened and the time the vehicle door is closed, as well as information unique to the electronic key wirelessly transmitted from the electronic key. The in-vehicle control unit then operates the in-vehicle devices to correspond to the user. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Laid-Open No. 2016-215817 Summary of the Invention [Problem to be solved by the invention]

[0005] The present disclosure aims to simplify authentication for operating external devices. [Means for solving the problem]

[0006] The information processing device according to the present disclosure includes: When the vehicle user is authenticated by the in-vehicle device, causing an external device disposed outside the vehicle to omit execution of authentication processing for the user; outputting vehicle information of the vehicle to the external device to cause the external device to execute an authentication process for the vehicle; When the vehicle is authenticated based on the vehicle information, causing the external device to execute a predetermined operation. The controller is configured to: [Effects of the Invention]

[0007] The present disclosure allows for simplified authentication for operating external devices. [Brief explanation of the drawings]

[0008] [Figure 1] FIG. 1 is a diagram showing a schematic configuration of an authentication system. [Figure 2] FIG. 2 is a block diagram illustrating an example of a functional configuration of the server. [Figure 3] FIG. 3 is a sequence diagram showing the flow of information processing in the authentication system. DETAILED DESCRIPTION OF THE INVENTION

[0009] There are cases where a user is authenticated by an in-vehicle device in a vehicle. Furthermore, there are cases where a user in a vehicle must be authenticated again by an external device in order to operate an external device. In such cases, the user must be authenticated through a second authentication process, which is inconvenient for the user. However, if the user is authenticated by the in-vehicle device, it means that the user is in the vehicle. Therefore, by having the external device perform the vehicle authentication process, the user can be indirectly authenticated without the external device performing the user authentication process.

[0010] Therefore, when the vehicle device authenticates the user of the vehicle, the control unit of the information processing device according to the present disclosure causes an external device located outside the vehicle to omit execution of user authentication processing. The control unit of the information processing device also outputs vehicle information of the vehicle to the external device, causing the external device to execute vehicle authentication processing. When the vehicle authentication is established based on the vehicle information, the control unit also causes the external device to execute a predetermined operation.

[0011] As described above, when the information processing device has successfully authenticated the user using the in-vehicle device, the execution of the user authentication process by the external device is omitted. Furthermore, by having the external device perform vehicle authentication process instead of user authentication process, the external device executes a predetermined operation when vehicle authentication is successfully completed. This allows the user to operate the external device without being authenticated twice through user authentication process. In this way, the authentication for operating the external device can be simplified.

[0012] Specific embodiments of the present disclosure will be described below with reference to the accompanying drawings. Unless otherwise specified, the hardware configuration, module configuration, functional configuration, etc. described in each embodiment are not intended to limit the technical scope of the disclosure to those configurations.

[0013] <Embodiment> An authentication system 1 in this embodiment will be described with reference to Fig. 1. Fig. 1 is a diagram showing a schematic configuration of the authentication system 1. The authentication system 1 includes an on-vehicle device 100, a facility device 200, and a server 300. In the authentication system 1, the on-vehicle device 100, the facility device 200, and the server 300 are interconnected by a network N1. The network N1 may be, for example, a WAN (Wide Area Network), which is a global public communication network such as the Internet, or a telephone communication network such as a mobile phone.

[0014] (In-vehicle device) The in-vehicle device 100 is a device mounted on the vehicle 10. The in-vehicle device 100 performs authentication processing for a user of the vehicle 10 (hereinafter, may be simply referred to as a "user") inside the vehicle. Here, the user is a passenger in the vehicle 10. The user is, for example, a driver of the vehicle 10, or a passenger in the passenger seat or rear seat of the vehicle 10. Furthermore, the user is authenticated by the in-vehicle device 100 in order to start the vehicle 10, for example.

[0015] The in-vehicle device 100 may also perform user authentication processing by key authentication using an electronic key or the like. The in-vehicle device 100 may also perform user authentication processing by short-range communication with a mobile terminal used by the user. The in-vehicle device 100 may also perform user authentication processing by using the user's face, fingerprint, voiceprint, or the like. The in-vehicle device 100 may also perform user authentication processing by receiving input of a password or the like from the user. The in-vehicle device 100 transmits authentication information indicating the user authentication result to the server 300 via the network N1.

[0016] (Facility equipment) The facility device 200 is a device that operates equipment in the facility 20. In this embodiment, the facility device 200 is a device that opens and closes a gate provided in the facility 20. When user authentication is successful in the user authentication process, the facility device 200 performs control to open the gate of the facility 20 (opening control). Here, like the in-vehicle device 100, the facility device 200 performs user authentication processing by key authentication, authentication by short-range communication, authentication by password, or the like. Note that the user authentication methods performed by the in-vehicle device 100 and the facility device 200 may be the same or different.

[0017] (server) The server 300 is a server that manages user authentication. When the user authentication by the in-vehicle device 100 is successful, the server 300 receives result information indicating that the user authentication has been successful from the in-vehicle device 100 via the network N1.

[0018] Now, assume that a user must be authenticated by facility device 200 to open the gate of facility 20. In this case, the user is authenticated twice through authentication processes: user authentication process by in-vehicle device 100 and user authentication process by facility device 200. However, server 300 ensures the security of facility 20 through the user authentication processes.

[0019] On the other hand, if the in-vehicle device 100 has successfully authenticated the user, it means that the user is on board the vehicle 10. Therefore, if the facility device 200 can successfully authenticate the vehicle 10, it can indirectly authenticate the user without executing a user authentication process.

[0020] Therefore, when the result information received from the on-vehicle device 100 indicates that the on-vehicle device 100 has successfully authenticated the user, the server 300 causes the facility device 200 to omit the execution of the user authentication process. At this time, the server 300 generates vehicle information for the authentication process of the vehicle 10. Here, the vehicle information is, for example, information indicating the license plate number of the vehicle 10. Furthermore, when the on-vehicle device 100 has successfully authenticated the user using a predetermined method, the server 300 may cause the facility device 200 to omit the execution of the authentication process of the user of the vehicle 10.

[0021] Server 300 then transmits control information to facility device 200 via network N1. Here, the control information includes information instructing facility device 200 to omit execution of user authentication processing, and vehicle information. In this case, when facility device 200 recognizes the license plate number of vehicle 10 using a camera installed in facility device 200, it executes control to open the gate of facility 20.

[0022] The vehicle information may be information other than information indicating the license plate number of the vehicle 10. For example, there is a case where the facility device 200 authenticates the vehicle 10 by performing short-range communication or the like between the facility device 200 and the in-vehicle device 100 within a predetermined range. In this case, the vehicle information may be information for identifying the vehicle 10.

[0023] The server 300 is configured to include a computer having a processor 310, a main memory 320, an auxiliary memory 330, and a communication interface (communication I / F) 340. The processor 310 is, for example, a CPU (Central Processing Unit) or a DSP (Digital Signal Processor). The main memory 320 is, for example, a RAM (Random Access Memory). The auxiliary memory 330 is, for example, a ROM (Read Only Memory). The auxiliary memory 330 is, for example, a HDD (Hard Disk Drive) or a disc recording medium such as a CD-ROM, a DVD disc, or a Blu-ray disc. The auxiliary storage unit 330 may also be a removable medium (portable storage medium). Examples of the removable medium include a USB memory or an SD card. The communication I / F 340 is, for example, a LAN (Local Area Network) interface board or a wireless communication circuit for wireless communication.

[0024] In the server 300, the auxiliary storage unit 330 stores an operating system (OS), various programs, various information tables, and the like. In addition, in the server 300, the processor 310 loads the programs stored in the auxiliary storage unit 330 into the main storage unit 320 and executes them, thereby realizing various functions as described below. However, some or all of the functions of the server 300 may be realized by hardware circuits such as ASICs or FPGAs. Note that the server 300 does not necessarily have to be realized by a single physical configuration, and may be composed of multiple computers that work together. Furthermore, like the server 300, the in-vehicle device 100 and the facility device 200 also include a computer.

[0025] (Functional configuration) Next, the functional configuration of the server 300 that constitutes the authentication system 1 will be described with reference to Fig. 2. Fig. 2 is a block diagram that schematically shows an example of the functional configuration of the server 300. The server 300 is configured to include a control unit 301 and a communication unit 302.

[0026] The control unit 301 has a function of performing arithmetic processing for controlling the server 300. The control unit 301 can be realized by a processor 310 in the server 300. The communication unit 302 has a function of connecting the server 300 to the network N1. The communication unit 302 can be realized by a communication I / F 340 in the server 300.

[0027] The control unit 301 receives result information from the in-vehicle device 100 via the communication unit 302. The control unit 301 references the received result information and determines whether or not the in-vehicle device 100 has successfully authenticated the user. If the user has successfully authenticated, the control unit 301 transmits control information to the facility device 200 via the communication unit 302. At this time, the control unit 301 transmits control information including information instructing the facility device 200 to omit execution of the user authentication process within a predetermined period of time. Here, the predetermined period is, for example, a period after a predetermined time has elapsed since the in-vehicle device 100 executed the user authentication process. Alternatively, the predetermined period may be, for example, a period until the vehicle 10 arrives at the facility. As a result, execution of the user authentication process by the facility device 200 is omitted while the authenticated user of the vehicle 10 is aboard the vehicle 10.

[0028] Furthermore, the control unit 301 generates vehicle information by acquiring information indicating the association between the user and the vehicle information of the vehicle 10, which information is stored in advance in the auxiliary storage unit 330 of the server 300. Furthermore, the control unit 301 acquires information indicating the association between the user and the facility device 200, which information is stored in advance in the auxiliary storage unit 330 of the server 300, and transmits control information to the facility device 200.

[0029] (Information processing flow) Next, the flow of information processing in the authentication system 1 will be described with reference to Fig. 3. Fig. 3 is a sequence diagram showing the flow of information processing in the authentication system 1. Fig. 3 shows the flow of information processing when authentication of a user by the in-vehicle device 100 and authentication of the vehicle 10 by the facility device 200 are successful. The processes executed by the in-vehicle device 100, the facility device 200, and the server 300 are executed by a control unit in the in-vehicle device 100, a control unit in the facility device 200, and a control unit 301 in the server 300, respectively.

[0030] In the authentication system 1, the on-vehicle device 100 executes user authentication processing (S11). Next, the on-vehicle device 100 transmits result information indicating the authentication result of the user of the vehicle 10 to the server 300 (S12). If the result information received from the on-vehicle device 100 indicates that the user has been authenticated, the server 300 generates vehicle information (S13). Next, the server 300 transmits control information to the facility device 200, including information instructing the facility device 200 to omit execution of the user authentication processing and the vehicle information of the vehicle 10 (S14).

[0031] In response to the control information, facility device 200 omits execution of user authentication processing, and instead starts execution of authentication processing for vehicle 10 using the license plate number of vehicle 10 indicated by the vehicle information (S15). Here, facility device 200 temporarily stores the vehicle information of vehicle 10, and authenticates vehicle 10 when vehicle 10 arrives in front of the gate of facility 20. If authentication of vehicle 10 is successful, facility device 200 executes control to open the gate of facility 20 (S16).

[0032] If the received result information indicates that the user has not been authenticated, the server 300 does not generate vehicle information and terminates the process. Alternatively, the in-vehicle device 100 may transmit result information when authentication of the user is successful in the user authentication process, and may not transmit result information when authentication is not successful in the authentication process. Upon receiving the result information, the server 300 generates vehicle information and transmits control information.

[0033] As described above, when the authentication system 1 successfully authenticates the user by the in-vehicle device 100, the facility device 200 does not need to perform the user authentication process. Furthermore, the facility device 200 performs the authentication process for the vehicle 10, thereby ensuring the security of the facility 20. In this way, it is possible to simplify the user authentication process for opening the gate of the facility 20.

[0034] (Variation 1) It should be noted that facility device 200 may be a device other than a device that opens and closes the gate of facility 20, as long as it is equipment installed in facility 20. Facility device 200 may be, for example, an air conditioning device in facility 20. In this case, when the user arrives at facility 20, facility device 200 executes authentication processing for vehicle 10. Then, when authentication of vehicle 10 is successful, facility device 200 turns on the power of the air conditioning device in facility 20. This allows the user to enter facility 20 with the air conditioning device operating, while simplifying user authentication.

[0035] (Variation 2) In this embodiment, the on-board device 100 transmits result information to the server 300, and the server 300 transmits control information to the facility device 200. However, if authentication of the user is successful in the user authentication process, the on-board device 100 may transmit the control information directly to the facility device 200. That is, the on-board device 100 and the server 300 may be the same device. In this case, the on-board device 100 stores vehicle information about the vehicle 10 in advance. Then, the on-board device 100 transmits control information including information instructing the facility device 200 to omit execution of the user authentication process and the vehicle information to the facility device 200 via the network N1. This also makes it possible to simplify user authentication for opening the gate of the facility 20.

[0036] <Other embodiments> The above-described embodiment is merely an example, and the present disclosure may be modified as appropriate within the scope of the present disclosure. Furthermore, the processes and means described in the present disclosure may be freely combined and implemented as long as no technical contradiction occurs.

[0037] Furthermore, a process described as being performed by one device may be shared and executed by multiple devices. Alternatively, a process described as being performed by different devices may be executed by a single device. In a computer system, the hardware configuration (server configuration) by which each function is realized can be flexibly changed.

[0038] The present disclosure can also be realized by providing a computer program implementing the functions described in the above embodiments to a computer, and having one or more processors in the computer read and execute the program. Such a computer program may be provided to the computer via a non-transitory computer-readable storage medium connectable to the computer's system bus or via a network. Non-transitory computer-readable storage media include any type of medium suitable for storing electronic instructions, such as a magnetic disk (e.g., a floppy disk or a hard disk drive (HDD)), an optical disk (e.g., a CD-ROM, a DVD disk, or a Blu-ray disk), a read-only memory (ROM), a random-access memory (RAM), an EPROM, an EEPROM, a magnetic card, a flash memory, or an optical card. [Explanation of symbols]

[0039] 1. Authentication system 10. Vehicle 100...In-vehicle equipment 20 Facilities 200 Facilities Equipment 300 Server 301 Control Unit 302··Communications Department

Claims

[Claim 1] When the vehicle user is authenticated by the in-vehicle device, causing an external device disposed outside the vehicle to omit execution of authentication processing for the user; outputting vehicle information of the vehicle to the external device to cause the external device to execute an authentication process for the vehicle; When the vehicle is authenticated based on the vehicle information, causing the external device to execute a predetermined operation. a control unit configured to perform Information processing device.

Images