Authentication system, authentication method, and authentication program

Abstract

To make it possible to easily authenticate specific information used by a mobile body.SOLUTION: A first mobile body 10 includes a request information transmitting unit 37a. The request information transmitting unit 37a transmits request information A to a second mobile body 60 by wireless communication. The request information A is information that requests a signature B2a to be added to specific information A2a. The second mobile body 60 includes a signature unit 84 and a response information transmitting unit 87b. The signature unit 84 adds the signature B2a to the specific information A2a when the request information A is received from the first mobile body 10. The response information transmitting unit 87b can transmit a certificate B2, which is information obtained by adding the signature B2a to the specific information A2a, to the first mobile body 10 by wireless communication.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to an authentication system, an authentication method, and an authentication program for authenticating information. [Background technology]

[0002] For example, Patent Document 1 describes that a mobile object (a work machine in the document) sends and receives information, and that a signature (electronic signature) may be attached to various pieces of information (see

[0017] in the document). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 2020-167509 Summary of the Invention [Problem to be solved by the invention]

[0004] The document does not describe how a signature is attached to information. For example, information may be authenticated by an existing certification authority attaching a signature to the information. However, requesting authentication from an existing certification authority requires time and money to receive the authentication. Therefore, it is desirable to be able to easily authenticate information (specific information) used by mobile entities.

[0005] SUMMARY OF THE INVENTION It is therefore an object of the present invention to provide an authentication system, an authentication method, and an authentication program that can easily authenticate specific information used by a mobile object. [Means for solving the problem]

[0006] The authentication system includes a first mobile body that can move, and a second mobile body that can move and is provided separately from the first mobile body. The first mobile body includes a request information transmission unit. The request information transmission unit transmits request information, which is information requesting that a signature be attached to specific information, to the second mobile body via wireless communication. The second mobile body includes a signature unit and a response information transmission unit. When the signature unit receives the request information from the first mobile body, it attaches the signature to the specific information. The response information transmission unit is capable of transmitting a certificate, which is information in which the signature is attached to the specific information, to the first mobile body via wireless communication.

[0007] The authentication method is used for a first mobile body that is capable of travelling and a second mobile body that is also capable of travelling and is provided separately from the first mobile body. The authentication method includes a request information transmitting step, a signing step, and a response information transmitting step. In the request information transmitting step, the first mobile body transmits request information, which is information requesting that a signature be attached to specific information, to the second mobile body via wireless communication. In the signing step, the second mobile body attaches the signature to the specific information when receiving the request information from the first mobile body. In the response information transmitting step, the second mobile body transmits, via wireless communication to the first mobile body, a certificate, which is information in which the signature is attached to the specific information.

[0008] The authentication program causes a computer to execute a request information transmitting step, a signing step, and a response information transmitting step. The computer is provided in a first mobile body that is capable of travelling and a second mobile body that is capable of travelling and is provided separately from the first mobile body. The request information transmitting step involves the first mobile body transmitting request information, which is information requesting that a signature be attached to specific information, to the second mobile body via wireless communication. The signing step involves the second mobile body attaching the signature to the specific information when receiving the request information from the first mobile body. The response information transmitting step involves the second mobile body transmitting, via wireless communication, a certificate, which is information in which the signature is attached to the specific information, to the first mobile body. [Effects of the Invention]

[0009] With the above configurations, it is possible to easily authenticate the specific information used by the mobile unit. [Brief explanation of the drawings]

[0010] [Figure 1] 1 is a diagram showing a first mobile object 10, a second mobile object 60, and the like of an authentication system 1. FIG. [Figure 2] FIG. 2 is a block diagram of the authentication system 1 shown in FIG. [Figure 3] 3 is a flowchart showing the operation of the first moving body 10 shown in FIG. 2. [Figure 4] 3 is a flowchart showing the operation of the second moving body 60 shown in FIG. 2. [Figure 5] 3 is a diagram illustrating a first relative position notifying unit 23a shown in FIG. 2. FIG. [Figure 6] 10 is a flowchart showing the operation of the first moving body 10 of the first modified example. [Figure 7] 10 is a flowchart showing the operation of the second moving body 60 of the third modified example. [Figure 8] 10 is a flowchart showing the operation of the second moving body 60 of the fourth modified example. DETAILED DESCRIPTION OF THE INVENTION

[0011] The authentication system 1 will be described with reference to FIGS.

[0012] 1, the authentication system 1 is a system in which a second mobile body 60 (mobile body) authenticates specific information A2a held by a first mobile body 10 (mobile body). The authentication system 1 is a system in which the second mobile body 60 affixes a signature B2a (digital signature) to the specific information A2a held by the first mobile body 10, and the first mobile body 10 receives the specific information A2a (certificate B2 (digital certificate)) with the signature B2a affixed. The authentication system 1 includes the first mobile body 10 and the second mobile body 60.

[0013] The first moving body 10 (moving body) is a moving body that requests that a signature B2a be added to the specific information A2a. The first moving body 10 is movable (movable). One or more first moving bodies 10 are provided. The first moving body 10 is, for example, a work machine that performs work, such as a construction machine that performs construction work, and may be, for example, a shovel or a crane. The following mainly describes a case where the first moving body 10 is a shovel. The first moving body 10 may be configured to be capable of automatic operation. The first moving body 10 may be operated by a worker (operator) in a first cab 13a (described later) or may be remotely operated. The first moving body 10 includes a first lower traveling body 11, a first upper rotating body 13, a first attachment 15, and a first controller 30 (computer).

[0014] The first lower traveling body 11 is a traveling body that can travel the first moving body 10. The first lower traveling body 11 may be equipped with crawlers or wheels.

[0015] The first upper rotating body 13 is rotatably attached to the first lower traveling body 11. The first upper rotating body 13 includes a first operator's cab 13a. The first operator's cab 13a is a portion where an operator can operate the first moving body 10.

[0016] The first attachment 15 is a part that performs work and includes, for example, a boom 15a, an arm 15b, and a tip attachment 15c. The boom 15a is attached to the first upper rotating body 13 so that it can be raised and lowered (rotated up and down). The arm 15b is attached rotatably relative to the boom 15a. The tip attachment 15c is provided at the tip of the first attachment 15 and is rotatably attached to the arm 15b. The tip attachment 15c may be, for example, a bucket used to scoop or excavate a work object, a device that clamps the work object (such as a grapple or nibbler), or a device that crushes the work object (such as a breaker).

[0017] The first position sensor 21 (see FIG. 2) detects the position of the first moving body 10. For example, the first position sensor 21 shown in FIG. 2 detects the position of the first moving body 10 at a work site. The first position sensor 21 may be mounted on the first moving body 10 or may be provided external to the first moving body 10. The first position sensor 21 may perform detection using a positioning system (e.g., a satellite positioning system). The positioning system may be a satellite positioning system, such as a global navigation satellite system (GNSS). The positioning system may use a total station. The first position sensor 21 may detect the position of the first moving body 10 based on an image (a two-dimensional image or a three-dimensional range image) including the first moving body 10. For example, the "position of the first moving body 10" detected by the first position sensor 21 may be an average value of positions of the first moving body 10 detected by multiple sensors (e.g., multiple positioning systems, multiple image sensors, etc.).

[0018] The first notification unit 23 notifies the worker (person) of information. The first notification unit 23 may be provided in the first moving body 10 (for example, inside the first operator's cab 13a (see FIG. 1)). The first notification unit 23 may be provided outside the first moving body 10, for example, in a remote control unit for remotely controlling the first moving body 10, or in an information terminal (for example, a tablet, a smartphone, a personal computer, etc.). The first notification unit 23 may provide notification by light, for example, by display on a screen (monitor) (see FIG. 5). The first notification unit 23 may provide notification by sound, for example, by voice.

[0019] The first notification unit 23 may, for example, notify that the first moving body 10 has received response information B (described later) from the second moving body 60, or may notify that the first moving body 10 was unable to receive the response information B. For example, when the first moving body 10 is unable to receive the response information B, the first notification unit 23 may issue a notification (guide) urging the worker to perform an operation to operate (travel, turn, etc.) the first moving body 10 (details will be described later). The first notification unit 23 includes a first relative position notification unit 23a (relative position notification unit).

[0020] The first relative position notification unit 23a (relative position notification unit) notifies information relating to the relative position between the first moving body 10 and the second moving body 60 (see FIG. 5). For example, when the first moving body 10 cannot receive response information B from the second moving body 60, the first relative position notification unit 23a issues a notification to indicate the direction in which the first moving body 10 should operate (for example, run or turn) (to indicate an operation guide) (details will be described later). The first relative position notification unit 23a notifies information relating to the relative position between the first moving body 10 and the second moving body 60 based on the positions of the first moving body 10 and the second moving body 60 detected by the first position sensor 21 and the second position sensor 71 (described later).

[0021] The first controller 30 is a computer that inputs and outputs signals, performs calculations (processing), stores information, and so on. For example, the functions of the first controller 30 are realized by a calculation unit (not shown) executing a program stored in a first storage unit 35. The first controller 30 controls the operation of the first moving body 10 and performs communication, etc. The first controller 30 is mounted in a predetermined position of the first moving body 10 (for example, inside the first driver's cab 13a (see FIG. 1 )). The first controller 30 includes a specification information generation unit 31, a connection request information generation unit 33, a first storage unit 35, a first communication unit 37, and a first operation control unit 39.

[0022] The specific information generation unit 31 generates specific information A2a shown in FIG. 1. The specific information A2a is information requesting that the second mobile body 60 affix a signature B2a (information that the second mobile body 60 is requested to authenticate). For example, the specific information A2a is information for identifying the first controller 30. For example, the specific information A2a is key information (the specific information generation unit 31 is a key information generation unit). This key information is information used, for example, for authenticating information, detecting tampering, or encrypting information. The specific information A2a is, for example, a public key (referred to as a "first public key"). Note that the specific information generation unit 31 (information generation unit) shown in FIG. 2 may generate information other than the specific information A2a (see FIG. 1). The "information other than the specific information A2a" may be, for example, a secret key (referred to as a "first secret key"). For example, the specific information generation unit 31 may simultaneously generate a first public key and a first secret key that pairs with the first public key.

[0023] The connection request information generating unit 33 generates connection request information A1 (see FIG. 1) (see the description of the request information transmitting unit 37a for the connection request information A1).

[0024] The first memory unit 35 stores information. For example, the first memory unit 35 stores the certificate B2 (see FIG. 1) received from the second mobile body 60. For example, the first memory unit 35 stores a private key (first private key) generated by the specific information generation unit 31. The first memory unit 35 stores a program for causing the first controller 30 to function. At least a part of the first memory unit 35 may be provided in a tamper-resistant area (see the description of the tamper-resistant area 80a of the second mobile body 60). The fact that elements of the first controller 30 other than the first memory unit 35 (such as the specific information generation unit 31 and the first communication unit 37) may be provided in a tamper-resistant area also applies.

[0025] The first communication unit 37 (information transmission / reception device, communication module) exchanges information between the first mobile body 10 and the outside of the first mobile body 10. The first communication unit 37 communicates with the second mobile body 60 (second communication unit 87). The first communication unit 37 may communicate with a communication partner other than the second mobile body 60. For example, the first communication unit 37 may communicate with a server or the like, or may communicate with a mobile body other than the second mobile body 60. The first communication unit 37 may communicate with a recipient (a third party not shown) of the specific information A2a (see FIG. 1) other than the second mobile body 60.

[0026] The first communication unit 37 performs wireless communication to transmit and receive request information A and response information B, which will be described later. The first communication unit 37 performs, for example, short-range communication, specifically, communication using Wi-Fi or the like. In this case, the first communication unit 37 does not need to perform long-distance communication using a cellular system or the like.

[0027] It is preferable that the communication between the first communication unit 37 and the second mobile body 60 (second communication unit 87) be direct (without an intermediary). In this case, the possibility of attacks on the communicated information can be reduced. If an intermediary is present in the communication between the first communication unit 37 and the second communication unit 87, it is preferable that the number of intermediaries be as small as possible.

[0028] The first communication unit 37 may be configured to be capable of long-distance communication. The first communication unit 37 may perform wireless or wired communication for communication of information other than the request information A and the response information B. The first communication unit 37 includes a request information transmitting unit 37a and a response information receiving unit 37b.

[0029] The request information sending unit 37a sends the request information A to the second mobile body 60. Note that the above phrase "sending the request information A to the second mobile body 60" includes not only the case where the second mobile body 60 receives the request information A sent to the second mobile body 60, but also the case where the request information A is sent to the second mobile body 60 but the second mobile body 60 is unable to receive the request information A.

[0030] The request information A is information that requests that a signature B2a be attached to the specific information A2a shown in Fig. 1. For example, the request information A includes connection request information A1 and signature request information A2.

[0031] The connection request information A1 is information requesting a communication connection with the second mobile entity 60 in order to request that the signature B2a be attached to the specific information A2a.

[0032] The signature request information A2 is information requesting the affixing of a signature B2a and includes the specific information A2a. For example, the signature request information A2 is a certificate B2 without the signature B2a. The signature request information A2 includes at least the specific information A2a (e.g., a first public key) generated by the specific information generation unit 31 (see FIG. 2). The signature request information A2 may include information for identifying the first mobile entity 10. Specifically, for example, the signature request information A2 may be a Certificate Signing Request (CSR). The connection request information A1 and the signature request information A2 may be separate pieces of information (they may be transmitted to the second mobile entity 60 at separate times) or may be a single piece of information (they may be transmitted to the second mobile entity 60 consecutively). When the connection request information A1 and the signature request information A2 are a single piece of information, the specific information generation unit 31 and the connection request information generation unit 33 shown in FIG. 2 may be treated as a single "information generation unit."

[0033] The response information receiving unit 37b receives response information B from the second moving object 60 (described later).

[0034] The first operation control unit 39 (control module) controls the operation of the first moving body 10. The first operation control unit 39 may control the operation of the first moving body 10 by automatic operation. The first operation control unit 39 may control the operation of the first moving body 10 in response to operation by an operator. The first operation control unit 39 includes a first traveling control unit 39a, a first turning control unit 39b, and a first attachment control unit 39c. In FIG. 2, the "attachment" of the first attachment control unit 39c is written as "ATT" (the same applies to the second attachment control unit 39c).

[0035] The first travel control unit 39a controls the travel of the first moving body 10 and controls the operation of the first lower traveling body 11 shown in Fig. 1. For example, the first travel control unit 39a controls a motor (travel motor) for traveling the first lower traveling body 11.

[0036] The first swing control unit 39b (see FIG. 2) controls the swing of the first upper swing body 13 (hereinafter also simply referred to as "the swing of the first upper swing body 13") relative to the first lower traveling body 11. For example, the first swing control unit 39b controls a motor (swing motor) for swinging the first upper swing body 13.

[0037] The first attachment control unit 39c (see FIG. 2) controls the operation of the first attachment 15. For example, the first attachment control unit 39c controls the rotation (raising and lowering) of the boom 15a relative to the first upper rotating body 13, the rotation of the arm 15b relative to the boom 15a, and the rotation of the tip attachment 15c relative to the arm 15b. For example, the first attachment control unit 39c controls a hydraulic cylinder for operating the first attachment 15.

[0038] The second mobile body 60 (mobile body) is a mobile body that affixes a signature B2a to the specific information A2a (authenticates the specific information A2a) in response to a request from the first mobile body 10. The second mobile body 60 is provided separately from the first mobile body 10 (is a mobile body separate from the first mobile body 10). For example, the second mobile body 60 is placed at the same work site as the first mobile body 10. One or more second mobile bodies 60 are provided. The second mobile body 60 has commonalities and differences with the first mobile body 10. The following describes the second mobile body 60, focusing mainly on the differences from the first mobile body 10. The main difference between the second mobile body 60 and the first mobile body 10 is in the second controller 80 (computer).

[0039] The second moving body 60 includes a second lower traveling body 61 (corresponding to the first lower traveling body 11), a second upper rotating body 63 (corresponding to the first upper rotating body 13), and a second attachment 65 (corresponding to the first attachment 15). The second upper rotating body 63 includes a second operator's cab 63a (corresponding to the first operator's cab 13a). As shown in FIG. 2, the second moving body 60 includes a second position sensor 71 (corresponding to the first position sensor 21) and a second notification unit 73 (corresponding to the first notification unit 23). The second notification unit 73 includes a second relative position notification unit 73a (relative position notification unit) (corresponding to the first relative position notification unit 23a).

[0040] The second controller 80 (computer) is a computer that inputs and outputs signals, performs calculations (processing), stores information, etc. For example, the functions of the second controller 80 are realized by a calculation unit (not shown) executing a program stored in a second storage unit 85. The second controller 80 controls the operation of the second moving body 60 and performs communication, etc. The second controller 80 is mounted at a predetermined position on the second moving body 60 (for example, inside the second operator's cab 63a (see FIG. 1)).

[0041] This second controller 80 (second mobile body 60) has, for example, the function of a certification authority (CA) or a function similar to that of a certification authority. For example, the second controller 80 has the function of an intermediate certification authority (a certification authority that proves its own legitimacy with a certificate issued by a higher-level certification authority). For example, if the first mobile body 10 is a general mobile body (e.g., a general work machine), the second mobile body 60 is a certification authority mobile body (certification authority work machine) that has the function of a certification authority.

[0042] The second controller 80 includes a tamper-resistant area 80 a, a connection response information generating unit 83 , a signature unit 84 , a second storage unit 85 , a second communication unit 87 , and a second operation control unit 89 .

[0043] The tamper-resistant area 80a is an area that is tamper-resistant and is called a TEE (Trusted Execution Environment). The tamper-resistant area 80a is an area that can prevent access from outside the tamper-resistant area 80a and can prevent external attacks (tampering, theft, etc.). Specific examples of the tamper-resistant area 80a include Arm's TrustZone (registered trademark) and Intel's SGX. For example, the signature unit 84 and the second storage unit 85 are preferably provided in the tamper-resistant area 80a. At least a portion of the second communication unit 87 may be provided in the tamper-resistant area 80a (not shown). Specifically, for example, the tamper-resistant area 80a may be provided in a SIM (Subscriber Identity Module) card provided in the second communication unit 87. The same applies to elements of the second controller 80 other than the signature unit 84, the second memory unit 85, and the second communication unit 87 (for example, the connection response information generation unit 83) that may be provided in the tamper-resistant area 80a.

[0044] The connection response information generation unit 83 (response generation device) generates connection response information B1 shown in Fig. 1. The connection response information B1 is information (response) returned in response to the connection request information A1 transmitted by the first mobile object 10. The connection response information B1 is information indicating that a communication connection will be established between the first mobile object 10 and the second mobile object 60.

[0045] When the signature unit 84 (see FIG. 2) receives the request information A from the first mobile body 10, it attaches a signature B2a to the specific information A2a. The signature unit 84 generates the signature B2a based on the signature request information A2 received from the first mobile body 10. Specifically, for example, the signature B2a is information obtained by encrypting a hash value of information including the specific information A2a (for example, the signature request information A2) with a private key (referred to as a "second private key") generated by the second controller 80.

[0046] This signature unit 84 (see FIG. 2) generates (issues) certificate B2. Certificate B2 is information in which signature B2a is attached to specific information A2a. More specifically, certificate B2 is information in which signature B2a generated by signature unit 84 is attached to specific information A2a received by second mobile unit 60 from first mobile unit 10. Certificate B2 may include information other than the above. Specifically, for example, certificate B2 may include signature request information A2 (including, for example, specific information A2a and information identifying first mobile unit 10) and signature B2a. As described above, as shown in FIG. 2, signature unit 84 is preferably provided in tamper-resistant area 80a.

[0047] The second storage unit 85 stores information. For example, the second storage unit 85 may store a public key (hereinafter referred to as a "second public key") and a private key (second private key) generated by the second controller 80. The second storage unit 85 may store a certificate (digital certificate) for the second public key. The second storage unit 85 may store a program for causing the second controller 80 to function.

[0048] The second storage unit 85 stores information related to the signature B2a (see FIG. 1). Specifically, for example, the second storage unit 85 may store the certificate B2 (see FIG. 1) generated by the signature unit 84. The second storage unit 85 may store signature request information A2 (see FIG. 1) (e.g., CSR information) received from the first mobile object 10. The second storage unit 85 may store a list (certificate list) that manages multiple certificates B2 generated by the signature unit 84. The second storage unit 85 may store a list (revocation list) of certificates B2 that have become unusable.

[0049] As described above, the second storage unit 85 is preferably provided in the tamper-resistant area 80a. At least a part of the second storage unit 85 may be provided in an area that is not tamper-resistant (an area other than the tamper-resistant area 80a), and may be provided in, for example, a normal flash memory (the same applies to elements of the second controller 80 other than the second storage unit 85).

[0050] The second communication unit 87 (information transmitting / receiving device, communication module) exchanges information between the second mobile body 60 and the outside of the second mobile body 60. The second communication unit 87 communicates with the first mobile body 10 (more specifically, the first communication unit 37). The second communication unit 87 may communicate with a communication partner other than the first mobile body 10 (similar to the first communication unit 37 may communicate with a communication partner other than the second mobile body 60). For example, the second communication unit 87 may communicate with a person (the above-mentioned "third party") who receives the specific information A2a (see FIG. 1) from the first mobile body 10. For example, the second communication unit 87 may communicate with a higher-level certification authority (not shown). The second communication unit 87 includes a request information receiving unit 87a and a response information transmitting unit 87b.

[0051] The request information receiving unit 87a is capable of receiving request information A from the first mobile object 10 (first communication unit 37). More specifically, if the reception strength of the radio waves transmitted by the first communication unit 37 and received by the second communication unit 87 is equal to or greater than a predetermined value, the request information receiving unit 87a is capable of receiving request information A. The request information receiving unit 87a is capable of receiving connection request information A1 (see FIG. 1). The request information receiving unit 87a is capable of receiving signature request information A2 (see FIG. 1).

[0052] The response information transmitting unit 87b is capable of transmitting response information B to the first mobile object 10. The response information B includes the above-mentioned connection response information B1 (see FIG. 1) and the above-mentioned certificate B2 (see FIG. 1).

[0053] The second operation control unit 89 (control module) controls the operation of the second moving body 60 (corresponding to the control of the operation of the first moving body 10 by the first operation control unit 39). The second operation control unit 89 includes a second traveling control unit 89a (corresponding to the first traveling control unit 39a), a second turning control unit 89b (corresponding to the first turning control unit 39b), and a second attachment control unit 89c (corresponding to the first attachment control unit 39c).

[0054] (Activated) The authentication system 1 of this embodiment is configured to operate as follows. The authentication method of this embodiment is performed as follows. The authentication program of this embodiment causes a computer (first controller 30, second controller 80) to execute the following processes.

[0055] 1, in the authentication system 1, a first mobile entity 10 transmits specific information A2a to a second mobile entity 60, the second mobile entity 60 attaches a signature B2a to the specific information A2a, and the first mobile entity 10 receives the specific information A2a (certificate B2) with the signature B2a attached. This operation is divided into a second mobile entity search flow (S10, S20) and a certificate transmission / reception flow (S30, S40), as shown in FIGS. 3 and 4.

[0056] (Second mobile object search flow (S10, S20)) In the second mobile search flow (S10, S20) (e.g., nearby certificate authority search flow), a first mobile 10 (see FIG. 1) searches for a second mobile 60 (see FIG. 1) in the vicinity of the first mobile 10. The second mobile search flow (S10, S20) will be explained by dividing it into the operation on the first mobile 10 side shown in FIG. 3 (second mobile search flow S10 on the first mobile 10 side) and the operation on the second mobile 60 side shown in FIG. 4 (second mobile search flow S20 on the second mobile 60 side).

[0057] (First moving object 10 side second moving object search flow S10) A specific example of the second moving body search flow S10 on the first moving body 10 side shown in Fig. 3 is as follows: Below, each step (S11 to S13) of the second moving body search flow S10 on the first moving body 10 side will be explained with reference to Fig. 3.

[0058] In step S11, the first controller 30 (more specifically, the request information transmitting unit 37a) shown in FIG. 2 transmits request information A (request information A transmitting step). More specifically, the first controller 30 transmits connection request information A1 (see FIG. 1) (connection request information A1 transmitting step). For example, the request information transmitting unit 37a broadcasts the connection request information A1. At this time, the request information transmitting unit 37a may further transmit signature request information A2 (see FIG. 1).

[0059] In step S12, the first controller 30 waits for a response from the second controller 80 (a response information B waiting step). More specifically, the first controller 30 waits until connection response information B1 (see FIG. 1) is transmitted from the second controller 80 (a connection response information B1 waiting step).

[0060] In step S13, the first controller 30 determines whether the response information receiving unit 37b has received the connection response information B1 (whether there has been a response to the connection request information A1 (see FIG. 1)) (connection response information B1 (see FIG. 1) reception determining step). If the response information receiving unit 37b has received the connection response information B1 (YES in step S13), the first controller 30 causes the process flow to proceed to the certificate transmission / reception flow S30 on the first mobile object 10 side. If the response information receiving unit 37b has not received the connection response information B1 (NO in step S13), the process flow proceeds to step S14.

[0061] (Outline of step S14 etc.) If there is no response from the second moving body 60 to the request information A transmitted by the first moving body 10 (NO in step S13), the first moving body 10 operates as follows. In this case, the first moving body 10 (first controller 30) moves at least a portion of the first moving body 10 (step S14), and then retransmits the request information A to the second moving body 60 (step S11). The movement of at least a portion of the first moving body 10 may be movement (traveling) of the entire first moving body 10, movement (rotation) of the first upper rotating body 13 relative to the first lower traveling body 11, or movement of the first attachment 15 relative to the first upper rotating body 13. Below, a specific example in which the first moving body 10 travels will mainly be described.

[0062] In step S14, at least a part of the first moving body 10 moves (mechanically operates) (first moving body 10 operating step). In this example, the first moving body 10 runs (first moving body 10 running step).

[0063] In step S14, the reason why the first moving body 10 is allowed to travel when there is no response from the second controller 80 to the request information A transmitted by the first moving body 10 is, for example, as follows: When there is no response from the second controller 80, the first moving body 10 can change its position to search for a second moving body 60 in the vicinity of the first moving body 10. More specifically, as a result of the first moving body 10 changing its position, the reception strength of the radio waves received by the second communication unit 87 (radio waves transmitted by the first communication unit 37) increases, and the second moving body 60 may be able to receive the request information A.

[0064] The operation (travel) of the first moving body 10 in step S14 may be performed automatically by the first controller 30, or may be performed manually by an operator.

[0065] (When the operation (travel) of the first moving body 10 is automatic) A specific example of the case where the operation (travel) of the first moving body 10 in step S14 is performed by automatic driving is as follows. For example, a condition (first moving body 10 operation condition, e.g., first moving body 10 travel condition) for the first moving body 10 to start operating (traveling) is set in the first controller 30. For example, the first moving body 10 operation condition includes the absence of a response from the second controller 80 even after a predetermined time (first moving body 10 operation start time threshold) has elapsed since the first controller 30 started transmitting request information A (specifically, connection request information A1 (see FIG. 1)). Then, when the first controller 30 determines that the first moving body 10 operation condition (e.g., first moving body 10 travel condition) has been satisfied, the first operation control unit 39 operates (travels) the first moving body 10 by automatic driving.

[0066] At this time, it is preferable that the first controller 30 causes the first moving body 10 to travel in a direction in which the first moving body 10 approaches the second moving body 60. Specifically, for example, the first position sensor 21 and the second position sensor 71 detect the positions of the first moving body 10 and the second moving body 60. The first controller 30 calculates the relative position of the second moving body 60 with respect to the first moving body 10 based on the detection values ​​of the first position sensor 21 and the second position sensor 71. Then, the first traveling control unit 39a causes the first moving body 10 (first lower traveling body 11) to travel in a direction in which the first moving body 10 approaches the second moving body 60.

[0067] (When the operation (travel) of the first moving body 10 is manual) A specific example of the case where the operation (travel) of the first moving body 10 in step S14 is performed by manual operation by an operator is as follows. When the first controller 30 determines that the above-mentioned first moving body 10 operation conditions (e.g., first moving body 10 travel conditions) are satisfied, the first notification unit 23 outputs a notification. The notification output by the first notification unit 23 at this time is, for example, a notification urging the operator to perform an operation to operate (travel) the first moving body 10. The operator who receives this notification performs an operation to operate (travel) the first moving body 10.

[0068] Here, if the worker operates (travels) the first moving body 10 blindly, the costs (fuel, time, etc.) associated with the operation (travel) will increase. Therefore, it is preferable that the first relative position notifying unit 23a notify information regarding the relative positions of the first moving body 10 and the second moving body 60. For example, the first relative position notifying unit 23a may notify information regarding the orientation (direction) of the second moving body 60 relative to the first moving body 10. For example, the first relative position notifying unit 23a may notify the direction in which the worker should operate (travel) the first moving body 10. For example, the first relative position notifying unit 23a may notify information regarding the distance from the first moving body 10 to the second moving body 60. If there are multiple second moving bodies 60, the first relative position notifying unit 23a may notify the relative positions of the multiple second moving bodies 60 relative to the first moving body 10. If there are multiple second moving bodies 60, the first relative position notifying unit 23a may notify which of the multiple second moving bodies 60 is the second moving body 60 closest to the first moving body 10.

[0069] The first relative position notifying unit 23a may display or notify by voice information regarding the relative position between the first moving body 10 and the second moving body 60. For example, the first relative position notifying unit 23a may display an image indicating the relative positions of the first moving body 10 and the second moving body 60 when viewed from above. Specifically, for example, as shown in FIG. 5, the first relative position notifying unit 23a may display an image G10 indicating the first moving body 10 (see FIG. 1) and an image G60 indicating the second moving body 60 (see FIG. 1).

[0070] (Resending request information A (S11)) 2 retransmits the request information A (connection request information A1 (see FIG. 1)) to the second moving body 60 (return to step S11) after the first moving body 10 has been actuated (traveled) in step S14. Thereafter, the first controller 30 performs the processes of steps S12 and S13 again.

[0071] The retransmission of the request information A (step S11) may be performed automatically or manually by an operator.

[0072] A specific example of the case where the retransmission of the request information A (step S11) is performed automatically is as follows: For example, when the first controller 30 determines that the amount of operation of the first moving object 10 in step S14 (e.g., operation distance, operation time, etc.) exceeds a predetermined amount (request information A retransmission threshold), the first controller 30 may automatically retransmit the request information A.

[0073] A specific example of the case where the retransmission of the request information A (step S11) is performed by manual operation by the worker is as follows: When the first controller 30 determines that the amount of operation of the first moving body 10 in step S14 exceeds a predetermined amount (request information A retransmission threshold), the first notification unit 23 issues a notification. At this time, the first notification unit 23 issues a notification urging the worker to perform an operation (such as a switch operation) to send the request information A.

[0074] (Second moving body search flow S20 on the second moving body 60 side) A specific example of the second moving body search flow S20 on the second moving body 60 side shown in Fig. 4 is as follows: Below, each step (S21, S23) of the second moving body search flow S20 on the second moving body 60 side will be described with reference to Fig. 4.

[0075] In step S21, the second controller 80 shown in FIG. 2 determines whether or not request information A (more specifically, connection request information A1 (see FIG. 1)) has been received from the first controller 30 (request information A reception determination step). If the request information receiving unit 87a has not received the request information A (NO in step S21), the second controller 80 waits until it receives the connection request information A1 (connection request information A1 reception wait step). If the request information receiving unit 87a has received the request information A (YES in step S21), the flow proceeds to step S23.

[0076] In step S23, the second controller 80 (response information transmitting unit 87b) responds to the connection request information A1 (see FIG. 1). Specifically, the second controller 80 transmits connection response information B1 (see FIG. 1) to the first controller 30 (connection response information B1 transmitting step). Next, the flow proceeds to a certificate transmission / reception flow S40 on the second mobile object 60 side.

[0077] (Certificate sending and receiving flow (S30, S40)) 3 and 4, the first mobile body 10 shown in Fig. 1 sends signature request information A2 to the second mobile body 60, and the second mobile body 60 transmits certificate B2 (specific information A2a with signature B2a) to the first mobile body 10. The certificate transmission and reception flow (S30, S40) will be explained separately into the operation on the first mobile body 10 side shown in Fig. 3 (certificate transmission and reception flow S30 on the first mobile body 10 side) and the operation on the second mobile body 60 side shown in Fig. 4 (certificate transmission and reception flow S40 on the second mobile body 60 side).

[0078] (Certificate transmission / reception flow S30 on the first mobile unit 10 side) A specific example of the certificate transmission / reception flow S30 on the first mobile unit 10 side shown in Fig. 3 is as follows: Each step (S31 to S34) of the certificate transmission / reception flow S30 on the first mobile unit 10 side will be described below with reference to Fig. 3.

[0079] 2 generates specific information A2a (see FIG. 1) (e.g., a first public key) (specific information A2a generation step). As described above, the specific information generation unit 31 may generate information other than the specific information A2a (e.g., a first secret key).

[0080] In step S32, the first controller 30 (request information transmitting unit 37a) transmits the signature request information A2 (see FIG. 1) to the second controller 80 (request information receiving unit 87a) (signature request information A2 transmitting step). For example, the first controller 30 transmits the signature request information A2 encrypted with predetermined key information.

[0081] In step S33, the first controller 30 (response information transmitting unit 87b) receives the certificate B2 (see FIG. 1) from the second controller 80 (response information transmitting unit 87b). If the received information is encrypted, the first controller 30 decrypts the received information using predetermined key information.

[0082] In step S34, the first controller 30 saves (stores) the received certificate B2 (see FIG. 1) in the first storage unit 35.

[0083] (Certificate transmission / reception flow S40 on the second mobile unit 60 side) A specific example of the certificate transmission / reception flow S40 on the second mobile body 60 side shown in Figure 4 is as follows: Below, each step (S41 to S44) of the certificate transmission / reception flow S40 on the second mobile body 60 side will be described with reference to Figure 4.

[0084] In step S41, the second controller 80 shown in FIG. 2 determines whether the request information receiving unit 87a has received the signature request information A2 (see FIG. 1) (specific information A2a (see FIG. 1)) (signature request information A2 reception determining step, specific information A2a reception determining step). If the received information is encrypted, the second controller 80 decrypts the received information using predetermined key information. If the request information receiving unit 87a has not received the signature request information A2 (NO in step S41), the second controller 80 waits until it receives the signature request information A2 (signature request information A2 reception waiting step). If the request information receiving unit 87a has received the signature request information A2 (YES in step S41), the flow proceeds to step S42.

[0085] In step S42, the signing unit 84 generates a signature B2a (see FIG. 1) (signature B2a generation step). The signing unit 84 also generates information obtained by attaching the signature B2a to the specific information A2a (see FIG. 1) as a certificate B2 (see FIG. 1) (certificate B2 generation step).

[0086] In step S43, the second controller 80 (response information transmitting unit 87b) sends the certificate B2 to the first controller 30 (response information receiving unit 37b). For example, the second controller 80 transmits the certificate B2 encrypted with predetermined key information to the first controller 30.

[0087] In step S44, the second controller 80 saves (adds, stores) the certificate B2 (see FIG. 1) generated by the signature unit 84 in the second storage unit 85 (for example, a certificate list).

[0088] (How to use Certificate B2) For example, certificate B2 shown in FIG. 1 is used as follows: The first mobile body 10 (first controller 30) transmits certificate B2 (including specific information A2a and signature B2a) to a third party (not shown). The "third party" is a recipient of certificate B2 other than the first mobile body 10 and the second mobile body 60. The third party then uses certificate B2 to verify whether the specific information A2a is valid (authentic). More specifically, the third party uses certificate B2 to verify whether the received specific information A2a is information transmitted from the legitimate first mobile body 10 (legitimate first controller 30).

[0089] As a specific example, a case will be described in which a third party uses certificate B2 to verify whether specific information A2a, which is a public key (first public key), is valid. For example, the third party calculates a hash value (hash value H) of information including specific information A2a (e.g., information corresponding to signature request information A2) through a predetermined calculation. The third party also decrypts signature B2a in certificate B2 using the second public key received from second mobile entity 60. For example, signature B2a is obtained by second mobile entity 60 encrypting the hash value of signature request information A2 with the second private key. For example, if the information obtained by the third party decrypting signature B2a with the second public key matches the above-mentioned hash value H, it is shown that specific information A2a is valid (information sent from a legitimate first mobile entity 10).

[0090] (Authentication function on / off) The function (authentication function) of authenticating the specific information A2a by the second mobile body 60 may be configured to be switchable between an ON state and an OFF state. More specifically, a mobile body that can become the second mobile body 60 may be configured to be switchable between a state in which it has the function (authentication function) of the signature unit 84 (see FIG. 2) and is the second mobile body 60, and a state in which it does not have the function of the signature unit 84 and is not the second mobile body 60. More specifically, a mobile body that can become the second mobile body 60 may be configured to be switchable between a state in which it has the functions of the connection response information generation unit 83, the signature unit 84, the request information reception unit 87a, and the response information transmission unit 87b shown in FIG. 2, and a state in which it does not have these functions. Mobile bodies that can become the second mobile body 60 may include the first mobile body 10. That is, the first mobile body 10 may be switched to the second mobile body 60 by turning on the authentication function. More specifically, the first mobile body 10 shown in FIG. 1, which has been the party whose specific information A2a is authenticated, may become the second mobile body 60 that authenticates the specific information A2a. By turning the authentication function on and off, multiple mobile bodies may be able to mutually authenticate the specific information A2a. Hereinafter, a mobile body that can become the second mobile body 60 will simply be referred to as the "second mobile body 60."

[0091] For example, a second mobile body 60 with its authentication function turned off may not receive request information A. For example, even if a second mobile body 60 with its authentication function turned off receives request information A, it does not send response information B. A second mobile body 60 with its authentication function turned off does not have the function of the signature unit 84 (see FIG. 2) and does not perform the process of attaching signature B2a to specific information A2a. Note that a second mobile body 60 with its authentication function turned off may store a program for realizing the function of the signature unit 84. Even if the second mobile body 60 stores a program for realizing the function of the signature unit 84, if this program is not executed, it falls under the above-mentioned category of "not having the function of the signature unit 84."

[0092] A specific example of the operation of the second mobile body 60 when the authentication function is switched from an OFF state to an ON state is as follows. In this case, the second mobile body 60 receives information required as the second mobile body 60 (for example, as a certification authority). The "required information" is, for example, information related to the signature B2a. The second mobile body 60 may receive the "required information" from another mobile body, or from a server, etc.

[0093] The authentication function may be switched on and off (switched between an on state and an off state) automatically or manually by an operator.

[0094] The second controller 80 may automatically switch the authentication function on and off. For example, the second controller 80 may switch the authentication function on and off when it determines that a predetermined condition (authentication function switching condition) is satisfied. The authentication function switching condition may include a time condition. The authentication function switching condition may include a condition related to the status of the second moving body 60. For example, the authentication function switching condition may include a condition related to the duration for which the authentication function remains on. The authentication function switching condition may include a condition related to the position of the second moving body 60. The authentication function switching condition may include a condition related to the operating status of the second moving body 60. Specifically, for example, if the second moving body 60 is a work machine, the authentication function switching condition may include a condition related to whether the second moving body 60 is working (for example, whether the second attachment 65 is operating). The authentication function switching condition may include a condition related to the status of a moving body other than the second moving body 60.

[0095] The authentication function may be switched on and off by an operator (such as by operating a switch). The authentication function may be switched on and off by an operator in the second operator cab 63a or by remote control.

[0096] (Other functions of the second mobile unit 60) The second mobile entity 60 may have functions as a general certification authority or functions similar to those of a general certification authority, other than generating certificate B2. The second mobile entity 60 may perform a process to revoke certificate B2, for example, when the first private key is leaked. The second mobile entity 60 may perform a process to update a list of higher-level certification authorities (certification authorities that the second mobile entity 60 trusts). The list of higher-level certification authorities may be updated, for example, when a predetermined condition (list update condition) is satisfied. The second mobile entity 60 may perform long-distance communication or multi-hop communication to communicate with the higher-level certification authority.

[0097] (Modification 1: Example in which the first moving body 10 turns) Modification 1 will be described with reference to FIG. 6 and other figures. In the above example, when there is no response from the second moving body 60 to the request information A (e.g., connection request information A1) transmitted by the first moving body 10 shown in FIG. 1 (NO in step S13 in FIG. 3), the first moving body 10 is activated (step S14 in FIG. 3). In the above example, when NO in step S13 (see FIG. 3), the first moving body 10 mainly travels. On the other hand, when NO in step S13, the first upper rotating body 13 may rotate (step S114 in FIG. 6) (first upper rotating body 13 rotation step). Below, differences between the second moving body search flow S110 on the first moving body 10 side shown in FIG. 6 and the second moving body search flow S10 on the first moving body 10 side shown in FIG. 3 will be described with reference to FIG. 6. In addition, each step (S11 to S14, S111 to S114) of the second moving body search flow S110 on the first moving body 10 side shown in FIG. 6 will be described with reference to FIG. 6.

[0098] In step S114, if there is no response from the second moving body 60 to the request information A transmitted by the first moving body 10 shown in FIG. 1 (NO in step S13), the first upper rotating body 13 rotates (first upper rotating body 13 rotating step). The reason for this is, for example, as follows. When there is no response from the second controller 80, the second moving body 60 may be able to receive the request information A by changing the orientation of the first upper rotating body 13. More specifically, the first upper rotating body 13 may be provided with a first communication unit 37 (see FIG. 2). In this case, as a result of the first upper rotating body 13 changing its orientation, the reception strength of the radio waves received by the second communication unit 87 (see FIG. 2) may increase, and the second moving body 60 may be able to receive the request information A.

[0099] The rotation of the first upper rotating body 13 in step S114 may be performed automatically by the first controller 30 shown in Fig. 1, or may be performed manually by an operator, similar to the traveling of the first moving body 10 in step S14 shown in Fig. 3. Just as the above-mentioned "traveling conditions of the first moving body 10" may be set in the first controller 30, conditions under which the first upper rotating body 13 starts to rotate (rotation conditions of the first upper rotating body 13 (an example of the operating conditions of the first moving body 10)) may be set in the first controller 30.

[0100] The rotation of the first upper rotating body 13 in step S114 may be performed only once or multiple times (described later). For example, this rotation may be performed multiple times at predetermined rotation angles (e.g., 45 degrees) (described later).

[0101] (Resending request information A (S111)) After the first upper rotating body 13 rotates in step S114, the first controller 30 retransmits the request information A (connection request information A1) to the second moving body 60 (step S111) (request information A retransmission step, connection request information A1 retransmission step).

[0102] The retransmission of the request information A (step S111) may be performed automatically or manually by an operator (similar to the above-mentioned "(Retransmission of request information A (S11))"). For example, when the retransmission of the request information A (step S111) is performed automatically, the first controller 30 may automatically retransmit the request information A every time the first upper rotating body 13 rotates by a predetermined rotation angle (for example, 45 degrees). In this case, the first controller 30 may retransmit the request information A after stopping the rotation of the first upper rotating body 13, or may retransmit the request information A while rotating the first upper rotating body 13.

[0103] After step S111, the first controller 30 performs the process of step S112, which is the same as step S12 above, and step S113, which is the same as step S13 above. If the response information receiving unit 37b (see FIG. 2) receives the connection response information B1 (YES in step S113), the flow proceeds to the certificate transmission / reception flow S30 on the first mobile object 10 side.

[0104] (Operation of the first mobile object 10 after retransmission of request information A (S111)) If the first controller 30 (the response information receiving unit 37b (see FIG. 2)) does not receive the connection response information B1 (if NO in step S113), the first controller 30 performs, for example, the following process. For example, if NO in step S113, the first controller 30 may rotate the first upper rotating body 13 again (may return to step S114). After a NO determination is made in step S13, the number of times the rotation is performed in step S114 may be one or more. Also, for example, if NO in step S113, the first controller 30 may cause the first moving body 10 to travel (may proceed to step S14). For example, if a NO determination is made in step S13 and no response is obtained from the second moving body 60 even after the first upper rotating body 13 has rotated a predetermined angle (for example, 360°), the first controller 30 may cause the first moving body 10 to travel (step S14). In this case, even if the first moving body 10 is not traveling, by rotating the first upper rotating body 13, it is possible to obtain a response from the second moving body 60.

[0105] 6, after determining NO in step S13, the first controller 30 causes the first upper rotating body 13 to rotate (step S114) and then causes the first moving body 10 to travel (step S14). On the other hand, after determining NO in step S13, the first controller 30 may cause the first moving body 10 to travel and then cause the first upper rotating body 13 to rotate, or may cause the first moving body 10 to travel and the first upper rotating body 13 to rotate simultaneously.

[0106] (Variation 2: Example in which the first attachment 15 is activated) In the above example, when step S13 shown in FIGS. 3 and 6 is NO, the first moving body 10 (see FIG. 1) travels (step S14 in FIG. 3) and the first upper rotating body 13 (see FIG. 1) rotates (step S114 in FIG. 6) as described above. On the other hand, when step S13 is NO, the first attachment 15 (see FIG. 1) may operate (move) (first attachment 15 operation step). For example, it is possible that the first attachment 15 blocks the radio waves output by the first communication unit 37 (see FIG. 2). In this case, when the first attachment 15 moves relative to the first upper rotating body 13, the reception strength of the radio waves (radio waves transmitted by the first communication unit 37) received by the second communication unit 87 (see FIG. 2) increases, and the second moving body 60 may be able to receive the request information A. Specific examples of processing by the first controller 30 (see Figure 1) when the first attachment 15 (see Figure 1) operates when the answer is NO in step S13 are the same as when the first moving body 10 runs or turns when the answer is NO in step S13.

[0107] (Modification 3: Example in which the second moving body 60 moves) In the above example, when the second moving body 60 (second controller 80, request information receiving unit 87a (see FIG. 2)) shown in FIG. 1 has not received the request information A (NO in step S21 (see FIG. 4)), the second controller 80 waits until it receives the connection request information A1. On the other hand, when the result is NO in step S21, the second controller 80 may move (mechanically operate) at least a part of the second moving body 60 (second moving body 60 operation step). The movement of at least a part of the second moving body 60 may be movement (travel) of the entire second moving body 60, movement (rotation) of the second upper rotating body 63 relative to the second lower traveling body 61, or movement of the second attachment 65 relative to the second upper rotating body 63. The following mainly describes a case where the second moving body 60 travels (step S322 in FIG. 7) when the result is NO in step S21. Also, with regard to the second moving body search flow S220 on the side of the second moving body 60 shown in Fig. 7, differences from the second moving body search flow S20 on the side of the second moving body 60 shown in Fig. 4 will be explained. Also, each step (S21, S23, S322) of the second moving body search flow S220 on the side of the second moving body 60 shown in Fig. 7 will be explained with reference to Fig. 7.

[0108] 1 has not received the request information A (NO in step S21), at least a part of the second moving body 60 moves (mechanically operates) (second moving body 60 operating step). In this example, the second moving body 60 runs (second moving body 60 running step).

[0109] In step S322, the reason why the second moving object 60 is caused to travel when the second moving object 60 does not receive the request information A is the same as the reason why the first moving object 10 is caused to travel in step S14 of FIG.

[0110] The operation of the second moving body 60 shown in Fig. 1 in step S322 may be performed by automatic operation using the second controller 80, or may be performed by manual operation by an operator. This is similar to the operation (e.g., traveling) of the first moving body 10 shown in Fig. 1 in step S14 in Fig. 3, which is performed by automatic operation or manual operation.

[0111] In the above example, in step S14 (see FIG. 3 ), a “first moving body 10 operation condition,” which is a condition under which the first moving body 10 starts operating, is set in the first controller 30. Similarly, in step S322, a condition under which the second moving body 60 starts operating (running) (second moving body 60 operation condition, e.g., second moving body 60 running condition) may be set in the second controller 80. For example, the second moving body 60 operation condition includes the second controller 80 not receiving request information A (specifically, connection request information A1). Specifically, for example, the second moving body 60 operation condition may include a state in which the second moving body 60 does not receive request information A from the first moving body 10 when the second moving body 60 is in a state in which it can receive request information A from the first moving body 10, for a predetermined time (second moving body 60 operation start time threshold).

[0112] When the second moving body 60 is operated in step S322 by manual operation by an operator, the second relative position notifying unit 73a (see FIG. 2) may make the notification (similar to the first notifying unit 23).

[0113] The preferred travel direction and the preferred position after travel (movement) of the second moving body 60 in step S322 are, for example, as follows. For example, if only one first moving body 10 is present at the work site where the second moving body 60 is performing work, it is preferable that the second moving body 60 travels in a direction approaching the first moving body 10. If multiple first moving bodies 10 are present at the work site, it is preferable that the second moving body 60 moves to a position where it can receive request information A from as many first moving bodies 10 as possible. For example, if multiple first moving bodies 10 are present at the work site, it is preferable that the second moving body 60 moves to a position between the multiple first moving bodies 10 (such as a position sandwiched between or surrounded by the first moving bodies 10). For example, if two first moving bodies 10 are present, it is preferable that the second moving body 60 moves to or near the midpoint of the line segment connecting the two first moving bodies 10. For example, if there are three or more first moving bodies 10, it is preferable that the second moving body 60 moves to the position of or near the centroid of a polygon formed by connecting the multiple first moving bodies 10 with line segments when viewed from above.

[0114] After the second moving body 60 operates (runs) in step S322, the second controller 80 again determines whether or not request information A (connection request information A1) has been received (step S21) (request information A reception re-determination step, connection request information A1 reception re-determination step).

[0115] (Modification 4: Example in which the second upper rotating body 63 rotates) In the above-described third modification, the case where the second moving body 60 travels has been described as an example of a case where the second moving body 60 shown in FIG. 1 operates when the request information A has not been received (when NO is determined in step S21 (see FIG. 7)). On the other hand, when NO is determined in step S21, the second upper rotating body 63 may rotate (step S424 shown in FIG. 8) (second upper rotating body 63 rotation step). Below, the second moving body search flow S320 on the second moving body 60 side shown in FIG. 8 will be described in terms of differences from the second moving body search flow S220 on the second moving body 60 side shown in FIG. 7. Furthermore, each step (S21, S23, S322, S421, S424) of the second moving body search flow S320 on the second moving body 60 side shown in FIG. 8 will be described with reference to FIG. 8.

[0116] In step S424, if the second moving body 60 shown in Fig. 1 has not received the request information A (NO in step S21), the second upper rotating body 63 rotates (second upper rotating body 63 rotation step). The reason why the second upper rotating body 63 is rotated if NO in step S21 is the same as the reason why step S114 shown in Fig. 6 is performed (the reason why the first upper rotating body 13 is rotated when there is no response from the second moving body 60).

[0117] The second controller 80 shown in Figure 1 may also be set with conditions under which the second upper rotating body 63 starts to rotate (second upper rotating body 63 rotation conditions (an example of second moving body 60 operation conditions)), in the same way as the above-mentioned second moving body 60 running conditions are set.

[0118] The rotation of the second upper rotating body 63 in step S424 may be performed automatically by the second controller 80, or manually by an operator, similar to the traveling of the second moving body 60 in step S322 (see FIG. 7).

[0119] The rotation of the second upper rotating body 63 in step S424 may be performed only once or multiple times, similar to the rotation of the first upper rotating body 13 in step S114 (see FIG. 6).

[0120] After the second upper rotating body 63 rotates in step S424, the second controller 80 again determines whether or not request information A (connection request information A1) has been received (step 421) (request information A reception re-determination step, connection request information A1 reception re-determination step).

[0121] When the second controller 80 (request information receiving unit 87a (see FIG. 2)) receives the request information A (YES in step S421), the response information transmitting unit 87b (see FIG. 2) transmits connection response information B1 to the first mobile object 10 (step S23). Then, the flow proceeds to the certificate transmission / reception flow S40 on the second mobile object 60 side.

[0122] If the second controller 80 (request information receiving unit 87a (see FIG. 2)) does not receive the request information A (NO in step S421), the second controller 80 performs, for example, the following process. In this case, the second controller 80 may rotate the second upper rotating body 63 again (may return to step S424), or may cause the second moving body 60 to travel (may proceed to step S322).

[0123] (Modification 5: Example in which the second attachment 65 is activated) In the above example, when step S21 shown in FIGS. 7 and 8 is NO, the second moving body 60 (see FIG. 1) travels (step S322 in FIG. 7) and the second upper rotating body 63 (see FIG. 1) rotates (step S424 in FIG. 8) as described above. On the other hand, when step S21 is NO, the second attachment 65 (see FIG. 1) may be operated (moved) (second attachment 65 operation step). The reason for operating the second attachment 65 when step S21 is NO is the same as the reason for operating the first attachment 15 in the second modification. Specific examples of the processing of the second controller 80 (see FIG. 1) when the second attachment 65 (see FIG. 1) is operated when step S21 is NO are the same as when the first moving body 10 travels or rotates when step S13 in FIGS. 3 and 6 is NO.

[0124] (Consider) Consider a case where the authentication system 1 of this embodiment shown in FIG. 1 is not installed in a mobile object or the like. If the specific information A2a is not authenticated, the validity of the specific information A2a is not verified. This raises the risk of spoofing by an attacker. Furthermore, when transmitting and receiving the specific information A2a to authenticate the specific information A2a, if the communication distance is physically or logically long, there is a risk that the specific information A2a will be attacked along the communication path. Furthermore, when a conventional certification authority authenticates the specific information A2a (public key), there is a risk that it will take a long time to receive the authentication, and there is a risk that receiving the authentication will incur financial costs.

[0125] On the other hand, in the authentication system 1 of this embodiment, the second mobile body 60 is equipped with a function for authenticating the specific information A2a used by the first mobile body 10. When the specific information A2a is a public key, the second mobile body 60 can authenticate the specific information A2a of the first mobile body 10 without using a conventionally existing certification authority. Therefore, compared to when a conventionally existing certification authority authenticates the specific information A2a (public key), the specific information A2a can be authenticated more quickly and at lower cost.

[0126] In addition, in the authentication system 1, the second mobile body 60 can authenticate the specific information A2a of the first mobile body 10 in the vicinity of the second mobile body 60, thereby reducing the need for long-distance communication to authenticate the specific information A2a.

[0127] Furthermore, in the authentication system 1, at least one of the first moving body 10 and the second moving body 60 may operate mechanically (for example, move or turn). In this case, it is possible to find the state (for example, relative position (distance, direction)) of the first moving body 10 and the second moving body 60 that improves the radio wave environment for communication between the first moving body 10 and the second moving body 60. As a result, authentication of the specific information A2a can be performed reliably.

[0128] (Effects of the first invention) The authentication system 1 shown in FIG. 1 has the following advantages.

[0129] [Configuration 1-1] The authentication system 1 includes a first moving body 10 that can move, and a second moving body 60. The second moving body 60 is also movable and is provided separately from the first moving body 10.

[0130] [Configuration 1-2] The first mobile body 10 includes a request information transmitting unit 37a (see FIG. 2). The request information transmitting unit 37a transmits request information A to the second mobile body 60 via wireless communication. The request information A is information requesting that a signature B2a be attached to specific information A2a. As shown in FIG. 2, the second mobile body 60 includes a signature unit 84 and a response information transmitting unit 87b. When the signature unit 84 receives request information A from the first mobile body 10, it attaches a signature B2a (see FIG. 1) to the specific information A2a (see FIG. 1). The response information transmitting unit 87b can transmit a certificate B2 (see FIG. 1), which is information in which the signature B2a is attached to the specific information A2a, to the first mobile body 10 via wireless communication.

[0131] As shown in FIG. 1 , the above [Configuration 1-2] allows the second moving body 60 to attach a signature B2a to the specific information A2a of the first moving body 10 and transmit the specific information A2a (certificate B2) with the signature B2a attached to the first moving body 10. That is, the second moving body 60 can authenticate the specific information A2a of the first moving body 10. Here, the first moving body 10 and the second moving body 60 each perform wireless communication. In the above [Configuration 1-1], the first moving body 10 and the second moving body 60 are both capable of moving. Therefore, by moving at least one of the first moving body 10 and the second moving body 60, the relative positions (distance, direction) between the first moving body 10 and the second moving body 60 can be changed to improve the radio wave environment for the radio waves used for wireless communication. As a result, the possibility of wireless communication between the first moving body 10 and the second moving body 60 can be increased. As a result, the possibility of transmitting and receiving information for authenticating the specific information A2a between the first moving body 10 and the second moving body 60 can be increased. As a result, the specific information A2a used by the mobile object (first mobile object 10) can be easily authenticated.

[0132] (Effects of the second invention) [Configuration 2] As shown in Fig. 2, the second moving body 60 includes a second memory unit 85 that stores information related to the signature B2a (see Fig. 1). The signature unit 84 and the second memory unit 85 are provided in a tamper-resistant area 80a that is tamper-resistant.

[0133] The above [Configuration 2] makes it possible to prevent attacks on information relating to signature B2a (see FIG. 1) and attacks on signature part 84.

[0134] (Effect of the third invention) [Configuration 3] The first mobile body 10 is configured to operate as follows when there is no response from the second mobile body 60 to the request information A transmitted by the first mobile body 10. In this case, the first mobile body 10 is configured to move at least a portion of the first mobile body 10 (step S14 in FIG. 3), and then retransmit the request information A shown in FIG. 1 to the second mobile body 60 (step S11 in FIG. 3).

[0135] Due to the above [Configuration 3], even if the first moving body 10 shown in Figure 1 is in a situation where it cannot receive a response from the second moving body 60, the situation may change to one where the first moving body 10 can receive a response from the second moving body 60 by moving at least a part of the first moving body 10.

[0136] (Effect of the fourth invention) [Configuration 4] If there is no response from the second moving body 60 to the request information A sent by the first moving body 10, the first moving body 10 is configured to resend (step S11 in Figure 3) the request information A shown in Figure 1 to the second moving body 60 after traveling (step S14 in Figure 3).

[0137] Due to the above [Configuration 4], even if the first moving body 10 shown in Figure 1 is in a situation where it cannot receive a response from the second moving body 60, as the first moving body 10 moves, the situation may change to one where the first moving body 10 can receive a response from the second moving body 60.

[0138] (Effect of the fifth invention) The first moving body 10 includes a first lower running body 11 that allows the first moving body 10 to travel, and a first upper rotating body 13 that is rotatably attached to the first lower running body 11.

[0139] [Configuration 5] The first moving body 10 is configured to operate as follows when there is no response from the second moving body 60 to the request information A transmitted by the first moving body 10. In this case, the first moving body 10 is configured to rotate the first upper rotating body 13 relative to the first lower traveling body 11 (step S114 in FIG. 6), and then retransmit the request information A shown in FIG. 1 to the second moving body 60 (step S111 in FIG. 6).

[0140] Due to the above [Configuration 5], even if the first moving body 10 shown in Figure 1 is in a situation where it cannot receive a response from the second moving body 60, the rotation of the first upper rotating body 13 may change the situation to one where the first moving body 10 can receive a response from the second moving body 60.

[0141] (Effect of the sixth aspect of the invention) [Configuration 6] The second moving body 60 is configured to move at least a portion of the second moving body 60 when the second moving body 60 operation condition is satisfied (step S322 in FIG. 7). The second moving body 60 operation condition includes not receiving request information A from the first moving body 10.

[0142] Due to the above [Configuration 6], even if the second moving body 60 shown in Figure 1 is in a situation where it cannot receive request information A from the first moving body 10, the situation may change to one where the second moving body 60 can receive request information A from the first moving body 10 by moving at least a part of the second moving body 60.

[0143] (Effect of the seventh invention) [Configuration 7] The second moving body 60 is configured to move (step S322 in FIG. 7) when the second moving body 60 moving conditions are satisfied. The second moving body 60 moving conditions include not receiving request information A from the first moving body 10.

[0144] Due to the above [Configuration 7], even if the second moving body 60 shown in Figure 1 is in a situation where it cannot receive request information A from the first moving body 10, the second moving body 60 may move and the situation may change to one where it can receive request information A from the first moving body 10.

[0145] (Effect of the eighth aspect of the invention) The second moving body 60 comprises a second lower running body 61 that allows the second moving body 60 to travel, and a second upper rotating body 63 that is rotatably attached to the second lower running body 61.

[0146] [Configuration 8] The second moving body 60 is configured to rotate the second upper rotating body 63 relative to the second lower running body 61 (step S424 in FIG. 8) when the second moving body 60 rotation condition is satisfied. The second moving body 60 rotation condition includes not receiving request information A from the first moving body 10.

[0147] Due to the above [Configuration 8], even if the second moving body 60 shown in Figure 1 is in a situation where it cannot receive request information A from the first moving body 10, the rotation of the second upper rotating body 63 may change the situation to one where the second upper rotating body 63 can receive request information A from the first moving body 10.

[0148] (Effect of the ninth invention) [Configuration 9] The authentication system 1 includes a relative position notification unit (at least one of a first relative position notification unit 23a and a second relative position notification unit 73a). The relative position notification unit notifies information related to the relative position between the first moving body 10 and the second moving body 60 (see FIG. 5).

[0149] The above [Configuration 9] allows the worker who receives the notification from the relative position notification unit to understand how to operate the first moving body 10 or the second moving body 60.

[0150] (Effect of the 10th invention) [Configuration 10] The authentication system 1 includes a mobile body that can become a second mobile body 60. The "mobile body" is configured to be switchable between a state in which it has the functionality of the signature unit 84 shown in FIG. 2 and is the second mobile body 60, and a state in which it does not have the functionality of the signature unit 84 and is not the second mobile body 60.

[0151] The above [Configuration 10] allows the mobile entity to switch the function of the signature unit 84 (the function of authenticating the specific information A2a (see FIG. 1)) between on and off. As a result, for example, multiple mobile entities can mutually authenticate the specific information A2a.

[0152] (Effects of the eleventh invention) [Configuration 11] Each of the first moving body 10 and the second moving body 60 is a construction machine.

[0153] According to the above [Configuration 11], the two construction machines (the first moving body 10 and the second moving body 60) can achieve the same effect as the above "(Effect of the first invention)."

[0154] (Effects of the twelfth invention) The authentication method of this embodiment has the following advantages.

[0155] [Configuration 12] The authentication method is used for a first moving body 10 shown in FIG. 1 that is capable of travelling and a second moving body 60 that is capable of travelling and is provided separately from the first moving body 10. The authentication method includes a request information transmitting step (step S11 in FIG. 3), a signature step (step S42 in FIG. 4), and a response information transmitting step (step S43 in FIG. 4). In the request information transmitting step (step S11 in FIG. 3), the first moving body 10 shown in FIG. 1 transmits request information A, which is information requesting that a signature B2a be attached to specific information A2a, to the second moving body 60 via wireless communication. In the signature step (step S42 in FIG. 4), the second moving body 60 shown in FIG. 1 attaches a signature B2a to the specific information A2a when it receives the request information A from the first moving body 10. In the response information transmission step (step S42 in FIG. 4), the second mobile object 60 shown in FIG. 1 transmits the certificate B2, which is information in which the signature B2a is added to the specific information A2a, to the first mobile object 10 via wireless communication.

[0156] The above [Configuration 12] provides the same effect as the above "(Effect of the first invention)."

[0157] (Effect of the thirteenth invention) [Configuration 13] If there is no response from the second moving body 60 to the request information A sent by the first moving body 10, the first moving body 10 operates as follows: In this case, the first moving body 10 moves at least a part of the first moving body 10 (step S14 in FIG. 3), and then resends the request information A shown in FIG. 1 to the second moving body 60 (step S11 in FIG. 3).

[0158] The above [Configuration 13] provides the same effect as the above "(Effect of the third invention)."

[0159] (Effect of the 14th invention) [Configuration 14] The second moving body 60 moves at least a portion of the second moving body 60 when the second moving body 60 operating conditions are satisfied (step S322 in FIG. 7). The second moving body 60 operating conditions include not receiving request information A from the first moving body 10.

[0160] The above [Configuration 14] provides the same effect as the above "(Effect of the sixth invention)."

[0161] (Effect of the 15th invention) [Configuration 15] The effects of the authentication program are as follows. The authentication program is a program executed by a computer (first controller 30, second controller 80). The computers (first controller 30, second controller 80) are provided in a first mobile body 10 shown in FIG. 1 that is capable of travelling and a second mobile body 60 that is capable of travelling and provided separately from the first mobile body 10. The authentication program causes the computers (first controller 30, second controller 80) to execute a request information transmission step (step S11 in FIG. 3), a signature step (step S42 in FIG. 4), and a response information transmission step (step S43 in FIG. 4). In the request information transmission step (step S11 in FIG. 3), the first mobile body 10 shown in FIG. 1 transmits, via wireless communication, request information A, which is information requesting that a signature B2a be added to specific information A2a, to the second mobile body 60. In the signing step (step S42 in FIG. 4), when the second mobile body 60 shown in FIG. 1 receives request information A from the first mobile body 10, it attaches a signature B2a to the specific information A2a. In the response information sending step (step S42 in FIG. 4), the second mobile body 60 shown in FIG. 1 sends a certificate B2, which is information in which the signature B2a has been attached to the specific information A2a, to the first mobile body 10 via wireless communication.

[0162] The above [Configuration 15] provides the same effect as the above "(Effect of the first invention)."

[0163] (Other variations) The above-described embodiments (including modified examples) may be modified in various ways. For example, the number of components of the above-described embodiments may be changed, or some of the components may not be provided. For example, modified examples of the above-described embodiments may be combined in various ways. For example, components may be fixed or connected directly or indirectly. For example, the connections between components shown in FIG. 2 and other figures may be changed. For example, what is described as multiple different components or parts may be combined into a single component or part. For example, what is described as a single component or part may be provided as multiple different components or parts. For example, various parameters (such as thresholds) may be preset in the first controller 30 or the second controller 80, or may be manually set by an operator. For example, the various parameters may be fixed, manually changed, or automatically changed by the first controller 30 or the second controller 80 in response to certain conditions. For example, the order of steps in the flowcharts shown in FIGS. 3, 4, and 6 to 8 may be changed, some steps may not be performed, or steps from different flowcharts may be combined. For example, each component may have only a part of each characteristic (function, arrangement, shape, operation, etc.). [Explanation of symbols]

[0164] 1. Authentication System 10 First mobile body (mobile body) 11 First undercarriage 13 First upper rotating body 15 First Attachment 23a First relative position notification unit (relative position notification unit) 37a Request information transmission unit 60 Second mobile body (mobile body) 61 Second lower body 63 Second upper rotating body 73a second relative position notification unit (relative position notification unit) 80a Tamper-resistant area 84 Signature section 85 Second memory section 87b Response information transmission unit A requests intelligence A2a Specific Intelligence B2 Certificate B2a Signature

Claims

1. a first mobile body that is a travelable construction machine; a second moving body that is movable and provided separately from the first moving body; Equipped with The first moving body is a first attachment for performing the work; a request information transmitting unit that transmits request information, which is information requesting that a signature be attached to specific information, to the second mobile object via wireless communication; Equipped with The second moving body is a signature unit that affixes the signature to the specific information when the request information is received from the first mobile object; a response information transmitting unit capable of transmitting a certificate, which is information in which the signature is attached to the specific information, to the first mobile unit by wireless communication; Equipped with the first mobile body is configured to, if there is no response from the second mobile body to the request information transmitted by the first mobile body, retransmit the request information to the second mobile body after traveling; Authentication system.

2. a first mobile body that is a travelable construction machine; a second moving body that is movable and provided separately from the first moving body; Equipped with The first moving body is a first lower traveling body capable of traveling the first moving body; a first upper rotating body rotatably attached to the first lower traveling body; a first attachment provided on the first upper rotating body; a request information transmitting unit that transmits request information, which is information requesting that a signature be attached to specific information, to the second mobile object via wireless communication; Equipped with The second moving body is a signature unit that affixes the signature to the specific information when the request information is received from the first mobile object; a response information transmitting unit capable of transmitting a certificate, which is information in which the signature is attached to the specific information, to the first mobile unit by wireless communication; Equipped with the first moving body is configured to, when there is no response from the second moving body to the request information transmitted by the first moving body, retransmit the request information to the second moving body after rotating the first upper rotating body relative to the first lower traveling body. Authentication system.

3. a first mobile body that is a travelable construction machine; a second moving body that is movable and provided separately from the first moving body; Equipped with The first moving body is a first attachment for performing the work; a request information transmitting unit that transmits request information, which is information requesting that a signature be attached to specific information, to the second mobile object via wireless communication; Equipped with The second moving body is a signature unit that affixes the signature to the specific information when the request information is received from the first mobile object; a response information transmitting unit capable of transmitting a certificate, which is information in which the signature is attached to the specific information, to the first mobile unit by wireless communication; Equipped with the first mobile body is configured to, when there is no response from the second mobile body to the request information transmitted by the first mobile body, retransmit the request information to the second mobile body after activating the first attachment; Authentication system.

4. The authentication system according to any one of claims 1 to 3, the second mobile object includes a second storage unit that stores information about the signature; the signature unit and the second storage unit are provided in a tamper-resistant area having tamper resistance; Authentication system.

5. The authentication system according to any one of claims 1 to 4, the second moving body is configured to move at least a portion of the second moving body when a second moving body operation condition is satisfied, the second moving body being a condition including not receiving the request information from the first moving body; Authentication system.

6. 6. The authentication system according to claim 5, the second moving body is configured to move when a second moving body moving condition is satisfied, the second moving body being a condition including not receiving the request information from the first moving body; Authentication system.

7. 7. The authentication system according to claim 5 or 6, The second moving body is a second lower traveling body capable of traveling the second moving body; a second upper rotating body rotatably attached to the second lower traveling body; Equipped with the second moving body is configured to rotate the second upper rotating body relative to the second lower traveling body when a second moving body rotation condition is satisfied, the second moving body being a condition including not receiving the request information from the first moving body. Authentication system.

8. The authentication system according to any one of claims 1 to 7, a relative position notification unit that notifies information about the relative position between the first moving object and the second moving object; Authentication system.

9. The authentication system according to any one of claims 1 to 8, a moving body capable of becoming the second moving body, The mobile body is configured to be switchable between a state in which it has the function of the signature unit and is the second mobile body, and a state in which it does not have the function of the signature unit and is not the second mobile body. Authentication system.

10. The authentication system according to any one of claims 1 to 9, The second moving body is a construction machine. Authentication system.

11. An authentication method used for a first mobile body which is a construction machine capable of traveling and has a first attachment for performing work, and a second mobile body which is capable of traveling and is provided separately from the first mobile body, comprising: a request information transmitting step in which the first mobile object transmits, to the second mobile object via wireless communication, request information that requests that a signature be attached to specific information; a signature step of attaching the signature to the specific information when the second mobile entity receives the request information from the first mobile entity; a response information transmitting step in which the second mobile device transmits, to the first mobile device via wireless communication, a certificate that is information in which the signature is attached to the specific information; a request information retransmission step in which, if there is no response from the second moving object to the request information transmitted by the first moving object, the first moving object retransmits the request information to the second moving object after the first moving object has moved away; Equipped with Authentication method.

12. An authentication method used for a first moving body that is a travelable construction machine and a second moving body that is travelable and provided separately from the first moving body, comprising: The first moving body is a first lower traveling body capable of traveling the first moving body; a first upper rotating body rotatably attached to the first lower traveling body; a first attachment provided on the first upper rotating body; Equipped with a request information transmitting step in which the first mobile object transmits, to the second mobile object via wireless communication, request information that requests that a signature be attached to specific information; a signature step of attaching the signature to the specific information when the second mobile entity receives the request information from the first mobile entity; a response information transmitting step in which the second mobile device transmits, to the first mobile device via wireless communication, a certificate that is information in which the signature is attached to the specific information; a request information retransmission step in which, when there is no response from the second moving body to the request information transmitted by the first moving body, the first upper rotating body is rotated relative to the first lower traveling body, and then the first moving body retransmits the request information to the second moving body; Equipped with Authentication method.

13. An authentication method used for a first mobile body which is a construction machine capable of traveling and has a first attachment for performing work, and a second mobile body which is capable of traveling and is provided separately from the first mobile body, comprising: a request information transmitting step in which the first mobile object transmits, to the second mobile object via wireless communication, request information that requests that a signature be attached to specific information; a signature step of attaching the signature to the specific information when the second mobile entity receives the request information from the first mobile entity; a response information transmitting step in which the second mobile device transmits, to the first mobile device via wireless communication, a certificate that is information in which the signature is attached to the specific information; a request information retransmission step in which, if there is no response from the second mobile body to the request information transmitted by the first mobile body, the first mobile body retransmits the request information to the second mobile body after activating the first attachment; Equipped with Authentication method.

14. An authentication program to be executed by a computer provided on a first mobile body which is a construction machine capable of traveling and has a first attachment for performing work, and a second mobile body which is capable of traveling and provided separately from the first mobile body, a request information transmitting step in which the first mobile object transmits, to the second mobile object via wireless communication, request information that requests that a signature be attached to specific information; a signature step of attaching the signature to the specific information when the second mobile entity receives the request information from the first mobile entity; a response information transmitting step in which the second mobile device transmits, to the first mobile device via wireless communication, a certificate that is information in which the signature is attached to the specific information; a request information retransmission step in which, if there is no response from the second moving object to the request information transmitted by the first moving object, the first moving object retransmits the request information to the second moving object after the first moving object has moved away; causing the computer to execute Certification program.

15. An authentication program to be executed by a computer provided in a first mobile body which is a travelable construction machine and a second mobile body which is travelable and provided separately from the first mobile body, The first moving body is a first lower traveling body capable of traveling the first moving body; a first upper rotating body rotatably attached to the first lower traveling body; a first attachment provided on the first upper rotating body; Equipped with a request information transmitting step in which the first mobile object transmits, to the second mobile object via wireless communication, request information that requests that a signature be attached to specific information; a signature step of attaching the signature to the specific information when the second mobile entity receives the request information from the first mobile entity; a response information transmitting step in which the second mobile device transmits, to the first mobile device via wireless communication, a certificate that is information in which the signature is attached to the specific information; a request information retransmission step in which, when there is no response from the second moving body to the request information transmitted by the first moving body, the first upper rotating body is rotated relative to the first lower traveling body, and then the first moving body retransmits the request information to the second moving body; causing the computer to execute Certification program.

16. An authentication program to be executed by a computer provided on a first mobile body which is a construction machine capable of traveling and has a first attachment for performing work, and a second mobile body which is capable of traveling and provided separately from the first mobile body, a request information transmitting step in which the first mobile object transmits, to the second mobile object via wireless communication, request information that requests that a signature be attached to specific information; a signature step of attaching the signature to the specific information when the second mobile entity receives the request information from the first mobile entity; a response information transmitting step in which the second mobile device transmits, to the first mobile device via wireless communication, a certificate that is information in which the signature is attached to the specific information; a request information retransmission step in which, if there is no response from the second mobile body to the request information transmitted by the first mobile body, the first mobile body retransmits the request information to the second mobile body after activating the first attachment; causing the computer to execute Certification program.

Images