Authentication method for information holders, the authentication system and program thereof.

Abstract

To provide an authentication method, an authentication system, and a program for an information holder, which enable an orderer to immediately use the information holder if the orderer receives the information holder from a deliverer and satisfies a prescribed condition (receipt reception and registration of server).SOLUTION: The authentication method for the information holder comprises: an order reception step of receiving order information of a physical information holder having identification information for passage from a user terminal through a gate via a network by a server; a delivery information recording step of recording delivery information for delivering the information holder to an orderer of the user terminal; and a receipt information reception step of receiving receipt information on arrival or delivery of the information holder to the orderer from at least one of the user terminal and a delivery business terminal via the network. After the receipt information reception step, authentication is enabled between the information holder and an authentication device.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present invention relates to an authentication method for an information carrier ordered via a network by a user terminal of a resident living in a house, the authentication system thereof, and a program, with respect to the information carrier possessed by the resident.

Background Art

[0002] Patent Document 1 describes that "a card key system for unlocking a door provided in a building is configured to include: a card key 10 on which identification information for identifying a user is recorded; a reader 20 which is provided in the building and extracts the identification information from the card key 10 by non-contact communication when the card key 10 enters a predetermined communication range to identify the user; and a locking device 30 which is provided in the building and switches locking and unlocking of the door 1 only when the user can be identified by the reader 20".

[0003] In addition, Figure 2 of Patent Document 1 shows the configuration of a door (gate) 1 provided in a building, an electric lock 60 which is an example of a lock device provided on the gate, a power supply means 35 for the electric lock, a card key 10 which is an example of an information carrier having identification information for passing through the gate, a reader 20 that reads the identification information when the card key 10 is held over it, a controller (electric lock control device) 30 including an authentication means for authenticating whether the identification information of the card key 10 matches registered information, and the like (the reference numerals are those from Patent Document 1).

[0004] The above configuration has the advantage that even if an intruder obtains the card key, since the reader 20 is concealed at an appropriate position inside the door (gate) 1, it is difficult for the intruder to easily find the installation location of the reader 20. As a result, the intruder cannot easily intrude into the building, whereby the crime prevention performance can be improved. Note that the card key 10 which is an example of the information carrier, the reader 20, and the electric lock control device including the authentication means are well-known technologies (for example, see Figure 1 and paragraph 0006 of Japanese Unexamined Patent Publication No. Hei 5-156850, and Figure 2 and the specification of Japanese Unexamined Patent Publication No. 2011-202362).

[0005] As is clear from the above-mentioned well-known technologies, when passing through a building, such as the gate of an apartment building, each resident, as a user, possesses a registered physical information holder (for example, a small key substitute terminal, IC tag, ID key, contactless IC key, card key, portable electronic key, etc.), and when passing through the entrance of a common area of ​​an apartment building, or when entering a private unit, authentication is performed between a reader (for example, an authentication reader, card reader, electric lock control device, etc.) and the information holder within the range of a security zone where radio waves can reach. Patent Document 2 describes an IC tag used as a key substitute as an example of a physical information holder, and this IC tag used as a key substitute is also a well-known technology (Patent Documents 2 and 3).

[0006] By the way, for example, if a resident of an apartment building wants to possess an information holder in a physical form that can be freely carried with one hand, conventionally, even if a new information holder (for example, an item called an ID key in physical form) is delivered by a company that handles information holders, the resident cannot use it immediately. The reason for this is that in order to use the new information holder, for example, a new registration process must be carried out by the ID key setting registration company to the apartment building control device installed at the apartment building (on-site). After the registration process with the apartment building control device is completed, the authentication management server needs to register the information on its own after receiving a registration notification from the setting registration company.

[0007] Therefore, even if a new information holder handler, for example, requests a delivery company to deliver the physical information holder to the resident in a timely manner, the resident cannot immediately use the information holder until the identification information of the information holder is added and registered in the storage of the authentication management server. Consequently, this caused inconvenience to the resident, albeit for a short period.

[0008] Considering the inconveniences mentioned above, it is desirable that, once the new information holder is delivered by the delivery company or other means to the customer who possesses the user terminal, the physical information holder is already in a state where it can be properly authenticated, and the resident can immediately use it with the reader device. However, if a legitimate, authenticated information holder is delivered to the resident who placed the order via a delivery service, delivery person, etc., the following problems are a concern. (a) Unintended authentication. A "packaged, legally authenticated information holder" may respond to a reader within the security zone, causing delivery personnel, building managers, etc., to unintentionally open automatic doors at the entrance of a common area in an apartment building, or to unlock locks. As a result, unauthorized persons may pass through the entrance of the common area (potential for unintentional use). (b) Potential for misuse If a "packaged, legally authenticated information holder" is stolen during delivery, or if the package containing the name and address is lost, an unauthorized person may pass through the entrance of the common area (potential for malicious or negligent use).

[0009] The applicant proposes the present invention to overcome the problems of the potential for exploitation through carelessness and malicious intent mentioned above. [Prior art documents] [Patent Documents]

[0010] [Patent Document 1] Japanese Patent Publication No. 2004-68483 [Patent Document 2] Japanese Patent Publication No. 2019-2269 [Patent Document 3] Patent No. 5563772 [Overview of the Initiative] [Problems that the invention aims to solve]

[0011] The main objective of the present invention is, in view of the problems of the background technology, to propose an authentication method for an information holder, an authentication system, and a program that enable the customer to immediately use the information holder once the customer has received the information holder from the delivery person and has satisfied predetermined conditions (received and registered by the server). [Means for solving the problem]

[0012] The present invention provides an authentication method for an information holder, in which a server, via a network, The client who resides in the building From the user terminal The aforementioned building An order acceptance process that accepts order information for a physical information holder that has identification information for passing through a gate, The aforementioned Information holder The aforementioned A delivery information recording process that records delivery information for delivery to the customer who placed the order on the user terminal, The aforementioned From the user terminal The aforementioned via network The aforementioned The information holder includes a receipt information receiving step in which it receives receipt information that has been sent to the customer. Prior to the receiving information step, the authentication device includes an identification information receiving step in which it receives identification information of the information holder from the server via the network, and the identification information of the information holder is in a state where it cannot be used for authentication unless it has gone through the receiving information receiving step. It is characterized by the following: Furthermore, the authentication method for an information holder of the present invention involves a server via a network The client who resides in the building From the user terminal The aforementioned building An order acceptance process that accepts order information for a physical information holder that has identification information for passing through a gate, The aforementioned Information holder The aforementioned A delivery information recording process that records delivery information for delivery to the customer who placed the order on the user terminal, From a terminal authorized by or acting on behalf of the customer who placed the order at the aforementioned user terminal via network The information holder was delivered to the customer, or the information holder was delivered to the customer. The system includes a process for receiving received information, Prior to the receiving information step, the authentication device includes an identification information receiving step in which it receives identification information of the information holder from the server via the network, and the identification information of the information holder is in a state where it cannot be used for authentication unless it has gone through the receiving information receiving step. It is characterized by the following:

[0013] Furthermore, the authentication system for the information holder of the present invention is building Receiving the identification information from a physical information holder that has identification information for passing through the gate. The aforementioned buildingAn authentication system for an information carrier for unlocking a gate lock device, the authentication system for an information carrier comprising a server, a user terminal connected to the server via a network, and an authentication device, wherein the server via the network The client residing in the aforementioned building an order receiving means for receiving order information for the information carrier from the user terminal, a delivery information recording means for recording delivery information for delivering the information carrier to the orderer of the user terminal, and a reception information receiving means for receiving, from the user terminal via the network, reception information indicating that the information carrier has been delivered to the orderer, Prior to the receiving information step, the authentication device includes an identification information receiving step in which it receives identification information of the information holder from the server via the network, and the identification information of the information holder is in a state where it cannot be used for authentication unless it has gone through the receiving information receiving step. characterized in that.

[0014] Furthermore, the program of the present invention causes a computer to, via a network, a server having identification information for identifying a physical information carrier in a storage unit The client who resides in the building from a user terminal The aforementioned building an order receiving step of receiving order information for the physical information carrier having the identification information for passing through a gate, a delivery information recording step of recording delivery information for delivering the information carrier to the orderer of the user terminal, and a reception information receiving step of receiving, from the user terminal via the network, reception information indicating that the information carrier has been delivered to the orderer, The server transmits the identification information of the information holder to the authentication device before the receiving information step. causing each process to be executed, The identification information of the information holder cannot be used for authentication unless it has gone through the information reception process. characterized in that.

[0015] Herein, the "physical information carrier" includes objects called IC tags, ID keys, contactless IC keys, card keys, portable electronic keys, and the like, and does not include commonly used rectangular smartphones or similar tablet terminals and the like. Herein, the "authentication execution step" also includes "authentication enabling", and the "authentication enabling" refers to an enabling (step or device) that is a preparatory action before the execution of authentication of a user terminal at a gate, which is also included in infringing acts. A typical example thereof is that authentication can be performed with a lock control device (including an authentication device) provided in a building, a gate or the like in front of the gate through which a resident holding the information carrier passes. Therefore, the "authentication enabling step" and the "authentication execution step" are substantially the same.

Effects of the Invention

[0016] The present invention can propose an information carrier authentication method, its authentication system, and a program that allow an orderer to immediately use the information carrier once the orderer receives the information carrier from a deliverer and satisfies predetermined conditions (such as a server receiving a receipt notification via a network and registering the notification). In some embodiments, the present invention further limits the components related to enabling the identification information of the information carrier, and for example, in view of the problems in the background art, can overcome the problems of inadvertent or malicious use possibilities.

[0017] In addition, the present invention accepts orders for "physical information carriers" via a network, and even if a physical information carrier manufactured in a factory is delivered to the ordering user via a courier or the like, it can eliminate the aforementioned problems of (a) unintended authentication and (b) potential unauthorized use. Furthermore, the present invention allows the identification information of the physical information carrier to be registered on the server and the authentication device substantially simultaneously using the network, so the orderer can immediately use the information carrier received by the authentication device. That is, the server receives a notification from the principal or a terminal authorized by the principal to send a receipt notification (Condominium's terminal or delivery company's terminal) via the network that the item has been delivered (in the case of the principal proxy ), or that the item has been delivered( The person in question granted the authority to act on their behalf. ), or other predetermined information, the server provides the authentication device with the identification information of the legitimate information carrier substantially simultaneously with the registration of the predetermined information or immediately thereafter, so the orderer (such as a resident) can use the information carrier as a storage medium for authentication when desired.

Brief Description of the Drawings

[0018] Figures 1 to 8 are explanatory diagrams respectively showing the first embodiment and the second embodiment of the present invention. [Figure 1] A process diagram showing the first embodiment of the information carrier authentication method X. [Figure 2] A block diagram when the information carrier authentication method of the first embodiment is replaced with the information carrier authentication system X1. [Figure 3] A diagram illustrating the primary and secondary servers. [Figure 4] A diagram illustrating how a user's terminal sends order and receipt information to a server. [Figure 5] A block diagram showing a modified example X2 of the authentication system for the information holder of the first embodiment (in which case the delivery company terminal is involved in the transmission of the received information). [Figure 6] A process diagram showing a second embodiment of the authentication method Y for an information holder. [Figure 7] A block diagram showing the case where the authentication method for the information holder of the second embodiment is replaced with the authentication system Y1 for the information holder. [Figure 8] A block diagram showing a modified example Y2 of the authentication system for the information holder of the second embodiment (in which a delivery company terminal authorized by the principal is involved in the transmission of received information). [Modes for carrying out the invention]

[0019] Figures 1 to 8 are explanatory diagrams showing each embodiment of the first and second embodiments of the present invention. The specific requirements common to the first and second embodiments are that "the server includes an order acceptance step of receiving order information for a physical information holder having identification information for passing through a gate from a user terminal via a network, a delivery information recording step of recording delivery information for delivering the information holder to the customer at the user terminal, and a receipt information receiving step of receiving receipt information from at least one of the user terminals or delivery company terminals via a network indicating that the information holder has been delivered to or has been delivered to the customer, and after the receipt information receiving step, authentication between the information holder and the authentication device becomes possible."

[0020] First, the authentication method X for the information holder will be explained with reference to Figures 1, 3, and 4. In Figure 1, 1 is a server (also referred to here as the "authentication management server"). Server 1 may be singular or plural. The location of Server 1 is also irrelevant. Figure 1 shows a secondary server 1a in addition to the primary server 1. In the case of the secondary server (secondary server 1) 1a, its roles include, for example, receiving order information, storing order information and manufacturing information, manufacturing the physical information holder 4 based on the order information, directly or indirectly delivering the manufactured information holder 4 to the user, and notifying the primary server (authentication management server 1) of the identification information and delivery information of the information holder 4.

[0021] Furthermore, since the linked server (subordinate server) 1a is a subordinate server that constitutes the factory system M, it directly or indirectly notifies the authentication management server 1 of the identification information a of at least the information holder 4 manufactured in the factory system M. When the authentication management server 1 receives the identification information a from the linked server 1a, it registers the identification information a in its storage unit. Therefore, a group of records of the identification information a exists in the storage unit.

[0022] As will be described later, there are also a first collaborative server (subordinate server) 1b, a second collaborative server (subordinate server) 1c, etc., and the aforementioned collaborative server (subordinate server) 1b is an e-commerce site, which is responsible for receiving order information from customer P, notifying the authentication management server 1 of the order information, and notifying customer P of the order completion information (see Figure 3).

[0023] Network 2 refers to networks, which include regional and wide-area communication networks, with the Internet being a typical example of network 2. Since networks are standard technologies, we will omit further details.

[0024] 3 is a user terminal owned by the client P. Client P is, for example, a resident of an apartment building. A typical example of user terminal 3 is a smartphone. Therefore, user terminal 3 is equipped with a touch panel having the functions of an operation unit and a display unit, a terminal control unit, a storage unit, a registration unit, an authentication key identification unit, a communication unit, a timing unit, a discrimination means, etc. (The configuration of the control unit, storage unit, etc. is well known or standard technology, so detailed explanations and detailed drawings are omitted).

[0025] 4 is a physical information holder sent from server 1, such as a non-touch key described in Patent Document 3, and has a communication unit, control unit, storage unit, power supply unit, etc. (Since this is well-known technology, detailed explanation and detailed drawings are omitted).

[0026] 5 is, for example, a condominium control device installed at the condominium (on-site). For convenience, we will refer to it here as the on-site "authentication device". The on-site authentication device 5 is installed at appropriate locations on the building, premises, etc. 6 is a lock control device installed in the security zone S, including the gate. The lock control device 6 controls the unlocking and locking of a locking device (not shown). Note that the authentication device 5 and the lock control device 6 may be integrated or separate.

[0027] In Figure 1, the lock control device 6 is connected to the network 2. Therefore, the authentication device 5 may also be installed on the network 2. In the latter embodiment, when an unlocking request arrives from the physical information holder 4 along with identification information, the authentication device 5 on the network 2 performs authentication, and if authentication is successful, it instructs the lock control device 6 to unlock via the network 2. The lock control device 6 then activates the locking device (opening the gate, unlocking the gate, etc.). Note that a is the identification information, b is the delivery information, 3a is the order information, and 3b is the receipt information.

[0028] First, A is the order acceptance process. In this order acceptance process A, server 1 receives order information from user terminal 3 via network 2 for a physical information holder 4 with a mechanical key that has identification information a for passing through the building gate. For example, when a resident of an apartment building wants to possess an information holder 4 that can be freely carried with one hand or worn on the body, they order a new physical information holder 4 using the first online shopping site screen (order input form) 3A displayed on the display of user terminal (e.g., smartphone, laptop, etc.) 3. At this time, the orderer (resident: user) who occupies (possesses) user terminal 3 enters delivery address or delivery address identification information into the first online shopping site screen 3A (see Figure 4). The delivery address identification information is information necessary to identify the gate, such as property information, email address, telephone number, address, and name, and this gate identification information is based on the order information 3a. Therefore, the gate identification information is appropriately associated with, for example, the identification number of the lock device, the identification number of the lock control device, the user's room number, address, name, etc.

[0029] Furthermore, while the gate identification information includes an identification number, room number, etc., associated with each gate as appropriate, the technical means for identifying a gate is the identification information assigned to each user to identify each gate individually. Therefore, the identification information used as a search key for gate identification may be some or all of the aforementioned identification information, room number, etc.

[0030] Next, B is the information holder manufacturing process. In this information holder manufacturing process B, after the order acceptance process A, the manufacturer (factory) on the server 1 side manufactures an information holder 4 that can be freely carried with one hand or worn on the body. The information holder 4 in this embodiment has a flat shape that can be freely carried with one hand, similar to a non-contact key for a vehicle. Of course, it is not limited to this. In this embodiment, an order is accepted via the e-commerce site of the subordinate server 1b shown in Figure 3, and the cooperating server 1a, which receives order information 3a from the e-commerce site, notifies the factory system M which includes the server, and the information holder 4 is manufactured in the factory system M. Inside the cover of the information holder 4 manufactured in the factory, there is an IC chip that houses a control unit, a storage unit, a wireless unit, etc., and the storage unit is provided with identification information a for passing through the building gate.

[0031] Furthermore, regarding the manufacturing and handling of identification information a in information holder manufacturing process B, as mentioned above, in addition to cases where manufacturing is carried out from scratch, there are also cases where multiple information holders without pre-stored identification information in the storage unit are stocked, and after receiving an order, arbitrary identification information is stored in the storage unit. Also, information holder manufacturing process B does not necessarily have to be after the order acceptance process. There are also cases where multiple information holders with pre-stored identification information are stocked, and after receiving an order, an arbitrary information holder is selected from among the multiple information holders.

[0032] Next, C is the identification information receiving step. In this identification information receiving step C, before the receiving information receiving step E described later, the authentication device 5 directly or indirectly receives the identification information a of the information holder 4 manufactured in the information holder manufacturing step from the server 1 via the network 2. The identification information a of the information holder 4 is not yet in a state where it can be used for authentication until it has gone through the receiving information receiving step E described later. "Not in a state where it can be used for authentication" means that the identification information a is invalid, for example, that the identification information a is in a dormant state or frozen state and cannot respond to the authentication device 5.

[0033] Next, D is the delivery information recording process. In this delivery information recording process D, the information holder 4 records the destination or destination identification information (simply shown as "delivery information b") for delivery to the customer P who occupies the user terminal 3. The recorded delivery information is the same as the destination identification information of the customer P, and preferably also includes the identification information of the delivery company. Therefore, the recorded delivery information b overlaps with part or all of the identification information a for passing through the building gate.

[0034] Next, E is the receipt information receiving step. In this receipt information receiving step E, server 1 receives receipt information 3b from user terminal 3 via network 2, indicating that the information holder 4 has arrived at the customer P. In this receipt information receiving step E, customer P, who occupies user terminal 3, uses the second online shopping site screen (receiving input form) 3B displayed on the user terminal 3 to send receipt information to the main server or intermediary server indicating that the information holder 4 has arrived at the customer P (see Figure 4). In the first embodiment, customer P clicks the receive button b2 on the second online shopping site screen 3B, rather than from the delivery company terminal 1c. As a result, the receipt information 3b is sent to the authentication management server 1 directly or indirectly (via the intermediary server) via network 2. When the authentication management server 1 receives the receipt information 3b, it registers the receipt information 3b in its storage device 12 and then performs the next identification information activation step F.

[0035] Next, F is the identification information activation step. As mentioned above, in the authentication method X of the information holder 4 of the first embodiment, unless the user terminal 1 receives receipt information 3b indicating that the information holder 4 has arrived, even if the local authentication device 5 receives the identification information a of the information holder 4 manufactured in the information holder manufacturing step B from the server 1 via the network 2, the identification information a cannot yet be used for authentication (here referred to as the "invalidated state").

[0036] Therefore, in this identification information activation step F, the server's control device changes the identification information a of the information holder 4 from an invalid state to an active state after at least the received information receiving step, preferably after the received information has been registered in the storage device of the server 1. Specifically, it makes it possible to use the identification information a in a dormant or frozen state. When the server 1 changes the identification information a from an invalid state to an active state, it immediately provides the active information to the authentication device 5 on-site or on the network.

[0037] Next, G is the authentication execution process (including enabling). In this authentication execution process G, after the identification information activation process F, the identification information a stored in the authentication device 5 becomes usable (authentication ready state), so authentication is performed between the information holder 4 and the on-site authentication device 5 installed in the building or the authentication device 5 on the network. This authentication is performed, for example, within the range of the security zone S, by a contactless method such as a call between the information holder 4 and the on-site authentication device 5, and a card key being placed on a card reader.

[0038] "Security Zone S" refers to a private space defined based on criteria such as the gates leading into the premises of a building (e.g., apartment buildings, offices, commercial facilities), the automatic doors leading into the entrance, the automatic doors leading to elevators, and the doors leading into private units. Therefore, there may be one or more private spaces.

[0039] Next, Figure 2 is a block diagram (product invention) when the authentication method X for the information holder of the first embodiment is replaced with the authentication system X1 for the information holder. In describing other embodiments such as this authentication system X1 for the information holder, for convenience, the same or similar reference numerals are used for components that are the same as those in the authentication method X for the information holder, and redundant explanations are omitted. Furthermore, the explanations of the same terminology are used as they are.

[0040] The information holder authentication system X1 is an information holder authentication system that receives identification information a from a physical information holder 4 (not shown) that has identification information a for passing through a building gate, and unlocks the gate locking device 7 installed at the entrance of the building. The gate refers to a shielding opening / closing mechanism for the building.

[0041] Furthermore, the gate locking device 7 includes not only an electric lock equipped with a cylinder lock or thumbturn lock on the lock body that can be locked and unlocked mechanically and electrically, but also a drive device equipped with a drive motor, power transmission means, etc., which opens the shielding opening / closing body horizontally or vertically by the driving force of the drive motor. Therefore, "operation" here includes cases where the locking means for the so-called deadbolt is released when the shielding opening / closing body is stationary, cases where the deadbolt moves in the unlocking direction, and cases where the shielding opening / closing body moves in the opening direction by the driving force of the drive motor.

[0042] However, the information holder authentication system X1 comprises a server 1, a user terminal 3 connected to the server via a network 2, and a local authentication device or an authentication device (authentication execution means) 5 on the network. The server 1 includes an order receiving means A1 that receives order information for the information holder from the user terminal 3 via the network 2, an information holder manufacturing means B1 that, after receiving the order, manufactures an information holder 4 that can be freely carried with one hand or worn on the body by the manufacturer (factory) on the server 1 side, and an authentication device 5 before receiving the received information 3b with the received information receiving means E1 described later. However, the system includes an identification information receiving means C1 that receives identification information a of an information holder 4 manufactured by the information holder manufacturing means B1 from the server 1 via the network 2, a delivery information recording means D1 that records delivery information b for delivering the information holder 4 to the customer P at the user terminal 3, a receipt information receiving means E1 that receives receipt information 3b from the user terminal 3 via the network 2 indicating that the information holder 4 has arrived at the customer P, and an identification information activation means F1 that changes the identification information a of the information holder 4 from an invalid state to an valid state after at least the receipt information receiving step, preferably after the receipt of the receipt information has been registered in the storage unit of the server 1. The identification information activation means F1 changes the identification information a stored in the authentication device 5 from an invalid state to an valid state.

[0043] Therefore, the authentication system X1 for the information holder further includes an authentication execution means 5 that performs authentication between the information holder 4 and the authentication device 5 after the receiving information receiving means E1 has received the receiving information 3b.

[0044] Therefore, since the authentication system X1 for information holders consists of the same components as the authentication method X for information holders, it can achieve the same objective. Next, Figure 3 is an explanatory diagram showing the primary server and secondary servers. As mentioned above, Server 1 can be one or more, but in this embodiment, it is composed of primary server 1, secondary server 1a, secondary server 1b, secondary server 1c, etc. Of course, the number of Server 1 can be increased or decreased arbitrarily.

[0045] In this embodiment, the main server 1 has an order receiving means A1, an identification information receiving means C1, a delivery information recording means D1, a receipt information receiving means E1, and an identification information activation means F1. Generally, a server includes a control unit, a communication unit, a storage unit, etc. Therefore, Figure 3 shows the identification information receiving means C1, the delivery information recording means D1, the receipt information receiving means E1, and the identification information activation means F1 as the communication device, storage device, and identification information activation means F1 of the main server 1. Here, the control device, communication device, storage device, etc. are simply denoted by reference numerals and their configurations are briefly described. The control device 10 controls each device and means of the main server 1. As is well known, the control device 10 has a CPU, a program stored in memory, and a timing means for counting the current time, and executes the program. The communication device 11 has receiving means 1 to n and transmitting means 1 to n, and sends and receives various information or various data with, for example, a user terminal 3, a subordinate server 1a, etc. The storage device 12 consists of a hard disk or the like and stores a user management table, an information holder management table, a subordinate server management table, a delivery information management table, a receipt information management table, etc. The identification information activation means F1 activates the identification information a stored in the information holder management table.

[0046] Therefore, the control device 10 of the main server 1 executes various functions based on the information in the storage device (also called the "storage unit" here) 12. In addition, the functions (control) of the main server 1 include, as mentioned above, the function of recording the identification information a of the information holder received by the receiving means in the storage device 12, as well as, for example, the receiving means of the communication device 11 receiving order information 3a, the function of recording the order information 3a in the storage device 12, the function of receiving delivery information b, the function of recording the delivery information b in the storage device 12, and further, the function of receiving receipt information 3b, the function of recording the receipt information 3b in the storage device 12, etc. On the other hand, there is the function of transmitting order completion information from the transmitting means, and the function of transmitting valid information with the identification information a activated from the transmitting means, etc.

[0047] The subordinate servers 1a, 1b, and 1c are shown to the right of the main server 1. Server 1a has an information holder manufacturing means (manufacturing device) B1, a communication device, and a storage device. Server 1b is, for example, an e-commerce site, and as shown in Figure 4, provides the user terminal 3 with a first e-commerce site screen 3A, a second e-commerce site screen 3B, etc. Furthermore, the subordinate server 1c is a delivery company terminal whose main business is home delivery, and the delivery status of the packaged information holder (in transit, delivered, or delivered to a delivery box, etc.) can also be obtained from this delivery company terminal 1c. The first e-commerce site screen 3A has an application button b1, and when this application button b1 is clicked, order information 3a is sent. On the other hand, the second e-commerce site screen 3B has a receive button b2, and when this receive button b2 is clicked, receipt information 3b is sent. The subordinate servers 1a, 1b, 1c, etc. may also be included in the main server 1.

[0048] Next, Figure 5 is a block diagram showing a modified example X2 of the authentication system X1 for the information holder of the first embodiment. The main difference between this modified example X2 and the authentication system X1 is that the delivery terminal 1c shown in Figure 3 is connected to the network 2, and the delivery terminal 1c notifies the server 1 of receipt information 3b, such as that the item has been delivered or has been delivered to a delivery box, on behalf of the user terminal 3. In modified example X2, the fact that the user terminal 3 notifies the server 1 of order information 3a via the network 2 remains the same as in the embodiment of Figure 2, but it is assumed that, for example, if the customer P is absent, the information holder 4, which is packaged in a delivery box equipped with a lock, may be placed inside.

[0049] In the above-mentioned cases, in order to improve convenience, the delivery company terminal (including the mobile terminal held by the delivery person) 1c notifies the server 1 of the receipt information 3b on behalf of the customer P. In the modified example X2 described above, the subordinate server 1a of the factory system may notify the principal server 1 of the receipt information 3b on behalf of the customer P, provided that it can monitor the customer P's mailbox, etc. Alternatively, the management office of the apartment building may notify the principal server 1 of the receipt information 3b on behalf of the customer P, provided that it has been requested by the customer P and is able to act as an agent for the customer P, etc. In short, if the customer P has been given the authority to send receipt information on behalf of the subordinate server 1a of the factory system or the terminal of the management office of the apartment building, the effect of the agency belongs to the principal, so in such cases, the receipt information 3b, such as "delivered," may be notified to the server 1 on behalf of the user terminal 3.

[0050] Next, Figure 6 is a process diagram showing the authentication method Y for the information holder 4 of the second embodiment. The main difference between this authentication method Y for the information holder 4 and the authentication method X of the first embodiment described above is that, as can be understood by comparing Figure 1 and Figure 6, there is no identification information activation step F.

[0051] In other words, in the authentication method X of the first embodiment, before the receiving information receiving step E, the authentication device 5 includes an identification information receiving step C in which it receives identification information a of the information holder 4 from the server 1 via the network 2, and the identification information a of the information holder 4 is in a state where it cannot be used for legitimate authentication until it has gone through the receiving information receiving step E.

[0052] In contrast, the authentication method Y for the information holder 4 of the second embodiment includes an identification information receiving step C in which, after the receiving information receiving step E, the authentication device 5 receives identification information a of the information holder 4 from the server 1 via the network 2, and the identification information a of the information holder registered in its storage unit is in a state in which it can be used for legitimate authentication. In addition, after the receiving information receiving step E, there is an identification information receiving step C in which identification information a that can be used for authentication is obtained, and there is no identification information activation step F.

[0053] Therefore, summarizing the authentication methods (X, Y) for the information holder 4 in the first and second embodiments, the authentication method for the information holder of the present invention comprises: an order acceptance step A in which the server 1 receives order information for a physical information holder 4 having identification information for passing through a building gate from a user terminal 3 via a network 2; a delivery information recording step D in which the server 1 records delivery information for delivering the information holder to the customer at the user terminal; a receipt information receiving step in which the server 1 receives receipt information 3b from at least one of the user terminal 3 or the delivery company terminal 1c via the network 2 indicating that the information holder 4 has been delivered to or received by the customer P; and an authentication execution step (including enabling) G in which authentication is performed between the information holder 4 and the authentication device 5 after the receipt information receiving step. Depending on the embodiment, the constituent element of the identification information activation method F1 is limited.

[0054] Next, Figure 7 is a block diagram showing the case where the authentication method Y of the information holder 4 in the second embodiment is replaced with the authentication system Y1 of the information holder, and is similar to the authentication system X1 of the information holder in Figure 2. Furthermore, Figure 8 is a block diagram showing a modified example Y2 of the authentication system of the information holder in the second embodiment, and is similar to the modified example X2 of the authentication system of the information holder in Figure 5. The embodiment shown in Figure 8, for example, involves the delivery company terminal 1c with respect to the received information 3bc, similar to Figure 5. However, as previously mentioned, this would be redundant, so a detailed explanation is omitted here. The configuration of server 1 in the second embodiment is based on the configuration in Figure 3.

[0055] Furthermore, Server 1 receives a message from the user or a device authorized by the user via Network 2, which is received (in the case of the user), delivered ( The person in question granted the authority to act on their behalf.When the server receives the specified information (such as in the case of a customer), it preferably immediately provides the authentication device with the identification information of the legitimate information holder at approximately the same time as registering the specified information. Therefore, the customer (resident, etc.) can immediately use the information holder as a storage medium for authentication. Thus, whether or not the identification information is activated, and whether or not the receipt information was received from the user terminal 3 or the delivery company terminal, can be considered substantially the same invention from the viewpoint of achieving the objectives of the present invention, as explained in Appendix 1, etc.

[0056] <Note 1> In the first embodiment, the authentication method X for the information holder and the authentication system X1 for the information holder use the condition that the server 1 receives receipt information 3b, such as "It has been delivered," from the user terminal (orderer P) 2 as a condition for activating the identification information a. However, as mentioned above, the condition for activating the identification information may also be the notification of receipt information 3b, such as "It has been delivered," from the delivery company terminal (delivery company) 1c to the server 1. The invention is substantially the same even if the delivery company terminal (delivery company) 1c, etc., notifies the server 1 of receipt information 3b, such as "It has been delivered," on behalf of or on behalf of the user terminal (orderer P) 2.

[0057] <Note 2> In addition, the authentication method Y and authentication system Y1 for the information holder of the second embodiment use the receipt of receipt information 3b, such as "It has been delivered," from the user terminal (orderer P) 2 to the server 1 as the condition for activating the identification information (trigger). However, as mentioned above, the notification of receipt information 3b, such as "It has been delivered," from the delivery company terminal (delivery company) 1c to the server 1 may also be used as the condition for activating the identification information. The invention is substantially the same even if the delivery company terminal (delivery company) 1c, etc., acts on behalf of or as an agent of the user terminal (orderer P) 2 to notify the server 1 of receipt information 3b, such as "It has been delivered."

[0058] <Note 3> Although not specifically illustrated, in an embodiment where the e-commerce site is included in Server 1, an intermediary server may be provided, and user-specific order information may be stored in the database of the intermediary server. For example, the intermediary server may then notify the user terminal 3 of the order completion information.

[0059] <Note 4> The authentication method (X, Y) for an information holder of the present invention stores the following program in the storage unit, and the control unit processes each step. "A computer has a server in its storage unit that has identification information to identify a physical information holder, via a network." The client who resides in the building From the user terminal The aforementioned building An order acceptance step for receiving order information for a physical information holder having the identification information for passing through a gate; a delivery information recording step for recording delivery information for delivering the information holder to the customer at the user terminal; and a receipt information receiving step for receiving receipt information that the information holder has been delivered to the customer via the network from the user terminal. The server transmits the identification information of the information holder to the authentication device before the receiving information step. Execute each process, The identification information of the information holder cannot be used for authentication unless it has gone through the information reception process. program." [Industrial applicability]

[0060] The present invention can be used in the fields of authentication methods, authentication systems, and programs for information holders that are ordered via a network by a user terminal of a resident residing in a house. [Explanation of Symbols]

[0061] X, Y... Authentication method for information holders, X1, X2, Y1, Y2… Authentication system for information holders. 1…Server, 1a, 1b, 1c... Subordinate servers, 1c...Delivery company terminal, 2…Network, 3... User terminal, 3A...First online shopping site screen, 3a... Order information, 3B...Second online shopping site screen, 3b... Receipt information, 4… A physical information holder, a...Identification information, M...Factory system, b...Shipping information, 5(G)... Authentication device, 6…Lock control device, 7…Gate locking device, 10...Control device, 11…Server communication device, 12…Server storage device, A... Order acceptance process, B...information carrier manufacturing process, D... Delivery information recording process, E... Receiving information process, C...Identification information receiving process, G... Authentication execution process (including enabling), A1...Method of accepting orders, B1…Information storage device manufacturing means (server side), C1... means for receiving identification information, D1...Means of recording delivery information, E1...Means for receiving information, F1...Method for activating identification information.

Claims

1. Authentication method for an information holder comprising: an order acceptance step in which a server receives order information for a physical information holder having identification information for passing through the gate of a building from a user terminal of a customer residing in the building via a network; a delivery information recording step in which the server records delivery information for delivering the information holder to the customer at the user terminal; and a receipt information receiving step in which the server receives receipt information that the information holder has arrived at the customer via the network from the user terminal, wherein, prior to the receipt information receiving step, the authentication device includes an identification information receiving step in which it receives identification information of the information holder from the server via the network, and the identification information of the information holder is in a state where it cannot be used for authentication unless it has gone through the receipt information receiving step.

2. An authentication method for an information holder comprising: an order receiving step in which a server receives order information for a physical information holder having identification information for passing through the gate of the building from a user terminal of a customer residing in the building via a network; a delivery information recording step in which the server records delivery information for delivering the information holder to the customer at the user terminal; and a receipt information receiving step in which the server receives receipt information that the information holder has been delivered to the customer or that the information holder has arrived at the customer via the network from a terminal authorized by the customer at the user terminal to act on their behalf or as an agent; wherein, prior to the receipt information receiving step, the authentication device includes an identification information receiving step in which it receives identification information of the information holder from the server via the network, and the identification information of the information holder is in a state where it cannot be used for authentication unless it has gone through the receipt information receiving step.

3. An authentication system for an information holder that receives identification information from a physical information holder having identification information for passing through a building gate and unlocks the locking device of the building gate, The authentication system for the information holder comprises a server, a user terminal connected to the server via a network, and an authentication device. The server includes an order receiving means that receives order information from the information holder from the user terminal of a customer residing in the building via the network, A delivery information recording means for recording delivery information for delivering the information holder to the customer of the user terminal, An authentication system for an information holder, comprising a means for receiving receipt information from the user terminal via the network, wherein, prior to the receipt information receiving step, the authentication device includes an identification information receiving step for receiving identification information of the information holder from the server via the network, and the identification information of the information holder cannot be used for authentication unless it has gone through the receipt information receiving step.

4. A computer program comprising: an order acceptance step in which a server having identification information for identifying a physical information holder in its storage unit receives order information for a physical information holder having the identification information for passing through the building's gate from a user terminal of a customer residing in the building via a network; a delivery information recording step in which delivery information for delivering the information holder to the customer at the user terminal is recorded; a receipt information receiving step in which the user terminal receives receipt information that the information holder has arrived at the customer via the network; and a program in which the server performs the following processes before the receipt information receiving step, wherein the identification information of the information holder cannot be used for authentication unless it has gone through the receipt information receiving step.

Images