Mobile device, computer program, and authentication system

Abstract

To increase the security of an authentication system using a mobile device that can be carried by a user.SOLUTION: A mobile device 11 is capable of being carried by a user. A short-range radio communication unit 13 is capable of performing short-range radio communication with the mobile device 11. A proximity radio communication unit 14 is capable of performing proximity radio communication with the mobile device 11. The mobile device 11 is configured to execute a series of first authentication processing to authenticate the proximity radio communication unit 14 using at least the proximity radio communication, and when the first authentication processing is established, to transmit a piece of authentication information AU to the short-range radio communication unit 13. The control unit 12 performs the operation control of a locking / unlocking device 31 based on second authentication processing to authenticate the mobile device 11 using the authentication information AU.SELECTED DRAWING: Figure 2

Description

Technical Field

[0001] The present invention relates to an authentication system using a mobile device that can be carried by a user. The present invention also relates to a mobile device that can form part of the authentication system, and a computer program executable by a processing unit mounted on the mobile device.

Background Art

[0002] Patent Document 1 discloses an authentication system mounted on a vehicle as an example of a moving body. In the system, authentication is performed through radio communication between a control device that controls the operation of a door locking / unlocking device of the vehicle and a mobile device carried by a user. When authentication is successful while the user touches a touch sensor provided on the door handle, the control device is permitted to control the operation of the locking / unlocking device.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] An object of the present invention is to enhance the security of an authentication system using a mobile device that can be carried by a user.

Means for Solving the Problems

[0005] One aspect for achieving the above object is a mobile device that can be carried by a user, a communication unit capable of performing short-range wireless communication and proximity wireless communication, Execute a first authentication process for authenticating a proximity wireless communication device using at least the proximity wireless communication, and when the first authentication process is successful, transmit, through the short-distance wireless communication, authentication information used for a second authentication process for authenticating the mobile device, which is executed by a control device that controls the operation of the controlled device, to a processing unit. It is provided with.

[0006] One aspect for achieving the above object is a computer program executable by a processing unit mounted on a mobile device that can be carried by a user and can perform proximity wireless communication with a proximity wireless communication device and short-distance wireless communication with a short-distance wireless communication device, When executed, the mobile device Executes a first authentication process for authenticating the proximity wireless communication device using at least the proximity wireless communication, When the first authentication process is successful, transmit the authentication information used for a second authentication process for authenticating the mobile device, which is executed by a control device that controls the operation of the controlled device, to the short-distance wireless communication device.

[0007] One aspect for achieving the above object is an authentication system, A mobile device that can be carried by a user, A short-distance wireless communication device capable of short-distance wireless communication with the mobile device, A proximity wireless communication device capable of proximity wireless communication with the mobile device, A control device that controls the operation of the controlled device, It is provided with, The mobile device executes a first authentication process for authenticating the proximity wireless communication device using at least the proximity wireless communication, and is configured to transmit authentication information to the short-distance wireless device when the first authentication process is successful, The control device controls the operation of the controlled device based on a second authentication process for authenticating the mobile device using the authentication information.

[0008] According to the configuration according to each of the above aspects, just establishing a proximity wireless communication link between the proximity wireless communication device and the mobile device can prevent the authentication process of the mobile device for permitting the use of the controlled device by the user from starting. That is, by introducing a two-factor authentication framework that requires authentication to be established even between the mobile device and the proximity wireless communication device, the security of the authentication system that uses the mobile device that can be carried by the user can be enhanced.

Brief Description of the Drawings

[0009]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Modes for Carrying Out the Invention

[0010] While referring to the accompanying drawings, examples of embodiments will be described in detail below. In each figure, the scale is appropriately changed in order to make each illustrated element recognizable in size.

[0011] FIG. 1 illustrates the configuration of an authentication system 10 according to one embodiment. The authentication system 10 includes a mobile device 11. The mobile device 11 is a device that can be carried by the user 20. The authentication system 10 can be used, for example, to permit the use of the vehicle 30 by the user 20 carrying the mobile device 11 by authenticating the mobile device 11. The shape of the vehicle 30 is merely illustrative. The vehicle 30 is an example of a moving body.

[0012] The authentication system 10 includes a control device 12. In this example, the control device 12 is mounted on the vehicle 30. The control device 12 is configured to perform operation control of the locking / unlocking device 31 mounted on the vehicle 30 based on an authentication process for authenticating the mobile device 11. The locking / unlocking device 31 is a device for locking and unlocking the door 32 of the vehicle 30. The locking / unlocking device 31 is an example of a controlled device. The door 32 is an example of an opening / closing body.

[0013] The authentication system 10 includes a short-range wireless communication device 13. In this example, the short-range wireless communication device 13 is mounted at an appropriate position in the vehicle 30. The short-range wireless communication device 13 includes an antenna capable of performing short-range wireless communication with the mobile device 11.

[0014] As used herein, the term "short-range wireless communication" means non-contact communication performed using radio waves while conforming to the standard specifications of IEEE802.15 or IEEE802.11. Examples of technologies capable of performing short-range wireless communication include Bluetooth (registered trademark), Bluetooth Low Energy (registered trademark), Ultra Wide Band (UWB), ZigBee (registered trademark), Wi-Fi (registered trademark), and the like.

[0015] The authentication system 10 includes a proximity wireless communication device 14. In this example, the proximity wireless communication device 14 is mounted at an appropriate position in the vehicle 30.

[0016] As illustrated in FIG. 2, the proximity wireless communication device 14 includes an antenna 141 capable of performing proximity wireless communication with the mobile device 11.

[0017] As used herein, the term "proximity wireless communication" means non-contact communication that transmits information through electromagnetic induction coupling. Examples of technologies capable of performing proximity wireless communication include NFC (Near Field Communication), RF-ID, and the like.

[0018] On the other hand, the mobile device 11 includes a communication unit 111 and a processing unit 112. The communication unit 111 includes an antenna capable of performing proximity wireless communication. The processing unit 112 is configured to radiate, as a carrier wave, a magnetic field of a frequency used in proximity wireless communication from the antenna by supplying power to the antenna.

[0019] The proximity wireless communication device 14 includes a processing unit 142 and a storage unit 143. When the user 20 brings the mobile device 11 close to the proximity wireless communication device 14 (see FIG. 1), a current flows through the antenna 141 of the proximity wireless communication device 14 due to the magnetic field radiated from the communication unit 111, and power is supplied to the processing unit 142. The processing unit 142 is configured to read the confirmation information CF from the storage unit 143 and transmit it from the antenna 141. The confirmation information CF is received by the communication unit 111 of the mobile device 11.

[0020] The confirmation information CF can be any information as long as it can confirm that proximity wireless communication has been established between the mobile device 11 and the proximity wireless communication device 14.

[0021] The processing unit 142 having such a function can be realized by a dedicated integrated circuit. A computer program for executing the processing related to the function is pre-installed in a storage element included in the integrated circuit. The confirmation information CF may be stored in the storage element.

[0022] The control device 12 includes a storage unit 120. The first specific information ID1 is stored in the storage unit 120 in advance. The first specific information ID1 is information for identifying the proximity wireless communication device 14. The storage unit 120 can be realized by a semiconductor memory or a hard disk device.

[0023] On the other hand, the second specific information ID2 is stored in the storage unit 143 in advance. The second specific information ID2 is also information for identifying the proximity wireless communication device 14. The second specific information ID2 can be stored in the same storage element as the confirmation information CF.

[0024] When the processing unit 112 of the mobile device 11 confirms that the appropriate confirmation information CF has been received by the communication unit 111, it is configured to transmit a first request signal RQ1 to the short-range wireless communication device 13 by radio waves. That is, the communication unit 111 also includes an antenna capable of performing short-range wireless communication. The first request signal RQ1 is configured to request the control device 12 to transmit the first specific information ID1. The first request signal RQ1 may be an analog signal or a digital signal.

[0025] The control device 12 includes a reception unit 121. The reception unit 121 is configured as an interface capable of receiving the first request signal RQ1 through the short-range wireless communication device 13. When the first request signal RQ1 is an analog signal, the reception unit 121 includes an appropriate conversion circuit including an A / D converter.

[0026] The control device 12 includes a processing unit 122 and an output unit 123. The processing unit 122 is configured to read out the first specific information ID1 stored in the storage unit 120 as a response to the first request signal RQ1 received by the reception unit 121 and output it from the output unit 123.

[0027] That is, the output unit 123 is configured as an interface capable of outputting the first specific information ID1. The first specific information ID1 output from the output unit 123 may be in the form of analog data or digital data. When the first specific information ID1 output from the output unit 123 is in the form of analog data, the output unit 123 includes an appropriate conversion circuit including a D / A converter.

[0028] The first specific information ID1 output from the output unit 123 is transmitted by radio waves by the short-range wireless communication device 13 and received by the communication unit 111 of the mobile device 11.

[0029] When the processing unit 112 of the mobile device 11 receives the first specific information ID1 via the communication unit 111, it is configured to cause the communication unit 111 to transmit a second request signal RQ2 to the proximity wireless communication device 14. The second request signal RQ2 is configured to cause the proximity wireless communication device 14 to transmit the second specific information ID2.

[0030] When the processing unit 142 of the proximity wireless communication device 14 receives the second request signal RQ2 via the antenna 141, it is configured to read out the second specific information ID2 stored in the storage unit 143 and transmit it to the mobile device 11.

[0031] When the processing unit 112 of the mobile device 11 receives the second specific information ID2 via the communication unit 111, it is configured to execute a first authentication process for authenticating the proximity wireless communication device 14. Specifically, the processing unit 112 is configured to compare the first specific information ID1 with the second specific information ID2, and determine that the first authentication process is established when the degree of coincidence between the two exceeds a threshold value.

[0032] When the processing unit 112 determines that the first authentication process is established, it is configured to transmit the authentication information AU stored in a storage unit (not shown) from the communication unit 111 to the short-range wireless communication device 13. The authentication information AU includes information for authenticating at least one of the mobile device 11 and the user 20. The authentication information AU may be in the form of analog data or digital data.

[0033] The reception unit 121 of the control device 12 is also configured as an interface capable of receiving the authentication information AU through the short-range wireless communication device 13. When the authentication information AU is in the form of analog data, the reception unit 121 includes an appropriate conversion circuit including an A / D converter.

[0034] When the processing unit 122 of the control device 12 receives the authentication information AU by the reception unit 121, it is configured to execute a second authentication process for authenticating the mobile device 11. Specifically, the processing unit 112 is configured to collate the authentication information AU with the authentication information stored in the storage unit 120 in advance, and determine that the second authentication process is established when the degree of coincidence between the two exceeds a threshold value.

[0035] When the processing unit 122 determines that the second authentication process is established, it is configured to output a communication control signal CC from the output unit 123. The communication control signal CC is configured to cause the short-range wireless communication device 13 to transmit a permission signal EN to the mobile device 11. The communication control signal CC may be an analog signal or a digital signal.

[0036] That is, the output unit 123 is configured as an interface capable of outputting the communication control signal CC. When the communication control signal CC is an analog signal, the output unit 123 includes an appropriate conversion circuit including a D / A converter.

[0037] When the processing unit 112 of the mobile device 11 receives the permission signal EN by the communication unit 111, it is configured to transmit an instruction signal IS from the communication unit 111 to the short-range wireless communication device 13. The instruction signal IS is configured to cause the control device 12 to control the operation of the locking / unlocking device 31. The instruction signal IS may be an analog signal or a digital signal. The instruction signal IS may be transmitted in response to a predetermined operation input by the user 20 or may be automatically transmitted.

[0038] The reception unit 121 of the control device 12 is configured as an interface capable of receiving the instruction signal IS. When the instruction signal IS is an analog signal, the reception unit 121 includes an appropriate conversion circuit including an A / D converter.

[0039] When the processing unit 122 of the control device 12 receives the instruction signal IS by the reception unit 121, it is configured to output the control signal CT from the output unit 123. The control signal CT is configured to cause the unlocking and locking device 31 to perform an operation according to the instruction signal IS. The control signal CT may be an analog signal or a digital signal.

[0040] That is, the output unit 123 is configured as an interface capable of outputting the control signal CT. When the control signal CT is an analog signal, the output unit 123 includes an appropriate conversion circuit including a D / A converter.

[0041] With reference to FIG. 3, an example of the processing flow executed by the processing unit 112 of the mobile device 11 configured as described above will be described.

[0042] First, the processing unit 112 determines whether proximity wireless communication has been established with the proximity wireless communication device 14 (STEP11). Specifically, the processing unit 112 determines whether appropriate confirmation information CF has been received by the communication unit 111. This process is repeated until it is determined that proximity wireless communication has been established (NO in STEP11).

[0043] When it is determined that proximity wireless communication has been established (YES in STEP11), the processing unit 112 acquires the first specific information ID1 from the control device 12 (STEP12). Specifically, the processing unit 112 transmits a first request signal RQ1 from the communication unit 111 to the short-range wireless communication device 13, and receives the first specific information ID1 from the short-range wireless communication device 13 as a response.

[0044] Subsequently, the processing unit 112 determines whether the first authentication process for authenticating the proximity wireless communication device 14 has been established (STEP13). Specifically, the processing unit 112 transmits a second request signal RQ2 from the communication unit 111 to the proximity wireless communication device 14, and receives the second specific information ID2 from the proximity wireless communication device 14 as a response. The processing unit 112 collates the first specific information ID1 and the second specific information ID2, and determines whether the degree of coincidence of both pieces of information exceeds a threshold value.

[0045] When it is determined that the first authentication process is successful (YES in STEP 13), the processing unit 112 transmits the authentication information AU to the short-range wireless communication device 13 (STEP 14). In the control device 12, a second authentication process for authenticating the mobile device 11 using the authentication information AU is executed.

[0046] Subsequently, the processing unit 112 determines whether a permission signal EN has been received from the short-range wireless communication device 13 (STEP 15). This process is repeated until it is determined by the communication unit 111 that the permission signal EN has been received (NO in STEP 15). If the permission signal EN is not received even after a predetermined time has elapsed since the transmission of the authentication information AU, an error may be notified to the user 20 and the process may end.

[0047] When it is determined by the communication unit 111 that the permission signal EN has been received (YES in STEP 15), the processing unit 112 transmits an instruction signal IS corresponding to the operation of the desired locking / unlocking device 31 from the communication unit 111 to the short-range wireless communication device 13 (STEP 16). The control device 12 executes operation control of the locking / unlocking device 31 according to the instruction signal IS.

[0048] When it is determined that the first authentication process is not successful (NO in STEP 13), the processing unit 112 ends the process without transmitting the authentication information AU for the second authentication process.

[0049] According to the above configuration, merely establishing a proximity wireless communication link between the proximity wireless communication device 14 and the mobile device 11 can prevent the authentication process of the mobile device 11 for permitting the user 20 to use the locking / unlocking device 31 from starting. That is, by introducing a two-factor authentication framework that requires authentication to be successful between the mobile device 11 and the proximity wireless communication device 14, the security of the authentication system 10 can be enhanced.

[0050] In this example, the proximity wireless communication device 14 is identified by the first specific information ID1 stored in the control device 12 and the second specific information ID2 stored in the proximity wireless communication device 14, and the proximity wireless communication device 14 is authenticated through the verification of both pieces of information. Since the first specific information ID1 is stored in a device different from the mobile device 11 and the proximity wireless communication device 14, the security of the information for identifying the proximity wireless communication device 14 can be enhanced. Also, an unexpected change occurring in the second specific information ID2 stored in the proximity wireless communication device 14 can be easily detected.

[0051] In addition, since the first specific information ID1 is stored in the control device 12 that controls the operation of the locking and unlocking device 31 through short-range wireless communication with the mobile device 11, there is no need to add a new communication path to enhance the security of the authentication system 10. Therefore, an increase in the construction cost of the authentication system 10 can be suppressed.

[0052] However, the first specific information ID1 can be stored in a device different from the proximity wireless communication device 14 other than the control device 12. For example, as illustrated in FIG. 1, the authentication system 10 may include a server device 15 that can communicate with the mobile device 11 via a wireless communication network 40. The wireless communication network 40 can be a network compliant with wireless communication standards such as LTE (Long Term Evolution), 4G, and 5G.

[0053] As illustrated in FIG. 2, the first specific information ID1 can be stored in the server device 15. The server device 15 can be configured to transmit the first specific information ID1 as a response to the first request signal RQ1 transmitted from the communication unit 111 of the mobile device 11.

[0054] Figure 4 shows another example of the functional configuration of the authentication system 10. In this example, the mobile device 11 includes a storage unit 113. The storage unit 113 is configured to store the first rolling code RC1 generated by the processing unit 112. The first rolling code RC1 is an example of the first information. The storage unit 113 can be realized by a semiconductor memory or a hard disk device.

[0055] On the other hand, the storage unit 143 of the proximity wireless communication device 14 is configured to store the second rolling code RC2 generated by the processing unit 142. The second rolling code RC2 is an example of the second information.

[0056] The processing unit 112 of the mobile device 11 and the processing unit 142 of the proximity wireless communication device 14 are configured to update the first rolling code RC1 and the second rolling code RC2 respectively based on the same rule.

[0057] In this example, when the processing unit 112 of the mobile device 11 confirms that the appropriate confirmation information CF has been received from the proximity wireless communication device 14, it is configured to transmit a request signal RQ to the proximity wireless communication device 14.

[0058] The processing unit 142 of the proximity wireless communication device 14 is configured to transmit the second rolling code RC2 stored in the storage unit 143 to the mobile device 11 as a response to the request signal RQ.

[0059] When the second rolling code RC2 is received by the communication unit 111, the processing unit 112 of the mobile device 11 is configured to execute a first authentication process for authenticating the proximity wireless communication device 14. Specifically, the processing unit 112 collates the first rolling code RC1 and the second rolling code RC2, and is configured to determine that the first authentication process is successful when, for example, the degree of coincidence between the two exceeds a threshold value.

[0060] When the processing unit 112 of the mobile device 11 determines that the first authentication process has been successful, it is configured to update the first rolling code RC1 stored in the storage unit 113 based on a predetermined rule. In addition, the processing unit 112 is configured to transmit an update signal UD to the proximity wireless communication device 14. The update signal UD is configured to notify the proximity wireless communication device 14 that the first rolling code RC1 has been updated.

[0061] When the processing unit 142 of the proximity wireless communication device 14 receives the update signal UD via the antenna 141, it is configured to update the second rolling code RC2 stored in the storage unit 143 based on a predetermined rule. The update rule for the first rolling code RC1 and the update rule for the second rolling code RC2 are the same. That is, the first rolling code RC1 and the second rolling code RC2 are updated based on the same rule each time the first authentication process is successful.

[0062] Note that the values of the first rolling code RC1 and the second rolling code RC2 used for verification do not necessarily have to be the same as long as they correspond to each other based on the above rules. Also, as long as the two pieces of information are updated based on the same rule each time the first authentication process is successful, it is not necessary to use rolling codes.

[0063] Furthermore, when the processing unit 112 of the mobile device 11 determines that the first authentication process has been successful, it is configured to transmit the authentication information AU stored in a storage unit (not shown) from the communication unit 111 to the short-range wireless communication device 13. Since the subsequent processing is the same as the example described with reference to FIGS. 2 and 3, repeated explanations are omitted.

[0064] While referring to FIG. 5, another example of the processing flow executed by the processing unit 112 of the mobile device 11 configured as described above will be described. For processing elements that are substantially the same as those described with reference to FIG. 3, the same reference numerals are given and repeated explanations are omitted.

[0065] When it is determined that the proximity wireless communication is established (YES in STEP11), the processing unit 112 acquires the second rolling code RC2 from the proximity wireless communication device 14 (STEP22). Specifically, the processing unit 112 transmits a request signal RQ from the communication unit 111 to the proximity wireless communication device 14, and receives the second rolling code RC2 from the proximity wireless communication device 14 as a response thereto.

[0066] Subsequently, the processing unit 112 determines whether the first authentication process for authenticating the proximity wireless communication device 14 is established (STEP23). Specifically, the processing unit 112 collates the first rolling code RC1 stored in the storage unit 113 with the second rolling code RC2, and determines whether the degree of coincidence between the two values exceeds a threshold value.

[0067] When it is determined that the first authentication process is established (YES in STEP23), the processing unit 112 updates the first rolling code RC1 stored in the storage unit 113 based on a predetermined rule (STEP24). Further, the processing unit 112 transmits an update signal UD from the communication unit 111 to the proximity wireless communication device 14. In the proximity wireless communication device 14 that has received the update signal UD, the second rolling code RC2 stored in the storage unit 143 is updated.

[0068] Subsequently, the processing unit 112 transmits the authentication information AU to the short-range wireless communication device 13 (STEP14). In the control device 12, a second authentication process for authenticating the mobile device 11 is executed using the authentication information AU.

[0069] When it is determined that the first authentication process is not established (NO in STEP23), the processing unit 112 ends the process without updating the first rolling code RC1 and transmitting the authentication information AU for the second authentication process.

[0070] In this example, the first rolling code RC1 stored in the storage unit 113 of the mobile device 11 and the second rolling code RC2 stored in the storage unit 143 of the proximity wireless communication device 14 are collated, thereby authenticating the proximity wireless communication device 14. Since the first rolling code RC1 and the second rolling code RC2 are updated each time the first authentication process is established, the security of the information for identifying the proximity wireless communication device 14 can be enhanced. Also, an unexpected change in the second rolling code RC2 stored in the proximity wireless communication device 14 can be easily detected.

[0071] The processing unit 112 of the mobile device 11 having the various functions described so far can be realized by a general-purpose microprocessor that operates in cooperation with a general-purpose memory. Examples of the general-purpose microprocessor may include a CPU, an MPU, and a GPU. Examples of the general-purpose memory may include a ROM and a RAM. In this case, a computer program for executing the above-described processing may be stored in the ROM. The ROM is an example of a non-transitory computer-readable medium that stores a computer program. The general-purpose microprocessor designates at least a part of the computer program stored on the ROM and expands it on the RAM, and executes the above-described processing in cooperation with the RAM. The above computer program may be pre-installed in the general-purpose memory, or may be downloaded from the server device 15 via the wireless communication network 40 illustrated in FIG. 1 and then installed in the general-purpose memory. In this case, the server device 15 is an example of a non-transitory computer-readable medium that stores a computer program. Note that the general-purpose memory may be used as the storage unit 113.

[0072] The processing unit 112 may be implemented by a dedicated integrated circuit capable of executing the above computer programs such as a microcontroller, ASIC, or FPGA. In this case, the above computer program is pre-installed in a storage element included in the dedicated integrated circuit. The storage element is an example of a non-transitory computer-readable medium storing a computer program. Each processor may also be implemented by a combination of a general-purpose microprocessor and a dedicated integrated circuit. Note that the storage element may be used as the storage unit 113.

[0073] The processing unit 122 of the control device 12 having various functions described so far may be implemented by a general-purpose microprocessor that operates in cooperation with a general-purpose memory. Examples of the general-purpose microprocessor may include a CPU, MPU, and GPU. Examples of the general-purpose memory may include a ROM and a RAM. In this case, a computer program for executing the above-described processing may be stored in the ROM. The ROM is an example of a non-transitory computer-readable medium storing a computer program. The general-purpose microprocessor designates at least a part of the computer program stored in the ROM and expands it onto the RAM, and executes the above-described processing in cooperation with the RAM. The above computer program may be pre-installed in the general-purpose memory, or may be downloaded from the server device 15 via the wireless communication network 40 illustrated in FIG. 1 and then installed in the general-purpose memory. In this case, the server device 15 is an example of a non-transitory computer-readable medium storing a computer program. Note that the general-purpose memory may be used as the storage unit 120.

[0074] The processing unit 122 may be implemented by a dedicated integrated circuit capable of executing the above computer program, such as a microcontroller, ASIC, FPGA, etc. In this case, the above computer program is pre-installed in the storage element included in the dedicated integrated circuit. The storage element is an example of a non-transitory computer-readable medium storing a computer program. Each processor may also be implemented by a combination of a general-purpose microprocessor and a dedicated integrated circuit. Note that the storage element may be used as the storage unit 120.

[0075] The proximity wireless communication device 14 may be a wireless power feeding type tag device. In this case, the restrictions on the mounting location of the proximity wireless communication device 14 in the vehicle 30 are relaxed, and the design freedom of the authentication system 10 can be increased.

[0076] The above embodiments are merely examples for facilitating the understanding of the present invention. The configurations according to the above embodiments can be appropriately changed and improved without departing from the gist of the present invention.

[0077] In FIG. 1, the control device 12, the short-range wireless communication device 13, and the proximity wireless communication device 14 are illustrated as a plurality of devices independently mounted at separate positions in the vehicle 30. However, at least one of the short-range wireless communication device 13 and the proximity wireless communication device 14 may be provided as a part of the control device 12.

[0078] At least a part of the authentication process performed by the processing unit 122 of the control device 12 may be performed in the server device 15 illustrated in FIG. 1.

[0079] The controlled device controlled by the control device 12 as a result of the authentication process is not limited to the locking / unlocking device 31. Examples of other controlled devices include an ignition power source, an engine, an air conditioner, audio-visual equipment, a lighting device, a position adjustment mechanism for a seat or a steering wheel, etc. mounted on the vehicle 30.

[0080] The authentication system 10 can also be applied to moving bodies other than the vehicle 30. Examples of other moving bodies include railways, aircraft, ships, etc. The moving body may not require a driver.

[0081] The opening / closing body unlocked and locked by the locking / unlocking device 31 is not limited to the door of the moving body. Doors and windows in houses and facilities can also be an example of the opening / closing body. Also, various facilities in houses and facilities can also be an example of the device to be controlled. That is, the control device 12, the short-range wireless communication device 13, and the proximity wireless communication device 14 do not have to be mounted on the moving body.

Explanation of Signs

[0082] 10: Authentication system, 11: Mobile device, 111: Communication unit, 112: Processing unit, 113: Storage unit, 12: Control device, 13: Short-range wireless communication device, 14: Proximity wireless communication device, 15: Server device, 20: User, 30: Vehicle, 31: Locking / unlocking device, 32: Door, AU: Authentication information, ID1: First specific information, ID2: Second specific information, RC1: First rolling code, RC2: Second rolling code

Claims

1. A mobile device that can be carried by a user, a communication unit capable of performing short-range wireless communication and proximity wireless communication; a processing unit that executes a first authentication process for authenticating a proximity wireless communication device using at least the proximity wireless communication, and transmits, through the short-range wireless communication, authentication information used for a second authentication process for authenticating the mobile device, which is executed by a control device that controls the operation of a controlled device when the first authentication process is successful; comprising: The first authentication process is performed by obtaining, from the control device through the short-range wireless communication, first specific information for identifying the proximity wireless communication device after proximity wireless communication is established with the proximity wireless communication device, and comparing the first specific information with second specific information stored in the proximity wireless communication device for identifying the proximity wireless communication device; a mobile device.

2. comprising a storage unit for storing first information, The first authentication process is performed by comparing second information obtained from the proximity wireless communication device through the proximity wireless communication with the first information, The first information and the second information are updated based on the same rule each time the first authentication process is successful; The mobile device according to claim 1.

3. A computer program executable by a processing unit mounted on a mobile device that can be carried by a user and can perform proximity wireless communication with a proximity wireless communication device and short-range wireless communication with a short-range wireless communication device, which, when executed, causes the mobile device to: execute a first authentication process for authenticating the proximity wireless communication device using at least the proximity wireless communication; when the first authentication process is successful, transmit, to the short-range wireless communication device, authentication information used for a second authentication process for authenticating the mobile device, which is executed by a control device that controls the operation of a controlled device; The first authentication process is performed by obtaining, from the control device through the short-range wireless communication, first specific information for identifying the proximity wireless communication device after proximity wireless communication is established with the proximity wireless communication device, and comparing the first specific information with second specific information stored in the proximity wireless communication device for identifying the proximity wireless communication device; a computer program.

4. A mobile device that can be carried by a user, a short-range wireless communication device capable of short-range wireless communication with the mobile device, A proximity wireless communication device capable of performing proximity wireless communication with the mobile device, A control device that controls the operation of the controlled device, Comprising, The mobile device is configured to execute a first authentication process for authenticating the proximity wireless communication device using at least the proximity wireless communication, and to transmit authentication information to the short-range wireless communication device when the first authentication process is successful. The control device controls the operation of the controlled device based on a second authentication process for authenticating the mobile device using the authentication information. The first authentication process is performed by obtaining first identification information for identifying the proximity wireless communication device from the control device through the short-range wireless communication after proximity wireless communication is established with the proximity wireless communication device, and comparing the first identification information with second identification information stored in the proximity wireless communication device for identifying the proximity wireless communication device. An authentication system.

5. The proximity wireless communication device is a wireless power supply type tag device. The authentication system according to claim 4.

6. The controlled device is a locking / unlocking device for locking and unlocking an opening / closing body. The authentication system according to claim 4 or 5.

7. A mobile device that can be carried by a user, A short-range wireless communication device capable of performing short-range wireless communication with the mobile device, A proximity wireless communication device capable of performing proximity wireless communication with the mobile device, A control device that controls the operation of the controlled device, Comprising, The mobile device is configured to execute a first authentication process for authenticating the proximity wireless communication device using at least the proximity wireless communication, and to transmit authentication information to the short-range wireless communication device when the first authentication process is successful. The control device controls the operation of the controlled device based on a second authentication process for authenticating the mobile device using the authentication information. The controlled device, the control device, the short-range wireless communication device, and the proximity wireless communication device are mounted on a moving body. An authentication system.

Images