Authentication system, user device, mobile device, key information transmission method, authentication method, and program

Abstract

The present invention can improve user convenience while reducing the risk of leaking personal information. A biometric information acquisition means (31) acquires biometric information of a user. A determination means (21) determines whether a prescribed condition is established. A key information transmission means (22) transmits key information to a mobile device (30) when it is determined that the prescribed condition is established. An authentication means (33) authenticates the user by using the acquired biometric information, encrypted biometric information for comparison, and the key information received by a key information reception means (32) from a user device (20).

Description

[Technical field]

[0001] The present disclosure relates to an authentication system, a user device, a mobile device, a method for transmitting key information, an authentication method, and a computer-readable medium. [Background technology]

[0002] There is known technology for enabling the use of an automobile using biometric information instead of a key. As a related technology, Patent Document 1 discloses a start control device including a fingerprint sensor. When starting a drive source such as an engine, the start control device described in Patent Document 1 compares a fingerprint read by the fingerprint sensor with a registered fingerprint that has been registered in advance in the vehicle. If the read fingerprint matches the registered fingerprint, the start control device authenticates that the user is a legitimate user and permits the start of the drive source. If the authentication fails, the start of the drive source is not permitted. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2008-174095 A Summary of the Invention [Problem to be solved by the invention]

[0004] In Patent Document 1, fingerprint information for verification is registered in a vehicle. In this case, there is a risk that personal information (fingerprint information) will be leaked if the vehicle is stolen, for example.

[0005] In view of the above circumstances, the present disclosure aims to provide an authentication system, a user device, a mobile device, a key information transmission method, an authentication method, and a computer-readable medium that can improve user convenience while reducing the risk of personal information leakage. [Means for solving the problem]

[0006] In order to achieve the above object, the present disclosure provides, as a first aspect, an authentication system. The authentication system includes a user device and a mobile device. The user device has a determination means for determining whether a predetermined condition is satisfied, and a key information transmission means for transmitting key information when it is determined that the predetermined condition is satisfied. The mobile device has a biometric information acquisition means for acquiring biometric information of a user, a key information receiving means for receiving the key information transmitted from the user device, and an authentication means for authenticating the user using the acquired biometric information, encrypted biometric information for matching, and the key information.

[0007] The present disclosure provides, as a second aspect, a mobile device, which includes biometric information acquisition means for acquiring biometric information of a user, key information receiving means for receiving key information transmitted from a user device of a user using a mobile device when it is determined that a predetermined condition is satisfied in the user device, and authentication means for authenticating the user using the acquired biometric information, encrypted biometric information for matching, and the key information.

[0008] The present disclosure provides, as a third aspect, a user device, the user device including a determination means for determining whether a predetermined condition is satisfied, and a key information transmission means for transmitting key information to a mobile device that authenticates the user using biometric information of the user, encrypted biometric information for matching, and key information when it is determined that the predetermined condition is satisfied.

[0009] The present disclosure provides, as a fourth aspect, a user authentication method, which includes acquiring biometric information of a user, receiving key information transmitted from a user device of a user using a mobile object when it is determined that a predetermined condition is satisfied in the user device, and authenticating the user using the acquired biometric information, encrypted biometric information for matching, and the key information.

[0010] The present disclosure provides, as a fifth aspect, a key information transmission method, which includes determining whether a predetermined condition is satisfied, and, if it is determined that the predetermined condition is satisfied, transmitting the key information to a mobile device that authenticates a user using biometric information of the user, encrypted biometric information for matching, and key information.

[0011] As a sixth aspect, the present disclosure provides a computer-readable medium, which stores a program for causing a processor to execute a process of acquiring biometric information of a user, receiving key information transmitted from a user device of a user using a mobile object when it is determined that a predetermined condition is satisfied in the user device, and authenticating the user using the acquired biometric information, encrypted biometric information for matching, and the key information.

[0012] The present disclosure provides, as a seventh aspect, a computer-readable medium storing a program for causing a processor to execute a process of determining whether a predetermined condition is satisfied, and, if it is determined that the predetermined condition is satisfied, transmitting key information to a mobile device that authenticates the user using biometric information of the user, encrypted biometric information for matching, and key information. Effect of the Invention

[0013] The authentication system, user device, mobile device, key information transmission method, authentication method, and computer-readable medium according to the present disclosure can improve user convenience while reducing the risk of personal information leakage. [Brief description of the drawings]

[0014] [Figure 1] 1 is a block diagram showing a schematic configuration of an authentication system according to the present disclosure. [Diagram 2] FIG. 1 is a block diagram illustrating an authentication system according to an embodiment of the present disclosure. [Diagram 3] FIG. 2 is a block diagram showing a configuration example of a vehicle device. [Figure 4] FIG. 2 is a block diagram showing an example of the configuration of a user device. [Diagram 5] FIG. 4 is a sequence diagram showing an operation procedure in the authentication system. [Figure 6] FIG. 2 is a diagram showing an example of a positional relationship between a vehicle and a plurality of user devices; [Figure 7] FIG. 11 is a sequence diagram showing another operation procedure in the authentication system. [Figure 8] FIG. 2 is a block diagram showing an example of the physical configuration of a processing device. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0015] Prior to describing the embodiments of the present disclosure, an overview of the present disclosure will be described. Fig. 1 shows a schematic configuration of an authentication system according to the present disclosure. The authentication system 10 includes a user device 20 and a mobile device 30. The mobile device 30 is configured as a device mounted on a vehicle such as an automobile, a bus, or a motorcycle. The user device 20 is a device used by a user who uses the mobile device.

[0016] The user device 20 has a determination means 21 and a key information transmission means 22. The determination means 21 determines whether or not a predetermined condition is satisfied. The key information transmission means 22 transmits key information to the mobile device 30 when the determination means 21 determines that the predetermined condition is satisfied.

[0017] The mobile device 30 has a biometric information acquiring means 31, a key information receiving means 32, and an authentication means 33. The biometric information acquiring means 31 acquires biometric information of a user. The key information receiving means 32 receives key information transmitted from the user device 20. The authentication means 33 performs user authentication using the biometric information acquired by the biometric information acquiring means 31, encrypted biometric information for matching, and the key information received from the user device 20.

[0018] In the present disclosure, in the user device 20, the determination means 21 determines whether or not a predetermined condition is satisfied. When it is determined that the predetermined condition is satisfied, the key information transmission means 22 transmits the key information to the mobile device 30. In the mobile device 30, the authentication means 33 performs user authentication using the key information transmitted from the user device 20. In the present disclosure, the key information transmitted from the user device 20 is necessary for user authentication in the mobile device 30, and the risk of personal information leakage due to vehicle theft, etc. can be reduced.

[0019] In the present disclosure, the user device 20 does not transmit key information to the mobile device 30 unless a predetermined condition is met. In the present disclosure, by appropriately setting the predetermined condition, it is possible to cause the user device 20 of a user who is going to use the mobile device to be authenticated to transmit key information to the mobile device 30. In addition, it is possible to suppress transmission of key information from the user device 20 of a user who is not going to use the mobile device to be authenticated to the mobile device 30. In the present disclosure, whether or not to transmit key information is determined depending on whether or not a predetermined condition is met, so that the user does not need to manually input whether or not to transmit key information. Therefore, the present disclosure can improve user convenience.

[0020] Hereinafter, embodiments of the present disclosure will be described in detail with reference to the drawings. Note that the following description and drawings are omitted and simplified as appropriate for clarity of explanation. In addition, in each drawing, the same elements and similar elements are given the same reference numerals, and duplicate explanations are omitted as necessary.

[0021] FIG. 2 illustrates an authentication system according to an embodiment of the present disclosure. The authentication system 100 includes a vehicle 130 and a user device 110. In this embodiment, the authentication system 100 is applied to a keyless entry system of the vehicle 130. In this embodiment, the vehicle 130 is used by multiple users. The authentication system 100 can have multiple user devices 110 for one vehicle 130. Although FIG. 2 illustrates an example in which the authentication system 100 has three user devices 110, the number of user devices 110 is not particularly limited. In this embodiment, face authentication is used as authentication using biometric information. The authentication system 100 corresponds to the authentication system 10 illustrated in FIG. 1.

[0022] The vehicle 130 has a camera 131 and a vehicle device 132. The camera 131 is mounted on the vehicle 130 and captures the surroundings of the vehicle 130. The vehicle device 132 acquires the captured video (images) from the camera 131. The vehicle device 132 may acquire images from a camera disposed near the parking space of the vehicle 130 and capturing images of the vehicle 130 from the outside. The vehicle device 132 may acquire images from multiple cameras 131. The vehicle device 132 has a wireless communication function and is configured to be able to communicate with the user device 110.

[0023] Each user device 110 is configured as an information terminal device such as a smartphone, a mobile phone, or a tablet. Each user device 110 is configured to be capable of wireless communication with the vehicle device 132. The user device 110 may be any device possessed by a user and having a wireless communication function. For wireless communication between each user device 110 and the vehicle device 132, short-range wireless communication such as Bluetooth (registered trademark) is used. Each user device 110 holds a private key (key information) of each user.

[0024] 3 shows an example of the configuration of the vehicle device 132. The vehicle device 132 includes a face detection unit 141, a face position calculation unit 142, a request transmission unit 143, a face authentication unit 144, a matching information storage unit 145, a key information reception unit 146, and a matching result decryption unit 147. At least a part of the functions of each unit in the vehicle device 132 can be realized by a processor executing a process according to a program read from a memory. The vehicle device 132 corresponds to the mobile device 30 shown in FIG. 1.

[0025] The face detection unit 141 detects a face (face area) from an image acquired from the camera 131 (see FIG. 2). The face detection unit 141 detects, for example, the face area of ​​a person (user) present around the vehicle 130. The face detection unit 141 corresponds to the biometric information acquisition means 31 shown in FIG. 1. The face position calculation unit (position acquisition means) 142 calculates the position of the user whose face has been detected. The face position calculation unit 142 calculates, for example, the relative positional relationship between the vehicle 130 and the user.

[0026] When the user's face is detected, the request sending unit (request sending means) 143 sends a request to send a private key to the user device 110. For example, the request sending unit 143 includes the user's position information calculated by the face position calculation unit 142 in the request to be sent to the user device 110. Information (address, device name, etc.) of each of the user devices 110 of multiple users registered as users of the vehicle 130 is registered in advance in the vehicle device 132. The request sending unit 143 sends a request to send a private key to the user devices 110 of the users registered in advance, among the user devices that can communicate with the vehicle device 132, for example.

[0027] 4 shows an example of the configuration of user device 110. User device 110 includes a request receiving unit 111, a position calculating unit 112, a determining unit 113, and a key information transmitting unit 114. At least a part of the functions of each unit in user device 110 can be realized by a processor executing a process according to a program read from a memory. User device 110 corresponds to user device 20 shown in FIG.

[0028] The request receiving unit (request receiving means) 111 receives a request to transmit a private key transmitted from a communicable vehicle device 132. The request receiving unit 111 receives a request to transmit a private key including, for example, user position information. The user position information included in the request to transmit a private key indicates, for example, the relative position between a detected face (user) and the vehicle 130.

[0029] The position calculation unit (position calculation means) 112 calculates the position of the user device 110. For example, the position calculation unit 112 calculates the relative positional relationship (relative position) between the user device 110 and the vehicle 130 as user position information. The position calculation unit 112 sequentially calculates the user position information and stores the calculated user position information as time-series data in a memory (not shown).

[0030] For example, the user performs position calibration inside the vehicle 130. The position calculation unit 112 determines the position of the user device 110 when the position calibration is performed as a position where the relative position between the user device 110 and the vehicle 130 is 0. The position calculation unit 112 acquires sensor information from sensors such as an acceleration sensor and a gyro sensor (not shown) included in the user device 110. The position calculation unit 112 calculates the direction and speed in which the user device 110 has moved based on the acquired sensor information, and sequentially calculates the relative position.

[0031] When the request receiving unit 111 receives a request to transmit a private key, the determining unit 113 determines whether a predetermined condition related to the transmission of the private key is satisfied. In this embodiment, the determining unit 113 determines whether the predetermined condition is satisfied based on the user's location information included in the request to transmit a private key and the user's location information calculated by the location calculation unit 112. For example, when the difference between the user's location information included in the request to transmit a private key and the user's location information calculated by the location calculation unit 112 is within a predetermined range, the determining unit 113 determines that the predetermined condition is satisfied. When the difference between the user's location information included in the request to transmit a private key and the user's location information calculated by the location calculation unit 112 exceeds a predetermined range, the determining unit 113 determines that the predetermined condition is not satisfied. The determining unit 113 corresponds to the determining means 21 shown in FIG. 1.

[0032] In the user device 110, the request receiving unit 111 may determine whether the user is approaching or moving away from the vehicle 130 based on time series data of the user's location information calculated by the location calculation unit 112. When the user (user device 110) is approaching the vehicle 130, it is considered that the user is likely to be about to board the vehicle 130. On the other hand, when the user is moving away from the vehicle 130, it is considered that the user is unlikely to board the vehicle 130. When the request receiving unit 111 determines that the user is approaching the vehicle 130, it may accept a request to transmit a private key transmitted from the vehicle device 132. When the request receiving unit 111 determines that the user is moving away from the vehicle 130, it may not need to receive a request to transmit a private key from the vehicle device 132. In that case, the user device 110 can receive a request to transmit a private key when it is likely that the user will board the vehicle 130.

[0033] When the determination unit 113 determines that the predetermined condition is satisfied, the key information transmission unit 114 transmits the private key held in a memory (not shown) to the vehicle device 132. For example, when the user's location information included in the private key transmission request is close to the user's location information calculated by the location calculation unit 112, the key information transmission unit 114 transmits the private key to the vehicle device 132. When the user's location information included in the private key transmission request is far from the user's location information calculated by the location calculation unit 112, the user device 110 does not transmit the private key even when it receives the private key transmission request. The key information transmission unit 114 corresponds to the key information transmission means 22 shown in FIG. 1.

[0034] 3, after the request sending unit 143 sends a request to send a private key to the user device 110, the key information receiving unit 146 receives the private key from the user device 110. The key information receiving unit 146 corresponds to the key information receiving means 32 shown in FIG.

[0035] The matching information storage unit 145 stores information for matching (matching information) for each of a plurality of users registered as users of the vehicle 130. The matching information storage unit 145 stores the matching information for each of the plurality of users, for example, in a non-volatile memory. The matching information may be a facial image of the user, or may be information indicating features extracted from the facial image of the user. In this embodiment, the matching information storage unit 145 stores encrypted matching information. For example, the matching information stored in the matching information storage unit 145 is encrypted with a public key corresponding to a private key held by the user device 110.

[0036] The face authentication unit 144 matches the user of the face detected by the face detection unit 141 with the user stored in the matching information storage unit 145 based on the image of the face area detected by the face detection unit 141 and the matching information stored in the matching information storage unit 145. In this embodiment, the face authentication unit 144 performs user matching in an encrypted state using the encrypted matching information. For example, the face authentication unit 144 encrypts the face image detected by the face detection unit 141 or its feature amount with a public key corresponding to the private key. The face authentication unit 144 matches the encrypted face image or its feature amount with the matching information stored in the matching information storage unit 145, and outputs an encrypted matching result.

[0037] The matching result decryption unit 147 acquires the private key received by the key information receiving unit 146 from the user device 110. The matching result decryption unit 147 decrypts the encrypted matching result output from the face authentication unit 144 using the acquired private key. The matching result decryption unit 147 outputs, for example, a matching score for each user as an authentication result. Note that in this embodiment, the user authentication is not particularly limited to the face authentication described above. For user authentication, encrypted information is used, and another user authentication performed using a private key acquired from the user device 110 may be used. The face authentication unit 144 and the matching result decryption unit 147 correspond to the authentication means 33 shown in FIG. 1.

[0038] The control unit (control means) 148 acquires the authentication result from the matching result decryption unit 147, and controls the locking of the doors of the vehicle 130 based on the acquired authentication result. For example, when the authentication result indicates that the user of the face detected by the face detection unit 141 matches any of the users registered in advance, the control unit 148 unlocks the doors of the vehicle 130. When the authentication result indicates that the user of the face detected by the face detection unit 141 does not match any of the users registered in advance, the control unit 148 keeps the doors of the vehicle 130 locked.

[0039] Next, the operation procedure will be described. Fig. 5 shows the operation procedure in the authentication system 100. The operation procedure in the authentication system 100 includes an operation procedure in the user device 110 (key information transmission method) and an operation procedure in the vehicle device 132 (authentication method). In the user device 110, the position calculation unit 112 (see Fig. 4) performs position calibration (step A1). By performing the position calibration, a point where the relative position between the user device 110 and the vehicle 130 is 0 is set. After the position calibration, the position calculation unit 112 calculates the user's position information, i.e., the relative position between the user device 110 and the vehicle 130 (step A2). The position calculation unit 112 periodically performs the calculation of the relative position in step A2.

[0040] In the vehicle device 132, the face detection unit 141 (see FIG. 3) acquires an image from the camera 131 (see FIG. 2) (step B1). The face detection unit 141 determines whether or not a face has been detected in the vicinity of the vehicle 130 (step B2). Any algorithm may be used for face detection in the face detection unit 141. If it is determined in step B2 that a face has been detected, the face position calculation unit 142 calculates the position of the detected face (step B3). In step B3, the face position calculation unit 142 calculates the relative positional relationship between the detected face and the vehicle 130.

[0041] The face authentication unit 144 performs face authentication on the face detected by the face detection unit 141 (step B4). The face authentication in step B4 is performed in an encrypted state. In other words, the result of the face authentication is encrypted. For example, in step B4, the face authentication unit 144 encrypts the face (face image) detected by the face detection unit 141 or its features with a public key corresponding to the private key held by the user device 110. The face authentication unit 144 compares the encrypted face or its features with the matching information stored in the matching information storage unit 145.

[0042] The request sending unit 143 sends a request to send a private key to the user device 110 (step B5). The request to send a private key includes the face position calculated in step B3. In step B5, the request sending unit 143 sends a request to send a private key to the user device 110 of a user who has been registered in advance as a user. Either step B4 or step B5 may be performed first, or they may be performed in parallel. After the request to send a private key is transmitted, the key information receiving unit 146 waits until the private key is transmitted from the vehicle device 132.

[0043] In the user device 110, the request receiving unit 111 receives a request to transmit a private key from the vehicle device 132 that is present within a communication range with the user device 110 (step A3). When the user device 110 is approaching the vehicle 130, the request receiving unit 111 may transition to a state in which it is capable of receiving a request to transmit a private key, and may receive the request to transmit a private key. The determination unit 113 determines whether or not a predetermined condition regarding the transmission of the private key is satisfied (step A4). In step A4, for example, when the user's location information included in the request to transmit the private key is close to the user's location information calculated by the location calculation unit 112, the determination unit 113 determines that the predetermined condition is satisfied.

[0044] If it is determined in step A4 that the predetermined condition is met, the key information transmitting unit 114 transmits the private key to the vehicle device 132 (step A5). In step A5, the key information transmitting unit 114 transmits the private key to the vehicle device 132 that transmitted the private key transmission request received in step A3. If the predetermined condition is not met, the private key transmission request is rejected, and the private key is not transmitted from the user device 110 to the vehicle device 132.

[0045] If there is a user device 110 that transmits a private key, the key information receiving unit 146 receives the private key from the user device 110 (step B6). If the private key is received, the matching result decrypting unit 147 decrypts the authentication result of the face authentication unit 144 (step B7).

[0046] If the user authentication is successful, the control unit 148 unlocks the doors of the vehicle 130. If the user authentication is unsuccessful, the control unit 148 leaves the doors of the vehicle 130 locked. Also, if the control unit 148 does not receive a private key and therefore cannot decrypt the authentication result, the control unit 148 leaves the doors of the vehicle 130 locked.

[0047] 6 shows an example of the positional relationship between the vehicle 130 and multiple user devices 110. In the following, an example will be considered in which a user A, a user B, and a user C are registered as users of the vehicle 130. Information on the user device 110A used by the user A, the user device 110B used by the user B, and the user device 110C used by the user C is registered in the vehicle device 132. In the example of FIG. 6, it is assumed that the user A is approaching the vehicle 130 to get in the vehicle 130. It is assumed that the users B and C are at home 150.

[0048] The vehicle device 132 detects the face of user A and transmits a request to transmit a private key to the user devices 110A-110C. The request to transmit a private key transmitted by the vehicle device 132 includes location information of the detected user A. The user device 110A of the user A receives the request to transmit a private key transmitted from the vehicle device 132. If the user B and the user C are in the house 150, but the user devices 110B and 110C are within the communication range of the vehicle device 132, the user devices 110B and 110C receive the request to transmit a private key.

[0049] The user device 110A compares the location information calculated in the user device 110A with the user location information included in the request to transmit the private key. If the location information calculated in the user device 110A is close to the user location information included in the request to transmit the private key, the user device 110A responds to the request to transmit the private key and transmits the private key to the vehicle device 132. On the other hand, even if the user device 110B and the user device 110C receive the request to transmit the private key, they do not transmit the private key because the location information calculated in each user device is far from the user location information included in the request to transmit the private key.

[0050] In this embodiment, the face authentication unit 144 conceals the face image or the feature amount extracted from the face image, and performs face authentication using the concealed information. When the feature amount (biometric information) of the user is held in the vehicle 130, if the vehicle 130 is stolen together with the vehicle device 132 due to vehicle theft or the like, the feature amount of the user will be leaked. In this embodiment, the authentication result of the face authentication unit 144 cannot be decrypted without a private key held by the user (user device 110). Therefore, even if the feature amount of the user is leaked, a malicious third party cannot perform face authentication unless the private key is leaked. In addition, in this embodiment, the user can disable the private key, so that the feature amount cannot be used for authentication, thereby reducing the risk of personal information being leaked and improving security.

[0051] Here, to ensure security, the private key needs to be stored in a location separate from the vehicle. In this embodiment, the private key is stored in a user device 110, such as a user's smartphone, registered in the vehicle. In this case, from the perspective of security, it is desirable to avoid constantly transmitting some information from the user device 110, as in the case of a smart key. In this embodiment, a request to transmit the private key is transmitted from the vehicle device 132 to the user device 110, and the user device 110 that has received the transmission request transmits the private key to the vehicle device 132.

[0052] In the above case, when multiple users are present in one vehicle 130, the vehicle device 132 does not know to which user device 110 the private key transmission request should be transmitted. For example, when one vehicle 130 is shared by a family, it is assumed that all user devices 110 of the family are present within the radio wave coverage area of ​​the vehicle device 132. In this case, the private key transmission request is received not only by the user devices 110 of users who will be riding in the vehicle 130, but also by the user devices 110 of users who have no intention of riding in the vehicle 130.

[0053] In this embodiment, each user device 110 determines whether to transmit a private key in response to a request to transmit a private key. Therefore, the request to transmit a private key is not visible to users who do not intend to board the vehicle 130. As a result, users who do not intend to board the vehicle 130 do not need to manually reject the request to transmit a private key, which improves user convenience. In this embodiment, since the private key is transmitted only from the user device 110 for which a predetermined condition is satisfied, even if radio waves are relayed by a relay attack, the private key is not transmitted unless the relative position changes, and as a result, security is maintained. In this way, in this embodiment, in a vehicle entry system using face authentication, it is possible to improve convenience while reducing the risk of personal information leakage due to vehicle theft.

[0054] In the above embodiment, an example has been described in which the user device 110 receives a request to transmit a private key and then transmits the private key to the vehicle device 132. However, the above embodiment is not limited to this. For example, when the user device 110 approaches a vehicle, the user device 110 may determine that a predetermined condition is satisfied and transmit a private key to the vehicle device 132. In this case, the request transmitting unit 143 (see FIG. 3) of the vehicle device 132 and the request receiving unit 111 (see FIG. 4) of the user device 110 may be omitted.

[0055] 7 shows an operation procedure of authentication system 100 in the case where transmission and reception of a request to transmit a private key is omitted. In user device 110, position calculation unit 112 performs position calibration (step C1). After position calibration, position calculation unit 112 calculates user position information, i.e., the relative position between user device 110 and vehicle 130 (step C2). Steps C1 and C2 may be similar to steps A1 and A2 shown in FIG. 5.

[0056] The determination unit 113 determines whether or not a predetermined condition regarding the transmission of the private key is satisfied (step C3). In step C3, the determination unit 113 determines whether or not the predetermined condition is satisfied based on, for example, the relative position calculated in step C2. The determination unit 113 determines whether or not the user has approached the vehicle 130 based on, for example, the relative position calculated in step C2. When the determination unit 113 detects that the user has approached the vehicle 130, it determines that the predetermined condition is satisfied.

[0057] If it is determined in step C3 that the predetermined condition is met, the key information transmitting unit 114 transmits the private key to the vehicle device 132 (step C4). In the vehicle device 132, the key information receiving unit 146 (see FIG. 3) receives the private key from the user device 110. If the predetermined condition is not met, the private key is not transmitted from the user device 110 to the vehicle device 132.

[0058] In the vehicle device 132, the face detection unit 141 acquires an image from the camera 131 (see FIG. 2) (step D1). The face detection unit 141 determines whether or not a face has been detected around the vehicle 130 (step D2). If it is determined in step D2 that a face has been detected, the face position calculation unit 142 calculates the position of the detected face (step D3). The face authentication unit 144 performs face authentication on the face detected by the face detection unit 141 (step D4). Steps D1 to D4 may be similar to steps B1 to B4 shown in FIG. 5.

[0059] As described above, the face authentication in step D4 is performed in an encrypted state. The matching result decryption unit 147 decrypts the authentication result of the face authentication unit 144 using the private key received by the key information receiving unit 146 from the user device 110 (step D5). The timing at which the key information receiving unit 146 receives the private key from the user device 110 is not limited to a specific timing. The key information receiving unit 146 may receive the private key from the user device 110 while steps D1 to D4 are being performed. Alternatively, the key information receiving unit 146 may receive the private key from the user device 110 after step D4 is performed.

[0060] In the above embodiment, at least one of the user device 110 and the vehicle device 132 may be configured as a processing device having a communication function. FIG. 8 shows an example of a physical configuration of a processing device that may be used as the user device 110 and the vehicle device 132. The processing device 500 includes one or more processors 501, one or more memories 502, and a short-range wireless communication unit 503. The memory 502 includes a non-volatile storage device such as a ROM (Read Only Memory), a volatile storage device such as a RAM (Random Access Memory), or a combination thereof. The memory 502 stores a program to be executed by the processor 501. The processor 501 reads and executes the program from the memory 502. The processor 501 executes various processes according to the programs, thereby realizing at least a part of the functions of each unit shown in FIG. 3 and FIG. 4.

[0061] The above program includes a set of instructions (or software code) for making the computer perform one or more functions described in the embodiment when the program is loaded into a processor (computer). The program may be stored in a non-transitory computer-readable medium or a tangible storage medium. By way of example and not limitation, the computer-readable medium or tangible storage medium includes RAM, ROM, flash memory, solid-state drive (SSD) or other memory technology, Compact Disc (CD)-ROM, digital versatile disc (DVD), Blu-ray (registered trademark) disk or other optical disk storage, magnetic cassette, magnetic tape, magnetic disk storage or other magnetic storage device. The program may be transmitted on a transitory computer-readable medium or communication medium. By way of example and not limitation, the transitory computer-readable medium or communication medium includes electrical, optical, acoustic, or other forms of propagated signals.

[0062] The short-range wireless communication unit 503 performs wireless communication with a short-range wireless communication unit of another processing device. The short-range wireless communication unit 503 is configured as a wireless communication unit compatible with a communication method such as Bluetooth or NFC (Near Field Communication). In the user device 110, the request receiving unit 111 and the key information transmitting unit 114 each communicate with the vehicle device 132 using the short-range wireless communication unit 503. In the vehicle device 132, the request transmitting unit 143 and the key information receiving unit 146 each communicate with the user device 110 using the short-range wireless communication unit 503.

[0063] In the above embodiment, an example has been described in which the vehicle device 132 performs all of the face detection, the encrypted face authentication, and the decryption of the authentication result, but the present disclosure is not limited to this. Some of the functions of the vehicle device 132 may be performed by another device, such as a cloud server. For example, the function of the face authentication unit 144 may be transferred to the cloud server, and the matching result decryption unit 147 may obtain the encrypted face authentication result from the cloud server.

[0064] In the above embodiment, an example in which the control unit 148 controls the locking of the doors has been described, but the present disclosure is not limited to this. For example, the control unit 148 may not only unlock the doors, but also turn on a driving source such as an engine to make the vehicle 130 ready to run.

[0065] In the above embodiment, an example of face authentication has been described as an example of authentication using biometric information, but the present disclosure is not limited to this. For example, a fingerprint sensor may be provided in a controlled device such as the vehicle 130, and user authentication may be performed using fingerprint information. When a contact-type sensor such as a fingerprint reader is used for authentication using biometric information, the request to transmit the private key may include the location of the fingerprint reader as user location information.

[0066] In the above embodiment, an example has been described in which the position calculation unit 112 calculates the relative position between the vehicle 130 and the user using sensor information in the user device 110, but the present disclosure is not limited to this. The position calculation unit 112 may generate the user's position information using the position information of the user device 110 measured using a global navigation satellite system (GNSS). For example, when the user moves away from the vehicle 130 by a predetermined distance or more, the position calculation unit 112 stores the position information of the point measured using the GNSS as the position where the user moved away from the vehicle 130. When the user approaches the vehicle 130 again, the position calculation unit 112 may resume the position calculation using sensor information such as a gyro sensor from the position where the user moved away from the vehicle 130, and generate the user's position information.

[0067] In the above embodiment, an example in which a public key encryption method is used as an encryption method has been described. However, the present disclosure is not limited to this. In the above embodiment, the matching result decryption unit 147 (see FIG. 3) of the vehicle device 132 may decrypt the encrypted matching result using key information received from the user device 110, and the key information transmitted from the user device is not limited to a secret key. For example, a common key encryption method may be used as the encryption method. In that case, the key information transmission unit 114 (see FIG. 4) of the user device 110 may transmit a common key used for encryption and decryption to the vehicle device 132. In the vehicle device 132, the face authentication unit 144 encrypts the detected face image or its feature amount with the common key received from the user device 110. In addition, the matching result decryption unit 147 decrypts the encrypted matching result using the common key.

[0068] In the above embodiment, with reference to FIG. 5, an example has been described in which a request for transmitting a private key is transmitted to the user device 110 after a face used for face authentication is detected in the vehicle device 132. However, the present disclosure is not limited to this. The request transmitting unit 143 of the vehicle device 132 may detect the approach of the user to the vehicle 130, and transmit a request for transmitting a private key to the user device 110 when it is detected that the user is approaching the vehicle 130. Whether or not the user is approaching the vehicle 130 can be detected according to, for example, the strength of a wireless signal output from the user device 110.

[0069] Although the embodiments of the present disclosure have been described in detail above, the present disclosure is not limited to the above-described embodiments, and changes and modifications to the above-described embodiments that do not deviate from the spirit of the present disclosure are also included in the present disclosure.

[0070] For example, some or all of the above embodiments may be described as, but are not limited to, the following supplementary notes.

[0071] [Appendix 1] A user device and a mobile device, The user device includes: A determination means for determining whether a predetermined condition is satisfied; a key information transmitting means for transmitting key information when it is determined that the predetermined condition is satisfied, The mobile device A biometric information acquisition means for acquiring biometric information of a user; a key information receiving means for receiving the key information transmitted from the user device; and an authentication means for authenticating the user by using the acquired biometric information, the encrypted biometric information for matching, and the key information. Authentication system.

[0072] [Appendix 2] The user device further includes a request receiving means for receiving a request to transmit key information, The mobile device further includes a request sending means for sending a request to send the key information to the user device; 2. The authentication system according to claim 1, wherein the determination means determines, when the transmission request is received, whether or not the predetermined condition is satisfied.

[0073] [Appendix 3] The request transmission means transmits, to the user device, location information of the user from whom the biometric information was acquired; 3. The authentication system according to claim 2, wherein the determination means determines whether or not the predetermined condition is satisfied by using the user's location information transmitted from the request transmission means.

[0074] [Appendix 4] The user device further comprises a location calculation means for calculating location information of the user device; The authentication system according to claim 3, wherein the determination means compares the location information calculated by the location calculation means with the user's location information transmitted from the request transmission means, and determines whether or not the specified condition is satisfied based on a result of the comparison.

[0075] [Appendix 5] the request transmission means transmits, to the user device, a relative position between the user and a moving object from which the biometric information was acquired as position information of the user; The authentication system according to claim 4, wherein the position calculation means calculates a relative position between the user device and a moving object as position information of the user device.

[0076] [Appendix 6] The authentication system according to claim 4 or 5, wherein the determination means determines that the specified condition is met when a difference between the location information calculated by the location calculation means and the user's location information transmitted from the request transmission means is within a specified range.

[0077] [Appendix 7] An authentication system as described in any one of Appendices 4 to 6, wherein the request receiving means determines whether the user is approaching a moving object based on a change in the location information calculated by the location calculation means, and if it is determined that the user is approaching a moving object, receives a request to send the key information.

[0078] [Appendix 8] 8. The authentication system according to claim 3, wherein the mobile device further comprises a location acquisition means for acquiring location information of a user from whom the biometric information was acquired.

[0079] [Appendix 9] the biometric information acquisition means includes face detection means for detecting a face of the user photographed using a camera; 9. The authentication system according to claim 8, wherein the position acquisition means acquires a position of the face detected by the face detection means as position information of the user from whom the biometric information was acquired.

[0080] [Appendix 10] The authentication system according to any one of appendixes 1 to 9, wherein the authentication means encrypts the acquired biometric information, compares the encrypted biometric information with the biometric information for matching to generate an encrypted matching result, and decrypts the encrypted matching result using the key information.

[0081] [Appendix 11] 11. The authentication system of claim 10, wherein the authentication means waits until the key information is received after generating the encrypted matching result, and decrypts the encrypted matching result after the key information is received.

[0082] [Appendix 12] 12. The authentication system according to claim 1, further comprising a control unit that controls a mobile object based on an authentication result of the authentication unit.

[0083] [Appendix 13] 1. A mobile device comprising: A biometric information acquisition means for acquiring biometric information of a user; a key information receiving means for receiving key information transmitted from a user device of a user using a mobile object when it is determined that a predetermined condition is satisfied in the user device; a mobile device comprising an authentication means for authenticating the user using the acquired biometric information, the encrypted biometric information for matching, and the key information;

[0084] [Appendix 14] 14. The mobile device of claim 13, further comprising a request sending means for sending a request to the user device to send key information.

[0085] [Appendix 15] 15. The mobile device according to claim 14, wherein the request sending means sends to the user device location information of the user from whom the biometric information was acquired.

[0086] [Appendix 16] 16. The mobile body device according to claim 15, wherein the request sending means sends a relative position between the user from whom the biometric information was acquired and the mobile body to the user device as position information of the user.

[0087] [Appendix 17] The mobile device according to any one of appendixes 13 to 16, wherein the authentication means encrypts the acquired biometric information, compares the encrypted biometric information with the biometric information for matching to generate an encrypted matching result, and decrypts the encrypted matching result using the key information.

[0088] [Appendix 18] A user device, A determination means for determining whether a predetermined condition is satisfied; The user device includes a key information transmission means for transmitting key information to a mobile device that authenticates the user using the user's biometric information, encrypted matching biometric information, and key information when it is determined that the specified condition is satisfied.

[0089] [Appendix 19] 19. The user device of claim 18, further comprising a request receiving means for receiving a request to transmit the key information from the mobile device.

[0090] [Appendix 20] the request receiving means receives, from the mobile device, location information of the user from whom the biometric information was acquired; 20. The user device according to claim 19, wherein the determination means determines whether the predetermined condition is satisfied by using the user's location information received by the request receiving means.

[0091] [Appendix 21] The method further comprises: The user device described in Appendix 20, wherein the determination means compares the location information calculated by the location calculation means with the user's location information received by the request receiving means, and determines whether the specified condition is met based on the result of the comparison.

[0092] [Appendix 22] The user device according to claim 21, wherein the determination means determines that the specified condition is met when a difference between the location information calculated by the location calculation means and the user's location information received by the request receiving means is within a specified range.

[0093] [Appendix 23] A user device as described in Appendix 21 or 22, wherein the request receiving means determines whether the user is approaching a moving object based on a change in the location information calculated by the location calculation means, and if it is determined that the user is approaching a moving object, receives a request to transmit the key information.

[0094] [Appendix 24] Acquire biometric information of the user; receiving key information transmitted from a user device of a user using a mobile object when it is determined that a predetermined condition is satisfied; A user authentication method for authenticating the user using the acquired biometric information, encrypted biometric information for matching, and the key information.

[0095] [Appendix 25] determining whether a predetermined condition is satisfied; A key information transmission method, comprising: when it is determined that the specified condition is satisfied, transmitting the key information to a mobile device that authenticates the user using the user's biometric information, encrypted biometric information for matching, and key information.

[0096] [Appendix 26] Acquire biometric information of the user; receiving key information transmitted from a user device of a user using a mobile object when it is determined that a predetermined condition is satisfied; A non-transitory computer-readable medium storing a program for causing a processor to execute a process for authenticating the user using the acquired biometric information, the encrypted matching biometric information, and the key information.

[0097] [Appendix 27] determining whether a predetermined condition is satisfied; A non-transitory computer-readable medium storing a program for causing a processor to execute a process of transmitting key information to a mobile device that authenticates the user using the user's biometric information, encrypted matching biometric information, and key information when it is determined that the specified condition is met. [Explanation of symbols]

[0098] 10: Authentication system 20: User device 21: Judgment means 22: Key information transmission means 30: Mobile equipment 31: Biometric information acquisition means 32: Key information receiving means 33: Authentication method 100: Authentication system 110: User device 111: Request receiving unit 112:Position calculation section 113: Judgment section 114: Key information transmission unit 130: Vehicle 131: Camera 132: Vehicle equipment 141: Face detection unit 142: Face position calculation unit 143: Request sending unit 144: Face recognition section 145: Matching information storage unit 146: Key information receiving unit 147: Matching result decoding unit 148: Control unit

Claims

1. A user device and a mobile device, The user device comprises: A determination means for determining whether a predetermined condition is satisfied; a key information transmitting means for transmitting key information when it is determined that the predetermined condition is satisfied, The mobile device A biometric information acquisition means for acquiring biometric information of a user; a transmitting means for transmitting to the user device position information of the user from whom the biometric information has been acquired; a key information receiving means for receiving the key information transmitted from the user device; an authentication means for authenticating the user by using the acquired biometric information, the encrypted biometric information for matching, and the key information; The determination means determines whether or not the predetermined condition is satisfied by using the user's location information transmitted from the transmission means. Authentication system.

2. The user device further includes a receiving means for receiving a request to transmit key information, The transmission means transmits a request to transmit the key information to the user device; 2. The authentication system according to claim 1, wherein said determining means determines whether or not said predetermined condition is satisfied when said transmission request is received.

3. The user device further comprises a location calculation means for calculating location information of the user device; 3. The authentication system according to claim 1, wherein the determination means compares the location information calculated by the location calculation means with the user's location information transmitted from the transmission means, and determines whether or not the predetermined condition is satisfied based on a result of the comparison.

4. An authentication system as described in Claim 3, wherein the determination means determines that the specified condition is met when the difference between the location information calculated by the location calculation means and the user's location information transmitted from the transmission means is within a specified range.

5. 1. A mobile device comprising: A biometric information acquisition means for acquiring biometric information of a user; a transmitting means for transmitting location information of the user from whom the biometric information has been acquired; a key information receiving means for receiving key information transmitted from a user device of a user using a mobile object when it is determined that a predetermined condition is satisfied in a determination as to whether or not the predetermined condition is satisfied, the determination being performed in a user device of the user using the mobile object using the transmitted user location information; a mobile device comprising an authentication means for authenticating the user using the acquired biometric information, the encrypted biometric information for matching, and the key information;

6. A user device, A receiving means for receiving location information of a user from which biometric information of the user is acquired in a moving object; a determination means for determining whether a predetermined condition is satisfied using the received user location information; The user device includes a key information transmission means for transmitting key information to a mobile device that authenticates the user using the user's biometric information, encrypted matching biometric information, and key information when it is determined that the specified condition is satisfied.

7. Acquire biometric information of the user; Transmitting location information of the user from which the biometric information was acquired to a user device of the user using a mobile object; receiving key information transmitted from the user device when it is determined that a predetermined condition is satisfied in a determination of whether or not the predetermined condition is satisfied, the determination being performed in the user device using the transmitted user location information; A user authentication method for authenticating the user using the acquired biometric information, encrypted biometric information for matching, and the key information.

8. Receiving location information of a user from which biometric information of a user obtained at a mobile object is obtained, Using the received user location information, determine whether a predetermined condition is satisfied; A key information transmission method, comprising: when it is determined that the specified condition is satisfied, transmitting the key information to a mobile device that authenticates the user using the user's biometric information, encrypted biometric information for matching, and key information.

9. Acquire biometric information of the user; Transmitting location information of the user from which the biometric information was acquired to a user device of the user using a mobile object; receiving key information transmitted from the user device when it is determined that a predetermined condition is satisfied in a determination of whether or not the predetermined condition is satisfied, the determination being performed in the user device using the transmitted user location information; A program for causing a processor to execute a process for authenticating the user using the acquired biometric information, encrypted biometric information for matching, and the key information.

10. Receiving location information of a user from which biometric information of a user obtained at a mobile object is obtained, Using the received user location information, determine whether a predetermined condition is satisfied; A program for causing a processor to execute a process of transmitting the key information to a mobile device that authenticates the user using the user's biometric information, encrypted matching biometric information, and key information when it is determined that the specified condition is satisfied.

Images