Authentication system, control device, and computer program

Abstract

To increase the security of an authentication system for authenticating a mobile device based on a piece of delivered authentication information.SOLUTION: A communication device 11 performs radio communication with a mobile device 40 that can be carried by a user. A storage unit 13 is capable of storing a piece of registration authentication information RG used for a series of first authentication processing to authenticate the mobile device 40. A control unit 12 is configured so as to, when the first authentication processing is established, permit the operation control of a locking / unlocking device 21. The control unit 12 is configured so as to acquire a piece of first authentication information AT1 delivered to the mobile device 40 via the communication device 11, and when no registration authentication information RG corresponding to the first authentication information AT1 is stored in the storage unit 13, request the user to carry out second authentication processing different from the first authentication processing, and when the second authentication processing is established, to store the first authentication information AT1 in the storage unit 13 as the registration authentication information RG.SELECTED DRAWING: Figure 2

Description

[Technical field]

[0001] The present invention relates to an authentication system using a mobile device that can be carried by a user. The present invention also relates to a control device that can form a part of the authentication system, and a computer program that can be executed by a processing unit installed in the control device. [Background technology]

[0002] Patent Document 1 discloses a control device mounted on a vehicle to perform authentication processing of a mobile device carried by a user. If the authentication processing is successful, the control device permits the user to use the vehicle and controls the operation of various controlled devices mounted on the vehicle. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2015-085899 A Summary of the Invention [Problem to be solved by the invention]

[0004] An object of the present invention is to increase the security of an authentication system that authenticates a mobile device based on distributed authentication information. [Means for solving the problem]

[0005] One aspect of the present invention to achieve the above object is an authentication system, comprising: a communication device for wirelessly communicating with a mobile device that is portable by a user; a storage device capable of storing registered authentication information used in a first authentication process for authenticating the mobile device; a control device that permits operation control of a controlled device when the first authentication process is successful; It is equipped with the control device acquires authentication information distributed to the mobile device through the communication device, and if registered authentication information corresponding to the authentication information is not stored in the storage device, requests the user to perform a second authentication process different from the first authentication process, and if the second authentication process is successful, stores the authentication information in the storage device as the registered authentication information; It is equipped with:

[0006] One aspect for achieving the above object is a control device that permits operation control of a controlled device based on a first authentication process for authenticating a mobile device that can be carried by a user, the control device comprising: a reception unit that receives the authentication information distributed to the mobile device through a communication device that is capable of wireless communication with the mobile device; a processing unit that requests the user to perform a second authentication process different from the first authentication process when registered authentication information corresponding to the authentication information is not stored in the storage device, and stores the authentication information in the storage device as the registered authentication information when the second authentication process is successful; It is equipped with:

[0007] One aspect for achieving the above object is a computer program executable by a processing unit mounted on a control device that permits operation control of a controlled device based on a first authentication process for authenticating a mobile device that can be carried by a user, By being executed, the control device receiving the authentication information delivered to the mobile device through a communication device capable of wirelessly communicating with the mobile device; requesting the user to perform a second authentication process different from the first authentication process when registered authentication information corresponding to the authentication information is not stored in a storage device; If the second authentication process is successful, the authentication information is stored in the storage device as the registered authentication information.

[0008] According to the configurations of the above aspects, the authentication information used to authenticate the mobile device is stored as registered authentication information through two-step authentication. This increases the possibility of verifying that the user is the owner of the mobile device in a configuration in which authentication information is distributed to the mobile device. This increases the security of the authentication system that authenticates the mobile device based on the distributed authentication information. [Brief description of the drawings]

[0009] [Figure 1] 1 illustrates an example of a configuration of an authentication system according to an embodiment. [Diagram 2] 2 illustrates an example of a functional configuration of the authentication system of FIG. [Diagram 3] 2 shows an example of a flow of processing executed by the control device of FIG. [Figure 4] 10 shows another example of the flow of the process executed by the control device of FIG. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will now be described in detail with reference to the accompanying drawings. In each drawing, the scale is appropriately changed so that each illustrated element can be clearly seen.

[0011] 1 illustrates a configuration of an authentication system 10 according to an embodiment. The authentication system 10 can be used to authorize a user carrying a mobile device to use a vehicle 20 by authenticating the mobile device. The shape of the vehicle 20 is merely an example. The vehicle 20 is an example of a moving body.

[0012] The authentication system 10 includes a communication device 11. In this example, the communication device 11 is mounted at an appropriate position in a vehicle 20. The communication device 11 has an antenna capable of performing short-range wireless communication with a mobile device 40 carried by a user 30.

[0013] The term "short-range wireless communication" used in this specification means wireless communication that is performed in compliance with the standard IEEE802.15 or IEEE802.11. Examples of technologies that can perform such wireless communication include Bluetooth (registered trademark), Bluetooth Low Energy (registered trademark), Ultra Wide Band (UWB), ZigBee (registered trademark), and Wi-Fi (registered trademark). In this specification, "short-range wireless communication" is distinguished from "near-field wireless communication" that uses a non-contact communication technology in which a mobile device transmits information by obtaining a small amount of power from radio waves transmitted from a reading device. Examples of technologies that can perform near-field wireless communication include RF-ID and NFC.

[0014] The authentication system 10 includes a control device 12. The control device 12 is mounted on a vehicle 20. The control device 12 is configured to control the operation of a locking / unlocking device 21 mounted on the vehicle 20 based on a first authentication process that authenticates a mobile device. The locking / unlocking device 21 is a device that locks and unlocks a door 22 that opens and closes the vehicle compartment. The locking / unlocking device 21 is an example of a controlled device. The door 22 is an example of an opening / closing body.

[0015] The authentication system 10 includes a storage device 13. The storage device 13 is mounted on the vehicle 20. The storage device 13 is configured to store registration authentication information RG used in the first authentication process of the mobile device. The storage device 13 can be realized by a semiconductor memory or a hard disk device.

[0016] 2, the mobile device 40 is configured to be able to acquire first authentication information AT1 distributed from an external server device 50 via a wireless communication network 60. The first authentication information AT1 is information that identifies at least one of the user 30 and the mobile device 40.

[0017] The mobile device 40 is configured to be able to transmit the first authentication information AT1 to the communication device 11. The first authentication information AT1 may be in the form of analog data or digital data.

[0018] The control device 12 includes a reception unit 121. The reception unit 121 is configured as an interface capable of receiving the first authentication information AT1 through the communication device 11. When the first authentication information AT1 is in the form of analog data, the reception unit 121 includes an appropriate conversion circuit including an A / D converter.

[0019] The control device 12 includes a processing unit 122. The processing unit 122 is configured to authenticate the mobile device 40 by using the first authentication information AT1 accepted by the accepting unit 121. For example, the processing unit 122 compares the first authentication information AT1 accepted by the accepting unit 121 with the registered authentication information RG stored in the storage device 13, and determines that the authentication process of the mobile device 40 has been established when the degree of match between the two exceeds a threshold value.

[0020] The processing unit 122 is configured to request the user 30 to perform a second authentication process if the registered authentication information RG corresponding to the first authentication information AT1 accepted by the accepting unit 121 is not stored in the storage device 13.

[0021] 2, the control device 12 includes an output unit 123. The processing unit 122 is configured to output, from the output unit 123, a communication control signal CM for causing the communication device 11 to transmit a notification signal NT to the mobile device 40. The notification signal NT includes information for causing the mobile device 40 to issue a notification prompting the user 30 to perform a second authentication process.

[0022] That is, the output unit 123 is configured as an interface that outputs the communication control signal CM to the communication device 11. When the communication control signal CM is an analog signal, the output unit 123 includes an appropriate conversion circuit including a D / A converter.

[0023] As illustrated in Fig. 1, the authentication system 10 includes an electronic key 70. The second authentication process is performed using the electronic key 70. The electronic key 70 is a device that can be carried by the user 30. The electronic key 70 is a device that can cause the control device 12 to control the operation of the locking / unlocking device 21 based on wireless communication. The electronic key 70 is an example of a device associated with a controlled device.

[0024] For example, the wireless communication may include transmitting and receiving a first signal using a first frequency band and a second signal using a second frequency band, the first frequency band and the second frequency band being different. An example of the first frequency band is the low frequency (LF) band. An example of the second frequency band is the ultra high frequency (UHF) band.

[0025] In this example, the communication device 11 also includes an antenna capable of performing wireless communication with the electronic key 70. However, a communication device for wireless communication with the electronic key 70 may be provided at an appropriate position in the vehicle 20 independent of the communication device 11.

[0026] Specifically, a first signal is transmitted through the communication device 11. The first signal may be transmitted continuously or intermittently. The electronic key 70 is configured to transmit a second signal upon receiving the first signal. As illustrated in FIG. 2, the second signal is configured to include second authentication information AT2 required for authenticating the electronic key 70. The second authentication information AT2 is information capable of identifying at least one of the electronic key 70 and the user 30.

[0027] The processing unit 122 of the control device 12 is configured to execute a second authentication process upon receiving the second signal via the communication device 11. Specifically, the processing unit 122 is configured to compare second authentication information AT2 included in the second signal with authentication information of the electronic key 70 pre-stored in the storage device 13. If the degree of match between the two pieces of information exceeds a threshold, the processing unit 122 determines that the authentication of the electronic key 70 has been established.

[0028] The processing unit 122 is configured to store the first authentication information AT1 received from the mobile device 40 as registered authentication information RG in the storage device 13 when the second authentication process is established. Therefore, when the first authentication information AT1 is transmitted from the mobile device 40 at a later point in time, the first authentication process is performed through comparison with the registered authentication information RG stored in the storage device 13.

[0029] The processing unit 122 is configured to permit the user 30 carrying the mobile device 40 to use the locking / unlocking device 21 when the first authentication process or the second authentication process is established. For example, the processing unit 122 is configured to output a control signal CT from the output unit 123. The control signal CT is a signal that causes the locking / unlocking device 21 to perform a locking / unlocking operation. The control signal CT may be an analog signal or a digital signal. When the control signal CT is an analog signal, the output unit 123 includes an appropriate conversion circuit including a D / A converter.

[0030] The locking / unlocking device 21 is configured to lock or unlock the door 22 based on a control signal CT.

[0031] FIG. 3 shows an example of the flow of processing executed by the processing unit 122 of the control device 12 configured as above.

[0032] First, the processing unit 122 determines whether the first authentication information AT1 has been received from the mobile device 40 (STEP 11). Specifically, it determines whether the first authentication information AT1 has been accepted by the acceptance unit 121 through the communication device 11. This process is repeated until it is determined that the first authentication information AT1 has been accepted by the acceptance unit 121 (NO in STEP 11).

[0033] When it is determined that the first authentication information AT1 has been accepted by the accepting unit 121 (YES in STEP 11), the processing unit 122 determines whether or not the registered authentication information RG corresponding to the first authentication information AT1 is stored in the storage device 13 (STEP 12).

[0034] When it is determined that the registered authentication information RG corresponding to the first authentication information AT1 is stored in the memory device 13 (YES in STEP 12), the processing unit 122 executes a first authentication process based on a comparison between the first authentication information AT1 and the registered authentication information RG, and determines whether authentication has been established (STEP 13).

[0035] If it is determined that the first authentication process has not been established (NO in STEP 13), the processing unit 122 prohibits the user 30 carrying the mobile device 40 from using the locking / unlocking device 21. The processing unit 122 returns the process to STEP 11 and waits for reception of another piece of first authentication information AT1.

[0036] If it is determined that the first authentication process is successful (YES in STEP 13), the processing unit 122 permits the user 30 carrying the mobile device 40 to use the locking / unlocking device 21 (STEP 14).

[0037] If it is determined that the registered authentication information RG corresponding to the first authentication information AT1 is not stored in the storage device 13 (NO in STEP 12), the processing unit 122 requests the user 30 to execute the second authentication process (STEP 15). Specifically, the processing unit 122 causes the communication device 11 to transmit a notification signal NT that causes the mobile device 40 to notify the user 30 to perform the second authentication process.

[0038] For example, the notification signal NT causes the display unit of the mobile device 40 to display a message such as "Please bring the electronic key close to the door." When the user 30 carrying the electronic key 70 approaches the door 22 of the vehicle 20, wireless communication is established between the communication device 11 and the electronic key 70, and the second authentication information AT2 is transmitted from the electronic key 70.

[0039] Next, the processing unit 122 of the control device 12 performs a second authentication process based on a comparison between the second authentication information AT2 accepted by the accepting unit 121 and the authentication information stored in the storage device 13, and determines whether the authentication has been established (STEP 16). The process is repeated until it is determined that the authentication has been established (NO in STEP 16). If it is not determined that the authentication has been established even after a predetermined time has elapsed, the process may be terminated by notifying the mobile device 40 of an error, for example.

[0040] If it is determined that the second authentication process is successful (YES in STEP 16), the processing unit 122 stores the first authentication information AT1 received from the mobile device 40 in the storage device 13 as registration authentication information RG (STEP 17).

[0041] Next, the processing unit 122 permits the user 30 carrying the mobile device 40 to use the locking / unlocking device 21 (STEP 14).

[0042] According to the above-described configuration, the first authentication information AT1 used for authenticating the mobile device 40 is registered through two-step authentication. This makes it possible to increase the possibility of verifying that the user 30 is the owner of the mobile device 40 in a configuration in which the first authentication information AT1 is delivered to the mobile device 40. This makes it possible to increase the security of the authentication system 10 that authenticates the mobile device 40 based on the delivered first authentication information AT1.

[0043] In this example, the second authentication process is performed by authenticating the electronic key 70 for controlling the operation of the locking / unlocking device 21. There is a high probability that the device associated with the operation control of the locking / unlocking device 21 is owned by the user who wishes to use the locking / unlocking device 21. This further increases the possibility of confirming that the user 30 is the owner of the mobile device 40. In addition, it is possible to suppress an increase in costs associated with components added to the authentication system 10 to realize two-step authentication.

[0044] However, any suitable biometric technique may be used in the second authentication process, provided that it can be verified that the user 30 is the owner of the mobile device 40 .

[0045] The vehicle 20 can be shared by multiple users with different attributes. Examples of attributes include the owner of the vehicle 20, the family of the owner, the friend of the owner, the car sharing partner of the owner (hereinafter abbreviated as sharing partner), the dealer of the vehicle 20, and the like.

[0046] The user's attributes may be associated with authority for operational control of a controlled device mounted on the vehicle 20. The authority may include time authority and control type authority. The time authority corresponds to the length of the period during which operational control of the controlled device is possible. The control type authority corresponds to at least one of the types of controlled device and operation for which operational control is permitted. Examples of controlled devices mounted on the vehicle 20 include an ignition power supply, an engine, an air conditioning device, audiovisual equipment, lighting equipment, and position adjustment mechanisms for seats and steering wheels, in addition to the locking / unlocking device 21.

[0047] That is, the attributes of a user may include a first attribute and a second attribute. The second attribute is defined as being associated with a more limited authority than a user having the first attribute. For example, if the owner of the vehicle 20 has the first attribute, the sharing partner of the owner may have the second attribute. The sharing partner has more limited authority to control the operation of the controlled device than the owner.

[0048] In this example, information related to user attributes and information related to authority are stored in advance in the storage device 13. Specifically, the storage device 13 stores first authority information that specifies the authority granted to a user having a first attribute, and second authority information that specifies the authority granted to a user having a second attribute.

[0049] In this example, the first authentication information AT1 received by the receiving unit 121 of the control device 12 through the communication device 11 includes attribute information. The attribute information is information that identifies an attribute of the user 30.

[0050] When the registered authentication information RG corresponding to the first authentication information AT1 accepted by the accepting unit 121 is not stored in the memory device 13, the processing unit 122 of the control device 12 is configured to refer to the attribute information contained in the first authentication information AT1 and determine whether the attribute of the user 30 corresponds to the first attribute or the second attribute.

[0051] The processing unit 122 is configured to request a second authentication process from the user 30 who is determined to have the first attribute. When the second authentication process is successful, the processing unit 122 is configured to store the first authentication information AT1 transmitted from the mobile device 40 carried by the user 30 in the storage device 13 as registered authentication information RG, and to permit the user 30 to use the controlled device within the scope of authority specified by the first authority information.

[0052] On the other hand, for a user 30 who is determined to have the second attribute, the processing unit 122 is configured to store the first authentication information AT1 transmitted from the mobile device 40 carried by the user 30 as registered authentication information RG in the storage device 13 without performing a second authentication process, and to permit the user 30 to use the controlled device within the scope of authority specified by the second authority information.

[0053] Fig. 4 shows another example of the flow of processing executed by the processing unit 122 of the control device 12 configured as described above. Processing elements that are substantially the same as those illustrated in Fig. 3 are given the same reference numerals, and repeated explanations will be omitted.

[0054] When it is determined that the registered authentication information RG corresponding to the first authentication information AT1 received from the mobile device 40 is not stored in the memory device 13 (NO in STEP 12), the processing unit 122 refers to the attribute information included in the first authentication information AT1 and determines whether the attribute of the user 30 identified by the attribute information corresponds to the first attribute (STEP 21).

[0055] When it is determined that the attribute of the user 30 specified by the attribute information included in the first authentication information AT1 corresponds to the first attribute (YES in STEP 21), the processing unit 122 requests the user 30 to execute the second authentication process (STEP 15). The subsequent process is as described with reference to Fig. 3, but the operational control of the locking / unlocking device 21 permitted in STEP 14 is determined within the range specified by the first authority information stored in the storage device 13.

[0056] If it is determined that the attribute of user 30 identified by the attribute information included in the first authentication information AT1 does not correspond to the first attribute (NO in STEP 21), the processing unit 122 determines whether the attribute of user 30 identified by the attribute information corresponds to the second attribute (STEP 22).

[0057] If it is determined that the attribute of the user 30 specified by the attribute information included in the first authentication information AT1 does not correspond to either the first attribute or the second attribute (NO in STEP 22), the processing unit 122 returns the process to STEP 11 and waits for reception of another piece of first authentication information AT1. The user 30 may be appropriately notified that the first authentication information AT1 could not be registered.

[0058] When it is determined that the attribute of the user 30 specified by the attribute information included in the first authentication information AT1 corresponds to the second attribute (YES in STEP 22), the processing unit 122 stores the first authentication information AT1 received from the mobile device 40 in the storage device 13 as registered authentication information RG (STEP 17). The operational control of the locking / unlocking device 21 permitted in STEP 14 is determined within the range specified by the second authority information stored in the storage device 13.

[0059] According to this configuration, two-step authentication is applied to a user having a first attribute to which less restrictive authority is granted when registering the first authentication information AT1. In other words, the identity verification of a user to which less restrictive authority is granted is performed more carefully. On the other hand, the first authentication information AT1 is registered without applying two-step authentication to a user having a second attribute to which more restrictive authority is granted. Therefore, it is possible to suppress the inconvenience that a user to which more restrictive authority is granted may feel. As a result, it is possible to provide appropriate security when the authentication system 10 is shared by a plurality of users having different authorities related to the operation control of the controlled device.

[0060] Among the user attributes exemplified above (Owner, Owner's Family, Owner's Friends, Share Partner, Dealer), which one corresponds to the first attribute and which one corresponds to the second attribute can be appropriately determined. In addition, three or more attributes with different granted authorities may be defined.

[0061] The first authentication information AT1 accepted by the accepting unit 121 of the control device 12 may include information specifying the expiration date. In this case, the operation of the processing unit 122 described with reference to Fig. 4 may be modified as follows.

[0062] If the attribute of user 30 specified by the attribute information included in first authentication information AT1 corresponds to the first attribute, and if the second authentication process is successful (YES in STEP 16), processing unit 122 changes first authentication information AT1 to cancel the expiration date and then stores it in storage device 13 (STEP 17). The cancellation of the expiration date is reflected in the first authority information in storage device 13.

[0063] On the other hand, if the attribute of the user 30 specified by the attribute information included in the first authentication information AT1 corresponds to the second attribute (YES in STEP 22), the processing unit 122 stores the first authentication information AT1 in the storage device 13 while maintaining the expiration date (STEP 17). The expiration date is reflected in the second authority information in the storage device 13.

[0064] According to this configuration, the process of differentiating the temporal authority between a user having the first attribute and a user having the second attribute can be performed only within the control device 12, so there is no need to prepare separate authentication systems for users having the first attribute and users having the second attribute, thereby preventing an increase in the construction cost of the authentication system 10.

[0065] The processing unit 122 of the control device 12 having the various functions described above can be realized by a general-purpose microprocessor that operates in cooperation with a general-purpose memory. Examples of the general-purpose microprocessor include a CPU, an MPU, and a GPU. Examples of the general-purpose memory include a ROM and a RAM. In this case, the ROM can store a computer program that executes the above-mentioned processing. The ROM is an example of a non-transient computer-readable medium that stores a computer program. The general-purpose microprocessor specifies at least a part of the computer program stored on the ROM, deploys it on the RAM, and executes the above-mentioned processing in cooperation with the RAM. The above-mentioned computer program may be pre-installed in the general-purpose memory, or may be downloaded from the external server device 50 via the wireless communication network 60 and then installed in the general-purpose memory. In this case, the external server device 50 is an example of a non-transient computer-readable medium that stores a computer program.

[0066] The processing unit 122 may be realized by a dedicated integrated circuit capable of executing the above computer program, such as a microcontroller, an ASIC, or an FPGA. In this case, the above computer program is pre-installed in a storage element included in the dedicated integrated circuit. The storage element is an example of a non-transitory computer-readable medium storing a computer program. Each processor may also be realized by a combination of a general-purpose microprocessor and a dedicated integrated circuit.

[0067] The above-mentioned general-purpose memory or storage element may be used as the storage device 13. In other words, the storage device 13 may be a part of the control device 12.

[0068] The above-described embodiments are merely examples for facilitating understanding of the present invention. The configurations according to the above-described embodiments may be modified or improved as appropriate without departing from the spirit and scope of the present invention.

[0069] 1, the communication device 11 and the control device 12 are illustrated as separate devices mounted at separate locations in the vehicle 20. However, the communication device 11 may be provided as part of the control device 12.

[0070] At least a part of the authentication process performed by the processing unit 122 of the control device 12 may be performed in an external server device 50 illustrated in Fig. 1. Therefore, the storage device 13 may be mounted on the external server device 50.

[0071] The authentication system 10 can be applied to a moving body other than the vehicle 20. Examples of other moving bodies include trains, airplanes, ships, etc. The moving body may not require a driver.

[0072] The opening and closing body that is locked and unlocked by the locking and unlocking device 21 is not limited to the door of a mobile body. Doors and windows in a house or facility can also be an example of an opening and closing body. Various equipment in a house or facility can also be an example of a controlled device. In other words, the communication device 11, the control device 12, and the storage device 13 do not need to be mounted on a mobile body. [Explanation of symbols]

[0073] 10: authentication system, 11: communication device, 12: control device, 13: storage device, 20: vehicle, 21: locking / unlocking device, 22: door, 30: user, 40: mobile device, 70: electronic key, AT1: first authentication information, RG: registered authentication information

Claims

1. a communication device for wirelessly communicating with a mobile device that is portable by a user; a storage device capable of storing registered authentication information used in a first authentication process for authenticating the mobile device; a control device that permits operation control of a controlled device when the first authentication process is successful; It is equipped with the control device acquires authentication information distributed to the mobile device through the communication device, and if registered authentication information corresponding to the authentication information is not stored in the storage device, requests the user to perform a second authentication process different from the first authentication process, and if the second authentication process is successful, stores the authentication information in the storage device as the registered authentication information; Equipped with Authentication system.

2. The control device authenticates a device other than the mobile device associated with the controlled device as the second authentication process. The authentication system according to claim 1 .

3. the authentication information includes attribute information that identifies an attribute of the user; The user attributes include a first attribute associated with a first authority and a second attribute associated with a second authority that is more restricted than the first authority; the control device requests the second authentication process when an attribute of the user specified by the attribute information corresponds to the first attribute.

3. An authentication system according to claim 1 or 2.

4. The authentication information has an expiration date. When the second authentication process is successful, the control device cancels the expiration date. The authentication system according to claim 3.

5. The controlled device is a locking / unlocking device that locks and unlocks the opening / closing body. An authentication system according to any one of claims 1 to 4.

6. The communication device and the control device are mounted on a moving object. An authentication system according to any one of claims 1 to 5.

7. A control device that permits operation control of a controlled device based on a first authentication process that authenticates a mobile device that can be carried by a user, a reception unit that receives the authentication information distributed to the mobile device through a communication device that is capable of wireless communication with the mobile device; a processing unit that requests the user to perform a second authentication process different from the first authentication process when registered authentication information corresponding to the authentication information is not stored in the storage device, and stores the authentication information in the storage device as the registered authentication information when the second authentication process is successful; Equipped with Control device.

8. A computer program executable by a processing unit mounted on a control device that permits operational control of a controlled device based on a first authentication process for authenticating a mobile device that can be carried by a user, By being executed, the control device receiving the authentication information delivered to the mobile device through a communication device capable of wirelessly communicating with the mobile device; requesting the user to perform a second authentication process different from the first authentication process when registered authentication information corresponding to the authentication information is not stored in a storage device; If the second authentication process is successful, the authentication information is stored in the storage device as the registered authentication information. Computer program.

Images