Item access management device, item access management method, program for item access management device, and item access management system

Abstract

The present invention provides an item access management device and the like that facilitates the management of access to and manipulation of items. [Solution] An item access management device 20, which is provided on an item (5) and manages access to the item for operation, stores the item status corresponding to each step until the item is handed over to the user, communicates with a portable terminal (10) which has access determination information set for each step, obtains the access determination information (S1, S2), determines access according to a comparison between the obtained access determination information and the item status, and changes the item status according to the step (S3~S8).

Description

Technical Field

[0001] The present invention relates to the technical field of an article access management device, an article access management method, a program for an article access management device, and an article access management system.

Background Art

[0002] Digital keys that use smartphones or authentication cards to access the operation of target articles such as cars and houses have begun to be used. For example, in Patent Document 1, a digital key for authentication is acquired via a network in each of a vehicle control device mounted on a vehicle and a portable terminal device carried by a user, and authentication is performed using these digital keys. The vehicle control device includes a digital key acquisition unit, a ToF distance measurement unit that detects the distance and moving speed to the portable terminal device, and predicts the time until the portable terminal device reaches an area where keyless operation is possible based on the detection result by the ToF distance measurement unit. An AP control unit that sets an area indicating the activation timing of the digital key acquisition unit based on this prediction result and activates the digital key acquisition unit when the portable terminal device reaches this area is disclosed.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] Incidentally, the process of getting goods such as cars to consumers requires many workers to access the goods, including factory operators, truck drivers, and sales staff. Therefore, along with the goods, digital keys such as smartphones and authentication cards that allow access to the goods must also be handed over. However, workers at each stage of the process need to access multiple goods and manage multiple digital keys, and managing digital keys has not been easy, as it is time-consuming to verify the correspondence between goods and digital keys when accessing multiple goods.

[0005] Therefore, the present invention has been made in view of the above problems, and aims to provide an item access management device, etc., that facilitates the management of access to operations on items. [Means for solving the problem]

[0006] To solve the above problems, the invention described in claim 1 is an item access management device provided on an item for managing access to the item for operation, characterized by comprising: an item status storage means for storing the item status corresponding to each step until the item is handed over to a user; a determination information acquisition means for communicating with a mobile terminal having access determination information set for each step and acquiring the access determination information; an access determination means for determining the access according to a comparison between the acquired access determination information and the item status; and a status change means for changing the item status according to the step.

[0007] The invention described in claim 2 is characterized in that, in the article access management device described in claim 1, when the status changing means obtains the access determination information for the second step following the first step, it changes the article status, and the access determination means compares it with the changed article status and determines to deny access if it is the access determination information for the first step.

[0008] The invention described in claim 3 is an article access management device as described in claim 1, further comprising change information acquisition means for acquiring change information to change the article status, wherein the status change means changes the article status after the access determination means has permitted the access and acquired the change information.

[0009] The invention described in claim 4 is characterized in that, in the article access management device described in claim 1, when the status changing means acquires the access determination information of the first step, it changes the article status to permit access only in the case of the access determination information of the first step and the access determination information of the second step following the first step.

[0010] The invention described in claim 5 is characterized in that, in the article access management device described in any one of claims 1 to 4, it further comprises invalidation means for invalidating the access based on the access determination information.

[0011] The invention described in claim 6 is an article access management device as described in claim 5, further comprising invalidation request acquisition means for acquiring invalidation requests which are requests to invalidate the access, wherein the invalidation means, in the final step of the process, performs the invalidation when it has acquired the invalidation request.

[0012] The invention described in claim 7 is an article access management method for managing access to an article, characterized in that the article status storage means stores the article status corresponding to each step until the article is handed over to a user; the determination information acquisition means communicates with a mobile terminal having access determination information set for each step and acquires the access determination information; the access determination means determines the access according to a comparison of the acquired access determination information and the article status; and the status change means changes the article status according to the step.

[0013] The invention described in claim 8 is a program for an item access management device that manages access to an item for operation, characterized in that a computer functions as an item status storage means for storing the item status corresponding to each step until the item is handed over to a user, a determination information acquisition means for communicating with a mobile terminal having access determination information set for each step and acquiring access determination information, an access determination means for determining the access according to a comparison between the acquired access determination information and the item status, and a status change means for changing the item status according to the step.

[0014] The invention described in claim 9 is an article access management system comprising: an article access management device provided on an article for managing access to operations on the article; and a terminal device for accessing the operations via the article access management device, wherein the article access management device comprises: an article status storage means for storing article status corresponding to each step until the article is delivered to a user; a determination information acquisition means for communicating with the terminal device having determination information set for each step and acquiring determination information; an access determination means for determining the access according to a comparison of the acquired determination information and the article status; and a status change means for changing the article status according to the step. [Effects of the Invention]

[0015] According to the present invention, the status of an item corresponding to each step in the process until the item is delivered to the user is stored, communication is performed with a mobile terminal having access determination information set for each step, access determination information is obtained, access to the item for operation is determined according to the comparison between the obtained access determination information and the item status, and the item status is changed according to the step. As a result, access to the item for operation according to the step is managed simply by using a mobile terminal having access determination information set for each step, thus making it easy to manage access to the item for operation. [Brief explanation of the drawing]

[0016] [Figure 1] It is a diagram showing a schematic configuration example of the article access management system according to this embodiment. [Figure 2] It is a diagram showing a schematic configuration example of the authentication card. [Figure 3] It is a diagram showing an example of the access determination bits stored in the authentication card. [Figure 4] It is a diagram showing a schematic configuration example of the article access management device. [Figure 5] It is a diagram for explaining an example of the status of an article. [Figure 6] It is a flowchart showing an operation example of the first embodiment of the article access management system. [Figure 7] It is a flowchart showing an operation example of the second embodiment of the article access management system. [Figure 8] It is a flowchart showing an operation example of the third embodiment of the article access management system. [Mode for Carrying Out the Invention]

[0017] Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. The embodiments described below are embodiments when the present invention is applied to the article access management system S.

[0018] [1. Configuration and Functions of Article Access Management System S and Each Device] (1.1 Outline Configuration of Article Access Management System S) First, with reference to FIG. 1 and the like, the outline configuration of the article access management system S according to this embodiment will be described. FIG. 1 is a diagram showing a schematic configuration example of the article access management system S according to this embodiment.

[0019] As shown in FIG. 1, in a factory 1 that manufactures articles such as a vehicle 5, a distribution center 2 that distributes articles, a dealership 3 that sells articles, etc., an article access management system S includes an authentication card 10 having a digital key for accessing an article such as the vehicle 5, an article access management device 20 that manages access to the article such as the vehicle 5, etc.

[0020] When the article is the vehicle 5, the work processes performed by workers such as the operator in the factory 1, the work processes performed by workers such as the truck driver in the distribution center 2, and the work processes performed by workers such as the dealer in the dealership 3 are examples of each process until the vehicle 5 as the article is handed over to the user. The process in the dealership 3 is an example of the final process.

[0021] In the factory 1, the manufactured plurality of vehicles 5 can be accessed by the authentication cards 10 held by each worker in the factory 1. At the stage of transportation in the distribution center 2, the plurality of vehicles 5 can be accessed by the authentication cards 10 held by each worker in the distribution center 2. In the dealership 3, the plurality of vehicles 5 can be accessed by the authentication cards 10 held by each worker in the dealership 3.

[0022] Note that examples of the article to be accessed include a vehicle, a door of a house, an electronic device, etc., as long as it is an article whose access is controlled by a digital key. Examples of the electronic device include an air conditioner, a bath, a lighting fixture, a control device for a cooker, a smartphone, etc. Examples of the operation on the article include, in the case of a vehicle, unlocking and locking the vehicle door, starting the engine, operating the navigation system, etc. In the case of an electronic device, turning on / off the air conditioner or bath, setting the temperature, unlocking / locking the electronic lock mechanism of the house door, etc. Also, the vehicle 5 is an example of a moving body and is a two-wheeled vehicle, a four-wheeled vehicle, a bicycle, or the like.

[0023] The authentication card 10 (an example of a mobile device) is, for example, a contactless IC card such as an authentication card. The authentication card 10 is an electronic information storage medium and is composed of, for example, a secure element with high tamper resistance (e.g., eSE (embedded Secure Element)). The authentication card 10 stores a digital key that allows access to the target. As an example of a mobile device, instead of the authentication card 10, it may be a smartphone with a digital key that allows access to the item, or a key for a vehicle 5 with smart entry functionality.

[0024] The item access management device 20 is, for example, a device equipped with control equipment such as an ECU (Electronic Control Unit) and a secure element. The item access management device 20 has multiple types of digital key data. For example, there is digital key data that allows access to the item at each process, and digital key data that allows the user, who is the owner of the item that purchased the item, to access the item. The digital data includes, for example, digital data used for authentication such as private keys, public keys, shared keys, encryption keys, and ciphertext, and digital data of access determination information set for each process.

[0025] Furthermore, if the item is a vehicle 5, the item access management device 20 controls the vehicle 5's engine and brake control system equipment, the vehicle 5's body system equipment such as lights and doors, collision prevention safety control equipment, navigation equipment, drive recorder and other electronic devices.

[0026] The authentication card 10 and the item access management device 20 are capable of short-range wireless communication. Technologies such as NFC (Near Field Communication), Bluetooth (registered trademark), or UWB (Ultra Wide Band) can be used for short-range wireless communication. The authentication card 10 and the item access management device 20 may be directly connected via short-range wireless communication without going through a network, or they may be directly connected via wired connections through terminals on each device.

[0027] (1.2 Configuration and Function of Each Device) Next, an example of the general configuration of the authentication card 10 and the item access management device 20 will be explained using diagrams.

[0028] An example of the configuration of the authentication card 10 will be explained using Figures 2 and 3. Figure 2 is a diagram showing an example of the configuration of the authentication card 10. Figure 3 is a diagram showing an example of the access determination bits stored in the authentication card.

[0029] As shown in Figure 2, the authentication card 10, which has computer functionality, is configured to include a communication unit 11, a storage unit 12, and a control unit 13, etc.

[0030] The communication unit 11 is equipped with an antenna and performs short-range wireless communication with the item access management device 20 within the range of short-range wireless communication. Note that communication between the authentication card 10 and the item access management device 20 may be done via contact.

[0031] The storage unit 12 is configured to include, for example, RAM (Random Access Memory), non-volatile memory (NVM), etc. The storage unit 12 stores the operating system (OS) and applications. The applications include mutual authentication processing programs, etc.

[0032] Furthermore, as shown in Figure 3, the memory unit 12 stores access determination bits corresponding to each process. The access determination bits, which are digital keys, are consistent for each process. For example, the access determination bit for the authentication card 10 for factory 1 is "100" in binary, the access determination bit for the authentication card 10 for distribution center 2 is "010" in binary, and the access determination bit for the authentication card 10 for retailer 3 is "001" in binary. The access determination bit is just one example of access determination information. The access determination information should be information that can determine whether to grant access in response to a change in the item status.

[0033] Here, the types of digital keys include digital keys composed of access determination bits, and digital keys composed of a key ID and key value based on private keys, public keys, symmetric keys, and cryptographic keys.

[0034] Furthermore, the storage unit 12 stores authentication data used for mutual authentication processing to establish a secure channel with the item access management device 20. This authentication data is, for example, a key set including a secure channel encryption key, a secure channel MAC (Message Authentication Code) key, and a data encryption key.

[0035] The control unit 13 is comprised of a CPU (Central Processing Unit) and a secure element, etc. The control unit 13 performs mutual authentication processing to establish a secure session with the item access management device 20 according to the mutual authentication processing program, and after the secure session is established, it transmits an access determination bit to the item access management device 20.

[0036] Next, an example of the general configuration of the item access management device 20 will be explained using Figures 4 and 5. Figure 4 is a diagram showing an example of the general configuration of the item access management device. Figure 5 is a diagram illustrating an example of the status of an item.

[0037] As shown in Figure 4, the item access management device 20, which has computer functions, is configured to include a communication unit 21, a storage unit 22, and a control unit 23, etc.

[0038] The communication unit 21 is equipped with an antenna and performs short-range wireless communication with the authentication card 10 within the range of short-range wireless communication. Note that the item access management device 20 may also communicate with the authentication card 10 via contact.

[0039] Furthermore, the communication unit 21 communicates with navigation equipment and the like. The item access management device 20 receives input from the screen of the navigation equipment via the communication unit 21. The item access management device 20 receiving input from the screen of the navigation equipment via the communication unit 21 is an example of receiving input of change information that changes the item status.

[0040] The storage unit 22 is configured with RAM, NVM, etc. The storage unit 22 stores the operating system and applications. The applications include mutual authentication processing programs, etc. Furthermore, the storage unit 22 stores authentication data used for mutual authentication processing to establish a secure channel with the authentication card 10.

[0041] The memory unit 22 stores information about the processing of the item status and access determination bits of the item access management device 20. As shown in Figure 5, depending on the item status, processing a is performed with processing ID "a", processing b is performed with processing ID "b", processing c is performed with processing ID "c", processing d is performed with processing ID "d", processing e is performed with processing ID "e", processing f is performed with processing ID "f", etc.

[0042] The memory unit 22 is an example of an item status storage means that stores the item status corresponding to each step in the process until the item is delivered to the user.

[0043] The process with processing ID "a" grants authentication and allows access to the item for authentication cards 10 whose item status is "111" and whose access determination bit is "1", while denying authentication and denying access to the item for all other authentication cards 10. The process with processing ID "b" grants authentication and allows access to the item for authentication cards 10 whose item status is "110" and whose third or second access determination bit is "1", while denying authentication and denying access to the item for all other authentication cards 10. The process with processing ID "c" grants authentication and allows access to the item for authentication cards 10 whose item status is "011" and whose second or first access determination bit is "1". The process with processing ID "d" grants authentication and allows access to the item for authentication cards 10 whose item status is "100" and whose third access determination bit is "1". The process with processing ID "e" is the process of granting authentication and allowing access to the item for authentication card 10 whose item status is "010" and whose second bit of the access determination bit is "1". The process with processing ID "f" is the process of granting authentication and allowing access to the item for authentication card 10 whose item status is "001" and whose first bit of the access determination bit is "1".

[0044] As the process progresses, the item status of the item access management device 20 changes, and the authentication card 10 that is permitted to access differs at each stage.

[0045] The memory unit 22 stores programs such as processes that correspond to the status of an item, processes that determine the status of an item, processes that change the status of an item, and processes that perform owner pairing to share a digital key.

[0046] The control unit 23 is comprised of a CPU and a secure element, etc. The control unit 23 performs mutual authentication processing to establish a secure session with the authentication card 10 according to the mutual authentication processing program. After establishing a secure session with the authentication card 10, the control unit 23 determines whether to permit access to the item based on the access determination bit of the authentication card 10 and the item status. If access to the item is permitted, and the item is a vehicle, it performs actions such as unlocking / locking the doors of the vehicle 5.

[0047] If the user is the owner of the item, the control unit 23 determines whether to grant access to the item based on the user's dedicated digital key after establishing a secure session with the key.

[0048] [2. Operation of the Item Access Management System S] (2.1 Preparation of 10 certification cards for each process)

[0049] The following explanation will use the example where the item is vehicle 5.

[0050] For each stage of the process—the factory 1 that manufactures the vehicle 5, the distribution center 2 that delivers the vehicle 5, and the dealership 3 that sells the vehicle 5—multiple dedicated authentication cards 10 are prepared for each stage.

[0051] An authentication card 10 is prepared, and access determination bits in the memory unit 12 are set according to each process so that it can be used without an owner device or owner pairing. These access determination bits are an example of a digital key that can access the vehicle 5, and are different from the digital key used by the final user who purchased the item.

[0052] In a secure environment, the authentication card 10 is connected to a reader / writer, and the access determination bit information is written to the storage unit 12 of the authentication card 10. For example, the authentication card 10 for factory 1 has the access determination bit "100" written to it, the authentication card 10 for distribution center 2 has the access determination bit "010" written to it, and the authentication card 10 for dealership 3 has the access determination bit "001" written to it. In this way, to clearly indicate which of the three stages the card is used in, the third bit of the authentication card 10 used by the factory operator is set to "1b", the second bit of the authentication card 10 used by the truck driver is set to "1b", and the first bit of the authentication card 10 used by the car dealer salesperson is set to "1b".

[0053] Each worker in each process is given an authentication card 10 for that process.

[0054] (2.2 First Embodiment) Next, an example of operation of the first embodiment of the item access management system S will be explained using Figure 6. Figure 6 is a flowchart showing an example of operation of the first embodiment of the item access management system.

[0055] First, vehicle 5 is manufactured at factory 1, and the item access management device 20 sets the item status to "111". In other words, any authentication card 10 from each process is made able to access vehicle 5.

[0056] (2.2.1 Operation in the process of Factory 1) As shown in Figure 6, in the item access management system S, the authentication card 10 is held over the item (step S1). Specifically, when moving a vehicle within Factory 1, the authentication card 10 of the Factory 1 operator is held over the vehicle 5 in Factory 1, and the authentication card 10 for Factory 1 and the item access management device 20 of the vehicle 5 are connected via short-range wireless communication.

[0057] Next, the item access management system S performs mutual authentication (step S2). Specifically, the authentication card 10 and the item access management device 20 each perform mutual authentication processing for establishing a secure session (for example, processing according to SCP (Secure Channel Protocol) 03, SCP11, etc.) using certificate verification and passwords, according to their respective mutual authentication processing programs.

[0058] After mutual authentication is established, the item access management device 20 receives the access determination bit from the authentication card 10. The item access management device 20 reads the item status from the storage unit 22.

[0059] Thus, the item access management device 20 communicates with a mobile terminal having access determination information set for each of the above processes and functions as an example of a determination information acquisition means for acquiring the access determination information.

[0060] Next, the item access management system S determines whether the item status is "111" (step S3). Specifically, the item access management device 20 determines whether the read item status is "111".

[0061] If the item status is "111" (Step S3; YES), the item access management system S performs process a (Step S4). Specifically, the item access management device 20 compares the item status "111" with the received access determination bit "100", and since the third bit of the access determination bit of the authentication card 10 is "1b", it permits access to the vehicle 5.

[0062] Thus, the item access management device 20 functions as an example of an access determination means that determines access in accordance with a comparison of the acquired access determination information and the item status.

[0063] In the case of the authentication card 10 for delivery center 2, the item access management device 20 compares the item status "111" with the received access determination bit "010". Since the second bit of the access determination bit on the authentication card 10 is "1b", access to vehicle 5 is permitted. Similarly, in the case of the authentication card 10 for dealership 3, the item access management device 20 compares the item status "111" with the received access determination bit "001". Since the first bit of the access determination bit on the authentication card 10 is "1b", access to vehicle 5 is permitted.

[0064] After process a, the series of access permission processes will be temporarily terminated. Once access is granted, it will be possible to perform operations on items such as unlocking the doors of vehicle 5, starting the engine, and locking the doors.

[0065] Once work is completed within Factory 1, the operator at Factory 1 hands over Vehicle 5 to the truck driver at Distribution Center 2. If access is made using the authentication card 10 for Factory 1 at this time, no special processing is required on the Vehicle 5 side, and the item access management device 20 does not change the item status.

[0066] Here, we will explain the process of changing the status of an item, which is included in process a.

[0067] The item access management device 20, as process a, does not change the item status if the access determination bit received from the authentication card 10 for factory 1 is "100". On the other hand, as process a, the item access management device 20 transitions the item status to "011" if the access determination bit received from the authentication card 10 for distribution center 2 is "010". If the access determination bit received from the authentication card 10 for retailer 3 is "001", the item status may skip to "001", or the item status may not be changed at all because the order of the process has been skipped.

[0068] Thus, the item access management device 20 functions as an example of a status changing means that changes the item status according to the process.

[0069] (2.2.2 Operation at Distribution Center 2) Next, when the truck driver holds the authentication card 10 for delivery center 2 over the vehicle 5 to move the vehicle 5, the goods access management system S starts authentication with the authentication card 10 for delivery center 2, as in step S1. That is, in the goods access management system S, the authentication card 10 for delivery center 2 is held over the vehicle 5, and the authentication card 10 for delivery center 2 and the goods access management device 20 of the vehicle 5 are connected via short-range wireless communication.

[0070] Next, as in step S2, the item access management system S performs mutual authentication.

[0071] Next, as in step S3, the item access management system S determines whether the item status is "111".

[0072] Next, since the item status is "111", the item access management system S performs process a as in step S4. Specifically, the item access management device 20 compares the item status "111" with the received access determination bit "010", and since the second bit of the access determination bit of the authentication card 10 for delivery station 2 is "1b", it permits access to the vehicle 5. Next, as process a, if the received access determination bit of the authentication card 10 for delivery station 2 is "010", the item access management device 20 transitions the item status to "011".

[0073] After process a, the series of access permission processes will be temporarily terminated. Once access is granted, it will be possible to perform operations on items such as unlocking the doors of vehicle 5, starting the engine, and locking the doors.

[0074] Due to the item status being changed to "011," the authentication card 10 for Factory 1 will no longer be able to access Vehicle 5, and authentication will only be possible with the authentication card 10 for Distribution Center 2 and the authentication card 10 for Dealership 3.

[0075] Specifically, the authentication card 10 is held over the vehicle 5, and the item access management system S performs the processes in steps S1 to S3. If the item status is not "111" (step S3; NO), the item access management system S determines whether the item status is "011" or not (step S5).

[0076] Then, if the item status is "011" (step S5; YES), the item access management system S performs process c (step S6). Specifically, in the case of the authentication card 10 for factory 1, the item access management device 20 compares the item status "011" with the received access determination bit "100", and since the second and first bits of the access determination bit of the authentication card 10 are "0b", access to vehicle 5 is denied.

[0077] Thus, the item access management device 20 functions as an example of an access determination means that determines access in accordance with a comparison of the acquired access determination information and the item status.

[0078] On the other hand, in the case of the authentication card 10 for delivery center 2, the item access management device 20 compares the item status "011" with the received access determination bit "010", and since the second bit of the access determination bit of the authentication card 10 is "1b", it permits access to vehicle 5. Similarly, in the case of the authentication card 10 for dealership 3, the item access management device 20 compares the item status "011" with the received access determination bit "001", and since the first bit of the access determination bit of the authentication card 10 is "1b", it permits access to vehicle 5.

[0079] As process c, if the received access determination bit is "010", the item access management device 20 does not change the item status. On the other hand, as process c, if the received access determination bit is "001" on the authentication card 10 for the dealer 3, the item access management device 20 transitions the item status to "001".

[0080] Thus, the item access management device 20 functions as an example of a status changing means that changes the item status according to the process.

[0081] After process c, the series of access permission processes will be temporarily terminated. Once access is granted, it will be possible to perform operations on items such as unlocking the doors of vehicle 5, starting the engine, and locking the doors.

[0082] Once the truck driver has finished transporting the goods, vehicle 5 is handed over to the car dealer's salesperson. At this time, no special processing is required on the vehicle side, and the item access management device 20 does not change the item status.

[0083] (2.2.3 Operation in the process of retailer 3) Next, when the salesperson holds the authentication card 10 for dealership 3 over the vehicle 5 to operate the vehicle 5, the item access management system S starts authentication using the authentication card 10 for dealership 3, as in step S1. That is, in the item access management system S, the authentication card 10 for dealership 3 is held over the vehicle 5, and the authentication card 10 for dealership 3 and the item access management device 20 of the vehicle 5 are connected via short-range wireless communication.

[0084] Next, as in step S2, the item access management system S performs mutual authentication.

[0085] Next, as in step S3, the item access management system S determines whether the item status is "111" or not, and as in step S5, it determines whether the item status is "011" or not.

[0086] Next, since the item status is "011", the item access management system S performs process c as in step S6. Specifically, the item access management device 20 compares the item status "011" with the received access determination bit "100", and since the second bit of the access determination bit of the authentication card 10 for the delivery station 2 is "1b", it permits access to the vehicle 5. Next, as process c, if the received access determination bit is "001", the item access management device 20 transitions the item status to "001".

[0087] Thus, the item access management device 20 functions as an example of a status changing means that changes the item status according to the process.

[0088] After process c, the series of access permission processes will be temporarily terminated. Once access is granted, it will be possible to perform operations on items such as unlocking the doors of vehicle 5, starting the engine, and locking the doors.

[0089] Due to the item status being changed to "001," the authentication card 10 for Factory 1 and the authentication card 10 for Distribution Center 2 will no longer be able to access Vehicle 5, and authentication will only be possible with the authentication card 10 for Dealership 3.

[0090] Specifically, the authentication card 10 is held over the vehicle 5, and the item access management system S performs the processes in steps S1 to S3. Next, as in step S5, the item access management system S determines whether the item status is "011" or not, and if the item status is not "011" (step S5; NO), the item access management system S determines whether the item status is "001" or not (step S7).

[0091] Then, if the item status is "001" (step S7; YES), the item access management system S performs process f (step S8). Specifically, in the case of the authentication card 10 for factory 1, the item access management device 20 compares the item status "001" with the received access determination bit "100", and since the first bit of the access determination bit of the authentication card 10 is "0b", access to vehicle 5 is denied. Similarly, in the case of the authentication card 10 for distribution center 2, the item access management device 20 compares the item status "001" with the received access determination bit "010", and since the first bit of the access determination bit of the authentication card 10 is "0b", access to vehicle 5 is denied.

[0092] Thus, the item access management device 20 functions as an example of access determination means that determines access in accordance with a comparison of the acquired access determination information and the item status. The item access management device 20 also functions as an example of access determination means that, in the case of the access determination information of the first step, determines to deny access in accordance with the changed item status.

[0093] On the other hand, in the case of the authentication card 10 for dealership 3, the item access management device 20 compares the item status "001" with the received access determination bit "001", and since the first bit of the access determination bit of the authentication card 10 is "1b", it permits access to vehicle 5.

[0094] As process f, if the received access determination bit is "001", the item access management device 20 does not change the item status.

[0095] Thus, the item access management device 20 functions as an example of a status change means for changing the item status according to the process. When the item access management device 20 acquires the access determination information for the second process following the first process, it functions as an example of a status change means for changing the item status.

[0096] After process f, the series of access permission processes are temporarily terminated. Once access is granted, it becomes possible to perform operations on items such as unlocking the doors of vehicle 5, starting the engine, and locking the doors.

[0097] Furthermore, when a salesperson or test driver accesses the vehicle 5 using an authentication card 10 for the dealership 3 in order to allow various customers to test drive the vehicle, the item access management system S performs the operations of steps S1, S2, S3, S5, S7, and S8 described above.

[0098] If the item status is not "001" (step S7; NO), the item access management system S notifies of the authentication failure (step S9). Specifically, the item access management device 20 displays a notification of the authentication failure on the screen of the navigation device, etc., because the item status was unexpected.

[0099] (2.2.4 Owner Pairing Operation) Next, we will explain the settings that allow only the user who has purchased vehicle 5 after the sale has been finalized to use vehicle 5.

[0100] When the salesperson holds the authentication card 10 for dealership 3 over the reader to perform owner pairing, the item access management system S processes steps S1, S2, S3, S5, S7, and S8, and grants access to vehicle 5.

[0101] After access is granted, the item access management system S starts the owner pairing process. For example, the item access management device 20 receives input to start the owner pairing process from the screen of a navigation device connected via the communication unit 21.

[0102] The item access management device 20 connects via short-range wireless communication to a key for a vehicle 5 with smart entry functionality, the user's smartphone, etc., and performs owner pairing processing based on a digital key consisting of a key ID and key value based on a secret key, public key, common key, encryption key, etc.

[0103] After the owner pairing process is completed, the item access management system S starts the process of invalidating access based on the access determination bit. For example, the item access management device 20 deletes information related to the access determination bit from the storage unit 22, deletes programs such as processes corresponding to the item status, processes that determine the item status, and processes that change the item status, or processes that prevent these programs from being executed, thereby preventing access to the vehicle 5 with any of the authentication cards 10 for factory 1, distribution center 2, or dealership 3. Regarding this invalidation process, after the owner pairing process is completed, the item access management device 20 automatically performs the invalidation process upon detecting the completion of the owner pairing process. Alternatively, the item access management device 20 may detect the completion of the owner pairing process, display an invalidation request button on the screen of the navigation device connected via the communication unit 21, and perform the invalidation process after receiving input to start the invalidation process (an example of an invalidation request).

[0104] Thus, the item access management device 20 functions as an example of invalidation means for invalidating the access based on the access determination information. The item access management device 20 also functions as an example of invalidation request acquisition means for acquiring an invalidation request, which is a request to invalidate the access. Furthermore, if the item access management device 20 acquires an invalidation request in the final step of the process, it functions as an example of invalidation request acquisition means for executing the invalidation.

[0105] As described above, according to the above embodiment, the item status corresponding to each process until an item such as a vehicle 5 is delivered to the user is stored, and communication is performed with a portable terminal such as an authentication card 10 which has access determination information such as access determination bits set for each work process such as the factory 1, distribution center 2, and sales store 3, to obtain the access determination information, and access to the item for operation is determined according to the comparison between the obtained access determination information and the item status, and the item status is changed according to the process. As a result, access to the operation of the item according to the process is managed simply by using a portable terminal which has access determination information set for each process, thus making it easy to manage access to the operation of the item.

[0106] For each person who needs access to the vehicle 5 before it reaches the consumer, such as the operator at factory 1, the truck driver at distribution center 2, and the salesperson at the car dealership 3, a dedicated authentication card containing a key is created. By restricting the number of authentication cards 10 that can authenticate vehicle 5 for each process using access determination bits, such as the authentication card 10 for factory 1, the authentication card 10 for distribution center 2, and the authentication card 10 for dealership 3, one type of authentication card 10 per process can access multiple vehicles 5 at each process. This reduces the effort required for key management and operation. Furthermore, it improves the speed of work when it is necessary to access multiple vehicles 5 consecutively.

[0107] After obtaining the access determination information for the second process following the first process (the access determination bit of the authentication card 10 for distribution center 2), the item status is changed and compared with the changed item status. If the access determination information is the same as that for the first process, access is denied, and access to the previous process is disabled, thereby preventing erroneous access by a mobile terminal for the previous process (for example, the authentication card 10 for factory 1). Even if a worker in the preceding or succeeding process intentionally takes the card, they will not be able to access vehicle 5.

[0108] Disabling access based on access determination information prevents unauthorized access via access determination information after owner pairing. Changing the item status to, for example, "000" also prevents access by the authentication card 10, which is a digital key used in the manufacturing, delivery, and sales processes. However, disabling the access by deleting information related to the access determination bit from the item access management device 20, or by deleting programs such as processes corresponding to the item status, processes that determine the item status, and processes that change the item status, further enhances security by preventing unauthorized access by the authentication card 10 after the item has been sold.

[0109] (2.3 Second Example) Next, a second embodiment of the operation of the item access management system S will be described with reference to Figure 7. Note that the same reference numerals will be used for parts identical or corresponding to those in the first embodiment, and only the different configurations and operations will be described. The same applies to other embodiments and modifications. Figure 7 is a flowchart showing an example of the operation of the second embodiment of the item access management system.

[0110] In this embodiment, the transition of the item status in the item access management device 20 differs from that of the first embodiment, as it is "100" → "010" → "001". Furthermore, as an example of acquiring change information to alter the item status, input from a navigation device or the like is accepted, causing the item status to transition.

[0111] (2.3.1 Operation in the process of Factory 1) As shown in Figure 7, in the item access management system S, the authentication card 10 is held over the item (step S11). Specifically, when moving a vehicle within Factory 1, the authentication card 10 of the Factory 1 operator is held over the vehicle 5 in Factory 1, and the authentication card 10 for Factory 1 and the item access management device 20 of the vehicle 5 are connected via short-range wireless communication.

[0112] Next, the item access management system S performs mutual authentication (step S12). Specifically, the authentication card 10 and the item access management device 20 each perform mutual authentication processing for establishing a secure session, according to their respective mutual authentication processing programs, using certificate verification and passwords.

[0113] After mutual authentication is established, the item access management device 20 receives the access determination bit from the authentication card 10. The item access management device 20 reads the item status from the storage unit 22.

[0114] Thus, the item access management device 20 communicates with a mobile terminal having access determination information set for each of the above processes and functions as an example of a determination information acquisition means for acquiring the access determination information.

[0115] Next, the item access management system S determines whether the item status is "100" (step S13). Specifically, the item access management device 20 determines whether the read item status is "100".

[0116] If the item status is "100" (step S13; YES), the item access management system S performs process d (step S14). Specifically, the item access management device 20 compares the item status "100" with the received access determination bit "100", and since the third bit of the access determination bit of the authentication card 10 is "1b", it permits access to the vehicle 5.

[0117] Thus, the item access management device 20 functions as an example of an access determination means that determines access in accordance with a comparison of the acquired access determination information and the item status.

[0118] After process d, the series of access permission processes will be temporarily terminated. Once access is granted, it will be possible to perform operations on items such as unlocking the doors of vehicle 5, starting the engine, and locking the doors.

[0119] Once work in Factory 1 is completed, the operator in Factory 1 hands over Vehicle 5 to the truck driver at Distribution Center 2. At this time, the operator is re-authenticated using the authentication card 10 for Factory 1, and after access is permitted, a button to change the item status of Vehicle 5 appears on the navigation device screen as part of process d. When the operator presses this button, the item status changes to "010". As a result, the item status becomes "010", and only the authentication card 10 for Distribution Center 2 can authenticate. The item access management device 20 acquires the change information that the button that appeared on the navigation device screen has been pressed and that the item status has been changed.

[0120] Thus, the item access management device 20 functions as an example of a status change means for changing the item status according to the process. After the access determination means has permitted the access, the item access management device 20 acquires the change information and then changes the item status, thus functioning as an example of a status change means. The item access management device 20 functions as an example of a change information acquisition means for acquiring change information that changes the item status.

[0121] (2.3.2 Operation in the process at distribution center 2) Next, when the truck driver holds the authentication card 10 for delivery center 2 over the vehicle 5 to move the vehicle 5, the goods access management system S starts authentication using the authentication card 10 for delivery center 2, as in step S11. That is, in the goods access management system S, when the authentication card 10 for delivery center 2 is held over the vehicle 5, the authentication card 10 for delivery center 2 and the goods access management device 20 of the vehicle 5 are connected via short-range wireless communication.

[0122] Next, as in step S12, the item access management system S performs mutual authentication.

[0123] Next, as in step S13, the item access management system S determines whether the item status is "100".

[0124] Since the item status has transitioned to "010" and is not "100" (Step S13; NO), the item access management system S determines whether the item status is "010" or not (Step S15).

[0125] Then, if the item status is "010" (step S15; YES), the item access management system S performs process e (step S16). Specifically, in the case of the authentication card 10 for the delivery station 2, the item access management device 20 compares the item status "010" with the received access determination bit "010", and since the second bit of the access determination bit of the authentication card 10 is "1b", it permits access to the vehicle 5.

[0126] Thus, the item access management device 20 functions as an example of an access determination means that determines access in accordance with a comparison of the acquired access determination information and the item status.

[0127] On the other hand, in the case of the authentication card 10 for factory 1, the item access management device 20 compares the item status "010" with the received access determination bit "100", and since the second bit of the access determination bit of the authentication card 10 is "0b", access to vehicle 5 is denied. Similarly, in the case of the authentication card 10 for dealership 3, the item access management device 20 compares the item status "010" with the received access determination bit "001", and since the second bit of the access determination bit of the authentication card 10 is "0b", access to vehicle 5 is denied.

[0128] After process e, the series of access permission processes will be temporarily completed. Once access is granted, it will be possible to perform operations on items such as unlocking the doors of vehicle 5, starting the engine, and locking the doors.

[0129] Once the truck driver has finished transporting the vehicle, it is handed over to the car dealer's salesperson. At this time, authentication is performed again using the authentication card 10 for delivery point 2, and after access is granted, a button to change the item status setting of vehicle 5 appears on the navigation device screen as part of process e. When the operator presses this button, the item status changes to "001". As a result, the item status becomes "001", and only the authentication card 10 for dealership 3 can be authenticated.

[0130] Thus, the item access management device 20 functions as an example of a status changing means that changes the item status according to the process.

[0131] (2.3.3 Operation at retailer 3) Next, when the salesperson holds the authentication card 10 for dealership 3 over the vehicle 5 to move the vehicle 5, the item access management system S starts authentication using the authentication card 10 for dealership 3, as in step S11. That is, in the item access management system S, the authentication card 10 for dealership 3 is held over the vehicle 5, and the authentication card 10 for dealership 3 and the item access management device 20 of the vehicle 5 are connected via short-range wireless communication.

[0132] Next, as in step S12, the item access management system S performs mutual authentication.

[0133] Next, as in step S13, the item access management system S determines whether the item status is "100" or not, and as in step S15, it determines whether the item status is "010" or not.

[0134] Since the item status has transitioned to "001" and is not "010" (Step S15; NO), the item access management system S determines whether the item status is "001" or not (Step S17).

[0135] Then, if the item status is "001" (step S17; YES), the item access management system S performs process f (step S18). Specifically, in the case of the authentication card 10 for dealership 3, the item access management device 20 compares the item status "001" with the received access determination bit "001", and since the first bit of the access determination bit of the authentication card 10 is "1b", it permits access to the vehicle 5.

[0136] Thus, the item access management device 20 functions as an example of an access determination means that determines access in accordance with a comparison of the acquired access determination information and the item status.

[0137] On the other hand, in the case of the authentication card 10 for factory 1, the item access management device 20 compares the item status "001" with the received access determination bit "100", and since the first bit of the access determination bit of the authentication card 10 is "0b", access to vehicle 5 is denied. Similarly, in the case of the authentication card 10 for distribution center 2, the item access management device 20 compares the item status "001" with the received access determination bit "010", and since the first bit of the access determination bit of the authentication card 10 is "0b", access to vehicle 5 is denied.

[0138] After process f, the series of access permission processes are temporarily terminated. Once access is granted, it becomes possible to perform operations on items such as unlocking the doors of vehicle 5, starting the engine, and locking the doors.

[0139] Furthermore, when a salesperson or test driver accesses the vehicle 5 using an authentication card 10 for the dealership 3 in order to allow various customers to test drive the vehicle, the item access management system S performs the operations of steps S11, S12, S13, S15, S17, and S18 described above.

[0140] If the item status is not "001" (step S17; NO), the item access management system S notifies of the authentication failure as in step S9 (step S19).

[0141] (2.3.4 Owner Pairing Operation) When the salesperson holds the authentication card 10 for dealership 3 over the reader to perform owner pairing, the item access management system S processes steps S11, S12, S13, S15, S17, and S18, and access to vehicle 5 is permitted.

[0142] After access is granted, the item access management system S starts the owner pairing process. For example, the item access management device 20 receives input to start the owner pairing process from the screen of a navigation device connected via the communication unit 21.

[0143] The item access management device 20 connects via short-range wireless communication to a key for a vehicle 5 with smart entry functionality, the user's smartphone, etc., and performs owner pairing processing based on a digital key consisting of a key ID and key value based on a secret key, public key, common key, encryption key, etc.

[0144] After the owner pairing process is completed, the item access management system S starts the process of invalidating access based on the access determination bit. For example, the item access management device 20 detects the completion of the owner pairing process and displays a button to request invalidation on the screen of the navigation device connected via the communication unit 21, and accepts input to start the invalidation process. After receiving this input, the item access management device 20 deletes information related to the access determination bit from the storage unit 22, deletes programs such as processes corresponding to the item status, processes that determine the item status, and processes that change the item status, or prevents these programs from being executed, thereby preventing access to the vehicle 5 by any of the authentication cards 10 for factory 1, distribution center 2, or dealership 3.

[0145] Thus, the item access management device 20 functions as an example of invalidation means for invalidating the access based on the access determination information. The item access management device 20 also functions as an example of invalidation request acquisition means for acquiring an invalidation request, which is a request to invalidate the access. If the item access management device 20 acquires an invalidation request in the final step of the process, it functions as an example of invalidation means for executing the invalidation.

[0146] As described above, access to operations on items can be easily managed, similar to the first embodiment. Furthermore, when receiving input of change information that changes the item status, and after granting access, if the item status is to be changed after obtaining the change information, an explicit request to change the item status can be received, and the item status can be explicitly changed.

[0147] In the final stage of the process, when a disabling request is received, which is a request to invalidate access, and access is to be invalidated based on access determination information, the acceptance of the disabling request explicitly sets up a setting to prevent unauthorized access. By adding a function to explicitly switch the cards that vehicle 5 can authenticate, it is possible to prevent situations where a later authentication card is intentionally authenticated, making it impossible to authenticate with the earlier authentication card.

[0148] (2.4 Third Example) Next, a third embodiment of the operation of the item access management system S will be described using Figure 8. Figure 8 is a flowchart showing an example of the operation of the third embodiment of the item access management system.

[0149] In this embodiment, the transition of the item status in the item access management device 20 is different from that of the first embodiment, as it is "100" → "110" → "011" → "001".

[0150] Assuming that authentication is performed at least once at Factory 1, the item status of Vehicle 5 is set to "100," meaning it can only be authenticated with authentication card 10 where the third bit is "1b." When Vehicle 5 is moved within Factory 1, if the operator at Factory 1 authenticates it once with the authentication card 10 for Factory 1, the item status of Vehicle 5 transitions to "110," meaning it can be authenticated with authentication card 10 for Factory 1 where the third bit is "1b" and authentication card 10 for Distribution Center 2 where the second bit is "1b." When a truck driver moves Vehicle 5 at Distribution Center 2, if the truck driver at Distribution Center 2 authenticates it once with the authentication card 10 for Distribution Center 2, the item status of Vehicle 5 transitions to "011," meaning it cannot be authenticated with authentication card 10 for Factory 1 where the third bit is "1b," but can be authenticated with authentication card 10 for Distribution Center 2 where the second bit is "1b" and authentication card 10 for Dealership 3 where the first bit is "1b." When a salesperson at dealership 3 moves vehicle 5, once the dealership 3's car dealer authenticates it using the dealership 3 authentication card 10, the vehicle 5's item status transitions to "001," meaning it can only be authenticated using the dealership 3 authentication card 10.

[0151] (2.4.1 Operation in the process of Factory 1) As shown in Figure 8, in the item access management system S, the authentication card 10 is held over the item (step S21). Specifically, when moving a vehicle within Factory 1, the authentication card 10 of the Factory 1 operator is held over the vehicle 5 in Factory 1, and the authentication card 10 for Factory 1 and the item access management device 20 of the vehicle 5 are connected via short-range wireless communication.

[0152] Next, the item access management system S performs mutual authentication (step S22). Specifically, the authentication card 10 and the item access management device 20 each perform mutual authentication processing for establishing a secure session, according to their respective mutual authentication processing programs, using certificate verification and passwords.

[0153] After mutual authentication is established, the item access management device 20 receives the access determination bit from the authentication card 10. The item access management device 20 reads the item status from the storage unit 22.

[0154] Thus, the item access management device 20 communicates with a mobile terminal having access determination information set for each of the above processes and functions as an example of a determination information acquisition means for acquiring the access determination information.

[0155] Next, the item access management system S determines whether the item status is "100" (step S23). Specifically, the item access management device 20 determines whether the read item status is "100".

[0156] If the item status is "100" (step S23; YES), the item access management system S performs process d (step S24). Specifically, the item access management device 20 compares the item status "100" with the received access determination bit "100", and since the third bit of the access determination bit of the authentication card 10 is "1b", it permits access to the vehicle 5.

[0157] Thus, the item access management device 20 functions as an example of an access determination means that determines access in accordance with a comparison of the acquired access determination information and the item status.

[0158] Next, unlike process d in the second embodiment, as process d, the item access management device 20 transitions the item status to "110" when the received access determination bit is "100" with the authentication card 10 for factory 1. This means that once authentication is performed with the authentication card 10 for factory 1, the item status transitions to "110", meaning that in addition to the authentication card 10 for factory 1 with the third bit set to "1b", authentication can also be performed with the authentication card 10 for distribution center 2 with the second bit set to "1b".

[0159] Thus, the item access management device 20 functions as an example of a status change means for changing the item status according to the process. When the item access management device 20 acquires the access determination information for the first process, it functions as an example of a status change means for changing the item status to one that permits access only in the case of the access determination information for the first process and the access determination information for the second process following the first process.

[0160] After process d, the series of access permission processes will be temporarily terminated. Once access is granted, it will be possible to perform operations on items such as unlocking the doors of vehicle 5, starting the engine, and locking the doors.

[0161] Once work is completed within Factory 1, the operator at Factory 1 hands over Vehicle 5 to the truck driver at Distribution Center 2. At this time, no further processing is required on the Vehicle 5 side, and the item access management device 20 does not change the item status.

[0162] (2.3.2 Operation in the process at distribution center 2) Next, when the truck driver holds the authentication card 10 for delivery center 2 over the vehicle 5 to move the vehicle 5, the goods access management system S starts authentication using the authentication card 10 for delivery center 2, as in step S21. That is, in the goods access management system S, when the authentication card 10 for delivery center 2 is held over the vehicle 5, the authentication card 10 for delivery center 2 and the goods access management device 20 of the vehicle 5 are connected via short-range wireless communication.

[0163] Next, as in step S22, the item access management system S performs mutual authentication.

[0164] Next, as in step S23, the item access management system S determines whether the item status is "100".

[0165] Next, since the item status is "110" and not "100" (Step S23; NO), the item access management system S determines whether the item status is "110" or not (Step S25).

[0166] Then, if the item status is "110" (step S25; YES), the item access management system S performs process b (step S26). Specifically, in the case of the authentication card 10 for the distribution center 2, the item access management device 20 compares the item status "110" with the received access determination bit "010", and since the second bit of the access determination bit of the authentication card 10 is "1b", it permits access to the vehicle 5.

[0167] Thus, the item access management device 20 functions as an example of an access determination means that determines access in accordance with a comparison of the acquired access determination information and the item status.

[0168] Next, as process b, the item access management device 20 transitions the item status to "011" if the access determination bit received by the authentication card 10 for distribution center 2 is "010". This means that once authentication is performed with the authentication card 10 for distribution center 2, the item status transitions to "011", meaning that authentication is no longer possible with the authentication card 10 for factory 1, whose third bit is "1b", and authentication becomes possible with the authentication card 10 for distribution center 2, whose second bit is "1b", and the authentication card 10 for retailer 3.

[0169] Thus, the item access management device 20 functions as an example of a status changing means that changes the item status according to the process.

[0170] After process b, the series of access permission processes will be temporarily terminated. Once access is granted, it will be possible to perform operations on items such as unlocking the doors of vehicle 5, starting the engine, and locking the doors.

[0171] Once the truck driver has finished transporting the vehicle, it is handed over to the car dealer's salesperson. At this point, no further processing is required on the vehicle side, and the item access management device 20 does not change the item status.

[0172] (2.3.3 Operation in the process of retailer 3) Next, when the salesperson holds the authentication card 10 for dealership 3 over the vehicle 5 to move the vehicle 5, the item access management system S starts authentication using the authentication card 10 for dealership 3, as in step S21. That is, in the item access management system S, the authentication card 10 for dealership 3 is held over the vehicle 5, and the authentication card 10 for dealership 3 and the item access management device 20 of the vehicle 5 are connected via short-range wireless communication.

[0173] Next, as in step S22, the item access management system S performs mutual authentication.

[0174] Next, as in step S23, the item access management system S determines whether the item status is "100" or not, and as in step S25, it determines whether the item status is "110" or not.

[0175] Since the item status has transitioned to "011" and is not "110" (Step S25; NO), the item access management system S determines whether the item status is "011" or not (Step S27).

[0176] Then, if the item status is "011" (step S27; YES), the item access management system S performs process c (step S28). Specifically, in the case of the authentication card 10 for dealership 3, the item access management device 20 compares the item status "011" with the received access determination bit "001", and since the first bit of the access determination bit of the authentication card 10 is "1b", it permits access to the vehicle 5.

[0177] Thus, the item access management device 20 functions as an example of an access determination means that determines access in accordance with a comparison of the acquired access determination information and the item status.

[0178] Next, unlike process c in the first embodiment, as process c, the item access management device 20 transitions the item status to "001" when the access determination bit received by the authentication card 10 for dealer 3 is "001". This means that once authentication is performed with the authentication card 10 for dealer 3, the item status transitions to "001", that is, after authentication with the authentication card 10 for dealer 3 where the first bit is "1b", only the authentication card for dealer 3 can be used for authentication.

[0179] Thus, the item access management device 20 functions as an example of a status changing means that changes the item status according to the process.

[0180] Furthermore, in the case of the authentication card 10 for delivery station 2, the item access management device 20, as process c, compares the item status "011" with the received access determination bit "010". Since the second bit of the access determination bit of the authentication card 10 is "1b", it permits access to vehicle 5. At this time, the item access management device 20 does not change the item status.

[0181] In the case of the authentication card 10 for factory 1, the item access management device 20, as process c, compares the item status "011" with the received access determination bit "100". Since the first bit of the access determination bit for the authentication card 10 is "0b", access to vehicle 5 is denied. At this time, the item access management device 20 does not change the item status.

[0182] After process c, the series of access permission processes will be temporarily terminated. Once access is granted, it will be possible to perform operations on items such as unlocking the doors of vehicle 5, starting the engine, and locking the doors.

[0183] Next, we will describe the process that occurs after the item access management device 20 transitions the item status to "001".

[0184] When a salesperson or test driver accesses vehicle 5 using an authentication card 10 for dealership 3 in order to allow various customers to test drive the vehicle, the item access management system S initiates authentication using the authentication card 10 for dealership 3, as in step S21. That is, in the item access management system S, the authentication card 10 for dealership 3 is held over vehicle 5, and the authentication card 10 for dealership 3 and the item access management device 20 of vehicle 5 are connected via short-range wireless communication.

[0185] Next, as in step S22, the item access management system S performs mutual authentication.

[0186] Next, as in step S23, the item access management system S determines whether the item status is "100", as in step S25, it determines whether the item status is "110", and as in step S27, it determines whether the item status is "011".

[0187] Since the item status has transitioned to "001" and is not "011" (Step S27; NO), the item access management system S determines whether the item status is "001" or not (Step S29).

[0188] Then, if the item status is "001" (step S29; YES), the item access management system S performs process f (step S30). Specifically, as in step S8, in the case of the authentication card 10 for dealer 3, the item access management device 20 compares the item status "001" with the received access determination bit "001", and since the first bit of the access determination bit of the authentication card 10 is "1b", it permits access to the vehicle 5.

[0189] Thus, the item access management device 20 functions as an example of an access determination means that determines access in accordance with a comparison of the acquired access determination information and the item status.

[0190] As process f, if the received access determination bit is "001", the item access management device 20 does not change the item status.

[0191] If the item status is not "001" (step S29; NO), the item access management system S notifies of the authentication failure as in step S9 (step S31).

[0192] (2.4.4 Owner Pairing Operation)

[0193] When the salesperson holds the authentication card 10 for dealership 3 over the reader to perform owner pairing, the item access management system S processes steps S21, S22, S23, S25, S27, S29, and S30, and access to vehicle 5 is permitted.

[0194] After access is granted, the item access management system S starts the owner pairing process. For example, the item access management device 20 receives input to start the owner pairing process from the screen of a navigation device connected via the communication unit 21.

[0195] The item access management device 20 connects via short-range wireless communication to a key for a vehicle 5 with smart entry functionality, the user's smartphone, etc., and performs owner pairing processing based on a digital key consisting of a key ID and key value based on a secret key, public key, common key, encryption key, etc.

[0196] After the owner pairing process is completed, the item access management system S starts a process to disable access based on the access determination bit, so that, as in the first or second embodiment, access to the vehicle 5 is not possible with any of the authentication cards 10 for factory 1, distribution center 2, or dealership 3.

[0197] As explained above, access to the article can be easily managed, similar to the first embodiment. When access determination information for the first step is obtained, the article status is changed to allow access only if it is for the first step or the second step following the first step, thereby preventing accidental changes to the article status.

[0198] Furthermore, the item access management device 20 and the authentication card 10 may be pre-paired for key sharing based on a digital key consisting of a key ID and key value based on a private key, public key, common key, encryption key, etc. This digital key may be a master digital key that can access any vehicle 5. After authentication with the paired digital key, the item status determination and the determination using the access determination bit according to the embodiment of the present application may be performed. Alternatively, after the determination using the access determination bit according to the embodiment of the present application, authentication with the paired digital key may be performed, and ultimately access to the item may be permitted. In addition, the master digital key may also be disabled when the access determination bit is invalidated after the owner pairing process. [Explanation of Symbols]

[0199] 1 factory 2 Delivery station 3. Retailers 5. Vehicles (Goods) 10. Authentication card (mobile device) 20. Item Access Management Device S Key Management System

Claims

1. In an item access management device provided with an item, which manages access to the operation of the item, The item status storage means stores the item status corresponding to each step in the process until the item is delivered to the user, A determination information acquisition means that communicates with a mobile terminal having access determination information set for each of the above steps and acquires the access determination information, Access determination means for determining access in accordance with a comparison of the acquired access determination information and the item status, A status changing means for changing the status of the item in accordance with the above process, An article access management device characterized by being equipped with the following features.

2. In the article access management device according to claim 1, When the status changing means obtains the access determination information for the second step following the first step, it changes the item status. The item access management device is characterized in that the access determination means compares the modified item status with the access determination information of the first step and determines to deny the access.

3. In the article access management device according to claim 1, The system further comprises a means for acquiring change information that changes the status of the item, The item access management device is characterized in that the status change means changes the item status when the access determination means obtains the change information after granting the access.

4. In the article access management device according to claim 1, An item access management device characterized in that, when the status changing means acquires the access determination information of the first step, it changes the item status to permit access only if the access determination information is for the first step or the access determination information for the second step following the first step.

5. In the article access management device according to any one of claims 1 to 4, An item access management device further comprising invalidation means for invalidating the access based on the access determination information.

6. In the article access management device according to claim 5, The system further comprises means for obtaining a disabling request, which is a request to disable the aforementioned access, The item access management device is characterized in that, when the invalidation means receives the invalidation request in the final step of the process, it performs the invalidation.

7. In an item access management method that manages access to operations on items, The item status storage means includes an item status storage step that stores the item status corresponding to each step until the item is delivered to the user, The determination information acquisition step involves the determination information acquisition means communicating with a mobile terminal having access determination information set for each of the steps, and acquiring the access determination information. The access determination means includes an access determination step in which it determines the access in accordance with a comparison of the acquired access determination information and the item status, The status changing means includes a status changing step that changes the status of the item in accordance with the process, A method for managing access to articles, characterized by including the following:

8. A program for an item access management device that manages access to operations on items, Computers, Item status storage means for storing the item status corresponding to each step in the process until the item is delivered to the user, A determination information acquisition means that communicates with a mobile terminal having access determination information set for each of the above steps and acquires access determination information. Access determination means for determining access in accordance with a comparison of the acquired access determination information and the item status, A program for an item access management device, characterized in that it functions as a status changing means for changing the item status according to the above process.

9. In an article access management system comprising an article access management device installed on an article and managing access to operations on the article, and a terminal device for accessing the operations via the article access management device, The aforementioned item access management device An item status storage means that stores the item status corresponding to each step in the process until the item is delivered to the user, A determination information acquisition means that communicates with the terminal device having determination information set for each of the above steps and acquires the determination information, Access determination means for determining access in accordance with a comparison of the acquired determination information and the item status, A status changing means for changing the status of the item in accordance with the above process, An article access management system characterized by having the following features.

Images