Wireless ID authentication device and wireless ID authentication system

Abstract

To prevent a door from unintentionally opening upon an authentication device responding to an authentication key being in a place other than the authentication area.SOLUTION: A radio ID authentication device performs authentication processing for an authentication key by communicating with the authentication key with short-distance radio communication, comprising: a first antenna and a second antenna that are arranged in one side along an entry direction of a doorway, a calculation part that calculates a first distance between the first antenna and the authentication key as well as a second distance between the second antenna and the authentication key, and a determination part that verifies the authentication of the authentication key when conditions based on the first distance and the second distance are satisfied.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present invention relates to a wireless ID authentication device and a wireless ID authentication system.

Background Art

[0002] A door control system that automatically controls the opening and closing of a door when authentication information is authenticated is known (see, for example, Patent Document 1). [Prior Art Documents] [Patent Documents] [Patent Document 1] JP-A-2019-094727

Summary of the Invention

[0003] In order to solve the above problems, in one aspect of the present invention, a wireless ID authentication device is provided. The wireless ID authentication device is a wireless ID authentication device that performs short-range wireless communication with an authentication key to perform authentication processing of the authentication key, and includes a first antenna and a second antenna installed on one side of the entrance / exit direction of the entrance / exit, a calculation unit that calculates a first distance between the first antenna and the authentication key and a second distance between the second antenna and the authentication key, and a determination unit that determines whether the authentication key can be authenticated when a condition determined based on the first distance and the second distance is satisfied.

[0004] In one aspect of the present invention, a wireless ID authentication system is provided. The wireless ID authentication system includes an authentication key and an authentication device, and in the wireless ID authentication system that performs short-range wireless communication between the authentication key and the authentication device to perform authentication processing of the authentication key, the authentication device includes a first antenna and a second antenna installed on one side of the entrance / exit direction of the entrance / exit, a calculation unit that calculates a first distance between the first antenna and the authentication key and a second distance between the second antenna and the authentication key, and a determination unit that determines whether the authentication key can be authenticated when a condition determined based on the first distance and the second distance is satisfied.

[0005] It should be noted that the above summary of the invention does not enumerate all the necessary features of the present invention. Furthermore, subcombinations of these features may also constitute an invention. [Brief explanation of the drawing]

[0006] [Figure 1] An example of the schematic configuration of the wireless ID authentication system 100 in this embodiment is shown. [Figure 2] An example of the arrangement configuration of the wireless ID authentication system 100 in this embodiment is shown. [Figure 3] An example of an authentication area in a comparative example is shown. [Figure 4] A first example of the authentication area in this embodiment is shown. [Figure 5] A second example of the authentication area in this embodiment is shown. [Figure 6] A third example of the authentication area in this embodiment is shown. [Figure 7] A fourth example of the authentication area in this embodiment is shown. [Figure 8] A fifth example of the authentication area in this embodiment is shown. [Figure 9] This figure shows an example of a computer in which multiple aspects of the present invention may be embodied, either whole or in part. [Modes for carrying out the invention]

[0007] The present invention will be described below through embodiments of the invention, but these embodiments are not intended to limit the invention as defined in the claims. Furthermore, not all combinations of features described in the embodiments are necessarily essential to the solution of the invention.

[0008] Figure 1 shows an example of the schematic configuration of the wireless ID authentication system 100 in this embodiment. As shown in Figure 1, the wireless ID authentication system 100 includes an authentication key 10 and a wireless ID authentication device 20. The wireless ID authentication device 20 includes a wireless communication unit 30 and an electric lock unit 40. The wireless communication unit 30 includes a first antenna 31 and a second antenna 32. The electric lock unit 40 includes a calculation unit 41, a determination unit 42, and an electric lock 43.

[0009] Figure 2 shows an example of the arrangement configuration of the wireless ID authentication system 100 in this embodiment. As shown in Figure 2, the electric lock unit 40 is embedded in a door 50 provided on the entrance surface 51 of the entrance. A first antenna 31 and a second antenna 32 are arranged on the exterior sides 52 and 53 perpendicular to the entrance surface 51 of the entrance. However, the first antenna 31 and the second antenna 32 may also be arranged on the interior side of the sides 52 and 53. Furthermore, the first antenna 31 and the second antenna 32 are arranged at a distance of a predetermined third distance L or more from either the exterior or interior side of the entrance surface 51. The third distance L at which the first antenna 31 and the second antenna 32 are separated from the entrance surface 51 may be different distances. The first antenna 31 and the second antenna 32 each have multiple antennas. As shown in Figure 2, the authentication key 10 is held in the hand of a user 200 who is about to enter the interior from the exterior side.

[0010] The wireless ID authentication system 100 in this embodiment is installed in elevator lobbies, entrance / exit gates to specific areas partitioned within floors, guest rooms, tenant spaces, lockers, etc., in large facilities such as commercial office buildings, apartment buildings and other multi-unit housing, public facilities, and hotels.

[0011] Authentication key 10 is a key that grants permission to enter and exit predetermined areas according to its intended use. For example, it could be an employee authentication key owned by an employee of a company located in a commercial office building, an authentication key used by a resident of an apartment building to enter and exit the building, an administrative authentication key used by a building's cleaning staff when cleaning common areas, or a master authentication key owned by a building management company.

[0012] The authentication key 10 consists of an RFID tag (Radio Frequency Identification Tag) itself, which is composed of a CPU, ROM, RAM, flash RAM, etc. that enables short-range wireless communication using electromagnetic fields or radio waves, or various media on which it is installed (for example, card-type storage media or mobile phones (including smartphones)). Short-range wireless communication includes ultra-wideband wireless communication and Bluetooth® communication. Multiple communication methods may be used interchangeably. For example, Bluetooth® communication may be used in standby mode (polling), and ultra-wideband wireless communication may be used after activation. The authentication key 10 is assigned an identification ID code to identify itself during the authentication process, and this identification ID code is pre-registered with the wireless ID authentication device 20 corresponding to the usage rights granted to each user.

[0013] The wireless communication unit 30 performs wireless communication with one or more authentication keys 10 located within the communication area, and repeatedly transmits ID transmission requests (polling) at predetermined intervals using the first antenna 31 and the second antenna 32 to obtain ID signals from the authentication keys 10 located within the communication area.

[0014] When the authentication key 10 receives an ID transmission request from the wireless communication unit 30, it encrypts its own identification ID code using a predetermined algorithm to obtain identification ID information, adds predetermined information to the ID information, and transmits it to the wireless communication unit 30 as reply information. The wireless communication unit 30 receives the reply information transmitted from the authentication key 10 and transmits it to the determination unit 42. The first antenna 31 and the second antenna 32 each have multiple antennas, and multiple wireless signals received from the authentication key 10 by the multiple antennas of the first antenna 31 and the second antenna 32 have a reception time difference and a phase difference. The wireless communication unit 30 transmits this reception time difference and phase difference information to the calculation unit 41 of the electric lock unit 40.

[0015] As shown in Figure 2, the wireless ID authentication system 100 in this embodiment authenticates a user 200 attempting to enter the room from the outside and unlocks the entrance door 50. In this embodiment, the door 50 is locked by default. On the other hand, for example, a user 200 attempting to exit from the inside to the outside unlocks the door 50 by pressing the unlock button and exits to the outside, so authentication is not performed for users 200 attempting to exit from the inside to the outside. Similarly, authentication is not performed for users 200 walking inside. However, if a user 200 inside is holding the authentication key 10, the authentication key 10 and the wireless ID authentication device 20 may come into close proximity, causing the authentication key 10 and the wireless ID authentication device 20 to react, and the door 50 may be unlocked unintentionally.

[0016] Figure 3 shows an example of an authentication area in a comparative example. As shown in Figure 3, when the antenna 34 of the wireless ID authentication device 20 is installed on the entrance / exit surface 51 of the entrance, the door 50 is unlocked by reacting with the authentication key 10 located in an area 60 at a certain distance from the antenna 34. This area 60 includes the "intended authentication area" on the outside, but also the "undesirable authentication area" on the inside. Therefore, there were cases where the door 50 was unintentionally unlocked when a user 200 passed through the "undesirable authentication area" on the inside. The wireless ID authentication system 100 in this embodiment aims to avoid such a situation by limiting the area where authentication takes place and unlocking the door 50 in response only to wireless signals arriving from the outside.

[0017] In Figure 1, the calculation unit 41 calculates the first and second angles of arrival from the authentication key 10 to the first antenna 31 and the second antenna 32 based on at least one of the reception time difference and phase difference information received from the wireless communication unit 30. The calculation unit calculates the first and second distances based on the propagation time of the radio signal received by the first antenna 31 and the second antenna 32 from the authentication key 10. Specifically, the calculation unit 41 calculates the first distance between the first antenna 31 and the authentication key 10 and the second distance between the second antenna 32 and the authentication key 10 using the principles of TOF (Time of Flight), TOA (Time of Arrival), and TDOA (Time Difference of Arrival). The calculation unit 41 may calculate a first distance between the first antenna 31 and the authentication key 10 and a second distance between the second antenna 32 and the authentication key 10 based on the first angle of arrival, the second angle of arrival, and the distance between the first antenna 31 and the second antenna 32. That is, the calculation unit 41 may use the AoA (Angle of Arrival) or AoD (Angle of Departure) principle to detect the direction of the authentication key 10 and calculate the distance to the authentication key 10. The authentication key 10 may have multiple transmitting antennas. The calculation unit 41 transmits the calculated first distance and second distance to the determination unit 42.

[0018] When the determination unit 42 satisfies the conditions determined based on the first distance and the second distance received from the calculation unit 41, it determines whether the authentication key 10 can be authenticated. This condition may be, for example, a condition (condition 1) that the first distance is within a predetermined first range, and a condition (condition 2) that the second distance is within a predetermined second range. This condition may be, for example, a condition (condition 1) that the first distance is within a predetermined first range, and a condition (condition 3) that the sum of the first distance and the second distance is within a predetermined third range. This condition may be a condition (condition 2) that the second distance is within a predetermined second range, and a condition (condition 3) that the sum of the first distance and the second distance is within a predetermined third range.

[0019] Also, when the determination unit 42 satisfies three or more conditions determined based on the first distance and the second distance, it may determine whether the authentication key 10 can be authenticated. In this case, the three or more conditions may be, for example, a condition (condition 1) that the first distance is within a predetermined first range, a condition (condition 2) that the second distance is within a predetermined second range, and a condition (condition 3) that the sum of the first distance and the second distance is within a predetermined third range.

[0020] The first range and the second range may be the same distance range or different distance ranges. For example, when the side surface 52 is relatively far from the door 50 and the side surface 53 is relatively close to the door 50, the first range may be set long and the second range may be set short. Thereby, the authentication area can be set to an appropriate range.

[0021] The determination unit 42 determines whether to authenticate the wireless signal from the authentication key 10 when at least two conditions determined based on the first distance and the second distance are satisfied. In other words, the case where at least two conditions determined based on the first distance and the second distance are satisfied means that the authentication key 10 is present in an appropriate authentication area. Therefore, the determination unit 42 determines whether to authenticate the authentication key 10 when the authentication key 10 is present in an appropriate authentication area, while it does not determine whether to authenticate the authentication key 10 when the authentication key 10 is not present in an appropriate authentication area.

[0022] When the authentication key 10 is present in an appropriate authentication area, the determination unit 42 performs an authentication process to determine whether the identification ID code obtained by decrypting the identification ID information using the reply information transmitted from the authentication key 10 and the pre-stored pre-registration information is pre-registered. When it is confirmed that it is registered, the determination unit 42 outputs a locking / unlocking signal to the electric lock 43 to unlock the electric lock 43. When the door 50 is an automatic door, an operation of unlocking the electric lock 43 to open the automatic door is performed.

[0023] Based on the locking / unlocking signal received from the determination unit 23, the electric lock 43 drives driving means such as a motor or a solenoid to move the deadbolt forward and backward with respect to the locking hole of the strike in the door frame, thereby electrically locking and unlocking the lock.

[0024] FIG. 4 shows a first example of the authentication area in the present embodiment. In FIG. 4, area 61 indicates an area that satisfies a condition (condition 1) that the first distance (the distance from the first antenna 31) is within a predetermined first range, area 62 indicates an area that satisfies a condition (condition 2) that the second distance (the distance from the second antenna 33) is within a predetermined second range, and area 63 indicates an area that satisfies a condition (condition 3) that the sum of the first distance and the second distance is within a predetermined third range. In the first example, the determination unit 42 determines whether to authenticate the authentication key 10 when all of condition 1, condition 2, and condition 3 are satisfied (condition 1 + condition 2 + condition 3). Therefore, the authentication area in the first example is area 64 indicated by hatching in FIG. 4.

[0025] Figure 5 shows a second example of the authentication area in this embodiment. In Figure 5, area 61 represents an area that satisfies the condition (condition 1) that the first distance is within a predetermined first range, area 62 represents an area that satisfies the condition (condition 2) that the second distance is within a predetermined second range, and area 63 represents an area that satisfies the condition (condition 3) that the sum of the first distance and the second distance is within a predetermined third range. In the second example, the determination unit 42 determines whether or not the authentication key 10 can be authenticated when conditions 2 and 3 are met (condition 2 + condition 3). Therefore, the authentication area in the second example is area 65, which is shown by hatching in Figure 5.

[0026] Figure 6 shows a third example of the authentication area in this embodiment. In Figure 6, area 61 represents an area that satisfies the condition (condition 1) that the first distance is within a predetermined first range, area 62 represents an area that satisfies the condition (condition 2) that the second distance is within a predetermined second range, and area 63 represents an area that satisfies the condition (condition 3) that the sum of the first distance and the second distance is within a predetermined third range. In the third example, the determination unit 42 determines whether or not the authentication key 10 can be authenticated when conditions 1 and 3 are met (condition 1 + condition 3). Therefore, the authentication area in the third example is area 66, which is shown by hatching in Figure 6.

[0027] Figure 7 shows a fourth example of the authentication area in this embodiment. In Figure 7, area 61 represents an area that satisfies the condition (condition 1) that the first distance is within a predetermined first range, area 62 represents an area that satisfies the condition (condition 2) that the second distance is within a predetermined second range, and area 63 represents an area that satisfies the condition (condition 3) that the sum of the first distance and the second distance is within a predetermined third range. In the fourth example, the determination unit 42 determines whether or not the authentication key 10 can be authenticated when both conditions 1 and 2 are met (condition 1 + condition 2). Therefore, the authentication area in the fourth example is area 67, which is shown by hatching in Figure 7.

[0028] Figure 8 shows a fifth example of the authentication area in this embodiment. In Figure 8, area 61 represents an area that satisfies the condition (condition 1) that the first distance is within a predetermined first range, area 62 represents an area that satisfies the condition (condition 2) that the second distance is within a predetermined second range, and area 63 represents an area that satisfies the condition (condition 3) that the sum of the first distance and the second distance is within a predetermined third range. In the fifth example, the determination unit 42 determines whether or not the authentication key 10 can be authenticated if condition 3 is met. Therefore, the authentication area in the fifth example is area 63, which is shown by hatching in Figure 8.

[0029] In the above, the determination unit 42 determined whether authentication was possible for the wireless signal from the authentication key 10 if at least two conditions, which are determined based on the first distance and the second distance, were met. However, other conditions may be added. Other conditions may include, for example, the condition that the signal is within a predetermined distance from the entrance / exit surface 51 (or door 50), or the condition that the time when the first antenna 31 and the second antenna 32 received the wireless signal from the authentication key 10 is within a predetermined period (for example, from 9:00 to 17:00).

[0030] According to the wireless ID authentication system 100 in this embodiment, the authentication area can be set to an appropriate range by the above configuration. Therefore, it is possible to avoid a situation in which the authentication key 10 held by the user 200 inside the room reacts with the wireless ID authentication device 20, causing the door 50 to unlock unintentionally.

[0031] Furthermore, various embodiments of the present invention may be described with reference to flowcharts and block diagrams, where a block may represent (1) a stage in a process in which an operation is performed or (2) a section of a device having the role of performing an operation. Specific stages and sections may be implemented by dedicated circuits, programmable circuits supplied with computer-readable instructions stored on a computer-readable medium, and / or processors supplied with computer-readable instructions stored on a computer-readable medium. Dedicated circuits may include digital and / or analog hardware circuits, and may include integrated circuits (ICs) and / or discrete circuits. Programmable circuits may include reconfigurable hardware circuits, including logical AND, logical OR, logical XOR, logical NAND, logical NOR, and other logic operations, flip-flops, registers, memory elements such as field-programmable gate arrays (FPGAs), programmable logic arrays (PLAs), etc.

[0032] Computer-readable media may include any tangible device capable of storing instructions to be executed by a suitable device, and as a result, computer-readable media having instructions stored therein will comprise a product containing instructions that can be executed to create means for performing operations specified in a flowchart or block diagram. Examples of computer-readable media may include electronic storage media, magnetic storage media, optical storage media, electromagnetic storage media, semiconductor storage media, etc. More specific examples of computer-readable media may include floppy disks, diskettes, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), electrically erasable programmable read-only memory (EEPROM), static random access memory (SRAM), compact disk read-only memory (CD-ROM), digital versatile disk (DVD), Blu-ray (RTM) disk, memory stick, integrated circuit card, etc.

[0033] Computer-readable instructions may include assembler instructions, instruction set architecture (ISA) instructions, machine instructions, machine-dependent instructions, microcode, firmware instructions, state setting data, or source code or object code written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Smalltalk®, Java®, C++, and traditional procedural programming languages ​​such as the C programming language or similar programming languages.

[0034] Computer-readable instructions may be provided locally or via a wide area network (WAN), such as a local area network (LAN) or the internet, to a processor or programmable circuit of a general-purpose computer, a special-purpose computer, or other programmable data processing device, and these instructions may be executed to create means for performing operations specified in a flowchart or block diagram. Examples of processors include computer processors, processing units, microprocessors, digital signal processors, controllers, microcontrollers, and the like.

[0035] Figure 9 shows an example of a computer 2200 in which multiple aspects of the present invention may be embodied in whole or in part. A program installed on the computer 2200 can cause the computer 2200 to function as an operation or one or more sections of an apparatus according to an embodiment of the present invention, or to execute such operation or one or more sections, and / or to cause the computer 2200 to execute a process or a stage of such process according to an embodiment of the present invention. Such a program may be executed by the CPU 2212 to cause the computer 2200 to perform a particular operation associated with some or all of the blocks in the flowcharts and block diagrams described herein.

[0036] The computer 2200 according to this embodiment includes a CPU 2212, RAM 2214, a graphics controller 2216, and a display device 2218, which are interconnected by a host controller 2210. The computer 2200 also includes input / output units such as a communication interface 2222, a hard disk drive 2224, a DVD-ROM drive 2226, and an IC card drive, which are connected to the host controller 2210 via an input / output controller 2220. The computer also includes legacy input / output units such as a ROM 2230 and a keyboard 2242, which are connected to the input / output controller 2220 via an input / output chip 2240.

[0037] The CPU 2212 operates according to programs stored in the ROM 2230 and RAM 2214, thereby controlling each unit. The graphics controller 2216 retrieves image data generated by the CPU 2212 from a frame buffer provided in RAM 2214 or from itself, and displays the image data on the display device 2218.

[0038] The communication interface 2222 communicates with other electronic devices via a network. The hard disk drive 2224 stores programs and data used by the CPU 2212 in the computer 2200. The DVD-ROM drive 2226 reads programs or data from the DVD-ROM 2201 and provides them to the hard disk drive 2224 via the RAM 2214. The IC card drive reads programs and data from the IC card and / or writes programs and data to the IC card.

[0039] The ROM 2230 stores boot programs and / or programs that depend on the computer 2200's hardware, which are executed by the computer 2200 when activated. The input / output chip 2240 may also connect various input / output units to the input / output controller 2220 via parallel ports, serial ports, keyboard ports, mouse ports, etc.

[0040] The program is provided on a computer-readable medium such as a DVD-ROM 2201 or an IC card. The program is read from the computer-readable medium and installed on a hard disk drive 2224, RAM 2214, or ROM 2230, which are also examples of computer-readable medium, and executed by the CPU 2212. The information processing described within these programs is read by the computer 2200, resulting in coordination between the program and the various types of hardware resources described above. The apparatus or method may be configured to realize the manipulation or processing of information in accordance with the use of the computer 2200.

[0041] For example, when communication is performed between a computer 2200 and an external device, the CPU 2212 may execute a communication program loaded into RAM 2214 and, based on the processing described in the communication program, instruct the communication interface 2222 to perform communication processing. Under the control of the CPU 2212, the communication interface 2222 reads transmission data stored in a transmission buffer processing area provided in a recording medium such as RAM 2214, a hard disk drive 2224, a DVD-ROM 2201, or an IC card, transmits the read transmission data to the network, or writes received data received from the network to a reception buffer processing area provided on the recording medium.

[0042] Furthermore, the CPU 2212 may read all or necessary parts of files or databases stored on external storage media such as the hard disk drive 2224, DVD-ROM drive 2226 (DVD-ROM 2201), or IC card into the RAM 2214, and perform various types of processing on the data in the RAM 2214. The CPU 2212 then writes the processed data back to the external storage media.

[0043] Various types of information, such as various types of programs, data, tables, and databases, may be stored on the recording medium and subjected to information processing. The CPU 2212 may perform various types of processing on the data read from RAM 2214, including various types of operations, information processing, conditional judgments, conditional branching, unconditional branching, information retrieval / replacement, etc., as described throughout this disclosure and specified by the program instruction sequence, and write the results back to RAM 2214. The CPU 2212 may also retrieve information in files, databases, etc., within the recording medium. For example, if multiple entries are stored in the recording medium, each having an attribute value of a first attribute associated with an attribute value of a second attribute, the CPU 2212 may search among the multiple entries for an entry that matches the condition for which the attribute value of the first attribute is specified, read the attribute value of the second attribute stored in that entry, and thereby obtain the attribute value of the second attribute associated with the first attribute that satisfies a predetermined condition.

[0044] The programs or software modules described above may be stored on or near computer 2200 on a computer-readable medium. Alternatively, recording media such as hard disks or RAM provided within a server system connected to a dedicated communication network or the Internet can be used as computer-readable media, thereby providing programs to computer 2200 via the network.

[0045] Although the present invention has been described above using embodiments, the technical scope of the present invention is not limited to the scope described in the above embodiments. It will be apparent to those skilled in the art that various modifications or improvements can be made to the above embodiments. It will be clear from the claims that such modified or improved forms may also be included in the technical scope of the present invention.

[0046] It should be noted that the execution order of operations, procedures, steps, and stages in the apparatus, systems, programs, and methods shown in the claims, specifications, and drawings is not explicitly stated as "before," "prior to," etc., and that these can be implemented in any order unless the output of a previous process is used in a later process. Even if the operation flow in the claims, specifications, and drawings is described using phrases such as "first," "next," etc. for convenience, it does not mean that it is essential to perform the operations in that order. [Explanation of symbols]

[0047] 10 Authentication Key, 20 Wireless ID Authentication Device, 30 Wireless Communication Unit, 31, 32 Antenna, 40 Electric Lock Unit, 41 Calculation Unit, 42 Judgment Unit, 43 Electric Lock, 50 Door, 51-53 Wall, 60-67 Area, 100 Wireless ID Authentication System, 200 User, 2200 Computer, 2201 DVD-ROM, 2210 Host Controller, 2212 CPU, 2214 RAM, 2216 Graphics Controller, 2218 Display Device, 2220 Input / Output Controller, 2222 Communication Interface, 2224 Hard Disk Drive, 2226 DVD-ROM Drive, 2230 ROM, 2240 Input / Output Chip, 2242 Keyboard

Claims

1. In a wireless ID authentication device that performs authentication processing of an authentication key by performing short-range wireless communication with the authentication key, A first antenna and a second antenna are installed on one side of the entrance / exit direction, A calculation unit that calculates a first distance between the first antenna and the authentication key and a second distance between the second antenna and the authentication key, The system includes a determination unit that determines whether or not the authentication key can be authenticated if the conditions determined based on the first distance and the second distance are met, The calculation unit calculates the first distance and the second distance based on the time it takes for the wireless signal to propagate between the first antenna, the second antenna and the authentication key. The first antenna and the second antenna are positioned at a distance of at least a predetermined third distance from the entrance surface of the entrance to the exterior side. Wireless ID authentication device, wherein the conditions are at least two of the following: the first distance is within a predetermined first range; the second distance is within a predetermined second range; and the sum of the first distance and the second distance is within a predetermined third range.

2. The wireless ID authentication device according to Claim 1, used in an elevator hall, an entrance / exit gate to a specific area partitioned within a floor, a guest room, a tenant, or a locker in a large facility such as an apartment building, a public facility, or a hotel.

3. In a wireless ID authentication system having an authentication key and an authentication device, the authentication process of the authentication key is performed by short-range wireless communication between the authentication key and the authentication device, The authentication device is, A first antenna and a second antenna are positioned at a distance of at least a predetermined third distance from the entrance / exit surface in the direction of entry / exit of the entrance / exit, on the exterior side, A calculation unit that calculates a first distance between the first antenna and the authentication key and a second distance between the second antenna and the authentication key, The system includes a determination unit that determines whether or not the authentication key can be authenticated if the conditions determined based on the first distance and the second distance are met, The calculation unit calculates the first distance and the second distance based on the time it takes for the wireless signal to propagate between the first antenna, the second antenna and the authentication key. A wireless ID authentication system in which the above conditions are at least two of the following: the first distance is within a predetermined first range; the second distance is within a predetermined second range; and the sum of the first distance and the second distance is within a predetermined third range.

Images