Authentication system, control device, and computer program

Abstract

To increase the security of authentication information registered in an authentication system for authentication of a mobile device.SOLUTION: A communication device 11 performs radio communication with a mobile device 40 that can be carried by a user. A storage unit 13 is capable of storing registration authentication information RG used for a series of first authentication processing to authenticate the mobile device 40. A control unit 12 is configured so as to, when the first authentication processing is established, permit the operation control of a locking / unlocking device 21. The control unit 12 is configured so as to, when a piece of authentication information DL for deletion delivered to the mobile device 40 is acquired via the communication device 11 and a series of second authentication processing different from the series of first authentication processing is established, permit the deletion of the registration authentication information RG.SELECTED DRAWING: Figure 2

Description

[Technical field]

[0001] The present invention relates to an authentication system using a mobile device that can be carried by a user. The present invention also relates to a control device that can form a part of the authentication system, and a computer program that can be executed by a processing unit installed in the control device. [Background technology]

[0002] Patent Document 1 discloses a control device mounted on a vehicle to perform authentication processing of a mobile device carried by a user. If the authentication processing is successful, the control device permits the user to use the vehicle and controls the operation of various controlled devices mounted on the vehicle. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2015-085899 A Summary of the Invention [Problem to be solved by the invention]

[0004] An object of the present invention is to increase the security of authentication information registered in an authentication system for authenticating a mobile device. [Means for solving the problem]

[0005] One aspect of the present invention to achieve the above object is an authentication system, comprising: a communication device for wirelessly communicating with a mobile device that is portable by a user; a storage device capable of storing registered authentication information used in a first authentication process for authenticating the mobile device; a control device that permits erasure of the registered authentication information when the erasure authentication information delivered to the mobile device is acquired through the communication device and a second authentication process different from the first authentication process is established; It is equipped with:

[0006] One aspect for achieving the above object is a control device that permits operation control of a controlled device based on a first authentication process that authenticates a mobile device that can be carried by a user using registration authentication information stored in a storage device, a reception unit that receives the erasure authentication information delivered to the mobile device through a communication device that is capable of wireless communication with the mobile device; a processing unit that permits erasure of the registered authentication information when the erasure authentication information is received and a second authentication process different from the first authentication process is established; It is equipped with:

[0007] One aspect for achieving the above object is a computer program executable by a processing unit mounted on a control device that permits operation control of a controlled device based on a first authentication process that authenticates a mobile device that can be carried by a user using registered authentication information stored in a storage device, By being executed, the control device receiving the erasure authentication information delivered to the mobile device through a communication device capable of wirelessly communicating with the mobile device; When the authentication information for erasure is accepted and a second authentication process different from the first authentication process is established, erasure of the registered authentication information is permitted.

[0008] According to the configurations of the above aspects, the deletion of the registered authentication information used for authenticating the mobile device is performed through two-step authentication. This makes it possible to increase the possibility of confirming that the user who wishes to delete the registered authentication information is the owner of the mobile device in a configuration in which the registered authentication information is delivered to the mobile device. This makes it possible to increase the security of the authentication information registered in the authentication system for authenticating the mobile device. [Brief description of the drawings]

[0009] [Figure 1]1 illustrates an example of a configuration of an authentication system according to an embodiment. [Diagram 2] 2 illustrates an example of a functional configuration of the authentication system of FIG. [Diagram 3] 2 shows an example of a flow of processing executed by the control device of FIG. [Figure 4] 10 shows another example of the flow of the process executed by the control device of FIG. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will now be described in detail with reference to the accompanying drawings. In each drawing, the scale is appropriately changed so that each illustrated element can be clearly seen.

[0011] 1 illustrates a configuration of an authentication system 10 according to an embodiment. The authentication system 10 can be used to authorize a user carrying a mobile device to use a vehicle 20 by authenticating the mobile device. The shape of the vehicle 20 is merely an example. The vehicle 20 is an example of a moving body.

[0012] The authentication system 10 includes a communication device 11. In this example, the communication device 11 is mounted at an appropriate position in a vehicle 20. The communication device 11 has an antenna capable of performing short-range wireless communication with a mobile device 40 carried by a user 30.

[0013] The term "short-range wireless communication" used in this specification means wireless communication that is performed in compliance with the standard IEEE802.15 or IEEE802.11. Examples of technologies that can perform such wireless communication include Bluetooth (registered trademark), Bluetooth Low Energy (registered trademark), Ultra Wide Band (UWB), ZigBee (registered trademark), and Wi-Fi (registered trademark). In this specification, "short-range wireless communication" is distinguished from "near-field wireless communication" that uses a non-contact communication technology in which a mobile device transmits information by obtaining a small amount of power from radio waves transmitted from a reading device. Examples of technologies that can perform near-field wireless communication include RF-ID and NFC.

[0014] The authentication system 10 includes a control device 12. The control device 12 is mounted on a vehicle 20. The control device 12 is configured to control the operation of a locking / unlocking device 21 mounted on the vehicle 20 based on a first authentication process that authenticates a mobile device. The locking / unlocking device 21 is a device that locks and unlocks a door 22 that opens and closes the vehicle compartment. The locking / unlocking device 21 is an example of a controlled device. The door 22 is an example of an opening / closing body.

[0015] The authentication system 10 includes a storage device 13. The storage device 13 is mounted on the vehicle 20. The storage device 13 is configured to store registration authentication information RG used in the first authentication process of the mobile device. The storage device 13 can be realized by a semiconductor memory or a hard disk device.

[0016] 2, the mobile device 40 is configured to be able to acquire first authentication information AT1 distributed from an external server device 50 via a wireless communication network 60. The first authentication information AT1 is information that identifies at least one of the user 30 and the mobile device 40.

[0017] The mobile device 40 is configured to be able to transmit the first authentication information AT1 to the communication device 11. The first authentication information AT1 may be in the form of analog data or digital data.

[0018] The control device 12 includes a reception unit 121. The reception unit 121 is configured as an interface capable of receiving the first authentication information AT1 through the communication device 11. When the first authentication information AT1 is in the form of analog data, the reception unit 121 includes an appropriate conversion circuit including an A / D converter.

[0019] The control device 12 includes a processing unit 122. The processing unit 122 is configured to authenticate the mobile device 40 by using the first authentication information AT1 accepted by the accepting unit 121. For example, the processing unit 122 compares the first authentication information AT1 accepted by the accepting unit 121 with the registered authentication information RG stored in the storage device 13, and determines that the authentication process of the mobile device 40 has been established when the degree of match between the two exceeds a threshold value.

[0020] The processing unit 122 is configured to permit the user 30 carrying the mobile device 40 to use the locking / unlocking device 21 when the first authentication process is successful. The control device 12 includes an output unit 123. For example, the processing unit 122 is configured to output a control signal CT from the output unit 123. The control signal CT is a signal that causes the locking / unlocking device 21 to perform a locking / unlocking operation.

[0021] That is, the output unit 123 is configured as an interface that outputs the control signal CT to the communication device 11. The control signal CT may be an analog signal or a digital signal. When the control signal CT is an analog signal, the output unit 123 includes an appropriate conversion circuit including a D / A converter.

[0022] The locking / unlocking device 21 is configured to lock or unlock the door 22 based on a control signal CT.

[0023] When the user 30 wishes to erase the registered authentication information RG, an appropriate authentication process is performed between the mobile device 40 and the external server device 50, and then the user 30 receives the authentication information DL for erasure from the external server device 50. The authentication information DL for erasure contains information specifying the registered authentication information RG to be erased. The user 30 transmits the authentication information DL for erasure from the mobile device 40 to the communication device 11. The authentication information DL for erasure may be in the form of analog data or digital data.

[0024] The control device 12 is configured to acquire the erasure authentication information DL through the communication device 11. That is, the reception unit 121 is configured as an interface capable of receiving the erasure authentication information DL through the communication device 11. When the erasure authentication information DL is in the form of analog data, the reception unit 121 includes an appropriate conversion circuit including an A / D converter.

[0025] The processing unit 122 of the control device 12 is configured to request the user 30 to perform a second authentication process when the erasure authentication information DL is accepted by the accepting unit 121.

[0026] Specifically, the processing unit 122 is configured to output, from the output unit 123, a communication control signal CM for causing the communication device 11 to transmit a notification signal NT to the mobile device 40. The notification signal NT includes information for causing the mobile device 40 to issue a notification prompting the user 30 to perform a second authentication process.

[0027] That is, the output unit 123 is configured as an interface that also outputs the communication control signal CM to the communication device 11. When the communication control signal CM is an analog signal, the output unit 123 includes an appropriate conversion circuit including a D / A converter.

[0028] As illustrated in Fig. 1, the authentication system 10 includes an electronic key 70. The second authentication process is performed using the electronic key 70. The electronic key 70 is a device that can be carried by the user 30. The electronic key 70 is a device that can cause the control device 12 to control the operation of the locking / unlocking device 21 based on wireless communication. The electronic key 70 is an example of a device associated with a controlled device.

[0029] For example, the wireless communication may include transmitting and receiving a first signal using a first frequency band and a second signal using a second frequency band, the first frequency band and the second frequency band being different. An example of the first frequency band is the low frequency (LF) band. An example of the second frequency band is the ultra high frequency (UHF) band.

[0030] In this example, the communication device 11 also includes an antenna capable of performing wireless communication with the electronic key 70. However, a communication device for wireless communication with the electronic key 70 may be provided at an appropriate position in the vehicle 20 independent of the communication device 11.

[0031] Specifically, a first signal is transmitted through the communication device 11. The first signal may be transmitted continuously or intermittently. The electronic key 70 is configured to transmit a second signal upon receiving the first signal. The second signal is configured to include second authentication information AT2 required for authenticating the electronic key 70. The second authentication information AT2 is information capable of identifying at least one of the electronic key 70 and the user 30.

[0032] The processing unit 122 of the control device 12 is configured to execute a second authentication process upon receiving the second signal via the communication device 11. Specifically, the processing unit 122 is configured to compare second authentication information AT2 included in the second signal with authentication information of the electronic key 70 pre-stored in the storage device 13. If the degree of match between the two pieces of information exceeds a threshold, the processing unit 122 determines that the authentication of the electronic key 70 has been established.

[0033] The processing unit 122 is configured to permit erasure of the registration authentication information RG designated by the erasure authentication information DL when the second authentication process is successful.

[0034] FIG. 3 shows an example of the flow of processing executed by the processing unit 122 of the control device 12 configured as above.

[0035] First, the processing unit 122 determines whether or not erasure authentication information DL has been received from the mobile device 40 (STEP 11). Specifically, it determines whether or not the erasure authentication information DL has been accepted by the acceptance unit 121 through the communication device 11. This process is repeated until it is determined that the erasure authentication information DL has been accepted by the acceptance unit 121 (NO in STEP 11).

[0036] When it is determined that the erasure authentication information DL has been received by the receiving unit 121 (YES in STEP 11), the processing unit 122 executes a first authentication process for authenticating the mobile device 40, and determines whether authentication of the mobile device 40 has been established (STEP 12). Specifically, the first authentication information AT1 transmitted from the mobile device 40 is compared with the registered authentication information RG specified by the erasure authentication information DL, and it is determined that authentication has been established if the degree of match between the two pieces of information exceeds a threshold value.

[0037] If it is determined that the first authentication process has not been established (NO in STEP 12), the processing unit 122 does not permit the user 30 carrying the mobile device 40 to erase the registration authentication information RG. The processing unit 122 returns the process to STEP 11 and waits for reception of another erasure authentication information DL.

[0038] If it is determined that the first authentication process is successful (YES in STEP 12), the processing unit 122 requests the user 30 to execute the second authentication process (STEP 13). Specifically, the processing unit 122 causes the communication device 11 to transmit a notification signal NT that causes the mobile device 40 to notify the user 30 to perform the second authentication process.

[0039] For example, the notification signal NT causes the display unit of the mobile device 40 to display a message such as "Please bring the electronic key close to the door." When the user 30 carrying the electronic key 70 approaches the door 22 of the vehicle 20, wireless communication is established between the communication device 11 and the electronic key 70, and the second authentication information AT2 is transmitted from the electronic key 70.

[0040] Next, the processing unit 122 of the control device 12 performs a second authentication process based on a comparison between the second authentication information AT2 accepted by the accepting unit 121 and the authentication information stored in the storage device 13, and determines whether the authentication has been established (STEP 14). The process is repeated until it is determined that the authentication has been established (NO in STEP 14). If it is not determined that the authentication has been established even after a predetermined time has elapsed, the process may be terminated by notifying the mobile device 40 of an error, for example.

[0041] If it is determined that the second authentication process is successful (YES in STEP 14), the processing unit 122 permits the user 30 carrying the mobile device 40 to erase the registration authentication information RG (STEP 15).

[0042] According to the above-mentioned configuration, the deletion of the registered authentication information RG used for authenticating the mobile device 40 is performed through two-step authentication. This makes it possible to increase the possibility of verifying that the user 30 who wishes to delete the registered authentication information RG is the owner of the mobile device 40 in a configuration in which the registered authentication information RG is delivered to the mobile device 40. This makes it possible to increase the security of the authentication information registered in the authentication system 10 for authenticating the mobile device 40.

[0043] In this example, the second authentication process is performed by authenticating the electronic key 70 for controlling the operation of the locking / unlocking device 21. There is a high probability that the device associated with the operation control of the locking / unlocking device 21 is owned by the user who wishes to use the locking / unlocking device 21. This further increases the possibility of confirming that the user 30 is the owner of the mobile device 40. In addition, it is possible to suppress an increase in costs associated with components added to the authentication system 10 to realize two-step authentication.

[0044] However, any suitable biometric technique may be used in the second authentication process, provided that it can be verified that the user 30 is the owner of the mobile device 40 .

[0045] The vehicle 20 can be shared by multiple users with different attributes. Examples of attributes include the owner of the vehicle 20, the family of the owner, the friend of the owner, the car sharing partner of the owner (hereinafter abbreviated as sharing partner), the dealer of the vehicle 20, and the like.

[0046] The user's attributes may be associated with authority for operational control of a controlled device mounted on the vehicle 20. The authority may include time authority and control type authority. The time authority corresponds to the length of the period during which operational control of the controlled device is possible. The control type authority corresponds to at least one of the types of controlled device and operation for which operational control is permitted. Examples of controlled devices mounted on the vehicle 20 include an ignition power supply, an engine, an air conditioning device, audiovisual equipment, lighting equipment, and position adjustment mechanisms for seats and steering wheels, in addition to the locking / unlocking device 21.

[0047] In addition, the authority may include an authority related to erasure of the registration authentication information RG. Specifically, the authority related to erasure of the registration authentication information RG includes an authority that allows only erasure of the registration authentication information RG for authenticating a mobile device owned by the user, and an authority that also allows erasure of the registration authentication information RG for authenticating a mobile device owned by another user.

[0048] That is, the user's attributes may include a first attribute and a second attribute. The second attribute is defined as being associated with a more limited authority than a user having the first attribute. For example, if the owner of the vehicle 20 has the first attribute, the owner's share partner may have the second attribute. In this case, the owner may be granted the authority to erase the registered authentication information RG of the share partner. The share partner may be granted the authority to erase only its own registered authentication information RG.

[0049] In this example, information related to user attributes and information related to authority are stored in advance in the storage device 13. Specifically, first authority information specifying the authority granted to a user having a first attribute and second authority information specifying the authority granted to a user having a second attribute are stored. That is, the first authority information is associated with the authority to erase the registered authentication information RG of another user. The second authority information is associated with the authority to erase only the user's own registered authentication information RG.

[0050] In this example, the first authentication information AT1 or the erasure authentication information DL received by the receiving unit 121 of the control device 12 through the communication device 11 includes attribute information. The attribute information is information that identifies the attributes of the user 30.

[0051] The processing unit 122 of the control device 12 is configured to refer to the above attribute information when the user associated with the registered authentication information RG specified by the deletion authentication information DL does not match the user of the mobile device 40 that has transmitted the deletion authentication information DL. The processing unit 122 is configured to permit deletion of the registered authentication information RG when it is determined that the attribute of the user specified by the attribute information has the authority to delete the registered authentication information RG of another person.

[0052] Fig. 4 shows another example of the flow of processing executed by the processing unit 122 of the control device 12 configured as described above. Processing elements that are substantially the same as those illustrated in Fig. 3 are given the same reference numerals, and repeated explanations will be omitted.

[0053] When it is determined that the deletion authentication information DL has been accepted by the accepting unit 121 (YES in STEP 11), the processing unit 122 determines whether the user 30 carrying the mobile device 40 wishes to delete his / her own registered authentication information RG (STEP 21).

[0054] Specifically, the processing unit 122 executes a first authentication process using the first authentication information AT1 transmitted from the mobile device 40, and determines whether the user associated with the registration authentication information RG specified by the erasure authentication information DL matches the user of the mobile device 40 that transmitted the erasure authentication information DL.

[0055] If the first authentication process is successful, the user associated with the registration authentication information RG specified by the deletion authentication information DL matches the user specified by the first authentication information AT1. As a result, the processing unit 122 determines that the user 30 carrying the mobile device 40 wishes to delete his / her own registration authentication information RG (YES in STEP 21). The subsequent processing is the same as the processing after the first authentication process is successful, which has been described with reference to FIG. 3.

[0056] The fact that the first authentication process is not successful may correspond to a case where the user associated with the registration authentication information RG specified by the deletion authentication information DL does not match the user of the mobile device 40 that transmitted the deletion authentication information DL. The processing unit 122 determines that the user 30 carrying the mobile device 40 wishes to delete the registration authentication information RG of another person (NO in STEP 21).

[0057] In this case, the processing unit 122 judges whether the user 30 of the mobile device 40 that transmitted the deletion authentication information DL has the authority to delete the registered authentication information RG of another person (STEP 22).

[0058] Specifically, the processing unit 122 refers to attribute information included in the first authentication information AT1 or the erasure authentication information DL. If it is determined that the attribute of the user 30 specified by the attribute information corresponds to the first attribute, the processing unit 122 refers to first authority information associated with the first attribute in the storage device 13.

[0059] As described above, the first authority information is associated with the authority to erase the registered authentication information RG of another person, so the processing unit 122 determines that the user 30 of the mobile device 40 has the authority to erase the registered authentication information RG of another person (YES in STEP 22). The subsequent processing is the same as the processing after the first authentication processing is established, as described with reference to FIG. 3.

[0060] When it is determined that the attribute of the user 30 specified by the attribute information corresponds to the second attribute, the processing unit 122 refers to second authority information associated with the second attribute in the storage device 13 .

[0061] As described above, since the second authority information is associated with the authority to erase only one's own registered authentication information RG, the processing unit 122 determines that the user 30 of the mobile device 40 does not have the authority to erase other people's registered authentication information RG (NO in STEP 22). In this case, the processing unit 122 does not permit the user 30 carrying the mobile device 40 to erase the registered authentication information RG. The processing unit 122 returns the process to STEP 11 and waits for reception of another deletion authentication information DL.

[0062] This configuration can prevent the registered authentication information RG from being erased by a user without the proper authority, and as a result, appropriate security can be provided when the authentication system 10 is shared by multiple users with different authorities related to management of the registered authentication information RG.

[0063] Among the user attributes exemplified above (Owner, Owner's Family, Owner's Friends, Share Partner, Dealer), which one corresponds to the first attribute and which one corresponds to the second attribute can be appropriately determined. In addition, three or more attributes with different granted authorities may be defined.

[0064] The processing unit 122 of the control device 12 having the various functions described above may be realized by a general-purpose microprocessor operating in cooperation with a general-purpose memory. Examples of the general-purpose microprocessor include a CPU, an MPU, and a GPU. Examples of the general-purpose memory include a ROM and a RAM. In this case, the ROM may store a computer program that executes the above-mentioned processing. The ROM is an example of a non-transient computer-readable medium that stores a computer program. The general-purpose memory may be used as the storage device 13. The general-purpose microprocessor specifies at least a part of the computer program stored on the ROM, expands it on the RAM, and executes the above-mentioned processing in cooperation with the RAM. The above-mentioned computer program may be pre-installed in the general-purpose memory, or may be downloaded from the external server device 50 via the wireless communication network 60 and then installed in the general-purpose memory. In this case, the external server device 50 is an example of a non-transient computer-readable medium that stores a computer program.

[0065] The processing unit 122 may be realized by a dedicated integrated circuit capable of executing the above computer program, such as a microcontroller, an ASIC, or an FPGA. In this case, the above computer program is pre-installed in a storage element included in the dedicated integrated circuit. The storage element is an example of a non-transitory computer-readable medium storing a computer program. Each processor may also be realized by a combination of a general-purpose microprocessor and a dedicated integrated circuit.

[0066] The above-mentioned general-purpose memory or storage element may be used as the storage device 13. In other words, the storage device 13 may be a part of the control device 12.

[0067] The above-described embodiments are merely examples for facilitating understanding of the present invention. The configurations according to the above-described embodiments may be modified or improved as appropriate without departing from the spirit and scope of the present invention.

[0068] 1, the communication device 11 and the control device 12 are illustrated as separate devices mounted at separate locations in the vehicle 20. However, the communication device 11 may be provided as part of the control device 12.

[0069] At least a part of the authentication process performed by the processing unit 122 of the control device 12 may be performed in an external server device 50 illustrated in Fig. 1. Therefore, the storage device 13 may be mounted on the external server device 50.

[0070] The authentication system 10 can be applied to a moving body other than the vehicle 20. Examples of other moving bodies include trains, airplanes, ships, etc. The moving body may not require a driver.

[0071] The opening and closing body that is locked and unlocked by the locking and unlocking device 21 is not limited to the door of a mobile body. Doors and windows in a house or facility can also be an example of an opening and closing body. Various equipment in a house or facility can also be an example of a controlled device. In other words, the communication device 11, the control device 12, and the storage device 13 do not need to be mounted on a mobile body. [Explanation of symbols]

[0072] 10: authentication system, 11: communication device, 12: control device, 13: storage device, 20: vehicle, 21: locking / unlocking device, 22: door, 30: user, 40: mobile device, 70: electronic key, AT1: first authentication information, DL: erasure authentication information, RG: registration authentication information

Claims

1. a communication device for wirelessly communicating with a mobile device that is portable by a user; a storage device capable of storing registered authentication information used in a first authentication process for authenticating the mobile device; a control device that permits erasure of the registered authentication information when the erasure authentication information delivered to the mobile device is acquired through the communication device and a second authentication process different from the first authentication process is established; Equipped with Authentication system.

2. the authentication information used in the first authentication process or the erasure authentication information includes attribute information that identifies an attribute of the user, The user attributes include a first attribute associated with a first authority and a second attribute associated with a second authority that is more restricted than the first authority; the control device permits erasure of the registered authentication information when an attribute of the user identified by the attribute information corresponds to the first attribute. The authentication system according to claim 1 .

3. The control device authenticates, as the second authentication process, a device other than the mobile device associated with a controlled device for which operational control is permitted based on the first authentication process.

3. An authentication system according to claim 1 or 2.

4. The controlled device is a locking / unlocking device that locks and unlocks the opening / closing body. The authentication system according to claim 3.

5. The communication device and the control device are mounted on a moving object. An authentication system according to any one of claims 1 to 4.

6. A control device that permits operational control of a controlled device based on a first authentication process that authenticates a mobile device that can be carried by a user using registration authentication information stored in a storage device, a reception unit that receives the erasure authentication information delivered to the mobile device through a communication device that is capable of wireless communication with the mobile device; a processing unit that permits erasure of the registered authentication information when the erasure authentication information is received and a second authentication process different from the first authentication process is established; Equipped with Control device.

7. A computer program executable by a processing unit mounted on a control device that permits operational control of a controlled device based on a first authentication process that authenticates a mobile device that can be carried by a user using registered authentication information stored in a storage device, By being executed, the control device receiving the erasure authentication information delivered to the mobile device through a communication device capable of wirelessly communicating with the mobile device; when the authentication information for erasure is accepted and a second authentication process different from the first authentication process is established, erasure of the registered authentication information is permitted; Computer program.

Images