User Authentication System

Abstract

To improve security in authentication of a user who utilizes a service provided from an outside of a vehicle via an on-vehicle communication device mounted on the vehicle.SOLUTION: A user authentication system of the present disclosure which authenticates a user who utilizes a service provided from an outside of a vehicle via an on-vehicle communication device mounted on the vehicle includes: an authentication device which is provided in an outside of the vehicle and which transmits a password to the on-vehicle communication device in response to a request of service utilization transmitted from the on-vehicle communication device; and a password notification device which is mounted on the vehicle and which notifies a password transmitted from the authentication device received by the on-vehicle communication device into an interior of the vehicle with a sound.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present disclosure relates to a user authentication system and method for authenticating a user who uses a service provided from outside a vehicle via an in-vehicle communication device mounted in the vehicle. [Background technology]

[0002] Conventionally, there is known an authentication device that is connected to a user telephone and a servicer telephone of a service provider through a telephone line and authenticates a user who receives a service provided using the telephone (for example, see Patent Document 1). When using a service provided by a service provider using such an authentication device, the user calls the servicer telephone from the user telephone and notifies the servicer telephone of a user ID. When the servicer telephone is notified of the user ID, the servicer telephone transfers the call from the user telephone to the authentication device, and notifies the authentication device of the user ID as a sub-address of the caller telephone number of the user telephone. When the authentication device acquires the caller telephone number and sub-address of the user telephone, it acquires the mobile phone number corresponding to the acquired caller telephone number from the line user database, and transmits a guidance voice to the user telephone to input information such as the date of birth registered in the line user database as a password. Following the guidance voice, the user transmits a password (date of birth, etc.) from the user telephone to the authentication device by voice or button operation. In addition, when the authentication device acquires the password transmitted from the user telephone, it acquires the password (date of birth, etc.) corresponding to the user ID from the authentication database using the user ID (sub-address) notified from the servicer telephone, and compares the password transmitted from the user telephone with the password acquired from the authentication database. If the password from the user telephone matches the password from the authentication database, the authentication device makes a call to the previously acquired mobile phone number, and sends a guidance voice similar to that described above to the user who receives the call, requesting the user to enter the password (date of birth, etc.) again. The user transmits the password from the mobile phone to the authentication device by voice or button operation according to the guidance voice. Then, if the password transmitted from the mobile phone matches the password from the authentication database, the authentication device transfers the call with the user telephone to the servicer telephone. This enables a call between the user telephone and the servicer telephone, and the service provider provides the requested service to the user. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2014-006580 A Summary of the Invention [Problem to be solved by the invention]

[0004] Here, by connecting the above-mentioned authentication device to an on-board communication device mounted on a vehicle and a server of a service provider, etc., it is possible to authenticate a user who uses a service provided from outside the vehicle via the on-board communication device. However, the above-mentioned authentication proxy system does not adequately deal with so-called spoofing, and there is still room for improvement in terms of security.

[0005] Therefore, a main object of the present disclosure is to further improve security in authentication of a user who uses a service provided from outside a vehicle via an in-vehicle communication device mounted in the vehicle. [Means for solving the problem]

[0006] The user authentication system disclosed herein is a user authentication system that authenticates a user who uses a service provided from outside the vehicle via an on-board communication device mounted in the vehicle, and includes an authentication device that is provided outside the vehicle and transmits a password to the on-board communication device in response to a request to use the service being transmitted from the on-board communication device, and a password notification device that is mounted in the vehicle and notifies the passenger compartment of the password received from the authentication device by sound.

[0007] The user authentication system disclosed herein authenticates a user who uses a service provided from outside the vehicle via an on-board communication device mounted on the vehicle, and includes an authentication device provided outside the vehicle and a password notification device mounted on the vehicle. The authentication device transmits a password to the on-board communication device in response to a service usage request transmitted from the on-board communication device. The password notification device then notifies the password received from the authentication device by sound within the vehicle cabin. This makes it possible to notify only the user who is riding in the vehicle, i.e., the user himself / herself, of the password, and therefore makes it possible to properly determine the legitimacy of the user who uses the service based on the password, which is an element owned only by the user (the user himself / herself). As a result, the user authentication system disclosed herein makes it possible to further improve security in the authentication of a user who uses a service provided from outside the vehicle via the on-board communication device. Furthermore, a speaker or the like installed in the vehicle cabin can be used as the password notification device, and a display unit for displaying the password from the authentication device is not required, making it possible to suppress an increase in the cost of the vehicle associated with user authentication.

[0008] The user authentication system may further include a communication device owned by the user, which acquires the password from a sound announced by the password announcement device and notifies the authentication device of the acquired password, and the authentication device may determine the legitimacy of the user who uses the service based on the password transmitted to the vehicle-mounted communication device and the password notified from the communication device. As a result, if the user has brought his / her own communication device into the vehicle, the password notified from the authentication device can be transmitted (returned) to the authentication device without the user having to manually input the password into the communication device or the like. As a result, it is possible to automate user authentication and ensure safety during vehicle driving.

[0009] Furthermore, the communication device may notify the authentication device of owner information of the communication device together with the password, and the authentication device may determine the legitimacy of the user who uses the service by comparing the owner information notified from the communication device with the owner information registered in advance and by comparing the password transmitted to the in-vehicle communication device with the password notified from the communication device. This allows the user to be authenticated by two-factor authentication based on the password, which is an element possessed only by the user (the user himself / herself), and the owner information (knowledge element) of the communication device that is known by the user (the user himself / herself), thereby further improving security in authentication of a user who uses a service provided from outside the vehicle via the in-vehicle communication device.

[0010] The communication device may be a smartphone owned by the user. This makes it possible to build a user authentication system with high security performance while suppressing an increase in vehicle costs by using smartphones, which are widely used and frequently carried.

[0011] The vehicle-mounted communication device may transmit a request to use the service to a service providing device that provides the service, the authentication device may transmit the password to the vehicle-mounted communication device in response to a password issuance request from the service providing device, and the service providing device may provide the service on the condition that the user who requested the use of the service is authenticated by the authentication device. This makes it possible to effectively reduce the load of user authentication on the service providing device.

[0012] Furthermore, the user authentication system may include a sound collector arranged in the vehicle cabin for collecting sounds within the vehicle cabin, and the password notification device may notify the password from the authentication device by sound within the vehicle cabin on condition that the volume of the sound collected by the sound collector is less than a predetermined volume during a predetermined time period after the password from the authentication device is received by the vehicle-mounted communication device. This makes it possible to more reliably notify the password within the vehicle cabin by preventing the sound emitted from the password notification device from being blocked by sounds within the vehicle cabin.

[0013] The authentication device may transmit a DTMF signal indicating the password to the in-vehicle communication device, and the password notification device may output a tone sound based on the DTMF signal, which makes it possible to obtain the password by decoding the tone sound based on the DTMF signal, or to make a phone call from a smartphone to notify the authentication device of the password using the tone sound.

[0014] Furthermore, the password may be a one-time password that is issued in response to a request to use the service being transmitted from the vehicle-mounted communication device.

[0015] The user authentication method disclosed herein is a user authentication method that authenticates a user who uses a service provided from outside the vehicle via an on-board communication device mounted on the vehicle, and which is provided outside the vehicle, and in response to a request to use the service being sent from the on-board communication device, transmits a password from an authentication device provided outside the vehicle to the on-board communication device, and notifies the passenger compartment of the vehicle of the password received from the authentication device by sound.

[0016] According to this method, it is possible to further improve security in authentication of a user who uses a service provided from outside the vehicle via an in-vehicle communication device mounted in the vehicle. [Brief description of the drawings]

[0017] [Figure 1] 1 is a schematic configuration diagram showing a user authentication system according to the present disclosure. [Diagram 2] 10 is a flowchart for explaining a procedure for providing a service by a service providing device using the user authentication system of the present disclosure. [Diagram 3] 4 is a flowchart illustrating a user authentication routine executed by an authentication device of the user authentication system of the present disclosure. [Figure 4] 11 is a flowchart illustrating an example of a password notification procedure in the user authentication system of the present disclosure. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0018] Next, an embodiment of the present disclosure will be described with reference to the drawings.

[0019] 1 is a schematic diagram showing a user authentication system 1 of the present disclosure. The user authentication system 1 shown in the figure authenticates a user who uses a service provided by a service providing server (service providing device) 20 installed outside a vehicle V via an in-vehicle communication device CM mounted on the vehicle V, and includes, in addition to the in-vehicle communication device CM, an authentication server (authentication device) 2, a speaker SP as an alarm device installed in the cabin of the vehicle V, and a smartphone 10 owned by the user of the vehicle V. The in-vehicle communication device CM of the vehicle V enables high-speed data communication (packet communication) and voice calls between the authentication server 2 and the service providing server 20. The speaker SP is connected to the in-vehicle communication device CM and can output voice received by the in-vehicle communication device CM into the cabin.

[0020] The authentication server 2 is a computer including a CPU, ROM, RAM, input / output devices, etc., and in this embodiment, is installed and managed by, for example, the manufacturer of the vehicle V. In the authentication server 2, a password issuing unit 3, a password transmitting unit 4, a receiving unit 5, and a matching unit 6 are constructed by cooperation of hardware such as a CPU, ROM, and RAM with various pre-installed programs. In response to a password issuance request, the password issuing unit 3 of the authentication server 2 issues (sets) a one-time password using a random number or the like. The password transmitting unit 4 transmits a DTMF signal indicating the one-time password issued by the password issuing unit 3 to the in-vehicle communication device CM of the vehicle V.

[0021] The receiving unit 5 of the authentication server 2 receives various information from a smartphone 10 serving as a communication device owned by the user of the vehicle V via high-speed data communication (packet communication) or voice call. The verifying unit 6 authenticates the user by verifying the information received by the receiving unit 5 with the one-time password issued by the password issuing unit 3 and the information stored in the memory device 7, and transmits a signal indicating the authentication result to the service providing server 20. The memory device 7 stores a database that stores user information such as the chassis number and vehicle number of the vehicle V, and the mobile phone number of the user (owner information of the communication device) linked to the ID (user ID) of the user registered in the service provided by the service providing server 20.

[0022] Furthermore, an authentication application (program) is pre-installed on the smartphone 10 of the user of the vehicle V before starting to use the service provided by the service providing server 20. The authentication application is created to cause the SoC (CPU, GPU), ROM, RAM, communication module, microphone, etc. of the smartphone 10 to function as communication devices that decode a tone sound emitted from the speaker SP of the vehicle V to obtain information indicated by the tone sound and transmit the obtained information to the authentication server 2.

[0023] The service providing server 20 is a computer including a CPU, a ROM, a RAM, an input / output device, etc., and in this embodiment, is installed and managed by a provider of a service provided to a user of the vehicle V. In the service providing server 20, a password transmission request unit 21 and a service providing unit 25 are constructed by cooperation of hardware such as a CPU, a ROM, and a RAM with various programs preinstalled. The password transmission request unit 21 transmits the password issuance request to the authentication server 2 in response to a service utilization request by a user from the in-vehicle communication device CM of the vehicle V. The service providing unit 25 provides a predetermined service to a user who is determined (authenticated) to be a legitimate user by the authentication server 2. The services provided by the service providing unit 25 include, for example, settlement (payment) of a paid parking lot by a registered credit card, and granting predetermined points to the user of the vehicle V on the condition that the vehicle V stops at the installation location of the service providing server 20.

[0024] When a user (driver) of the vehicle V uses a service such as settling a toll parking lot or acquiring points, the user (driver) operates a display screen or the like installed on an instrument panel or the like of the vehicle V to transmit a service utilization request from the vehicle-mounted communication device CM to the service providing server 20. In response to the user's operation, the vehicle-mounted communication device CM transmits a user ID input by the user before the vehicle V starts traveling, or the like, to the service providing server 20 together with a signal indicating the service utilization request. When the service providing server 20 receives a signal indicating the service utilization request from the vehicle-mounted communication device CM, the password transmission request unit 21 of the service providing server 20 acquires the user ID from the vehicle-mounted communication device CM as shown in FIG. 2 (step S100). Furthermore, the password transmission request unit 21 transmits the user ID acquired in step S100 to the authentication server 2 together with a signal indicating the password issue request (step S110).

[0025] After the password transmission request unit 21 transmits the password issuance request, the service providing unit 25 acquires the authentication result from the authentication server 2 (step S120) and judges whether or not the service can be provided to the user of the vehicle V (step S130). When the service providing unit 25 receives a service provision permission signal from the authentication server 2 and judges that the service can be provided to the user of the vehicle V (step S130: YES), the service providing unit 25 provides the service requested by the user of the vehicle V, such as settling the toll parking lot or giving points (step S140), and ends the series of processes shown in Fig. 2. On the other hand, when the service providing unit 25 receives a service provision prohibition signal from the authentication server 2 and judges that the service cannot be provided to the user of the vehicle V (step S130: NO), the service providing unit 25 transmits a signal indicating that the service requested by the user of the vehicle V cannot be provided to the in-vehicle communication device CM of the vehicle V (step S150), and ends the series of processes shown in Fig. 2. The information transmitted from the in-vehicle communication device CM to the service providing server 20 together with the service utilization request is not limited to the above-mentioned user ID, and may be, for example, the chassis number or vehicle number of the vehicle V. In this case, the service providing server 20 or the authentication server 2 may identify the user based on the chassis number of the vehicle V.

[0026] Next, a user authentication procedure in the user authentication system 1 will be described with reference to FIG.

[0027] 3 is a flowchart showing a user authentication routine executed by the authentication server 2 of the user authentication system 1 in response to a password issuance request from the service providing server 20. As shown in the figure, when a password issuance request is transmitted from the service providing server 20 to the authentication server 2, the collation unit 6 of the authentication server 2 acquires the user ID transmitted from the service providing server 20 (step S200). In addition, the password issuing unit 3 of the authentication server 2 issues a one-time password using random numbers or the like in response to the password issuance request (step S210). In this embodiment, the password issuing unit 3 issues (generates) a password of a predetermined number of digits using a total of 16 kinds of codes, for example, numbers from 0 to 9 and symbols *, #, A, B, C, and D.

[0028] The one-time password issued by the password issuing unit 3 is given to the password transmitting unit 4 and the verifying unit 6, and the password transmitting unit 4 generates a DTMF signal indicating the one-time password and a code for starting the authentication application installed in the smartphone 10 of the user of the vehicle V, and transmits the signal by voice call to the in-vehicle communication unit CM of the vehicle V (step S220). Note that if the authentication application installed in the smartphone 10 is one that resides in the background, the code for starting the authentication application may be omitted from the DTMF signal.

[0029] When the DTMF signal from the authentication server 2 is received by the in-vehicle communication device CM of the vehicle V, a tone based on the DTMF signal is output from the speaker SP into the vehicle cabin. This causes an authentication application installed in the smartphone 10 brought into the vehicle cabin by the user of the vehicle V to operate at least in the background, and the authentication application operates the smartphone 10 to decode the tone emitted from the speaker SP and obtain the one-time password indicated by the tone. Furthermore, the authentication application operates the smartphone 10 to transmit the user's mobile phone number as owner information of the smartphone 10 and the obtained one-time password to the authentication server 2 via high-speed data communication.

[0030] After the authentication server 2 transmits the DTMF signal to the in-vehicle communication device CM of the vehicle V in step S220, the receiving unit 5 of the authentication server 2 confirms reception of information from the smartphone 10 owned by the user of the vehicle V (step S230). If the receiving unit 5 determines that the information has not been received from the smartphone 10 (step S240: NO), it determines whether a predetermined time has elapsed since the DTMF signal was transmitted to the in-vehicle communication device CM (step S245), and if the predetermined time has not elapsed since the transmission of the DTMF signal (step S245: NO), it executes the processes of steps S230 and S240 again. If the receiving unit 5 determines that the information has been received from the smartphone 10 of the user of the vehicle V (step S240: YES), it obtains the mobile phone number and one-time password of the user transmitted from the smartphone 10 and provides them to the verifying unit 6 (step S250).

[0031] The verification unit 6 acquires from the storage device 7 the mobile phone number corresponding to the user ID transmitted from the service providing server 20 (step S260), and determines whether the mobile phone number acquired from the storage device 7 matches the mobile phone number from the receiving unit 5, i.e., the smartphone 10 (step S270). If it is determined that the mobile phone number from the storage device 7 matches the mobile phone number from the receiving unit 5 (step S270: YES), the verification unit 6 determines whether the one-time password provided from the password issuing unit 3 matches the one-time password from the receiving unit 5, i.e., the smartphone 10 (step S280).

[0032] When it is determined that the one-time password from the password issuing unit 3 and the one-time password from the receiving unit 5 match (step S280: YES), the collating unit 6 transmits a service provision permission signal to the service providing unit 25 of the service providing server 20 (step S290) and ends the user authentication routine in Fig. 3. This makes it possible to provide services by the service providing server 20 only to legitimate users after confirming the legitimacy of the user through two-factor authentication based on the one-time password, which is an element possessed only by the user (principal) of the vehicle V, and the mobile phone number (owner information) of the smartphone 10, which is an element of knowledge known only to the user (principal).

[0033] On the other hand, when it is determined in step S245 that the above-mentioned predetermined time has elapsed since the transmission of the DTMF signal (step S245: YES), the reception unit 5 notifies the verification unit 6 of the elapsed time, and the verification unit 6 transmits a service provision prohibition signal to the service providing unit 25 of the service providing server 20 (step S300) to terminate the user authentication routine of Fig. 3. When the verification unit 6 determines that the mobile phone number from the storage device 7 does not match the mobile phone number from the reception unit 5 (step S270: NO), it transmits a service provision prohibition signal to the service providing unit 25 of the service providing server 20 (step S300) to terminate the user authentication routine of Fig. 3. When the verification unit 6 determines that the one-time password from the password issuing unit 3 does not match the one-time password from the reception unit 5 (step S280: NO), it transmits a service provision prohibition signal to the service providing unit 25 of the service providing server 20 (step S300) to terminate the user authentication routine of Fig. 3. This makes it possible to prevent services from being provided by the service providing server 20 to a user whose legitimacy has not been confirmed when two-factor authentication as described above cannot be performed or when the user is not recognized as a legitimate user through two-factor authentication.

[0034] As described above, the user authentication system 1 authenticates a user who uses a service provided by a service providing server 20 outside the vehicle V via an in-vehicle communication device CM mounted on the vehicle V, and includes an authentication server 2 provided outside the vehicle V and a speaker SP as a password notification device mounted on the vehicle V. In response to a service usage request transmitted from the in-vehicle communication device CM, the authentication server 2 transmits a one-time password to the in-vehicle communication device CM (steps S210 and S220 in FIG. 3). The speaker SP then notifies the passenger compartment of the vehicle V of the password received from the authentication server 2 by sound within the vehicle V.

[0035] This makes it possible to notify the one-time password only to the user in the vehicle V, i.e., the user himself / herself, so that the legitimacy of the user using the service can be properly determined based on the one-time password that only the user (the user himself / herself) possesses. As a result, the user authentication system 1 makes it possible to further improve security in the authentication of a user who uses a service provided from outside the vehicle V via the in-vehicle communication device CM mounted in the vehicle V. Furthermore, by using the speaker SP installed in the vehicle cabin, a display unit for displaying the one-time password from the authentication server 2 is not required, so it is also possible to suppress an increase in the cost of the vehicle V due to user authentication.

[0036] The user authentication system 1 also includes a smartphone 10 as a communication device owned by the user, which acquires a one-time password from a sound announced by the speaker SP and notifies the authentication server 2 of the acquired one-time password. Furthermore, the collation unit 6 of the authentication server 2 judges the legitimacy of the user who uses the service based on the one-time password transmitted from the password transmission unit 4 to the vehicle-mounted communication device CM and the one-time password notified from the smartphone 10 (step S280 in FIG. 3). As a result, if the user has brought his / her own smartphone 10 into the vehicle, the one-time password notified from the authentication server 2 can be transmitted (returned) to the authentication server 2 without the user having to manually input the one-time password into the smartphone 10 or the like. As a result, it is possible to automate user authentication and ensure safety during vehicle driving in an extremely good manner.

[0037] Furthermore, the smartphone 10 notifies the authentication server 2 of the mobile phone number as the owner information of the smartphone 10 together with the one-time password. The authentication server 2 then compares the mobile phone number notified from the smartphone 10 with the mobile phone number of the smartphone 10 (user) stored (registered) in the storage device 7 (step S270 in FIG. 3), and compares the one-time password transmitted from the password transmission unit 4 to the in-vehicle communication device CM with the one-time password notified from the smartphone 10 (step S280 in FIG. 3). As a result, in the user authentication system 1, the user is authenticated by two-factor authentication based on the one-time password, which is an element possessed only by the user (the user himself / herself), and the mobile phone number of the smartphone 10, which is an element known only to the user (the user himself / herself), and therefore the security in the authentication of the user who uses the service provided from the outside of the vehicle V via the in-vehicle communication device CM can be further improved.

[0038] Furthermore, by using the user's smartphone 10, which is widely used and frequently carried, as the communication device for transmitting and receiving the one-time password, it is possible to construct a user authentication system 1 with high security performance while suppressing an increase in the cost of the vehicle V. However, the communication device for transmitting and receiving the one-time password is not limited to the smartphone 10, and may be, for example, a tablet terminal, etc., as long as it can obtain the one-time password from the sound announced by the speaker SP and notify the authentication server 2 of the obtained one-time password.

[0039] Furthermore, in the above embodiment, the vehicle-mounted communication device CM transmits a service utilization request to the service providing server 20 that provides the service, and the authentication server 2 transmits a one-time password to the vehicle-mounted communication device CM in response to a password issuance request from the service providing server 20 (steps S210 and S220 in FIG. 3). The service providing server 20 provides the service on the condition that the user who requested the utilization of the service is authenticated by the authentication server 2. This makes it possible to effectively reduce the load of user authentication on the service providing server 20. However, the above-mentioned password issuing unit 3, password transmitting unit 4, receiving unit 5, collating unit 6, and storage device 7 may be constructed in the service providing server 20, and the service providing server 20 may function as both the service providing device and the authentication device.

[0040] In the above embodiment, the password transmitting unit 4 of the authentication server 2 transmits a DTMF signal indicating the one-time password to the in-vehicle communication unit CM (step S220 in FIG. 3), and the speaker SP of the vehicle V outputs a tone sound based on the DTMF signal from the authentication server 2. This enables the smartphone 10 to decode the tone sound based on the DTMF signal, obtain the password, and notify the authentication server 2.

[0041] However, the signal indicating the one-time password transmitted from the password transmission unit 4 to the in-vehicle communication unit CM is not limited to a DTMF signal. In other words, the signal transmitted from the password transmission unit 4 to the in-vehicle communication unit CM may be, for example, a Morse code indicating the one-time password, or a voice signal indicating the voice of an operator reading out the one-time password or a voice artificially generated by voice synthesis. In this case, the authentication application installed in the smartphone 10 may be one that causes the smartphone 10 to decode the Morse code or voice signal and notify the authentication server 2.

[0042] In the above embodiment, the smartphone 10 notifies the authentication server 2 of the one-time password acquired by decoding a tone based on a DTMF signal through high-speed data communication, but the present invention is not limited to this. That is, the authentication application installed in the smartphone 10 may cause the smartphone 10 to make a phone call to notify the authentication server 2 of the one-time password using a tone from the speaker SP. In this case, the password transmission unit 4 of the authentication server 2 may be configured to generate a DTMF signal including, for example, a code for starting the authentication application, the telephone number of the authentication server 2, and the one-time password.

[0043] Furthermore, the user authentication system 1 may include a sound collector (microphone) M (see FIG. 1) that is placed in the cabin of the vehicle V and collects sounds within the cabin, and the in-vehicle communication device CM may include an alarm control unit (not shown) that controls sound output from the speaker SP based on the volume of the sound collected by the sound collector M. FIG. 4 is a flowchart showing an alarm control routine executed by the alarm control unit of the in-vehicle communication device CM that receives a DTMF signal indicating a one-time password from the authentication server 2 in such an embodiment.

[0044] When the notification control unit of the vehicle-mounted communication device CM receives a DTMF signal indicating a one-time password from the authentication server 2, it stores the received DTMF signal in a RAM or the like (not shown) and turns on a timer (not shown) (step S300). Furthermore, the notification control unit of the vehicle-mounted communication device CM determines whether or not AV equipment such as a music player or a video player installed in the vehicle cabin is in use (step S310). If the notification control unit of the vehicle-mounted communication device CM determines that the AV equipment is in use (step S310: YES), it stops the AV equipment (step S320), and if it determines that the AV equipment is not in use (step S310: NO), it skips the process of step S320.

[0045] After the process of step S310 or S320, the notification control unit of the in-vehicle communication device CM acquires the volume of the sound in the vehicle cabin collected by the sound collector M (step S330), and determines whether the acquired volume is equal to or greater than a predetermined volume (step S340). If it is determined that the volume of the sound in the vehicle cabin is less than the predetermined volume (step S340: NO), the notification control unit of the in-vehicle communication device CM causes the speaker SP to output a tone based on the DTMF signal from the authentication server 2, turns off the timer (step S360), and ends the routine of FIG.

[0046] On the other hand, when it is determined that the volume of the sound in the vehicle cabin is equal to or greater than the predetermined volume (step S340: YES), the notification control unit of the vehicle-mounted communication device CM further determines whether or not a predetermined time (for example, about 5 minutes) has elapsed since the DTMF signal was received from the authentication server 2 (step S350). When it is determined that the predetermined time has not elapsed since the DTMF signal was received (step S350: NO), the notification control unit of the vehicle-mounted communication device CM executes the above-mentioned steps S340 and S350 again. When it is determined that the predetermined time has elapsed since the DTMF signal was received (step S350: YES), even if the volume of the sound in the vehicle cabin is equal to or greater than the predetermined volume, the notification control unit of the vehicle-mounted communication device CM causes the speaker SP to output a tone based on the DTMF signal from the authentication server 2 and turns off the timer (step S360), and ends the routine of FIG. 4.

[0047] 4 is executed by the notification control unit of the in-vehicle communication device CM, the speaker SP as a password notification device notifies the one-time password from the authentication server 2 by sound within the cabin of the vehicle V, on condition that the volume of the sound collected by the sound collector M is less than a predetermined volume within a predetermined time period after the in-vehicle communication device CM receives a DTMF signal (one-time password) from the authentication server 2. This makes it possible to more reliably notify the password to the smartphone 10 in the cabin by preventing the tone sound emitted from the speaker SP from being blocked by sounds within the cabin.

[0048] It goes without saying that the invention of this disclosure is not limited to the above embodiment, and various modifications can be made within the scope of the present disclosure. Furthermore, the above embodiment is merely a specific form of the invention described in the Summary of the Invention, and does not limit the elements of the invention described in the Summary of the Invention. [Industrial Applicability]

[0049] The present disclosure is applicable to the service industry, which provides services to a user in a vehicle from outside the vehicle via an in-vehicle communication device. [Explanation of symbols]

[0050] 1 user authentication system, 2 authentication server (authentication device), 3 password issuing unit, 4 password transmitting unit, 5 receiving unit, 6 matching unit, 7 storage device, 10 smartphone, 20 service providing server, 21 password transmission request unit, 25 service providing unit, CM vehicle-mounted communication device, M sound collector, SP speaker (password notification device), V vehicle.

Claims

1. A user authentication system for authenticating a user who uses a service provided from outside a vehicle via an in-vehicle communication device mounted in the vehicle, comprising: an authentication device provided outside the vehicle and configured to transmit a password to the vehicle-mounted communication device in response to a request to use the service transmitted from the vehicle-mounted communication device; a sound collector that is disposed in a passenger compartment of the vehicle and collects sounds in the passenger compartment; a password notification device that is mounted on the vehicle and notifies, by sound, within the vehicle cabin, the password received from the authentication device by the in-vehicle communication device, on condition that the volume of the sound collected by the sound collector is less than a predetermined volume during a predetermined time period after the password is received by the in-vehicle communication device from the authentication device; A user authentication system comprising:

2. 2. The user authentication system according to claim 1, a communication device owned by the user, the communication device acquiring the password from a sound notified by the password notifying device, and notifying the authentication device of the acquired password; The authentication device is a user authentication system that determines the legitimacy of the user who uses the service based on the password transmitted to the vehicle-mounted communication device and the password notified from the communication device.

3. 3. The user authentication system according to claim 2, the communication device notifies the authentication device of owner information of the communication device together with the password; The authentication device is a user authentication system that determines the legitimacy of the user using the service by comparing the owner information notified from the communication device with the owner information registered in advance, and by comparing the password sent to the vehicle-mounted communication unit with the password notified from the communication device.

4. 4. The user authentication system according to claim 2, wherein the communication device is a smartphone owned by the user.

5. 5. The user authentication system according to claim 2, the in-vehicle communication device transmits a request for using the service to a service providing device that provides the service; the authentication device transmits the password to the vehicle-mounted communication device in response to a password issuance request from the service providing device; The service providing device provides the service on condition that the user who has requested use of the service is authenticated by the authentication device.

6. 6. The user authentication system according to claim 1, the authentication device transmits a DTMF signal indicating the password to the vehicle-mounted communication device; The password notification device is a user authentication system that outputs a tone sound based on the DTMF signal.

7. 7. The user authentication system according to claim 1, A user authentication system in which the password is a one-time password issued in response to a request for use of the service being transmitted from the vehicle-mounted communication device.

Images