Work machine authentication system, work machine management server, and work machine authentication method

Abstract

To allow an operator to operate different working machines.SOLUTION: The work machine authentication system includes a processor. The processor receives issuance application data for applying for issuance of the digital key for the work machine, transmits approval request data for requesting approval of issuance of the digital key to the management terminal on the basis of the issuance application data, and transmits issuance request data for requesting issuance of the digital key on the basis of reply data from the management terminal.SELECTED DRAWING: Figure 4

Description

[Technical Field]

[0001] The present disclosure relates to a work machine authentication system, a work machine management server, and a work machine authentication method. [Background technology]

[0002] A work machine is operated by an operator. Patent Document 1 discloses a technique for starting up a vehicle body control unit when the operator is authenticated. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Publication No. 2022-157162 Summary of the Invention [Problem to be solved by the invention]

[0004] An operator often operates different work machines depending on the work site, the work day, or the work content, and there is a need for the operator to be able to quickly operate different work machines.

[0005] The present disclosure is directed to allowing operators to operate different work machines. [Means for solving the problem]

[0006] According to the present disclosure, there is provided an authentication system for a work machine including a processor. The processor receives issuance application data for requesting the issuance of a digital key for the work machine, transmits approval request data to a management terminal based on the issuance application data, requesting approval for the issuance of the digital key, and transmits issuance request data to request the issuance of the digital key based on reply data from the management terminal. [Effects of the Invention]

[0007] According to the present disclosure, operators can be allowed to operate different work machines. [Brief explanation of the drawings]

[0008] [Figure 1] FIG. 1 is a diagram that schematically shows an authentication system for a work machine according to an embodiment. [Figure 2] FIG. 2 is a hardware configuration diagram showing a computer included in the authentication system for a work machine according to the embodiment. [Figure 3] FIG. 3 is a block diagram showing an authentication system for a work machine according to the embodiment. [Figure 4] FIG. 4 is a diagram for explaining the authentication method for a work machine according to the embodiment. [Figure 5] FIG. 5 is a diagram showing a list screen displayed on a user terminal according to the embodiment. [Figure 6] FIG. 6 is a diagram showing an application screen displayed on a user terminal according to the embodiment. [Figure 7] FIG. 7 is a diagram for explaining the application process according to the embodiment. [Figure 8] FIG. 8 is a diagram for explaining the application process according to the embodiment, an approval request to the management terminal, and a reply from the management terminal. [Figure 9] FIG. 9 is a diagram for explaining an issuance request to a digital key generation server according to the embodiment, a reply from the digital key generation server, and history processing. [Figure 10] FIG. 10 is a diagram showing a notification screen displayed on a user terminal according to the embodiment. [Figure 11] FIG. 11 is a diagram showing a list screen displayed on a user terminal according to the embodiment. [Figure 12] FIG. 12 is a diagram showing a connection preparation screen displayed on a user terminal according to the embodiment. [Figure 13] FIG. 13 is a diagram showing a connecting screen displayed on the user terminal according to the embodiment. [Figure 14] FIG. 14 is a diagram showing a connection completion screen displayed on the user terminal according to the embodiment. [Figure 15] FIG. 15 is a diagram showing a login screen displayed on the vehicle-mounted monitor according to the embodiment. [Figure 16] FIG. 16 is a diagram showing a BLE pairing screen displayed on a user terminal and a pairing screen displayed on an in-vehicle monitor according to the embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0009] Hereinafter, embodiments of the present disclosure will be described, but the present disclosure is not limited to the embodiments. The components of the embodiments described below can be combined as appropriate. In addition, some components may not be used.

[0010] [Authentication system overview] FIG. 1 is a diagram schematically illustrating an authentication system 1 for a work machine 2 according to an embodiment. The work machine 2 operates at a work site 3. The authentication system 1 authenticates users engaged in work at the work site 3. The authentication system 1 causes the work machine 2 to authenticate the user. The authentication system 1 issues a digital key for the work machine 2. The authentication system 1 comprises a management server 4, a digital key generation server 5, a user terminal 6, and a management terminal 7.

[0011] In the example shown in FIG. 1, the work machine 2 is a shovel. The work machine 2 has a traveling device 2A that travels on the ground, a vehicle body 2B that is rotatably supported on the traveling device 2A, and a work implement 2C that is attached to the vehicle body 2B. The vehicle body 2B has a driver's cab 2D and a door 2E that opens and closes the entrance to the driver's cab 2D. Note that the work machine 2 does not have to be a shovel. The work machine 2 may also be a bulldozer, wheel loader, motor grader, or forklift. Note that the work machine 2 does not have to have a work implement. The work machine 2 may be a transport vehicle such as a dump truck, or may be another work machine.

[0012] The management server 4 manages the work machines 2 and users. The management server 4 is installed outside the work site 3. The management server 4 can communicate with each of the digital key generation server 5, the user terminal 6, and the management terminal 7 via a communication system. In an embodiment, the communication system includes a mobile phone communication line. The communication system may also include an internet communication line or a communication satellite line.

[0013] The digital key generation server 5 generates a digital key for the work machine 2. The digital key generation server 5 is installed outside the work site 3. A digital key refers to a technology that uses digital data stored in a user terminal 6 as a key for the work machine 2. The user can unlock the door 2E using the digital data stored in the user terminal 6 without using a physical key.

[0014] The user terminal 6 is carried by a user engaged in work at the work site 3. Examples of users include a site manager who manages the work site 3, an operator of the work machine 2, a machine manager who manages the work machine 2, and a mechanic for the work machine 2. The user terminal 6 is an information terminal such as a smartphone or tablet terminal. The user terminal 6 may also be a personal computer.

[0015] The user terminal 6 communicates with the work machine 2 via a wireless personal area network (PAN) such as Bluetooth (registered trademark) or Zigbee (registered trademark). In an embodiment, the user terminal 6 communicates with the work machine 2 via Bluetooth Low Energy (BLE). The work machine 2 communicates with the user terminal 6 via BLE to authenticate the user.

[0016] The management terminal 7 is owned by the administrator of the authentication system 1. The management terminal 7 is installed outside the work site 3. The management terminal 7 is an information terminal such as a personal computer. The management terminal 7 may also be a smartphone or a tablet terminal.

[0017] [computer] FIG. 2 is a hardware configuration diagram showing a computer 10 included in the authentication system 1 for a work machine 2 according to an embodiment. The management server 4, the digital key generation server 5, the user terminal 6, and the management terminal 7 each include a computer 10. The computer 10 includes a processor 11 such as a CPU (Central Processing Unit), a main memory 12 including non-volatile memory such as ROM (Read Only Memory) and volatile memory such as RAM (Random Access Memory), a storage 13, an input / output interface 14 including an input / output circuit, and a communication interface 15 including a communication circuit. The functions of the computer 10 are stored in the storage 13 as a computer program 16. The processor 11 reads the computer program 16 from the storage 13, loads it into the main memory 12, and executes processing in accordance with the computer program 16. The computer program 16 may be distributed to the computer 10 via a network.

[0018] [Authentication System] 3 is a block diagram showing an authentication system 1 for a work machine 2 according to an embodiment. The user terminal 6 has a user terminal controller 60, a display device 61, and an input device 62. The user terminal controller 60 includes the computer 10 described above.

[0019] The display device 61 includes a flat panel display such as a liquid crystal display or an organic EL display. The input device 62 includes an input device such as a touch panel or a computer keyboard.

[0020] A start controller 20 for authenticating a user is mounted on the work machine 2. Application software 60F is installed in the user terminal controller 60, and the application software 60F causes the start controller 20 of the work machine 2 to authenticate the user. The application software 60F is a digital key application for using a digital key. The application software 60F is an example of a computer program 16.

[0021] The user terminal controller 60 has a receiving unit 60A, a display control unit 60B, a processing unit 60C, a transmitting unit 60D, and a terminal storage unit 60E. The functions of the receiving unit 60A, the display control unit 60B, the processing unit 60C, and the transmitting unit 60D are respectively performed by the processor 11 described above. The function of the terminal storage unit 60E is performed by the storage 13 described above. Application software 60F is stored in the terminal storage unit 60E.

[0022] The receiving unit 60A acquires a list of work machines 2 that can be connected to the user terminal 6. The work machines 2 that can be connected to the user terminal 6 include work machines 2 that can authenticate a user, work machines 2 that the user can board, and work machines 2 for which the door locks 23, described below, can be unlocked by connection with the user terminal 6. In other words, the receiving unit 60A acquires a list of work machines 2 that can authenticate a user. The receiving unit 60A acquires a list of work machines 2 that the user can board. The receiving unit 60A acquires a list of work machines 2 for which the door locks 23 can be unlocked by connection with the user terminal 6. The list is created in the management server 4. The receiving unit 60A receives the list from the management server 4. Work machines 2 that can authenticate a user are able to communicate with the user terminal 6 via BLE. In the following description, the list of work machines 2 that can be connected to the user terminal 6 will be referred to as a vehicle list, where appropriate.

[0023] The display control unit 60B generates display data for displaying the vehicle list acquired by the receiving unit 60A on the display device 61. The display control unit 60B causes the display device 61 to display display data for allowing the user to select from the vehicle list a work machine 2 to which the user terminal 6 is to be connected. In other words, the display control unit 60B causes the display device 61 to display display data for allowing the user to select from the vehicle list a work machine 2 for which the user is to be authenticated. The display control unit 60B causes the display device 61 to display display data for allowing the user to select from the vehicle list a work machine 2 in which the user will board. The display control unit 60B causes the display device 61 to display display data for allowing the user to select from the vehicle list a work machine 2 for which the door lock 23 is to be unlocked. The user operates the input device 62 of the user terminal 6 to select a work machine 2 to which the user terminal 6 is to be connected.

[0024] The processing unit 60C receives input data generated by operating the input device 62. The processing unit 60C receives input data indicating the work machine 2 to which the user terminal 6 is to be connected. Based on the input data from the input device 62, the processing unit 60C selects, from the vehicle list, the work machine 2 to which the user terminal 6 is to be connected.

[0025] The transmission unit 60D transmits issuance application data to the management server 4 for having the work machine 2 selected by the processing unit 60C authenticate the user. The issuance application data is issuance application data for connecting the work machine 2 and the user terminal 6. Sending the issuance application data includes requesting the issuance of a digital key for the work machine 2.

[0026] The management server 4 includes the computer 10 described above. The management server 4 has a list creation unit 40, an application processing unit 41, a history processing unit 42, a vehicle data storage unit 43, a user data storage unit 44, and a history data storage unit 45. The functions of the list creation unit 40, the application processing unit 41, and the history processing unit 42 are respectively realized by the processor 11 described above. The functions of the vehicle data storage unit 43, the user data storage unit 44, and the history data storage unit 45 are respectively realized by the storage 13 described above.

[0027] The vehicle data storage unit 43 stores vehicle data indicating work machines 2 that can be connected to the user terminal 6. In other words, the vehicle data storage unit 43 stores vehicle data indicating work machines 2 for which a user can be authenticated. The vehicle data storage unit 43 stores vehicle data indicating work machines 2 that a user can board. The vehicle data storage unit 43 stores vehicle data indicating work machines 2 for which the door lock 23 can be unlocked by connection with the user terminal 6. Work machines 2 that can be connected to the user terminal 6 include work machines 2 that have already connected to the user terminal 6 and work machines 2 that have not yet connected to the user terminal 6. Work machines 2 that have already connected to the user terminal 6 include work machines 2 for which the user has been authenticated. Work machines 2 that have not yet connected to the user terminal 6 include work machines 2 for which the user has not been authenticated. The work machines 2 that can be connected to the user terminal 6 are determined in advance. Vehicle data is stored in the vehicle data storage unit 43 in association with the work machine 2 and the group to which the user belongs. An example of a group is a construction company that performs work at the work site 3. For example, the vehicle data includes vehicle data A consisting of a work machine 2 belonging to "Construction Company A," vehicle data B consisting of a work machine 2 belonging to "Construction Company B," and vehicle data C consisting of a work machine 2 belonging to "Construction Company C."

[0028] The vehicle data includes a vehicle ID for identifying the work machine 2, and an authentication flag that indicates whether the work machine 2 has already connected to the user terminal 6. The authentication flag indicates whether the work machine 2 has already authenticated the user. The vehicle ID includes an identification number such as a vehicle serial number. An authentication flag value of ON indicates that the work machine 2 has already connected to the user terminal 6 (the work machine 2 has already authenticated the user). An authentication flag value of OFF indicates that the work machine 2 has not yet connected to the user terminal 6 (the work machine 2 has not yet authenticated the user).

[0029] The fact that the work machine 2 has authenticated the user includes the fact that a digital key for the work machine 2 has been issued to the user. The fact that the work machine 2 has authenticated the user includes the fact that the work machine 2 and the user terminal 6 have been connected by the digital key.

[0030] The user data storage unit 44 stores user data indicating users that can be authenticated by the work machine 2. The user data includes user terminals 6 that can be connected to the work machine 2. Users that can be authenticated by the work machine 2 include users who have the authority to operate the work machine 2. The users that can be authenticated by the work machine 2 are determined in advance. The user data is stored in the user data storage unit 44 in association with the group to which the work machine 2 and user belong. An example of a group is a construction company that works the work site 3. For example, the user data includes user data A made up of users who belong to "construction company A", user data B made up of users who belong to "construction company B", and user data C made up of users who belong to "construction company C".

[0031] The user data includes a user ID for identifying the user and an authority flag that indicates whether the user has authority to operate the work machine 2. An authority flag value that is ON indicates that the user has authority to operate the work machine 2. An authority flag value that is OFF indicates that the user does not have authority to operate the work machine 2. Even within a group, there are users who have authority to operate the work machine 2 and users who do not have authority to operate it.

[0032] The list creation unit 40 creates a vehicle list indicating a list of work machines 2 that can be connected to the user terminal 6, based on the vehicle data stored in the vehicle data storage unit 43. In other words, the list creation unit 40 creates a vehicle list indicating a list of work machines 2 that can authenticate a user, based on the vehicle data stored in the vehicle data storage unit 43. The list creation unit 40 creates a vehicle list indicating a list of work machines 2 that a user can board, based on the vehicle data stored in the vehicle data storage unit 43. The list creation unit 40 creates a vehicle list indicating a list of work machines 2 that can be unlocked by connection with the user terminal 6, based on the vehicle data stored in the vehicle data storage unit 43. The vehicle list is created in association with the work machines 2 and groups to which the users belong. For example, vehicle list A is created from a plurality of work machines 2 that belong to "construction company A" and that can authenticate users of "construction company A". Vehicle list B is created from a plurality of work machines 2 that belong to "construction company B" and that can authenticate users of "construction company B". A vehicle list C is created by a plurality of work machines 2 that belong to "construction company C" and that can authenticate users of "construction company C." The vehicle list created by the list creation unit 40 is transmitted to the user terminal 6 via the communication system.

[0033] The vehicle list created by the list creation unit 40 includes a first vehicle list showing a vehicle list of work machines 2 that have already connected to the user terminal 6, and a second vehicle list showing a vehicle list of work machines 2 that have not yet connected to the user terminal 6. The first vehicle list shows a vehicle list of work machines 2 for which the user has already been authenticated. The second vehicle list shows a vehicle list of work machines 2 for which the user has not yet been authenticated.

[0034] The application processing unit 41 receives issuance application data that requests the issuance of a digital key for the work machine 2, transmitted from the user terminal 6. Based on the issuance application data, the application processing unit 41 transmits approval request data that requests approval for the issuance of a digital key to the management terminal 7. Based on the reply data from the management terminal 7, the application processing unit 41 transmits issuance request data that requests the issuance of a digital key to the digital key generation server 5.

[0035] After the digital key generation server 5 issues a digital key, the history processing unit 42 stores the history data associated with the digital key in the history data storage unit 45.

[0036] The management terminal 7 includes a management terminal controller 70, a display device 71, and an input device 72. The management terminal controller 70 includes the above-mentioned computer 10. The display device 71 includes a flat panel display such as a liquid crystal display or an organic EL display. The input device 72 includes an input device such as a touch panel or a computer keyboard.

[0037] The digital key generation server 5 includes the above-mentioned computer 10. The digital key generation server 5 issues a digital key based on issuance request data transmitted from the management server 4 requesting the issuance of a digital key.

[0038] The work machine 2 has a starting controller 20, a vehicle controller 21, an on-board monitor 22, a door lock 23, a starting switch 24, and an engine 25. The starting controller 20 and the vehicle controller 21 each include the computer 10 described above.

[0039] The in-vehicle monitor 22 is disposed in the driver's cab 2D. The in-vehicle monitor 22 includes a display device including a flat panel display such as a liquid crystal display or an organic EL display, and an input device including an input device such as a touch panel or buttons.

[0040] The door lock 23 locks the door 2E. When the work machine 2 and the user terminal 6 are connected using the digital key while the user is outside the work machine 2, the door lock 23 enters an unlockable state. After the door lock 23 enters an unlockable state, the door lock 23 is unlocked and the door 2E is unlocked by the user pressing a door unlock button (not shown) provided on the door 2E.

[0041] The start switch 24 is disposed in the cab 2D. When the start switch 24 is operated by a user, at least a portion of the work machine 2 is started. In this embodiment, the start switch 24 is a rotary switch. When operated by a user, the start switch 24 is rotated to any one of the OFF position, accessory position, ignition position, and start position. When the start switch 24 is rotated from the OFF position to the accessory position, the accessory power supply of the work machine 2 is started. When the start switch 24 is rotated from the OFF position to the ignition position via the accessory position, the ignition power supply of the work machine 2 is started. When the start switch 24 is rotated from the OFF position to the start position via the accessory position and the ignition position, the engine 25 is started. When the operation of the start switch 24 is released after it has been rotated to the start position, the start switch 24 returns from the start position to the ignition position due to the elastic force of an elastic member, for example. With the start switch 24 disposed in the ignition position, the engine 25 continues to operate.

[0042] The start controller 20 authenticates the user. The start controller 20 controls the start of at least a part of the work machine 2. When the start controller 20 authenticates that the user has the authority to operate the work machine 2 through the user's login operation, which will be described later, it transmits a start signal to start the vehicle controller 21.

[0043] After receiving the start signal from the start controller 20, the vehicle controller 21 enters a state in which it is able to output a control signal. In other words, after the start signal is output from the start controller 20, the work machine 2 enters an operable state. The operable state of the work machine 2 includes a state in which the engine 25 is able to start.

[0044] After receiving a start signal from the start controller 20, the vehicle controller 21 can output a control signal to start the engine 25 based on an operation signal from the start switch 24 indicating that the start switch 24 has been rotated to the start position.

[0045] After the engine 25 has started, the vehicle controller 21 outputs a control signal for operating at least a part of the work machine 2 based on an operation signal from an operation device (not shown) arranged in the driver's cab 2D. The operation device is operated by a user. When the work machine 2 is in an operable state, operating the operation device operates at least a part of the work machine 2. When the operation device is operated, the vehicle controller 21 outputs a control signal for operating at least a part of the traveling device 2A, the vehicle body 2B, and the work implement 2C. The operation device includes a traveling lever for operating the traveling device 2A, a turning lever for turning the vehicle body 2B, and a working lever for operating the work implement 2C.

[0046] The start controller 20 includes a detection unit 20A, a start unit 20B, a monitor control unit 20C, an authentication unit 20D, and an on-vehicle storage unit 20E. The functions of the detection unit 20A, the start unit 20B, the monitor control unit 20C, and the authentication unit 20D are realized by the processor 11. The function of the on-vehicle storage unit 20E is realized by the storage 13.

[0047] The on-vehicle storage unit 20E stores user data indicating users that can be authenticated by the work machine 2. At least a portion of the user data stored in the on-vehicle storage unit 20E is the same as the user data stored in the user data storage unit 44 of the management server 4. The user data stored in the user data storage unit 44 of the management server 4 is distributed to the work machine 2 and stored in the on-vehicle storage unit 20E. The user data stored in the on-vehicle storage unit 20E includes a user ID for identifying the user, the user's display name that is displayed on the display device of the on-vehicle monitor 22, and an authority flag that indicates whether the user has authority to operate the work machine 2.

[0048] The on-board storage unit 20E also stores setting data that indicates setting values ​​related to control signals that are output from the vehicle controller 21 to operate the work machine 2. Examples of setting values ​​include a weight value by which the value of the control signal is multiplied, and a function value that indicates the relationship between the value of the operation signal and the value of the control signal. The setting values ​​are set for each of multiple users in the user data. The setting values ​​are associated with user IDs. The vehicle controller 21 determines setting values ​​corresponding to the user based on the user ID of the authenticated user, and adjusts the control signals based on the setting values. As a result, the setting data determined for each user is reflected in the operation of the work machine 2.

[0049] The detection unit 20A communicates with the user terminal 6 via BLE. The detection unit 20A transmits advertising packets. As will be described later, the user selects the work machine 2 for which the user is to be authenticated (the work machine 2 to be connected to the user terminal 6). When the work machine 2 for which the user is to be authenticated is selected, the user terminal 6 searches for a detection unit 20A that is transmitting an advertising packet that matches the information of the selected work machine 2, and connects to the found detection unit 20A. The advertising packet includes a vehicle ID for identifying the work machine 2. The advertising packet may also include an ID for identifying the start controller 20.

[0050] After connecting to the detection unit 20A, the user terminal 6 transmits a user ID to the detection unit 20A. The detection unit 20A determines whether the user of the connected user terminal 6 is a user stored in the on-vehicle storage unit 20E, based on the user data stored in the on-vehicle storage unit 20E. The detection unit 20A compares the user ID transmitted from the user terminal 6 with the user ID in the user data stored in the on-vehicle storage unit 20E, and identifies the user of the user terminal 6 connected to the work machine 2.

[0051] When it is determined that the user terminal 6 of the user stored in the on-vehicle storage unit 20E is connected to the work machine 2, the starting unit 20B outputs a control signal to place the door lock 23 in an unlockable state. When the control signal is output from the starting unit 20B, the door 2E enters an unlockable state. After the door lock 23 enters an unlockable state, the door lock 23 is unlocked and the door 2E is unlocked when the user presses a door unlock button (not shown) provided on the door 2E. When the door 2E is unlocked, the user can enter the driver's cab 2D and operate the start switch 24 or operate the input device of the on-vehicle monitor 22.

[0052] The monitor control unit 20C controls the in-vehicle monitor 22. When the start switch 24 is rotated to the accessory position and the accessory power supply is started, the in-vehicle monitor 22 starts. The monitor control unit 20C starts the in-vehicle monitor 22 based on an operation signal from the start switch 24 indicating that the start switch 24 has been rotated to the accessory position. The monitor control unit 20C generates display data to be displayed on the display device of the in-vehicle monitor 22. The monitor control unit 20C receives input data generated by operating the input device of the in-vehicle monitor 22.

[0053] In the embodiment, the monitor control unit 20C displays display data on the display device of the in-vehicle monitor 22 to allow a user in the driver's cab 2D to perform a login operation. The user performs a login operation on the input device of the in-vehicle monitor 22. The display data to allow the user to perform the login operation includes display data to allow the user to select a user ID. The login operation includes an operation to select a user ID displayed on the display device of the in-vehicle monitor 22. The monitor control unit 20C receives input data indicating a user ID generated by operating the input device of the in-vehicle monitor 22.

[0054] The authentication unit 20D authenticates that the user has the authority to operate the work machine 2, based on the input data when the input device of the on-board monitor 22 is operated to log in. The authentication unit 20D compares the user ID input from the input device of the on-board monitor 22 with the user ID of the user data stored in the on-board storage unit 20E to determine whether the user in the cab 2D has the authority to operate the work machine 2. The authentication unit 20D determines whether the authority flag associated with the compared user ID is ON. If the authority flag is ON, the authentication unit 20D authenticates that the user in the cab 2D has the authority to operate the work machine 2.

[0055] When the authentication unit 20D authenticates that the user has the authority to operate the work machine 2, the starting unit 20B outputs a start signal to start the vehicle controller 21. When the vehicle controller 21 starts, the ignition power source enters a start-enabled state, and the work machine 2 enters an operable state.

[0056] [Authentication method] 4 is a diagram for explaining the authentication method for a work machine 2 according to the embodiment. A user operates the input device 62 of the user terminal 6 to request the issuance of a digital key for the work machine 2. The transmission unit 60D of the user terminal 6 transmits issuance request data requesting the issuance of a digital key for the work machine 2 to the management server 4 (step S1).

[0057] The application processing unit 41 of the management server 4 executes application processing based on the issuance application data transmitted from the user terminal 6 (step S2). The application processing unit 41 transmits approval request data to the management terminal 7, requesting approval for the issuance of a digital key, based on the issuance application data transmitted from the user terminal 6 (step S3). The manager operates the input device 72 of the management terminal 7 to approve the issuance of a digital key for the work machine 2. The management terminal controller 70 of the management terminal 7 transmits reply data indicating that the issuance of a digital key for the work machine 2 has been approved, to the management server 4 (step S4). The application processing unit 41 of the management server 4 transmits issuance request data to request the issuance of a digital key to the digital key generation server 5, based on the reply data from the management terminal 7 (step S5).

[0058] The digital key generation server 5 issues a digital key based on the issuance request data that requests the issuance of a digital key, which is sent from the management server 4. The digital key generation server 5 sends reply data indicating that a digital key for the work machine 2 has been issued to the management server 4 (step S6). After the digital key has been issued, the history processing unit 42 of the management server 4 executes history processing that stores history data associated with the digital key in the history data storage unit 45 based on the reply data from the digital key generation server 5 (step S7).

[0059] After the digital key is issued, the application processing unit 41 of the management server 4 sends notification data indicating that the digital key is available for delivery to the user terminal 6 that sent the issuance application data. The user operates the input device 62 of the user terminal 6 so that the digital key of the work machine 2 is delivered to the user terminal 6. The transmission unit 60D of the user terminal 6 sends delivery request data requesting delivery of the digital key of the work machine 2 to the management server 4. The application processing unit 41 of the management server 4 delivers the digital key of the work machine 2 to the user terminal 6 (step S8).

[0060] When the digital key is distributed and the machine tool 2 and the user terminal 6 are connected, the user of the user terminal 6 connected to the machine tool 2 is authenticated by the start controller 20 of the machine tool 2, and the lock of the door lock 23 can be released (step S9).

[0061] Hereinafter, the processes of steps S1 to S9 described above will be described. In the following description, it is assumed that the input device 62 of the user terminal 6 is a touch panel. The application software 60F displays a predetermined display screen on the display device 61 of the user terminal 6. Tapping the display screen of the display device 61 means operating the input device 62. It is also assumed that the input device 72 of the management terminal 7 is a touch panel.

[0062] <S0: Vehicle List> FIG. 5 is a diagram showing a list screen 31 displayed on the user terminal 6 according to the embodiment. In order to use the application software 60F, the user registers an account in advance for the application software 60F. The user operates the input device 62 to input a login name and a password to the user terminal 6 in order to start the application software 60F. When the login name and password are input to the user terminal 6 and the application software 60F is started, an initial screen (not shown) is displayed on the display device 61, and then a list screen 31 as shown in FIG. 5 is displayed on the display device 61.

[0063] The receiving unit 60A receives a vehicle list from the management server 4. As described above, the vehicle list created by the list creating unit 40 includes a first vehicle list indicating the vehicle list of the machine tool 2 for which the user has been authenticated (connected to the user terminal 6) and a second vehicle list indicating the list of the machine tool 2 for which the user has not been authenticated (not connected to the user terminal 6). The receiving unit 60A receives both the first vehicle list and the second vehicle list.

[0064] The display control unit 60B can display a first vehicle list and a second vehicle list on the display device 61. A first tab button 31A for displaying the first vehicle list and a second tab button 31B for displaying the second vehicle list are displayed on the list screen 31. When the first tab button 31A is tapped, the display control unit 60B displays the first vehicle list on the display device 61. When the second tab button 31B is tapped, the display control unit 60B displays the second vehicle list on the display device 61. Figure 5 shows an example in which the second tab button 31B is tapped and a second vehicle list 31C showing a vehicle list of work machines 2 for which the user has not been authenticated is displayed on the display device 61.

[0065] In the example shown in Figure 5, the second vehicle list 31C includes a first button 31C1 indicating work machine A, a second button 31C2 indicating work machine B, a third button 31C3 indicating work machine C, and a fourth button 31C4 indicating work machine D.

[0066] In an embodiment, the display control unit 60B can extract some of the work machines 2 from the second vehicle list created by the list creation unit 40 of the management server 4, and display them on the display device 61. In other words, the display control unit 60B can display on the display device 61 a second vehicle list 31C made up of a smaller number of work machines 2 than the number of work machines 2 included in the second vehicle list created by the list creation unit 40. The display control unit 60B selects work machines 2 that are present within a predetermined range from the position of the user terminal 6 from the second vehicle list created by the list creation unit 40, and displays them on the display device 61. In other words, the display control unit 60B displays on the display device 61 work machines 2 that are present close to the user terminal 6, out of the multiple work machines 2 included in the second vehicle list created by the list creation unit 40, and does not display on the display device 61 work machines 2 that are present far from the user terminal 6.

[0067] The processing unit 60C receives BLE radio waves output from the starting controller 20 of the work machine 2. The processing unit 60C can detect the strength of the BLE radio waves output from the starting controller 20 of the work machine 2. The display control unit 60B causes the display device 61 to display a second vehicle list 31C of work machines 2 for which the BLE radio waves output from the starting controller 20 are at a predetermined strength or higher. The display control unit 60B causes the display device 61 to display a second vehicle list 31C of work machines 2 that output BLE radio waves that can be received by the processing unit 60C. The display control unit 60B causes the display device 61 to display a second vehicle list 31C of work machines 2 that are located inside a predetermined range from the position of the user terminal 6. The display control unit 60B does not cause the display device 61 to display work machines 2 that are located outside the predetermined range from the position of the user terminal 6.

[0068] As described above, the list creation unit 40 of the management server 4 creates a vehicle list based on the work machines 2 stored in the vehicle data storage unit 43. The vehicle data storage unit 43 stores a plurality of work machines 2 associated with the work machines 2 and the group to which the user belongs. For example, if a construction company owns a large number of work machines 2, the vehicle list created by the list creation unit 40 will include a large number of work machines 2. If a large number of work machines 2 for which the user has not been authenticated are stored in the vehicle data storage unit 43, a large number of work machines 2 will be included in the second vehicle list created by the list creation unit 40. If the second vehicle list created by the list creation unit 40 includes, for example, 30 work machines 2, displaying all 30 work machines 2 on the display device 61 may make the list screen 31 difficult to view. Furthermore, there is little need for the user to be authenticated by a work machine 2 located in a remote location from the user terminal 6. In the embodiment, the display control unit 60B displays only the work machines 2 that are present within a predetermined range from the position of the user terminal 6 on the display device 61 as the second vehicle list 31C, so that the work machines 2 for which the user wishes to authenticate are displayed on the display device 61 in an easy-to-view display format.

[0069] The display control unit 60B can rearrange the display of the working machine 2 in the second vehicle list 31C based on the distance between the user terminal 6 and the working machine 2. The display control unit 60B can rearrange the display of the working machine 2 so that the working machine 2 with a shorter distance from the user terminal 6 is displayed higher in the second vehicle list 31C. FIG. 5 shows an example in which four working machines 2 exist within a predetermined range from the position of the user terminal 6, and the second vehicle list 31C including the four working machines 2 is displayed on the display device 61. Further, in FIG. 5, among the four working machines 2, the working machine A exists at the position closest to the user terminal 6, the working machine B exists at a position closer to the user terminal 6 next to the working machine A, the working machine C exists at a position closer to the user terminal 6 next to the working machine B, and the working machine D exists at the position farthest from the user terminal 6. Note that the display control unit 60B may rearrange the display of the working machine 2 so that the working machine 2 with a longer distance from the user terminal 6 is displayed higher in the second vehicle list 31C.

[0070] In the example shown in FIG. 5, on the list screen 31, first comment data indicating that the working machine A is being used by another user and second comment data indicating that the working machines B, C, and D are available for use are displayed.

[0071] The user operates the input device 62 of the user terminal 6 to select the working machine 2 that authenticates the user from the second vehicle list 31C.

[0072] <S1: Application Submission> FIG. 6 is a diagram showing an application screen 32 displayed on the user terminal 6 according to the embodiment. When any button (31C1, 31C2, 31C3, 31C4) in the second vehicle list 31C shown in FIG. 5 is tapped, the display control unit 60B changes the display screen displayed on the display device 61 from the list screen 31 to the application screen 32 as shown in FIG. 6. FIG. 6 shows an example in which the third button 31C3 is tapped on the list screen 31 and the application screen 32 for authenticating the user to the working machine C is displayed on the display device 61.

[0073] The application screen 32 includes a construction machine display area 32A where the symbol and name of the construction machine C selected by the user are displayed, and an issuance application button 32B that is operated when transmitting issuance application data for authenticating the user to the construction machine C. When the issuance application button 32B is tapped, the issuance application data for authenticating the user to the construction machine C is transmitted from the user terminal 6 to the management server 4.

[0074] Transmitting the issuance application data includes applying for the issuance of a digital key for the construction machine 2. The issuance application data includes the target vehicle indicating the construction machine 2 for which the digital key is to be used, the usage period of the digital key, and the reason for applying for the issuance of the digital key. In the example shown in FIG. 6, the target vehicle is the construction machine C. Also, although not shown, an input screen for inputting the usage period of the digital key and the reason for applying for the issuance of the digital key is displayed on the display device 61. After the user selects the construction machine C and inputs the usage period of the digital key and the reason for applying for the issuance of the digital key, the user taps the issuance application button 32B. When the issuance application button 32B is tapped, the issuance application data including the target vehicle indicating the construction machine 2 for which the digital key is to be used, the usage period of the digital key, and the reason for applying for the issuance of the digital key is transmitted from the user terminal 6 to the management server 4. The issuance application data includes a terminal ID for identifying the user terminal 6.

[0075] <S2: Application Processing> FIG. 7 is a diagram for explaining the application processing according to the embodiment. The application processing unit 41 of the management server 4 collates the issuance application data transmitted from the user terminal 6 with the vehicle data stored in the vehicle data storage unit 43 to identify the vehicle ID of the construction machine C that is the target of using the digital key. The vehicle ID includes an identification number such as a vehicle serial number. Also, the application processing unit 41 collates the issuance application data transmitted from the user terminal 6 with the user data stored in the user data storage unit 44 to identify the user who has applied for the issuance of the digital key.

[0076] FIG. 8 is a diagram for explaining application processing according to the embodiment, an approval request to the management terminal 7, and a reply from the management terminal 7. As shown in FIG. 8, the application processing includes determination of whether a work machine C that is the target of digital key use is available, determination of the validity of a user who has applied for issuance of a digital key, and approval of the issuance of the digital key. The application processing unit 41 of the management server 4 collates the issuance application data transmitted from the user terminal 6 with the vehicle data stored in the vehicle data storage unit 43, and if it is determined that the work machine C can authenticate the user, that is, if it is determined that the work machine C belongs to the above-described group and is a digital key-compatible vehicle, it is determined that the work machine C is available. The application processing unit 41 collates the issuance application data transmitted from the user terminal 6 with the user data stored in the user data storage unit 44, and if it is determined that the user can use the digital key, that is, if it is determined that the user belongs to the above-described group, it is determined that the user is valid.

[0077] <S3: Approval Request> If the application processing unit 41 determines in step S2 that the work machine C is available and the user is valid, it transmits approval request data requesting approval of the issuance of the digital key to the management terminal 7. As shown in FIG. 8, when the management terminal controller 70 of the management terminal 7 receives the approval request data, it causes the display device 71 of the management terminal 7 to display an approval screen 33. The approval screen 33 includes an applicant display area 33A in which the name of the user who is the applicant for the issuance of the digital key is displayed, an application reason display area 33B in which the reason for the application for the issuance of the digital key is displayed, an identification number display area 33C in which the identification number of the work machine C that is the target of digital key use is displayed, and a use period display area 33D in which the use period of the digital key is displayed. Note that the user's email address may be displayed in the applicant display area 33A.

[0078] Further, the approval screen 33 includes an administrator input area 33E in which the name of the administrator is input, an approval button 33F that is operated when the administrator approves the issuance of the digital key, and a denial button 33G that is operated when the administrator denies the issuance of the digital key.

[0079] The administrator operates the input device 72 of the management terminal 7 to enter the administrator's name in the administrator input area 33E. Note that the administrator's email address may be entered in the administrator input area 33E. The administrator checks the user displayed in the applicant display area 33A, the application reason displayed in the application reason display area 33B, the identification number of the working machine C displayed in the identification number display area 33C, and the usage period of the digital key displayed in the usage period display area 33D, and taps the approval button 33F or the denial button 33G. When the administrator approves the issuance of the digital key, the administrator taps the approval button 33F. When the administrator denies the issuance of the digital key, the administrator taps the denial button 33G. Note that the management terminal 7 stores correspondence information that can approve the issuance of the digital key based on at least two or more combinations of the user, the application reason, the identification number of the working machine C, and the usage period of the digital key, and automatically determines whether to approve or deny the issuance of the digital key based on the correspondence information.

[0080] <S4: Reply> When the approval button 33F is tapped, the management terminal controller 70 of the management terminal 7 transmits reply data indicating that the issuance of the digital key of the working machine 2 has been approved to the management server 4. When the denial button 33G is tapped, the management terminal controller 70 transmits reply data indicating that the issuance of the digital key of the working machine 2 has been denied to the management server 4. When the application processing unit 41 receives the reply data indicating that the issuance of the digital key of the working machine 2 has been approved from the management terminal 7, the application processing unit 41 approves the issuance of the digital key. When the application processing unit 41 receives the reply data indicating that the issuance of the digital key of the working machine 2 has been denied from the management terminal 7, the application processing unit 41 denies the issuance of the digital key.

[0081] <S5: Issuance Request> FIG. 9 is a diagram for explaining an issuance request to the digital key generation server 5 according to the embodiment, a reply from the digital key generation server, and history processing. In step S4, when the issuance of the digital key is approved, the application processing unit 41 of the management server 4 transmits issuance request data for requesting the issuance of the digital key to the digital key generation server 5.

[0082] <S6: Reply> The digital key generation server 5 issues a digital key based on the issuance request data for requesting the issuance of the digital key transmitted from the management server 4. The digital key generation server 5 transmits reply data indicating that the digital key of the working machine 2 has been issued to the management server 4.

[0083] <S7: History Processing> After the digital key is issued, the history processing unit 42 of the management server 4 generates history data associated with the digital key based on the reply data from the digital key generation server 5. The history data includes the target vehicle indicating the working machine 2 to which the digital key is to be used, the usage period of the digital key, and the user terminal 6 that transmitted the issuance application data. The history processing unit 42 stores the history data in the history data storage unit 45.

[0084] <S8: Distribution> FIG. 10 is a diagram showing the notification screen 34 displayed on the user terminal 6 according to the embodiment. After the digital key is issued, the application processing unit 41 of the management server 4 transmits notification data indicating that the digital key can be distributed to the user terminal 6 that transmitted the issuance application data. When the display control unit 60B of the user terminal 6 receives the notification data from the management server 4, it causes the display device 61 to display a notification screen 34 as shown in FIG. 10.

[0085] The notification screen 34 includes a work machine display area 34A that displays the symbol and name of the work machine C to which the digital key has been issued, a usage period display area 34B that displays the usage period of the digital key, and an application history display area 34C that displays the application history including the date and time the issuance application data was sent and the time the digital key was approved for issuance.

[0086] The notification screen 34 also includes a digital key download button 34D that is operated when downloading the issued digital key, a digital key delete button 34E that is operated when deleting the issued digital key, and an extension request button 34F that is operated when requesting an extension of the usage period of the digital key.

[0087] By tapping the digital key download button 34D, delivery request data requesting delivery of a digital key for the work machine 2 is sent from the sending unit 60D of the user terminal 6 to the management server 4. When the application processing unit 41 of the management server 4 receives the delivery request data, it delivers the digital key for the work machine C to the user terminal 6.

[0088] As described above, the vehicle list created by the list creation unit 40 includes a first vehicle list showing a vehicle list of work machines 2 for which digital keys have been issued, and a second vehicle list showing a vehicle list of work machines 2 for which digital keys have not yet been issued. Because a digital key has been issued for work machine C, work machine C changes from being included in the second vehicle list to being included in the first vehicle list.

[0089] FIG. 11 is a diagram showing a list screen 35 displayed on the user terminal 6 according to the embodiment. The receiving unit 60A receives the vehicle list from the management server 4. The display control unit 60B can display a first vehicle list and a second vehicle list on the display device 61. A first tab button 35A for displaying the first vehicle list and a second tab button 35B for displaying the second vehicle list are displayed on the list screen 35. As shown in FIG. 11, when the first tab button 35A is tapped, the display control unit 60B causes the display device 61 to display a first vehicle list 35C. The first vehicle list 35C includes work machines C for which new digital keys have been issued.

[0090] 11, the first vehicle list 35C includes a first button 35C1 indicating work machine C, a second button 35C2 indicating work machine E, a third button 35C3 indicating work machine F, and a fourth button 35C4 indicating work machine G. Furthermore, a symbol 35D indicating that a digital key has been issued to the work machine (C, E, F, G) is attached to each of the multiple buttons (35C1, 35C2, 35C3, 35C4).

[0091] The display control unit 60B can extract some of the work machines 2 from the first vehicle list created by the list creation unit 40 of the management server 4, and display them on the display device 61. In other words, the display control unit 60B can display on the display device 61 a first vehicle list 35C made up of a smaller number of work machines 2 than the number of work machines 2 included in the first vehicle list created by the list creation unit 40. The display control unit 60B selects work machines 2 that are present within a predetermined range from the position of the user terminal 6 from the first vehicle list created by the list creation unit 40, and displays them on the display device 61. In other words, the display control unit 60B displays on the display device 61 work machines 2 that are present near the user terminal 6, out of the multiple work machines 2 included in the first vehicle list created by the list creation unit 40, and does not display on the display device 61 work machines 2 that are present far from the user terminal 6.

[0092] The processing unit 60C receives BLE radio waves output from the starting controller 20 of the work machine 2. The processing unit 60C can detect the position of the user terminal 6 on which the processing unit 60C is mounted, based on the BLE radio waves. The processing unit 60C can detect the strength of the BLE radio waves output from the starting controller 20 of the work machine 2. The display control unit 60B causes the display device 61 to display a first vehicle list 35C of work machines 2 for which the BLE radio waves output from the starting controller 20 are at or above a predetermined strength. The display control unit 60B causes the display device 61 to display a first vehicle list 35C of work machines 2 that output BLE radio waves that can be received by the processing unit 60C. The display control unit 60B causes the display device 61 to display a first vehicle list 35C of work machines 2 that are located inside a predetermined range from the position of the user terminal 6. The display control unit 60B does not cause the display device 61 to display work machines 2 that are located outside the predetermined range from the position of the user terminal 6.

[0093] In the embodiment, the display control unit 60B displays only the work machines 2 that are present within a predetermined range from the position of the user terminal 6 on the display device 61 as the first vehicle list 35C, so that the work machines 2 for which the user wishes to authenticate are displayed on the display device 61 in an easy-to-view display format.

[0094] The display control unit 60B can rearrange the display of work machines 2 in the first vehicle list 35C based on the distance between the user terminal 6 and the work machines 2. The display control unit 60B can rearrange the display of work machines 2 so that work machines 2 that are closer to the user terminal 6 are displayed higher in the first vehicle list 35C. Note that the display control unit 60B may also rearrange the display of work machines 2 so that work machines 2 that are farther away from the user terminal 6 are displayed higher in the first vehicle list 35C.

[0095] The display control unit 60B may rearrange the display of the working machine 2 in the first vehicle list 35C based on the time point when the working machine 2 authenticates the user. The display control unit 60B can rearrange the display of the working machine 2 so that the working machine 2 whose authentication time point of the user is a past time point is displayed higher in the first vehicle list 35C. Note that the display control unit 60B may rearrange the display of the working machine 2 so that the working machine 2 whose authentication time point of the user is the most recent time point is displayed higher in the first vehicle list 35C. The time point when the working machine 2 authenticates the user includes at least one of the time point when the digital key of the working machine 2 is issued to the user and the time point when the working machine 2 and the user terminal 6 are connected by the digital key.

[0096] In addition, in the example shown in FIG. 11, comment data indicating that the working machines C, E, F, and G are available is displayed on the list screen 35. The comment data includes character data of "Available". Although not shown, comment data indicating that the working machine 2 is in use by another user may be displayed.

[0097] As described above, when a digital key is issued to a certain working machine 2, the vehicle list created by the list creation unit 40 is changed. That is, the vehicle list is updated in the management server 4. The receiving unit 60A of the user terminal 6 periodically receives the vehicle list from the management server 4. When the vehicle list is updated in the management server 4, the display device 61 causes the updated vehicle list to be displayed on the display device 61.

[0098] The user operates the input device 62 of the user terminal 6 to select the working machine 2 that authenticates the user from the first vehicle list 35C.

[0099] <S9: Authentication> Fig. 12 is a diagram showing a connection preparation screen 36 displayed on the user terminal 6 according to the embodiment. When any of the buttons (35C1, 35C2, 35C3, 35C4) in the first vehicle list 35C shown in Fig. 11 is tapped, the display control unit 60B transitions the display screen displayed on the display device 61 from the list screen 35 to the connection preparation screen 36 as shown in Fig. 12. Fig. 12 shows an example in which the first button 35C1 is tapped, and the connection preparation screen 36 for having the work machine C authenticate the user is displayed on the display device 61.

[0100] The connection preparation screen 36 includes a work machine display area 36A in which the symbol and name of the work machine C selected by the user are displayed, a symbol 36B indicating that a digital key has been issued, and a connection button 36C that is operated when connecting the work machine C and the user terminal 6 using the digital key. When the connection button 36C is tapped, the user terminal 6 searches for the work machine C using BLE radio waves.

[0101] Fig. 13 is a diagram showing a connecting screen 37 displayed on the user terminal 6 according to the embodiment. When the connect button 36C shown in Fig. 12 is tapped, the display control unit 60B transitions the display screen displayed on the display device 61 from the connection preparation screen 36 to the connecting screen 37 as shown in Fig. 13.

[0102] The connecting screen 37 includes a first tab button 37A for displaying a first vehicle list, a second tab button 37B for displaying a second vehicle list, and a first vehicle list 37C that is displayed when the first tab button 37A is tapped.

[0103] The connecting screen 37 also includes a work machine display area 37D that displays the name of the work machine C that will be connected to the user terminal 6 using the digital key distributed to the user terminal 6, and a guidance display area 37E that displays guidance on how to connect the user terminal 6 to the work machine C using the digital key. The connecting screen 37 also includes a cancel button 37F that is operated to cancel the connection between the user terminal 6 and the work machine C using the digital key.

[0104] 14 is a diagram showing a connection completion screen 38 displayed on the user terminal 6 according to the embodiment. The detection unit 20A of the start controller 20 of the work machine C communicates with the user terminal 6 via BLE. The user terminal 6 receives an advertising packet from the detection unit 20A. After connecting with the detection unit 20A, the user terminal 6 transmits a user ID to the detection unit 20A. The detection unit 20A compares the user ID transmitted from the user terminal 6 with the user ID of the user data stored in the on-board storage unit 20E, and identifies the user of the user terminal 6 to which a digital key has been issued and which is connected to the work machine 2.

[0105] When the work machine C and the user terminal 6 are connected using the digital key, a connection completion screen 38 indicating that the work machine C and the user terminal 6 have been connected using the digital key is displayed on the display device 61, as shown in Fig. 14. The connection completion screen 38 includes a work machine display area 38A in which the name of the work machine C is displayed, and a disconnect button 38B that is operated when disconnecting the connection between the user terminal 6 and the work machine C using the digital key.

[0106] When the work machine C and the user terminal 6 are connected by the digital key, the starting unit 20B outputs a control signal for unlocking the door lock 23. When the control signal is output from the starting unit 20B, the door lock 23 enters a state in which it can be unlocked. After the door lock 23 enters a state in which it can be unlocked, the door lock 23 is unlocked and the door 2E is unlocked when the user presses a door unlock button (not shown) provided on the door 2E. When the door 2E is unlocked, the user can get into the driver's cab 2D.

[0107] FIG. 15 is a diagram showing a login screen 39 displayed on the in-vehicle monitor 22 according to the embodiment. After the door 2E is unlocked with the digital key, the user enters the driver's cab 2D and operates the start switch 24 to start the in-vehicle monitor 22. When the start switch 24 is turned to the accessory position, the accessory power supply is started, and the in-vehicle monitor 22 and the start controller 20 start. When the in-vehicle monitor 22 and the start controller 20 start, a login screen 39, as shown in FIG. 15, for prompting the user to perform a login operation is displayed on the display device of the in-vehicle monitor 22. The user performs a login operation using the input device of the in-vehicle monitor 22 on which the login screen 39 is displayed.

[0108] As described above, the on-board storage unit 20E stores user data indicating users that can be authenticated by the work machine 2. A user list 39A that shows a list of multiple users stored in the on-board storage unit 20E is displayed on the login screen 39. The login operation includes an operation of selecting a user displayed on the display device of the on-board monitor 22. The user selects and taps a button that indicates the user himself / herself from the user list 39A. When user A is in the cab 2D, user A taps button 39A1 that indicates user A himself / herself. When button 39A1 is tapped, input data that indicates the user ID of user A is generated. The monitor control unit 20C receives the input data that indicates the user ID of user A that is generated by tapping button 39A1 in the user list 39A.

[0109] The authentication unit 20D authenticates that user A has the authority to operate the work machine 2, based on the input data when the input device of the on-board monitor 22 is operated to log in. The authentication unit 20D compares the user ID input from the input device of the on-board monitor 22 with the user ID of the user data stored in the on-board storage unit 20E to determine whether user A who is in the cab 2D has the authority to operate the work machine 2. The authentication unit 20D determines whether the authority flag associated with the compared user ID is ON. If the authority flag is ON, the authentication unit 20D authenticates that user A who is in the cab 2D has the authority to operate the work machine 2.

[0110] When the authentication unit 20D authenticates that the user A has the authority to operate the work machine 2, the starting unit 20B outputs a start signal to start the vehicle controller 21. When the vehicle controller 21 starts, the ignition power source enters a start-enabled state, and the work machine 2 enters an operable state.

[0111] In the embodiment, symbols indicating the authentication methods of each of multiple users are displayed on the login screen 39. The login screen 39 displays a digital key symbol 39B indicating a user authenticated by a digital key, and a pairing symbol 39C indicating a user authenticated by pairing, which will be described later.

[0112] [Pairing] FIG. 16 is a diagram showing a BLE pairing screen 300 displayed on the user terminal 6 and a pairing screen 301 displayed on the in-vehicle monitor 22 according to the embodiment. A user in the cab 2D operates the input device 62 of the user terminal 6 to cause the display device 61 to display the pairing screen 300 as shown in FIG. 16. The in-vehicle monitor 22 also displays the pairing screen 301 as shown in FIG. 16. The pairing screen 300 of the user terminal 6 displays a plurality of random numbers 300A. The pairing screen 301 of the in-vehicle monitor 22 displays a key input button display area 301B displaying a plurality of buttons for inputting numbers, and an input number display area 301A displaying numbers input from the key input button display area 301B. The user operates the buttons displayed in the key input button display area 301B to input the numbers 300A displayed on the pairing screen 300 of the user terminal 6. After the number 300A is entered, the "OK" button in the key input button display area 301B is tapped, thereby executing BLE pairing between the user terminal 6 and the work machine 2. The on-vehicle storage unit 20E stores an ID for identifying the BLE device of the paired user terminal 6. The on-vehicle storage unit 20E stores the user ID of the paired user terminal 6.

[0113] [effect] As described above, in the embodiment, the management server 4 receives issuance application data for requesting the issuance of a digital key for the work machine 2 from the user terminal 6. Based on the received issuance application data, the management server 4 transmits approval request data to the management terminal 7, requesting approval for the issuance of the digital key. Based on the reply data from the management terminal 7, the management server 4 transmits issuance request data to the digital key generation server 5, requesting the issuance of a digital key.

[0114] According to the embodiment, a digital key for the work machine 2 is issued, and by connecting the work machine 2 and the user terminal 6 using the digital key, the user can quickly operate the work machine 2. Users often operate different work machines depending on the work site, work day, or work content. If a physical key is required to start each of multiple work machines 2, managing the keys requires effort, and it may become difficult for the user to quickly operate the work machine 2. According to the embodiment, even if the work machine 2 operated by the user changes from day to day, the user can quickly operate the work machine 2 by applying for the issuance of a digital key for the work machine 2.

[0115] In an embodiment, issuance of a digital key requires approval from an administrator. The management server 4 transmits approval request data to the management terminal 7, requesting approval for issuance of a digital key, based on issuance application data transmitted from the user terminal 6. This allows approval from the administrator to be obtained promptly.

[0116] [Other embodiments] In the above-described embodiment, the user data includes an authority flag indicating whether or not the user has authority to operate the work machine 2. Furthermore, the start controller 20 transmits a start signal to start the vehicle controller 21 when it has authenticated that the user has authority to operate the work machine 2. The user data does not have to include an authority flag indicating whether or not the user has authority to operate the work machine 2. The start controller 20 may transmit a start signal to start the vehicle controller 21 regardless of whether or not it has been authenticated that the user has authority to operate the work machine 2. [Explanation of symbols]

[0117] 1...Authentication system, 2...Work machine, 2A...Traveling device, 2B...Vehicle body, 2C...Work machine, 2D...Driver's cab, 2E...Door, 3...Work site, 4...Management server, 5...Digital key generation server, 6...User terminal, 7...Management terminal, 10...Computer, 11...Processor, 12...Main memory, 13...Storage, 14...Input / output interface, 15...Communication interface, 16...Computer program, 20...Start controller, 20A...Detection unit, 20B...Start unit, 20C...Monitor control unit, 20D...Authentication unit, 20E...On-board memory unit, 21...Vehicle controller, 22...Vehicle On-board monitor, 23...door lock, 24...start switch, 25...engine, 31...list screen, 31A...first tab button, 31B...second tab button, 31C...second vehicle list, 31C1...first button, 31C2...second button, 31C3...third button, 31C4...fourth button, 32...application screen, 32A...work machine display area, 32B...issuance application button, 33...approval screen, 33A...applicant display area, 33B...application reason display area, 33C...identification number display area, 33D...usage period display area, 33E...administrator input area, 33F...approval button, 33G...denial button , 34...Notification screen, 34A...Work machine display area, 34B...Usage period display area, 34C...Application history display area, 34D...Digital key download button, 34E...Digital key deletion button, 34F...Extension application button, 35...List screen, 35A...First tab button, 35B...Second tab button, 35C...First vehicle list, 35C1...First button, 35C2...Second button, 35C3...Third button, 35C4...Fourth button, 35D...Symbol, 36...Connection preparation screen, 36A...Work machine display area, 36B...Symbol, 36C...Connect button, 37...Connection in progress screen, 3 7A...first tab button, 37B...second tab button, 37C...first vehicle list, 37D...work machine display area, 37E...guidance display area, 37F...cancel button, 38...connection completion screen, 38A...work machine display area, 38B...disconnect button, 39...login screen, 39A...user list, 39A1...button, 39B...digital key symbol, 39C...pairing symbol, 40...list creation unit, 41...application processing unit, 42...history processing unit, 43...vehicle data storage unit, 44...user data storage unit, 45...history data storage unit, 60...user terminal controller,60A... receiving unit, 60B... display control unit, 60C... processing unit, 60D... transmitting unit, 60E... terminal storage unit, 60F... application software, 61... display device, 62... input device, 70... management terminal controller, 71... display device, 72... input device, 300... pairing screen, 300A... numbers, 301... pairing screen, 301A... input number display area, 301B... key input button display area.

Claims

1. a processor; The processor: receiving issuance application data for applying for issuance of a digital key for a work machine; transmitting approval request data to a management terminal based on the issuance application data, the approval request data requesting approval for the issuance of the digital key; transmitting issuance request data for requesting issuance of the digital key based on the reply data from the management terminal; Work machine authentication system.

2. the issuance application data includes a target vehicle indicating a work machine for which the digital key is to be used, a usage period of the digital key, and a reason for applying for issuance of the digital key; The authentication system for a work machine according to claim 1.

3. The processor: storing historical data associated with the digital key in a storage device after the digital key is issued; The authentication system for a work machine according to claim 1.

4. the history data includes a target vehicle indicating a work machine for which the digital key is to be used, a usage period of the digital key, and a user terminal that transmitted the issuance application data; The authentication system for a work machine according to claim 3.

5. The processor: After the digital key is issued, notification data indicating that the digital key is available for distribution is sent to the user terminal that sent the issuance application data. The authentication system for a work machine according to claim 1.

6. a processor; The processor: receiving issuance application data for applying for issuance of a digital key for a work machine; transmitting approval request data to a management terminal based on the issuance application data, the approval request data requesting approval for the issuance of the digital key; transmitting issuance request data for requesting issuance of the digital key based on the reply data from the management terminal; A management server for work machines.

7. receiving issuance application data for applying for issuance of a digital key for a work machine; transmitting approval request data to a management terminal based on the issuance application data, the approval request data requesting approval for the issuance of the digital key; transmitting issuance request data for requesting issuance of the digital key based on the reply data from the management terminal. Methods for authenticating work machines.

Images