JP6646082B2 - Authentication device, authentication method, authentication program, and communication device - Google Patents

Description

  The present invention relates to an authentication device, an authentication method, an authentication program, and a communication device used for authentication of a card.

  2. Description of the Related Art Conventionally, as a method of paying a price when a product is purchased or a service is provided, there is a payment method using a credit card, for example, in addition to a payment method using cash. When using a credit card, for example, the user inputs a password to a payment terminal that reads the information of the credit card, and when the card company succeeds in authentication using the password, the credit card becomes usable. .

  In recent years, the damage caused by unauthorized use of credit cards has been increasing steadily. For example, the credit card number is stolen by skimming or the credit card is forged, so that the credit card is illegally used. Due to such unauthorized use, the amount of damage per year in the credit card industry is several billion yen, and various measures are taken by credit card companies.

  For example, there is disclosed a method of calling a mobile phone registered in advance when using a credit card, and confirming payment data and approving payment from the called mobile phone (for example, see Patent Document 1 below).

JP 2001306987 A

  However, with the conventional technology, even if various measures are taken, if the security code or card number is leaked or stolen, unauthorized use of the card by a third party is possible, and the security of card use Was low. For example, the technique of Patent Document 1 has a problem that if a mobile phone is stolen together with a personal identification number and a card number, unauthorized use of the card is possible, and the security of use of the card is low.

  The present invention solves the above-mentioned problems caused by the conventional technology, so that even if a personal identification number or card number is leaked or stolen, the unauthorized use of the card by a third party is suppressed, and the use of the card is suppressed. It is an object of the present invention to provide an authentication device, an authentication method, an authentication program, and a communication device that can improve such security.

  In order to solve the above-described problems and achieve the object, an authentication device according to the present invention includes an authentication request request transmitted from a terminal device that receives a request destination of an authentication request from a user to a communication device indicated by the request destination, In response to receiving by the communication device, from the communication device, receiving means for receiving specific information for specifying the communication device, and specific information stored in the storage means in association with the identification information of the card An authentication unit for performing authentication related to use of the card based on the identification information received by the reception unit; and, when authentication by the authentication unit is successful, corresponding to the identification information received by the reception unit. Output control means for outputting an authentication result indicating that the card indicated by the identification information to be used is usable.

  Further, the authentication device according to the present invention is configured such that the communication device receives the password information transmitted from the terminal device that receives the password information and the destination of the password information from the user to the communication device indicated by the destination. Receiving means for receiving, from the communication device, the information on the password and identification information for identifying the communication device; and a password stored in the storage means in association with the identification information of the card. Based on the information and the specific information and the password information and the specific information received by the receiving means, an authentication means for performing authentication relating to the use of the card; and Output an authentication result indicating that the card indicated by the identification information corresponding to the password information received by the means can be used. And having an output control means for, the.

  Further, in the authentication device according to the present invention, in the above invention, the receiving means receives, from the communication device, information on a password, specific information, and additional information corresponding to a predetermined function of the communication device, The authentication means, the information of the password stored in the storage means in association with the identification information of the card, specific information, and additional information, the information of the password received by the receiving means, specific information, and additional information, The authentication is performed based on

  Further, in the authentication device according to the present invention, in the above invention, the receiving means receives information indicating the start of authentication transmitted from the terminal device when password information is transmitted from the terminal device to the communication device. The output control unit outputs an authentication result indicating that the card can be used when the information indicating the start of authentication is received from the terminal device by the receiving unit and the authentication is successful. To be characterized.

  Further, in the authentication device according to the present invention, in the above invention, the output control means includes the step of receiving a password from the communication device within a predetermined period after information indicating the start of authentication is received from the terminal device by the receiving means. When the information and the specific information are not received, a request for transmitting the password information and the specific information is made to the communication device.

  Further, in the authentication device according to the present invention, in the above invention, the receiving unit receives information on a position of the communication device from any of the terminal device and the communication device, and the output control unit performs the authentication. Is successful, and when it is determined that the communication device is at a predetermined position based on the information on the position received by the receiving means, an authentication result indicating that the card can be used. Is output.

  Further, the authentication method according to the present invention, the authentication request transmitted from the terminal device accepting the request destination of the authentication request from the user to the communication device indicated by the request destination, in response to receiving the communication device, From the communication device, receiving specific information for specifying the communication device, the specific information stored in the storage unit in association with the identification information of the card, based on the received specific information, based on the received information, Performing authentication related to use, and when the authentication is successful, the computer executes a process of outputting an authentication result indicating that the card indicated by the identification information corresponding to the received specific information is usable. I do.

  Further, the authentication program according to the present invention, in response to the communication device receives an authentication request transmitted from a terminal device that receives a request destination of an authentication request from a user to a communication device indicated by the request destination, From the communication device, receiving specific information for specifying the communication device, the specific information stored in the storage unit in association with the identification information of the card, based on the received specific information, based on the received information, Performing authentication related to use, and, if the authentication is successful, outputting an authentication result indicating that the card indicated by the identification information corresponding to the received specific information is usable, and causing the computer to execute processing. I do.

  Further, the communication device according to the present invention is configured such that, from a terminal device that receives a request destination of an authentication request, a receiving unit that receives an authentication request request with its own device as a request destination, and the authentication request request is received by the receiving unit. And a transmission control unit for transmitting, to the authentication device, identification information for identifying itself by the authentication device.

  Further, in the communication device according to the present invention, in the above invention, the authentication request request includes password information, and the transmission control unit responds to the reception unit receiving the password information. Password information and the specific information are transmitted to the authentication device in association with each other.

  In the communication device according to the present invention, in the above invention, the specific information is unique address information assigned to the communication device, and the communication device is a non-portable communication device. I do.

  According to the authentication device, the authentication method, the authentication program, and the communication device according to the present invention, even if the personal identification number or the card number is leaked or stolen, the unauthorized use of the card by a third party is suppressed, This has the effect of improving the security of the use of the card.

FIG. 1 is an explanatory diagram illustrating a system configuration example of an authentication system 100 according to the embodiment. FIG. 2A is a block diagram illustrating an example of a hardware configuration of the authentication server 111. FIG. 2B is a block diagram illustrating an example of a hardware configuration of the user terminal 121. FIG. 2C is a block diagram illustrating an example of a hardware configuration of the communication device 131. FIG. 3A is an explanatory diagram showing an example of the storage contents of the card information database (DB) 112. FIG. 3B is an explanatory diagram showing an example of the storage contents of the authentication information database (DB) 113. FIG. 4 is a diagram illustrating an example of an authentication method of the authentication system 100 according to the present embodiment. FIG. 5 is an explanatory diagram illustrating a functional configuration of the authentication system 100 according to the present embodiment. FIG. 6 is an explanatory diagram illustrating an example of an operation screen displayed on the user terminal 121. FIG. 7 is an explanatory diagram illustrating an example of an authentication success screen displayed on the user terminal 121. FIG. 8 is an explanatory diagram illustrating an example of an authentication failure screen displayed on the user terminal 121. FIG. 9 is a flowchart illustrating an example of an authentication reception processing procedure performed by the user terminal 121. FIG. 10 is a flowchart illustrating an example of a procedure for transmitting information for authentication performed by the communication device 131. FIG. 11A is a flowchart (part 1) illustrating an example of an authentication processing procedure performed by the authentication server 111. FIG. 11B is a flowchart (part 2) illustrating an example of an authentication processing procedure performed by the authentication server 111.

  Embodiments of an authentication device, an authentication method, an authentication program, and a communication device according to the present invention will be described below in detail with reference to the drawings.

(System configuration of the authentication system)
First, an example of a system configuration of an authentication system 100 according to an embodiment will be described. FIG. 1 is an explanatory diagram illustrating a system configuration example of an authentication system 100 according to the embodiment. 1, the authentication system 100 includes an authentication server 111, a user terminal 121, and a communication device 131.

  The authentication server 111 is an example of an authentication device according to the present invention. For example, the authentication server 111 is a server provided in a card company. Specifically, the authentication server 111 is a general-purpose computer device that manages whether or not the credit card 122 can be used for each user. The authentication server 111 is, for example, a personal computer having a CPU (Central Processing Unit), a memory, an interface, and the like. The authentication server 111 has a card information database (DB) 112 and an authentication information DB 113. The storage contents of the DBs 112 and 113 will be described later with reference to FIGS. 3A and 3B.

  The user terminal 121 is, for example, a computer device owned by the user of the credit card 122. As the user terminal 121, for example, a computer device such as a smartphone or a tablet PC (Personal Computer) is used. The user terminal 121 has a CPU, a memory, an interface, and the like.

  However, the user terminal 121 is not limited to a smartphone or a tablet PC, but various PCs such as a POS (Point of Sale system) terminal, a desktop PC, a notebook PC, a tablet PC, a mobile phone, and a PHS (Personal Handyphone System). It is also possible to use

  The communication device 131 is an example of a communication device according to the present invention. The communication device 131 has an IoT (Internet of Things) function. For example, the communication device 131 is a computer device such as a home electric appliance installed at the home of the user. Specifically, the communication device 131 is a home appliance such as a refrigerator, an air conditioner, a television, and a washing machine. The communication device 131 has a CPU, a memory, an interface, and the like.

  In the authentication system 100, the authentication server 111, the user terminal 121, and the communication device 131 are connected via a wired or wireless network 140. The network 140 is, for example, the Internet, a mobile communication network, or the like. However, the network 140 may be a LAN (Local Area Network), a WAN (Wide Area Network), or the like.

  Further, the authentication program according to the present invention is installed in the authentication server 111. The authentication server 111 performs processing according to various requests from the user terminal 121 and the communication device 131, and outputs various processing results to the user terminal 121 and the communication device 131.

(Example of Hardware Configuration of Authentication Server 111 and Communication Device 131)
Next, an example of a specific configuration of the authentication server 111 and the communication device 131 will be described. FIG. 2A is a block diagram illustrating an example of a hardware configuration of the authentication server 111.

  2A, a computer device that implements the authentication server 111 includes a CPU 211, a memory 212, and a communication IF (Interface) 213. The units 211 to 213 included in the computer device are connected by a bus 210. The CPU 211 controls the entire computer device.

  The memory 212 stores programs such as a boot program and data of various databases. Further, the memory 212 stores various programs and data related to the authentication method of the present embodiment, such as an authentication program and partial data of various databases.

  The memory 212 is used as a work area of the CPU 211. The memory 212 can be realized by, for example, a ROM (Read-Only Memory), a RAM (Random Access Memory), a HDD (Hard Disc Drive), and an HD (Hard Disc).

  The communication IF 213 is connected to the network 140, and serves as an interface between the inside of the computer device and external devices such as the user terminal 121 and the communication device 131. Specifically, the communication IF 213 controls the input and output of data between the inside of the computer device and the external device.

(An example of the hardware configuration of the user terminal 121)
Next, an example of a hardware configuration of the user terminal 121 will be described. FIG. 2B is a block diagram illustrating an example of a hardware configuration of the user terminal 121. 2B, the user terminal 121 includes a CPU 221, a memory 222, an output device 223, an input device 224, and a communication IF 225. The units 221 to 225 of the user terminal 121 are connected by a bus 220.

  The CPU 221 controls the entire operation of the user terminal 121. The CPU 221 controls the entire operation of the user terminal 121 using various programs and data stored in the memory 222. The memory 222 can be realized by, for example, a ROM, a RAM, a HDD, an HD, a flash memory, and the like.

  The output device 223 includes, for example, a display, a speaker, an audio output terminal, and the like. The display displays operation contents, guidance information for the user, and the like. The display displays various operation screens related to the authentication service. The display can be mainly realized by, for example, a liquid crystal display or an organic EL (Electro-Luminescence) display.

  Further, the speaker outputs a sound, an alarm sound, and the like. The audio output terminal is a terminal for connecting a headphone or the like, and outputs a sound, an alarm sound, or the like to the connected headphone or the like, like the speaker.

  The input device 224 includes keys for inputting characters, numerical values, various instructions, and the like, and performs data input. The input device 224 includes, for example, a touch panel and a keyboard. The touch panel or the keyboard outputs a signal corresponding to the input operation to the CPU 221.

  The touch panel is stacked on the display surface side of the display. The touch panel outputs an electric signal according to the contact position of the writing member on the touch panel when detecting that a writing member such as a finger or a pen has contacted the touch panel. As the touch panel, various known types such as a resistance film type, a capacitance type, an acoustic pulse recognition type, an ultrasonic surface acoustic wave type, an infrared light shielding type, and an image recognition type can be used.

  Further, the input device 224 includes a camera. The camera captures still images and moving images. Specifically, for example, the camera is controlled by the CPU 221 to capture an image of an imaging target, generate image data, capture and input a two-dimensional code such as a barcode or a QR code (registered trademark), input an OCR, (Character Reader) function is used to convert the photographed characters into data and input them.

  Further, the input device 224 includes a microphone. The microphone performs analog-to-digital conversion of a speaker's voice input as analog data, and generates digital audio data. By using the microphone, the user can input characters and the like via the user terminal 121 instead of using the touch panel or the keyboard.

  The communication IF 225 controls an interface between the user terminal 121 and external devices such as the authentication server 111 and the communication device 131. Further, the communication IF 225 may be connected to a telephone line network and used for voice communication.

(Example of Hardware Configuration of Communication Device 131)
Next, an example of a hardware configuration of the communication device 131 will be described. FIG. 2C is a block diagram illustrating an example of a hardware configuration of the communication device 131. 2C, the user terminal 121 includes a CPU 231, a memory 232, an operation unit 233, a sensor 234, a driving unit 235, and a communication IF 236. The units 231 to 235 of the communication device 131 are connected by a bus 230.

  The CPU 231 controls the entire communication device 131. The CPU 231 controls the entire communication device 131 using various programs and data stored in the memory 232. The memory 232 can be realized by, for example, a ROM, a RAM, a HDD, an HD, a flash memory, and the like.

  The operation unit 233 includes a remote controller and an operation button for receiving an operation from a user with respect to a function of a home appliance included in the communication device 131 that is a home appliance. The operation unit 233 outputs a signal corresponding to the received operation to the CPU 231.

  The sensor 234 is a detection unit that detects a state for driving with the content received from the user with respect to the function of the home appliance of the communication device 131 that is the home appliance. For example, in the refrigerator communication device 131, the sensor 234 is a temperature sensor that detects the temperature inside the refrigerator. The sensor 234 outputs a signal indicating the detection result to the CPU 231.

  The drive unit 235 is an operation unit for driving the function of the communication device 131, which is a home appliance, with the content received from the user. For example, in the communication device 131 of the refrigerator, the drive unit 235 includes a compressor that compresses a gas refrigerant, an evaporator that vaporizes the gas refrigerant, and the like. The communication IF 236 controls an interface between the communication device 131 and external devices such as the authentication server 111 and the user terminal 121.

(Storage contents of various DBs 112 and 113)
Next, the storage contents of the card information database (DB) 112 and the authentication information database (DB) 113 of the authentication server 111 shown in FIG. 1 will be described with reference to FIGS. 3A and 3B. The various DBs 112 and 113 are realized by a storage unit such as a memory, for example.

  FIG. 3A is an explanatory diagram showing an example of the storage contents of the card information database (DB) 112. In FIG. 3A, the card information DB 112 has fields of a card number, a holder, user terminal information, an expiration date, a card password, a security code, a limit, and a usage amount up to the present. By setting information in each field, a record of card information (for example, card information 300-1 to 300-3) is stored.

  The card number is, for example, a 16-digit number written on the credit card 122. The holder indicates the holder of the credit card 122. The user terminal information is, for example, address information of the user terminal 121 owned by the holder. The expiration date indicates a period in which the credit card 122 can be used. The card password is information used for authentication, and is information input by a user when using the credit card 122. The security code is, for example, a three-digit number written on the back of credit card 122.

  The limit indicates the maximum amount that can be paid using the credit card 122 within a certain period (for example, one month). The usage amount up to the present indicates the total amount paid using the credit card 122 from the start of a certain period (for example, the beginning of the month) to the present. The usage amount up to now is updated each time a payment is made using the credit card 122.

  For example, the card information 300-1 includes a card number "1234 ...", a holder "Soken Sotaro", user terminal information "XXX ... @ xxx", an expiration date "XX year XX month", and a security code. "○○○", the limit amount “￥ ○○ million”, and the usage amount up to now “￥ ○○○○” are shown. Although not shown, when cashing for financing cash is available, information on the cashing (a limit amount and a usage amount up to the present) is also stored in the card information DB 112.

  Regarding the card number, the holder, the user terminal information, the expiration date, the security code, and the limit shown in the card information DB 112, when a new credit card 122 is created, the report of the user and the examination result of the card company It is set according to. In the card information DB 112, in addition to the illustrated fields, fields such as the address of the holder, telephone number, and date of birth may be provided.

  FIG. 3B is an explanatory diagram showing an example of the storage contents of the authentication information database (DB) 113. 3B, the authentication information DB 113 has fields of an authentication information ID (Identification), a card number, a name of the communication device 131, address information, additional information, a password, and a short-range communication history with the user terminal 121.

  By setting information in each field, a record of authentication information (for example, authentication information 310-1 to 310-4) is stored. The authentication information ID indicates identification information assigned to each authentication information 310. The card number is, for example, a 16-digit number written on the credit card 122. The card number is the same as the card number stored in the card information DB 112 (see FIG. 3A). Therefore, the authentication information 310 is associated with the card information 300 of the card information DB 112.

  The name of the communication device 113 indicates, for example, the name of a home electric appliance installed at the home of the user. The address information is identification information for identifying the communication device, and is, for example, a MAC address (Media Access Control Address). The additional information is information obtained based on a specific function (home electric appliance function) of the communication device (home electric appliance). For example, if the communication device is a refrigerator, the additional information is information on the temperature in the refrigerator.

  Further, the additional information is, for example, information on the indoor temperature if the communication device 131 is an air conditioner, and is information on the volume being set if the communication device 131 is a television. If the communication device 131 is a washing machine, the additional information is information on an operation mode being set. The additional information may be current information if the home appliance function of the communication device 131 is operating, or may be information set immediately before the home appliance function of the communication device 131 is not operating if the home appliance function of the communication device 131 is not operating. Good.

  The password is information used for authentication when using the credit card 122, and is arbitrarily set by the user. The short-distance communication history with the user terminal 121 indicates the last time when the communication device 131 and the user terminal 121 performed short-distance communication.

  For example, the authentication information 310-1 includes the authentication information ID “C001”, the card number “1234...”, The name of the communication device “refrigerator”, the address information “OOO. , The password “OOO”, and the short-distance communication history with the user terminal 121 “Ooooooooooooooooooooooooooooooo”. The authentication information 310-2 to 310-4 other than the authentication information 310-1 are stored in the authentication information DB 113 in the same manner.

  The authentication information 310-1 to 310-3 indicates that the names of a plurality of communication devices 131 are registered for the same card number (name holder: Sotaro Soken). In the authentication information 310-1 to 310-3, address information, additional information, and password information corresponding to the name of the communication device 131 are registered.

(Authentication method of authentication system 100 according to the present embodiment)
Next, an authentication method of the authentication system 100 according to the present embodiment will be described with reference to FIG. FIG. 4 is a diagram illustrating an example of an authentication method of the authentication system 100 according to the present embodiment. The numbers in parentheses shown below correspond to the numbers in parentheses shown in FIG.

  As shown in FIG. 4, for example, a user 401 visits a store 400 and pays using the credit card 122 in the store 400. In using the credit card 122, first, the user terminal 121 receives input of password information from the user 401 and designation of the communication device 131 of the home 410 registered in advance. (1) When the user terminal 121 receives the input of the password information and the designation of the communication device 131 from the user 401, the user terminal 121 encrypts the password information and transmits it to the designated communication device 131.

  Upon receiving the password information transmitted from the user terminal 121, the communication device 131 acquires the specific information (for example, the address information such as the MAC address) for identifying the encrypted device. (2) Then, the communication device 131 associates the password information received from the user terminal 121 with the specific information and transmits the information to the authentication server 111. In the following description, the information on the password and the specific information are appropriately referred to as “information for authentication”.

  Upon receiving the password information and the specific information from the communication device 131, the authentication server 111 combines these information. Then, the authentication server 111 authenticates whether or not the combined password information and the combined specific information are included in the authentication information 310 stored in the authentication information DB 113 (see FIG. 3B).

  (3) If the authentication is successful, the authentication server 111 satisfies other usage conditions related to the use of the credit card 122, such as being within the usage limit, and then permits the payment by the credit card 122. Further, the authentication server 111 transmits a card availability notification indicating that the credit card 122 can be used to the user terminal 121. In the present embodiment, the authentication server 111 has the function of permitting the payment, but may not have the function of permitting the payment. In this case, if the authentication is successful, An authentication result indicating that the card 122 can be used may be output to another server having a function of permitting payment.

  When the credit card 122 can be used, since authentication using the password information has already been performed by the authentication server 111, for example, it is not necessary to input a personal identification number using a POS terminal or sign the user. It shall be. However, the input of the personal identification number using the POS terminal and the signing of the user may be required. Thus, a plurality of authentications, that is, authentication using the password information and the specific information and authentication using the password can be performed, and the authentication strength can be increased.

  On the other hand, if the authentication fails, the authentication server 111 transmits a notification such as an error message to the user terminal 121 indicating that the credit card 122 cannot be used.

  In the authentication system 100 according to the present embodiment, the user terminal 121 transmits the information on the password received from the user to the communication device 131 specified by the user. Then, the communication device 131 transmits the information on the password received from the user terminal 121 and the identification information for identifying the communication device 131 to the authentication server 111.

  Further, the authentication server 111 performs authentication using the password information and the specific information received from the communication device 131, and when the authentication is successful, the identification information corresponding to the password information received from the communication device 131 indicates. An authentication result indicating that the card can be used is output.

  For this reason, according to the authentication server 111 according to the present embodiment, the password received from the user terminal 121 via the specific communication device 131 without performing the authentication using the personal identification number or the card number of the credit card 122. Authentication is performed using the information of the credit card 122 and the specific information, so that leakage of the personal identification number and the card number of the credit card 122 can be suppressed.

  Also, even if the personal identification number or the card number of the credit card 122 is leaked for some reason, it is difficult for the third party to obtain the password information and the destination information. The card 122 cannot be used. As a result, unauthorized use of the card by a third party can be suppressed, and security related to the use of the credit card 122 can be improved.

  Further, in the authentication system 100 according to the present embodiment, when using the credit card 122, the user inputs the password information to the user terminal 121 and specifies the destination to which the password information is transmitted. Need to be performed.

  Also, even if one of the password information and the destination information is stolen by a third party, the authentication will not succeed with only one of the information. 122 is not available. Therefore, unauthorized use of the credit card 122 by a third party can be suppressed.

  Next, in order to further improve the security of the use of the credit card 122, the authentication server 111 indicates the start of the authentication from the user terminal 121 in addition to the success of the authentication regarding the conditions under which the credit card 122 can be used. Receiving information will be described.

  Upon transmitting (1) the password information to the communication device 131, the user terminal 121 transmits (i) information indicating the start of authentication to the authentication server 111. The authentication server 111 receives the information indicating the start of the authentication from the user terminal 121 and enables the use of the credit card 122 when the authentication using the information for authentication received from the communication device 131 is successful. . As described above, by adding a condition of receiving information indicating the start of authentication from the user terminal 121 as a condition for enabling the use of the credit card 122, the security of the use of the credit card 122 is further improved. be able to.

  Next, a description will be given of a case where the authentication server 111 requests information transmission to each device when the authentication server 111 does not receive information to be received from each of the user terminal 121 and the communication device 131. For example, despite receiving the information indicating the start of the authentication from the user terminal 121, the authentication server 111 transmits authentication information (password information) from the communication device 131 within a predetermined period due to, for example, an error or a communication failure. And specific information).

  (Ii) In this case, the authentication server 111 requests the communication device 131 to retransmit the information for authentication. Then, upon receiving the retransmission request from the authentication server 111, the communication device 131 receives the password information from the user terminal 121, and (2) transmits the authentication information to the authentication server 111 again. Just send it.

  On the other hand, when receiving a request for retransmission from the authentication server 111, the communication device 131 may not have received password information from the user terminal 121 due to, for example, an error or communication failure. (Iii) In this case, the communication device 131 may request the user terminal 121 to retransmit the password information.

  Then, upon receiving the retransmission request from the communication device 131, the user terminal 121 may (1) transmit the password information to the communication device 131 again. Then, upon receiving the password information from the user terminal 121, the communication device 131 may transmit (2) the received password information and the specific information to the authentication server 111.

  In the above description, when the authentication server 111 does not receive the information for authentication from the communication device 131 within a predetermined period after receiving the information indicating the start of authentication, the authentication server 111 transmits the information for authentication to the communication device 131. Although a transmission request has been made, the present invention is not limited to this. For example, if the authentication server 111 does not receive the information for authentication from the communication device 131 within a predetermined period after receiving the information indicating the start of authentication, the authentication server 111 sends the user terminal 121 a password of the communication device 131. Retransmission of information may be requested.

  In this case, upon receiving the request for retransmission of the password information from the authentication server 111, the user terminal 121 may transmit the password information to the communication device 131 again as shown in (1). Then, upon receiving the password information from the user terminal 121, the communication device 131 may transmit (2) the password information and the specific information to the authentication server 111.

  As described above, even when the authentication server 111 cannot receive the information for authentication (the password information and the specific information) from the communication device 131, the authentication server 111 requests the user terminal 121 to retransmit the password information, By requesting the communication device 131 to retransmit the authentication information, the authentication information can be received.

  Further, the authentication server 111 may not receive the information indicating the start of the authentication from the user terminal 121 within a predetermined period due to a communication failure or the like, even though the authentication server 111 receives the information for authentication from the communication device 131. In this case, the authentication server 111 may request the user terminal 121 to retransmit information indicating the start of authentication.

  Then, upon receiving the request for retransmission of the information indicating the start of the authentication, the user terminal 121 may transmit (i) the information indicating the start of the authentication to the authentication server 111. Thereby, the authentication server 111 receives the information indicating the start of the authentication from the user terminal 121 and, when the authentication using the information for authentication received from the communication device 131 is successful, the authentication server 111 uses the credit card 122. Can be made possible.

(Functional Configuration of Authentication System 100)
FIG. 5 is an explanatory diagram illustrating a functional configuration of the authentication system 100 according to the present embodiment. 5, the authentication system 100 includes an authentication server 111, a password information input terminal 500, and a communication device 131. The authentication server 111 includes a reception unit 501, an authentication unit 502, an output control unit 503, a settlement unit 504, a transmission unit 505, and a storage unit 506.

  The receiving unit 501 and the transmitting unit 505 are realized by, for example, the communication IF 213 (see FIG. 2A) of the authentication server 111. The authentication unit 502 and the output control unit 503 realize their functions by, for example, causing the CPU 211 to execute a program stored in the memory 212 (see FIG. 2A) of the authentication server 111. The storage unit 506 is realized by, for example, the authentication information DB 113 in FIG. 3B. However, the storage unit 506 may not be provided in the authentication server 111 but may be provided in another device (not shown), for example, may be provided in another server in the cloud service.

  The receiving unit 501 receives information for authentication from the communication device 131. The information for authentication includes information on the password transmitted from the terminal device to the communication device 131, and identification information for identifying the communication device 131 acquired by the communication device 131.

  Here, the password information input terminal 500 is, for example, a terminal device that can be operated by a user at the time of payment using the credit card 122, and specifically, is the user terminal 121. However, the password information input terminal 500 is not limited to the user terminal 121, and may be another terminal used for payment, such as a POS terminal. Hereinafter, the password information input terminal 500 will be described as the user terminal 121.

  The user terminal 121 has a receiving unit 531, a password input unit 532, a destination input unit 533, a transmitting unit 534, and a position information obtaining unit 535. The receiving unit 531 and the transmitting unit 534 are realized by, for example, the communication IF 225 (see FIG. 2B) of the user terminal 121.

  The password input unit 532 and the destination input unit 533 are realized by, for example, the input device 224 of the user terminal 121 (see FIG. 2B). The position information acquisition unit 535 realizes its function by causing the CPU 221 to execute a program stored in the memory 222 (see FIG. 2B) of the user terminal 121, for example.

  The receiving unit 531 receives various information from the authentication server 111 and the communication device 131. The password input unit 532 accepts input of password information from the user. The password information is input by the user each time the user uses the credit card 122. The password information is, for example, a combination of letters and numbers. The password input unit 532 may receive biometric information input instead of password information.

  The destination input unit 533 receives an input of a request destination of an authentication request from a user. Specifically, the destination input unit 533 accepts the input of the destination of the password information from the user. The destination of the password information is the destination of the communication device 131 to which the password information is transmitted, for example, the address of the communication device 131. A plurality of destinations of the password information are stored in the user terminal 121 in association with information indicating the name of the communication device 131 (for example, the name of the home electric appliance).

  For this reason, the destination input unit 533 accepts the destination of the password information when the name of one communication device 131 to which the password information is to be transmitted is specified by the user. However, the destination input unit 533 is not limited to accepting the destination of the password information by designating the name of one communication device 131, and may accept the input of the destination (address) of the password information each time. Good.

  In addition, this name may include the name (dummy name) of the communication device 131 that is not actually registered. Accordingly, even if the user terminal 121 is stolen by a third party, it is difficult for the third party to specify the name of the registered communication device 131. Illegal use of the credit card 122 due to this can be suppressed.

  The transmission unit 534 transmits an authentication request request including information on the password received from the user to the communication device 131 of the destination (authentication request request destination) associated with the name specified by the user. A method of transmitting information from the user terminal 121 to the communication device 131 may be electronic mail or SNS (Social Networking Service). When the password information is transmitted by the transmission unit 534, the user terminal 121 deletes the password information input to the password input unit 532 and the destination input to the destination input unit 533.

  Further, as described above, the password input unit 532 and the destination input unit 533 are realized by, for example, the input device 224 (see FIG. 2B) of the user terminal 121. The input of the password and the input of the destination may be, for example, an operation input using a keyboard, a mouse, a touch panel, or a voice input using a microphone. When the input of the password or the input of the destination is performed by voice input, the user terminal 121 is not limited to a smartphone or a PC, but can be realized by an AI (Artificial Intelligence) speaker.

  Next, the communication device 131 is a computer device having a communication function. For example, the communication device 131 is a computer device having an IoT function. The communication device 131 includes a reception unit 511, a transmission control unit 512, a transmission unit 513, a specific information acquisition unit 514, and an additional information acquisition unit 515.

  The receiving unit 511 and the transmitting unit 513 are realized by, for example, the communication IF 236 (see FIG. 2C) of the communication device 131. The transmission control unit 512, the specific information acquisition unit 514, the additional information acquisition unit 515, and the functions thereof are realized by causing the CPU 231 to execute a program stored in, for example, the memory 232 (see FIG. 2C) of the communication device 131. I do.

  The receiving unit 511 receives, from the user terminal 121 that receives the request destination of the authentication request, an authentication request request with the communication device 131 (own device) as the request destination. Specifically, for example, the receiving unit 511 receives, from the user terminal 121 that receives the password information and the destination of the password information, the password information destined for the communication device 131 (own device).

  In response to the reception of the authentication request request by the receiving unit 511, the transmission control unit 512 causes the transmitting unit 513 to control the authentication server 111 to transmit identification information for identifying itself to the authentication server 111. I do it. Specifically, the transmission control unit 512 associates the password information with the identification information for identifying itself by the authentication server 111 in response to the reception of the password information by the reception unit 511. The transmission unit 513 controls the transmission unit 513 to transmit the data to the authentication server 111.

  Here, the fact that the specific information acquisition unit 514 of the communication device 131 acquires the specific information will be described. The specific information acquiring unit 514 acquires specific information for identifying the communication device 131 by the authentication server 111 in response to the reception of the password information by the receiving unit 511.

  It is desirable that the identification information is unique information for uniquely identifying the communication device 131. Specifically, the specific information is unique address information assigned to the communication device 131, for example, a MAC address. However, the specific information may be, for example, a fixed IP address (Internet Protocol Address) or a serial number of the communication device 131 (home electric appliance).

  Further, from the viewpoint that the specific information is hard to be stolen (hard to lose), the communication device 131 is preferably a non-portable type. Specifically, for example, the communication device 131 is a household electrical appliance used at the user's home and not carried by the user. In particular, the communication device 131 is desirably a large home electric appliance that is unlikely to be carried. Large home appliances are, for example, refrigerators, air conditioners, televisions, washing machines, and the like. However, the communication device 131 can also be a non-large home appliance (communication device) such as an AI home appliance such as a fixed telephone, an AI speaker, or a desktop PC.

  The transmitting unit 513 transmits the specific information to the authentication server 111. Specifically, the transmitting unit 513 transmits the password information and the specific information to the authentication server 111. The transmission method of the information to the authentication server 111 by the transmission unit 513 may be electronic mail or SNS.

  It is assumed that the specific information is transmitted from the transmission unit 513 to the authentication server 111, and the specific information is received by the reception unit 501 of the authentication server 111. In this case, the authentication unit 502 of the authentication server 111 specifies the specific information stored in the storage unit 506 (for example, the authentication information DB 113 in FIG. 3B) in association with the identification information of the card, and the specific information received by the reception unit 501. And authentication based on the use of the card.

  Specifically, authentication section 502 determines whether the specific information included in authentication information 310 (see FIG. 3B) stored in advance and the specific information received by receiving section 501 match each other. A determination is made, and if they match, it is determined that authentication was successful. On the other hand, in the matching determination, the authentication unit 502 determines that the authentication has failed if they do not match.

  It is also assumed that the password information and the specific information are transmitted from the transmission unit 513 to the authentication server 111, and the password information and the specific information are received by the reception unit 501 of the authentication server 111. In this case, the authentication unit 502 of the authentication server 111 receives the password information and the specific information stored in the storage unit 506 (for example, the authentication information DB 113 in FIG. 3B) in association with the identification information of the card, and the reception unit 501 Based on the received password information and the specified information (information for authentication), authentication for use of the card is performed.

  Specifically, the authentication unit 502 determines the password information and the identification information included in the authentication information 310 (see FIG. 3B) stored in advance and the password information and the identification information received by the reception unit 501, respectively. Is determined as to whether or not they match, and if they match, it is determined that authentication was successful. On the other hand, in the matching determination, the authentication unit 502 determines that the authentication has failed if they do not match.

  The card referred to here is, for example, the credit card 122, but is not limited to the credit card 122, and may be a debit card, a prepaid card, a cash card, or the like. The card identification information is, for example, the card number of the credit card 122.

  If the authentication by the authentication unit 502 succeeds, the output control unit 503 sets the authentication result indicating that the credit card 122 indicated by the identification information corresponding to the password information received by the reception unit 501 can be used to the settlement unit. 504. The credit card 122 that can be used is not limited to the credit card 122 indicated by the identification information corresponding to the password information, and may be the credit card 122 indicated by the identification information corresponding to the specific information received by the receiving unit 501. The output destination of the authentication result by the output control unit 503 is not limited to the settlement unit 504, and may be the other device when another device has a function having the settlement unit 504.

  When the settlement unit 504 receives the authentication result indicating that the credit card 122 can be used from the output control unit 503, the settlement unit 504 has other usage conditions related to the credit card 122 such as usage within the usage limit, Among the authentication information 310 (see FIG. 3B), the credit card 122 of the card number corresponding to the information of the password used for the authentication is made usable (payment is permitted).

  Further, the settlement unit 504 may receive the authentication result from the output control unit 503, and may make the credit card 122 usable when the authentication using the card number and the password of the credit card 122 is successful. Further, the settlement unit 504 makes the credit card 122 unusable after a predetermined period has elapsed since the credit card 122 was made usable. The predetermined period is, for example, about several minutes.

  The settlement unit 504 outputs a result indicating whether the credit card 122 can be used to the transmission unit 505. The transmitting unit 505 transmits a result indicating whether or not the credit card 122 can be used to the user terminal 121. The transmission method of the information to the authentication server 111 by the transmission unit 513 may be electronic mail or SNS.

  It is assumed that a result indicating whether the credit card 122 can be used is transmitted from the transmitting unit 505 to the user terminal 121, and a result indicating whether the credit card 122 can be used is received by the receiving unit 531 of the user terminal 121. In this case, the user terminal 121 displays a result indicating whether or not the credit card 122 can be used on the display screen. Thereby, the user can be notified whether or not the credit card 122 is usable.

  Next, a description will be given of how the additional information acquisition unit 515 of the communication device 131 (home appliance) acquires additional information. The additional information acquisition unit 515 acquires additional information in response to the reception unit 511 receiving the password information. The additional information is information obtained based on a specific function (home electric appliance function) of the communication device 131 (home electric appliance).

  Examples of the additional information are temperature information if the communication device 131 is a refrigerator or an air conditioner, volume information if the communication device 131 is a television, and operation mode information if the communication device 131 is a washing machine. It is. Further, as another example of the additional information, for example, if the communication device 131 is a fixed telephone, the information is telephone number information, or if the communication device 131 is an AI speaker, information that can be acquired by an AI speaker (for example, a user Information of today's schedule).

  The transmission control unit 512 associates the information of the password received by the receiving unit 511, the specific information obtained by the specific information obtaining unit 514, and the additional information obtained by the additional information obtaining unit 515, with the authentication server 111 The transmission unit 513 is controlled to transmit to the transmission unit 513.

  It is assumed that the password information, the specific information, and the additional information are transmitted from the transmission unit 513 to the authentication server 111, and the password information, the specific information, and the additional information are received by the reception unit 501 of the authentication server 111. In this case, the authentication unit 502 of the authentication server 111 receives the password information, the specific information, and the additional information stored in the storage unit 506 (for example, the authentication information DB 113 in FIG. 3B) in association with the identification information of the card. Authentication is performed based on the password information, the specific information, and the additional information received by the unit 501.

  For example, if the communication device 131 is a refrigerator, the authentication unit 502 determines whether or not information on the temperature in the refrigerator is added, in addition to determining whether the information of the password matches the specific information. The authentication unit 502 determines that the authentication has been successful when a match is obtained in the match determination and a positive determination result is obtained in the presence / absence determination (when information on the temperature in the refrigerator is added). On the other hand, if any one of the match determination and the existence determination is negative, the authentication unit 502 determines that authentication has failed.

  Here, usage conditions may be set for each of the plurality of registered communication devices 131. For example, the storage unit 506 may store usage conditions in association with each of a plurality of specific information (a plurality of communication devices 131). The usage conditions are, for example, a month, a day, a day of the week, and a time zone.

  The output control unit 503 may output an authentication result indicating that the credit card 122 can be used when the authentication by the authentication unit 502 is successful and the usage conditions are satisfied. For example, the storage unit 506 stores “odd month” as a use condition associated with the specific information of the refrigerator (communication device 131). In this case, the output control unit 503 can use the credit card 122 when the authentication unit 502 succeeds in the authentication using the specific information of the refrigerator and the current date is an odd month. It is sufficient to output an authentication result indicating the fact.

  Similarly, for example, storage unit 506 may store “even number months” as usage conditions associated with the specific information of the washing machine (communication device 131). Further, for example, storage unit 506 stores “holiday” as a use condition associated with the specific information of the refrigerator (communication device 131), or stores the use condition as a use condition associated with the specific information of the washing machine (communication device 131). "Weekdays" may be stored. The output control unit 503 uses the credit card 122 when the authentication unit 502 succeeds in the authentication using the specific information of each communication device 131 and the current date is a date that satisfies the usage conditions. What is necessary is just to output the authentication result which shows that it is possible.

  In this way, by setting the usage conditions, when the user uses the credit card 122, the user needs to specify a destination (the communication device 131) that satisfies the usage conditions. In addition, in outputting an authentication result indicating that the credit card 122 can be used, it is possible to further add a condition in addition to the condition that the authentication is successful, so that the security related to the use of the credit card 122 is improved. be able to.

  Next, transmission of information indicating the start of authentication from the user terminal 121 to the authentication server 111 will be described. When transmitting an authentication request request (for example, password information) to the communication device 131, the transmission unit 534 of the user terminal 121 transmits information indicating the start of authentication to the authentication server 111. The information indicating the start of authentication is, for example, information indicating the start of a payment procedure using credit card 122. The information indicating the start of authentication includes information for identifying the user and the credit card 122, and includes, for example, card number information.

  It is assumed that information indicating the start of authentication is transmitted to the authentication server 111 by the transmission unit 534, and information indicating the start of authentication is received by the reception unit 501 of the authentication server 111. In this case, the output control unit 503 outputs an authentication result indicating that the credit card 122 can be used when the information indicating the start of authentication is received by the receiving unit 501 and the authentication by the authentication unit 502 is successful. I do.

  On the other hand, even if the authentication by the authentication unit 502 succeeds, if the information indicating the start of the authentication is not received from the user terminal 121 by the reception unit 501, the output control unit 503 indicates that the credit card 122 can be used. The authentication result shown may not be output. As described above, the condition for outputting the authentication result indicating that the credit card 122 can be used is a condition where the authentication is successful and the information indicating the start of the authentication from the user terminal 121 is received. The safety of using the card 122 can be further improved.

  Next, a description will be given of how the position information obtaining unit 535 of the user terminal 121 obtains information regarding the position. The information on the position is, for example, information indicating that the user terminal 121 (the receiving unit 531 and the transmitting unit 534) and the communication device 131 (the receiving unit 511 and the transmitting unit 513) have performed short-range communication. When the user terminal 121 and the communication device 131 perform short-range communication, the position information acquisition unit 535 acquires information indicating that short-range communication has been performed.

  The short-range communication is, for example, communication using Bluetooth (registered trademark), NFC (Near Field Communication), Wi-Fi (registered trademark), or the like. Here, assuming that the communication device 131 is installed at home and that the user carries out the user terminal 121 when going out, the communication device 131 and the user terminal 121 perform short-range communication. That is, it is recognized that the user is at home and the communication device 131 is at home (not stolen).

  When the position information acquiring unit 535 acquires the information about the position, the transmitting unit 534 transmits the information about the position to the authentication server 111. Further, when the user terminal 121 and the communication device 131 perform short-range communication at all times, and the position information is always acquired by the position information acquiring unit 535, the transmitting unit 534 transmits the information on the position. It may be transmitted every predetermined period (for example, every 30 minutes). The information on the position transmitted from the transmitting unit 534 is stored in the authentication server 111 as a short-range communication history (update date and time) with the user terminal 121 shown in FIG. 3B.

  The position information acquisition unit 535 is provided in the user terminal 121, but is not limited thereto, and may be provided in the communication device 131. In other words, the information on the position may be acquired by one of the user terminal 121 and the communication device 131 and transmitted to the authentication server 111.

  It is assumed that the information about the position is transmitted from the transmitting unit 534 to the authentication server 111, and the information about the position is received by the receiving unit 501 of the authentication server 111. In this case, the output control unit 503 of the authentication server 111 determines that the authentication by the authentication unit 502 is successful, and that the communication device 131 is at a predetermined position based on the information on the position received by the reception unit 501. If it is determined, an authentication result indicating that the credit card 122 can be used is output. The predetermined position is, for example, a home.

  Specifically, the output control unit 503 determines that the short-range communication history indicating that the user terminal 121 and the communication device 131 have performed short-range communication has been received by the reception unit 501 within a predetermined period. It is determined that the communication device 131 is at home. The predetermined period is, for example, a period in which the user is expected to return home on a daily basis, such as 24 hours or 48 hours. For example, if the short-distance communication history within a predetermined period is stored in the authentication information DB 113 (see FIG. 3B), it is recognized that the communication device 131 is at home (not stolen), so the output control unit 503 Outputs an authentication result indicating that the credit card 122 can be used.

  On the other hand, if the short-range communication history within a predetermined period (for example, within 24 hours) is not stored in the authentication information DB 113, it is determined that the communication device 131 is not at home (for example, stolen). Control unit 503 does not output an authentication result indicating that credit card 122 can be used. However, if the user does not return home for a predetermined period due to the convenience of the user such as a trip or a business trip, the short-distance communication history within the predetermined period will not be stored in the authentication information DB 113. In this case, the user cannot use the credit card 122 at the place of stay. Therefore, the predetermined period may be a period that can be appropriately changed by the user.

  Further, for example, when the communication device 131 has a GPS (Global Positioning System) function, the position information acquisition unit (not shown) of the communication device 131 acquires GPS information (position information) as information related to the position. Is also good. In this case, the transmitting unit 513 of the communication device 131 may transmit the GPS information acquired by the position information acquiring unit (not shown) to the authentication server 111.

  It is assumed that the GPS information is transmitted from the transmission unit 513 to the authentication server 111, and the GPS information is received by the reception unit 501 of the authentication server 111. In this case, the output control unit 503 of the authentication server 111 may use the GPS information to determine whether the communication device 131 exists in a pre-registered area such as home.

  Next, a case where the present authentication method is used within the same family will be described. According to the present authentication method, the credit card 122 can be used when the authentication using the password information transmitted to the communication device 131 specified by the user and the specific information (address information) of the communication device 131 succeeds. . In other words, the credit card 122 can be used without using the credit card 122 number or password.

  Therefore, for example, if the same password information is registered in the same communication device 131 in association with each credit card 122 of a plurality of people (for example, father and mother) in the same family, When the authentication in the form is successful and the father's credit card 122 can be used, the mother's credit card 122 can also be used. That is, it is assumed that a plurality of credit cards 122 can be used simultaneously.

  In the present embodiment, the authentication server 111 receives the authentication start information including the card number from the user terminal 121 when performing the authentication. Is successful, only the credit card 122 of the card number corresponding to the authentication start information can be used. Therefore, for example, even when the credit card 122 corresponding to the father's card number becomes available, the credit card 122 corresponding to the mother's card number cannot be used.

  Further, in order to prevent a plurality of credit cards 122 from being used simultaneously, it is not limited to referring to the card number included in the authentication start information from the user terminal 121. The same communication device 131 may not be registered to a person. That is, the communication device 131 and the user may be associated with each other on a one-to-one basis, and a single communication device 131 may not be allowed to register a plurality of users repeatedly. Accordingly, the communication device 131 corresponding to each person in the same family is registered, so that it is possible to prevent a plurality of credit cards 122 from being used simultaneously.

  Further, in order to prevent a plurality of credit cards 122 from being used at the same time, for example, the communication device 131 may be registered so as to be identifiable in correspondence with each person in the same family. For example, to make the communication device 131 identifiable, the name of the communication device 131 may be registered as a name corresponding to each person. Specifically, for example, "fridge" may be registered as a name corresponding to each person, such as "fridge father" and "fridge mother".

  More specifically, the authentication server 111 may store the name of each person as “fridge father” or “fridge mother” in the “communication device name” of the authentication information database DB 113 (FIG. 3B). Then, the user terminal 121 receives the password information through the password input unit 532, receives the destination of the communication device 131 through the destination input unit 533, and further inputs the name corresponding to each person through the name input unit (not shown). Information may be received. The information received by each unit may be transmitted to the communication device 131 by the transmission unit 534. Then, the communication device 131 of the transmission destination may transmit the information received from the user terminal 121 to the authentication server 111 in association with the specific information.

  Thereby, the authentication server 111 can use the credit card 122 corresponding to each person's name. Even in this case, it is possible to prevent a plurality of credit cards 122 from being used simultaneously.

  Next, a case will be described in which the communication device 131 transmits authentication information to the authentication server 111 in response to a transmission request for authentication information (password information and specific information) from the authentication server 111. In the following, the information for authentication is password information and specific information, but may be only specific information.

  After receiving the information indicating the start of the authentication from the user terminal 121, the receiving unit 501 of the authentication server 111 sets the communication device 131 within a predetermined period (for example, within several tens of seconds or several minutes) due to, for example, a communication failure. May not receive authentication information (password information and specific information) from the Internet. In this case, the transmission unit 505 may request the communication device 131 to retransmit the information for authentication.

  It is assumed that a request for retransmission of information for authentication is transmitted from the transmission unit 505 of the authentication server 111 to the communication device 131, and the request is received by the reception unit 511 of the communication device 131. In this case, when the transmission request is received by the receiving unit 511, the transmission control unit 512 of the communication device 131, if the password information has already been received from the user terminal 121, the password information and the specific information And retransmitted to the authentication server 111.

  Accordingly, when the authentication server 111 receives the information indicating the start of the authentication from the user terminal 121 but does not receive the password information and the specific information within the predetermined period, the communication device 131 The password information and the specific information can be retransmitted to the authentication server 111.

  Further, when the reception unit 511 receives a request for retransmission of information for authentication from the authentication server 111, the transmission control unit 512 receives password information from the user terminal 121 due to, for example, a communication failure. If not, a request to transmit the password information to the user terminal 121 may be made.

  Accordingly, when the receiving unit 511 receives a request for retransmission of the authentication information from the authentication server 111 by the receiving unit 511, and does not receive the password information from the user terminal 121, Can retransmit the password information. Therefore, the communication device 131 can receive the information of the password from the user terminal 121. Then, the communication device 131 can transmit, to the authentication server 111, authentication information in which the received password information and the specific information are associated with each other.

  When only the specific information is used for the authentication information, the transmission control unit 512 determines, when a request for retransmission of the authentication information is received from the authentication server 111 by the reception unit 511, for example, due to a communication failure or the like. If an authentication request request (not including password information) has not been received from the user terminal 121, a transmission request of the authentication request request may be made to the user terminal 121.

  Accordingly, when the receiving unit 511 receives a request for retransmission of authentication information from the authentication server 111 by the receiving unit 511, and does not receive an authentication request request from the user terminal 121, Can retransmit the request for authentication request. Therefore, the communication device 131 can receive the authentication request request from the user terminal 121. Then, the communication device 131 can transmit the specific information (information for authentication) to the authentication server 111.

  In addition, after receiving the information for authentication from the communication device 131, the receiving unit 501 of the authentication server 111 may not receive the information indicating the start of the authentication from the user terminal 121 within a predetermined period. obtain. In this case, the transmitting unit 505 may request the user terminal 121 to retransmit information indicating the start of authentication. Thereby, the authentication server 111 can retransmit the information indicating the start of authentication to the user terminal 121 even when the information indicating the start of authentication is not received from the user terminal 121 due to, for example, a communication failure.

  Here, the authentication server 111 transmits the request for transmitting the information for authentication to the communication device 131 not only when retransmission is performed when a communication failure or the like occurs, but also when the authentication method in the authentication system 100 is started. It is also possible to use This will be specifically described below.

  In the authentication system 100, it is assumed that the condition for starting the authentication method is that the user terminal 121 transmits information indicating the start of authentication to the authentication server 111. In this case, each information is transmitted in the order of (i) → (ii) → (iii) in FIG. 4, and thereafter, upon receiving this transmission request, (1) → (2) → (3) in FIG. Information is sent in order.

  More specifically, when the user terminal 121 receives the start of authentication by a predetermined operation from the user, the transmission unit 534 of the user terminal 121 transmits information indicating the start of authentication to the authentication server 111. When the receiving unit 501 of the authentication server 111 receives the information indicating the start of the authentication from the user terminal 121 (see (i) of FIG. 4), the transmitting unit 505 requests the communication device 131 to transmit the information for authentication. (See (ii) of FIG. 4).

  Then, when the transmission request is received from the authentication server 111 by the reception unit 511 of the communication device 131, under the control of the transmission control unit 512, the transmission unit 513 requests the user terminal 121 to transmit the password information. (See (iii) in FIG. 4). Here, a case will be described where a transmission request for password information is made, but a transmission request for an authentication request request that does not include password information may be made.

  Then, when the receiving unit 531 of the user terminal 121 receives the transmission request of the password information from the communication device 131, the password input unit 532 accepts the input of the password information from the user, and the destination input unit 533 Accepts the designation of the destination of the communication device 131 as the transmission destination from the user. When each information is received by the password input unit 532 and the destination input unit 533, the transmitting unit 534 transmits the information of the password to the communication device 131 of the designated destination (see (1) in FIG. 4).

  Further, when the password information is received from the user terminal 121 by the reception unit 511 of the communication device 131, the transmission control unit 512 controls the transmission unit 513 to associate the password information with the specific information. It is transmitted to the authentication server 111 (see (2) in FIG. 4).

  When the receiving unit 501 of the authentication server 111 receives the password information and the specific information from the communication device 131, the authentication unit 502 performs authentication using the password information and the specific information. Then, when the authentication by the authentication unit 502 is successful, the output control unit 503 enables payment by the credit card 122 (see (3) in FIG. 4).

  By using such a communication method, various information can be transmitted from the user terminal 121 or the communication device 131 in response to a request from the authentication server 111. Therefore, the transmission of various information can be managed by the authentication server 111. In addition, it is possible to further suppress unauthorized use of the credit card 122.

(Example of display screen displayed on user terminal 121)
Next, an example of a display screen displayed on the user terminal 121 will be described with reference to FIGS. FIG. 6 is an explanatory diagram illustrating an example of an operation screen displayed on the user terminal 121. The authentication screen 600 of FIG. 6 is a screen displayed before using the credit card 122. The authentication screen 600 is displayed by starting a predetermined application program.

  The authentication screen 600 includes a designation field 601, a pull-down button 602, a password field 603, and a send button 604. The designation field 601 receives designation of one communication device 131 among a plurality of registered communication devices 131 (home appliances). The pull-down button 602 is a button for displaying a plurality of registered communication devices 131. The plurality of communication devices 131 displayed by the pull-down button 602 may include communication devices 131 (dummy names) that are not actually registered in the authentication server 111.

  The password column 603 receives an input of a password corresponding to the communication device 131 specified in the specification column 601. The transmission button 604 is a button for transmitting the information of the password input in the password column 603 to the communication device 131.

  When the transmission button 604 is operated, the information of the password input in the password column 603 is encrypted and transmitted to the communication device 131 specified in the specification column 601. When the transmission button 604 is operated, for example, the information indicating the communication device 131 specified in the specification column 601 and the information of the password input in the password column 603 are deleted from the display area and the user is deleted. It is deleted from a predetermined storage area of the terminal 121.

  As a result, even if the user terminal 121 is stolen by a third party, the password information and the information indicating the designated communication device 131 are deleted. Thus, unauthorized use of the credit card 122 can be suppressed.

  When the password information is transmitted to the communication device 131, the communication device 131 sends authentication information including the encrypted password information and the encrypted identification information (own address information) of the communication device 131. Is transmitted to the authentication server 111. When the information for authentication is transmitted to the authentication server 111, the authentication server 111 performs authentication using the information. A screen showing the result of the authentication will be described with reference to FIGS.

  In addition, the authentication screen 600 may include a specification field in which one “authentication server” can be specified from among a plurality of “authentication servers” for performing authentication of the credit card 122 by a pull-down button. For example, in this specification field, in addition to the “card use authentication system” according to the present embodiment, “XX card member site”, “XX bank net banking system”, and other financial-related systems A service that requires authentication for use irrelevant to the above may be included so as to be specified by the user.

  FIG. 7 is an explanatory diagram illustrating an example of an authentication success screen displayed on the user terminal 121. The authentication success screen 700 of FIG. 7 indicates that the authentication information is transmitted from the communication device 131 specified by the user to the authentication server 111, and the authentication server 111 succeeds in the authentication using the authentication information. This is the screen that is displayed.

  Thereby, the user can be notified that the credit card 122 is available. However, when the credit card 122 can be used, it is required that the authentication be successful and that the credit card 122 have other usage conditions related to the credit card 122, such as usage within the usage limit. . The authentication success screen 700 includes an end button 701. When the end button 701 is operated, the predetermined application program ends.

  FIG. 8 is an explanatory diagram illustrating an example of an authentication failure screen displayed on the user terminal 121. The authentication failure screen 800 in FIG. 8 is a screen displayed when the authentication in the authentication server 111 has failed. Thus, the user can be notified that the credit card 122 cannot be used.

  The authentication failure screen 800 includes an authentication screen button 801 and an end button 802. When the authentication screen button 801 is operated, the screen shifts to the authentication screen 600 in FIG. When the end button 802 is operated, the predetermined application program ends.

(An example of an authentication reception processing procedure performed by the user terminal 121)
Next, an example of an authentication reception processing procedure performed by the user terminal 121 will be described with reference to FIG. FIG. 9 is a flowchart illustrating an example of an authentication reception processing procedure performed by the user terminal 121.

  In FIG. 9, the user terminal 121 determines whether authentication has started (step S901). The start of authentication is, for example, activation of a predetermined application program for displaying the screen of the authentication screen 600 in FIG. The predetermined application program may be started by a user operating the user terminal 121, or the user terminal 121 may be started by an instruction from another device.

  The instruction from another device may be, for example, an instruction from the POS terminal to the user terminal 121 using the short-range communication by bringing the credit card 122 close to the POS terminal. Further, the instruction from another device may be an instruction from the authentication server 111.

  The user terminal 121 waits until the start of authentication (step S901: No). When the authentication is started (Step S901: Yes), the user terminal 121 accepts the designation of the communication device 131 and the input of the password (Step S902). Then, the user terminal 121 determines whether a transmission instruction has been received (step S903). Accepting the transmission instruction means, for example, selecting transmission button 604 in FIG.

  If the user terminal 121 does not receive the transmission instruction (Step S903: No), the process proceeds to Step S902. When receiving the transmission instruction (Step S903: Yes), the user terminal 121 encrypts the input password (Step S904). For encryption, for example, an encryption method using a public key is used. However, the encryption is not limited to the encryption method using the public key, and another encryption method such as an encryption method using a common key can be used.

  Then, the user terminal 121 transmits the information of the password to the designated communication device 131 (step S905), and transmits the information of the authentication start to the authentication server 111 (step S906). When the password information is transmitted, the user terminal 121 deletes the contents indicating the transmission destination and the password information from the predetermined storage area. Next, the user terminal 121 determines whether an authentication result has been received (step S907).

  The user terminal 121 waits to receive an authentication result from the authentication server 111 (step S907: No). Upon receiving the authentication result from the authentication server 111 (step S907: Yes), the user terminal 121 displays the authentication result (result indicating whether or not the credit card 122 can be used) on the display screen (step S908), and according to the flowchart. A series of processing ends. The display screen of the authentication result is, for example, an authentication success screen 700 of FIG. 7 or an authentication failure screen 800 of FIG.

  According to the above-described processing, the user terminal 121 can transmit the information on the password received from the user to the communication device 131 specified by the user. Then, the password information and the specific information are transmitted from the communication device 131 of the transmission destination to the authentication server 111, and when the authentication is performed by the authentication server 111, the user terminal 121 obtains the authentication result (the credit card 122). The user can be notified of the result indicating whether or not use is possible.

  Even if one of the password information and the information of the communication device 131 of the transmission destination (for example, the information of the destination) is stolen by a third party, the authentication server is required to use only one of the information. The authentication at 111 does not succeed. Therefore, unauthorized use of the credit card 122 by a third party can be suppressed.

(An example of the authentication information transmission processing procedure performed by the communication device 131)
Next, an example of a procedure for transmitting information for authentication performed by the communication device 131 will be described with reference to FIG. FIG. 10 is a flowchart illustrating an example of a procedure for transmitting information for authentication performed by the communication device 131. The communication device 131 that is the subject of execution of the flowchart of FIG.

  In FIG. 10, the communication device 131 determines whether or not password information has been received from the user terminal 121 (step S1001). If the communication device 131 does not receive the password information from the user terminal 121 (step S1001: No), the communication device 131 proceeds to step S1006. Upon receiving the password information from the user terminal 121 (step S1001: Yes), the communication device 131 acquires its own address information (step S1002).

  The acquired address information is, for example, encrypted. The encryption is based on, for example, a public key. Note that the communication device 131 may acquire the unencrypted address information and encrypt the address information.

  Then, the communication device 131 acquires additional information (for example, information on the temperature in the refrigerator) (step S1003). The communication device 131 also encrypts the additional information. Next, the communication device 131 transmits authentication information (password information, address information, and additional information) to the authentication server 111 (step S1004).

  Then, the communication device 131 determines whether a reception confirmation has been received from the authentication server 111 (step S1005). The receipt confirmation is information transmitted from the authentication server 111 when the authentication server 111 receives the information for authentication.

  When the communication device 131 receives the receipt confirmation from the authentication server 111 (step S1005: Yes), the communication device 131 ends a series of processes according to the flowchart. On the other hand, when the communication device 131 does not receive the receipt confirmation from the authentication server 111 (step S1005: No), the communication device 131 determines whether a transmission request for authentication information has been received from the authentication server 111 (step S1006).

  The case where the authentication server 111 transmits a request for transmitting information for authentication to the communication device 131 means that the authentication server 111 has received the information indicating the start of authentication from the user terminal 121, but for a predetermined period due to a communication failure or the like. Is the case where the authentication server 111 has not received the authentication information. If the communication device 131 does not receive a request for transmitting information for authentication from the authentication server 111 (step S1006: No), the communication device 131 proceeds to step S1005.

  When receiving the transmission request for the information for authentication from the authentication server 111 (step S1006: Yes), the communication apparatus 131 determines whether or not the password information has already been received from the user terminal 121 (step S1007). . If the communication device 131 has already received the password information from the user terminal 121 (step S1007: Yes), that is, if the authentication information has been transmitted, the communication device 131 proceeds to step S1002, and Resubmit information.

  On the other hand, if the password information has not yet been received from the user terminal 121 due to, for example, a communication failure (step S1007: No), the communication device 131 requests the user terminal 121 to transmit the password information (step S1007). S1008), and proceeds to step S1001.

  According to the above-described processing, the communication device 131 receives password information from the user terminal 121, associates the password information with its own address information and additional information, and sends the password information to the authentication server 111 as authentication information. Can be sent. Thereby, the authentication server 111 can perform authentication using the information for authentication.

(Example of authentication processing procedure performed by authentication server 111)
Next, an example of an authentication processing procedure performed by the authentication server 111 will be described with reference to FIGS. 11A and 11B. FIG. 11A is a flowchart (part 1) illustrating an example of an authentication processing procedure performed by the authentication server 111. FIG. 11B is a flowchart (part 2) illustrating an example of an authentication processing procedure performed by the authentication server 111.

  11A, the authentication server 111 determines whether or not information indicating the start of authentication has been received from the user terminal 121 (step S1101). When the communication device 131 does not receive the information indicating the start of the authentication from the user terminal 121 (step S1101: No), the process proceeds to step S1104. On the other hand, when the authentication server 111 receives the information indicating the start of the authentication from the user terminal 121 (step S1101: Yes), the authentication server 111 determines whether or not a predetermined period (for example, several minutes) has elapsed after receiving the information. (Step S1102).

  When a predetermined period has elapsed after receiving the information indicating the start of authentication (step S1102: YES), the authentication server 111 requests the communication device 131 to transmit information for authentication (step S1103), and proceeds to step S1102. I do. Note that if the authentication information cannot be received from the communication device 131 even though the authentication information transmission request has been made to the communication device 131 a predetermined number of times, the transmission request is not made in step S1103, and the user is not sent. An error message may be output to the terminal 121, and the series of processing according to this flowchart may be ended.

  In step S1102, if the predetermined period has not elapsed since the information indicating the start of authentication has been received (step S1102: NO), authentication server 111 determines whether or not authentication information has been received from communication device 131. Is determined (step S1104). If the authentication server 111 has not received the information for authentication from the communication device 131 (step S1104: No), the process proceeds to step S1101.

  If the authentication server 111 has received the information for authentication from the communication device 131 (step S1104: Yes), the authentication server 111 transmits an acknowledgment to the communication device 131 (step S1105). Then, the authentication server 111 combines the authentication information (password information, address information, and additional information), and combines the combined password information, the combined address information, the combined additional information, and the authentication information in FIG. 3B. The authentication process is performed using the command 310 (step S1106). For example, a secret key is used for decryption.

  Then, in FIG. 11B, the authentication server 111 determines whether the authentication has succeeded (step S1107). If the authentication has failed (step S1107: NO), the authentication server 111 causes the user terminal 121 to output an authentication failure screen 800 (see FIG. 8) (step S1108), and ends a series of processes according to the flowchart. On the other hand, when the authentication is successful (step S1107: YES), the authentication server 111 determines whether or not information on the position has been received from the user terminal 121 within a predetermined period (for example, within 24 hours) (step S1107). S1109).

  In step S1109, the authentication server 111 refers to the information regarding the position (for example, the short-range communication history with the user terminal included in the authentication information 310 illustrated in FIG. 3B), and refers to the user terminal 121. Then, it is determined whether or not information regarding the position has been received within a predetermined period. If the information regarding the position has not been received from the user terminal 121 within the predetermined period (step S1109: No), the authentication server 111 proceeds to step S1108.

  When the information regarding the position is received from the user terminal 121 within the predetermined period (step S1109: Yes), the authentication server 111 starts the authentication from the user terminal 121 within the predetermined period (for example, within several minutes). It is determined whether or not the indicated information has been received (step S1110). When the information indicating the start of authentication has been received from the user terminal 121 within the predetermined period (step S1110: Yes), the authentication server 111 proceeds to step S1114.

  On the other hand, if the information indicating the start of authentication has not been received from the user terminal 121 within the predetermined period due to, for example, a communication failure (step S1110: No), the authentication server 111 indicates the start of authentication to the user terminal 121. An information transmission request is made (step S1111). Then, the authentication server 111 determines whether a predetermined period (for example, several minutes) has elapsed (step S1112). If the predetermined period has elapsed (step S1112: YES), the authentication server 111 proceeds to step S1108.

  On the other hand, when the predetermined period has not elapsed (Step S1112: No), the authentication server 111 determines whether or not information indicating the start of authentication has been received from the user terminal 121 (Step S1113). If the authentication server 111 does not receive information indicating the start of authentication from the user terminal 121 (step S1113: No), the process proceeds to step S1112.

  On the other hand, when the authentication server 111 receives the information indicating the start of the authentication from the user terminal 121 (step S1113: Yes), the authentication server 111 has the other usage conditions related to the credit card 122 such as the usage within the usage limit. Then, the settlement by the credit card 122 is permitted (step S1114). Then, an authentication success screen 700 (see FIG. 7) is output to the user terminal 121 (step S1115), and a series of processes according to this flowchart ends.

  According to the above-described processing, the authentication server 111 performs authentication when receiving information indicating the start of authentication from the user terminal 121 and receiving information for authentication from the communication device 131, and performs authentication. A credit card 122 associated with the information may be made available.

  As described above, in the present embodiment, by interposing the communication device 131 between the user terminal 121 and the authentication server 111, the communication is not one-to-one communication between the user terminal 121 and the authentication server 111. Communication was performed by three devices (the authentication server 111, the user terminal 121, and the communication device 131).

  Specifically, the authentication server 111 according to the present embodiment transmits an authentication request request to the communication device 131 to which the authentication request input to the terminal device (for example, the user terminal 121 or the POS terminal) is requested. The specific information (address information) is received from the communication device 131.

  Thereby, the authentication server 111 refers to the authentication information DB 113 (see FIG. 3B), and when the specific information (address information) received from the communication device 131 is information that is stored (registered) in advance, the specific information The authentication result indicating that the credit card 122 indicated by the identification information corresponding to the authentication information can be used can be output.

  Further, the authentication server 111 according to the present embodiment transmits the information of the password input to the terminal device (for example, the user terminal 121 or the POS terminal) to the communication device 131 specified by the user, and Password information and specific information (address information).

  With this, the authentication server 111 refers to the authentication information DB 113 (see FIG. 3B), and if both the password information and the address information received from the communication device 131 are the information stored (registered) in advance, the authentication server 111 An authentication result indicating that the credit card 122 indicated by the identification information corresponding to the password information can be used can be output.

  Therefore, according to the authentication server 111 according to the present embodiment, the credit card 122 can be used without performing authentication using the personal identification number or the card number of the credit card 122. Therefore, it is possible to prevent the personal identification number or the card number of the credit card 122 from being leaked or stolen by skimming or the like.

  Further, even if the password or the card number of the credit card 122 is leaked for some reason, a third party cannot use the credit card 122 with only the password and the card number. As a result, unauthorized use of the card by a third party can be suppressed, and security related to the use of the credit card 122 can be improved.

  Further, in the authentication system 100 according to the present embodiment, when using the credit card 122, the user inputs the password information to the user terminal 121 and specifies the destination to which the password information is transmitted. Need to be performed. Therefore, even if one of the password information and the destination information is stolen by a third party, the authentication in the authentication server 111 is not successful with only one of the information. Cannot use the credit card 122. Therefore, according to the authentication server 111 according to the present embodiment, unauthorized use of the credit card 122 by a third party can be suppressed.

  According to the authentication server 111 according to the present embodiment, the authentication is performed using not only the password information but also the identification information of the communication device 131 associated with the password information. Can be enhanced.

  Further, according to the present embodiment, the user can perform an operation for authentication on user terminal 121 before the payment to prepare for the payment procedure. Therefore, it is possible to omit the input operation to the POS terminal at the time of payment, so that it is not necessary for the clerk to prompt the user to input the personal identification number or to prompt the user to sign. Thus, according to the authentication server 111, the payment procedure at the store can be simplified and speeded up, and skimming can be suppressed, so that unauthorized use of the credit card 122 can be suppressed.

  In the present embodiment, the authentication server 111 performs authentication using authentication information including additional information corresponding to a predetermined function of the communication device 131. Thus, according to the authentication server 111, the strength of authentication can be increased, and the reliability of the registered communication device 131 can be improved. Therefore, the security of using the credit card 122 can be further improved.

  Further, in the present embodiment, the authentication server 111 can use the credit card 122 when the authentication is successful and when the information indicating the start of the authentication transmitted from the user terminal 121 is received. The authentication result indicating the effect is output. Thereby, the conditions for making the credit card 122 usable include a plurality of conditions for receiving the information for authentication from the communication device 131 and receiving the information indicating the start of the authentication from the user terminal 121. Can be.

  In other words, the reception of only one of the information for authentication and the information indicating the start of authentication does not make the credit card 122 usable. Therefore, the authentication server 111 can suppress the unauthorized use of the credit card 122 and improve the security of the use of the credit card 122.

  Further, in the present embodiment, even when the authentication server 111 receives information indicating the start of authentication from the user terminal 121, and does not receive information for authentication from the communication device 131, the authentication server 111 A request to resend information has been made. Accordingly, when the authentication server 111 does not receive the information for authentication from the communication device 131 due to, for example, a communication failure, the authentication server 111 can cause the communication device 131 to retransmit the information for authentication.

  The authentication server 111 according to the present embodiment indicates that the credit card 122 can be used when the authentication is successful and the communication device 131 is at a predetermined position (for example, at home). The authentication result was output. Thus, according to the authentication server 111, for example, when the communication device 131 is at home (when it is not stolen), the credit card 122 can be used. Therefore, the authentication server 111 can suppress the unauthorized use of the credit card 122 and improve the security of the use of the credit card 122.

  Further, in the present embodiment, the authentication server 111 is capable of registering a plurality of communication devices 131 for each user (see authentication information 310-1 to 310-3 in FIG. 3B). Thus, even when one communication device 131 specified by the user on the user terminal 121 cannot be used due to a failure or the like, the authentication server 111 can substitute another communication device 131, that is, the other communication device 131 The authentication information can be transmitted from the authentication server 111 to the authentication server 111.

  Therefore, according to the authentication server 111 according to the present embodiment, even when one communication device 131 cannot be used, the authentication information transmitted from the other communication device 131 is obtained and the credit card 122 is Can be made available.

  In the present embodiment, the communication device 131 associates the password information with the specific information in response to receiving the password information addressed to the own device from the user terminal 121, and Was sent to In this way, by transmitting the password information and the specific information in association with each other to the authentication server 111, the authentication server 111 can perform authentication with high authentication strength. Therefore, according to the communication device 131 of the present embodiment, unauthorized use of the credit card 122 by a third party can be suppressed.

  In the present embodiment, the specific information is unique address information assigned to the communication device 131, and the communication device 131 is a non-portable communication device 131. In particular, by using the communication device 131 as a large household electrical appliance such as a refrigerator which cannot be easily carried among non-portable types, it is possible to prevent the communication device 131 from being stolen. Information) can be suppressed from being stolen. Therefore, with the communication device 131 according to the present embodiment, the effect of suppressing the unauthorized use of the credit card 122 can be improved.

  In addition, when the communication device 131 according to the present embodiment receives a request for transmission of authentication information from the authentication server 111 and receives password information from the user terminal 121, The information for authentication was sent to. Accordingly, when the authentication server 111 requests the communication device 131 to transmit authentication information, the communication device 131 can retransmit the authentication information to the authentication server 111. The server 111 can be authenticated.

  In addition, when the communication device 131 according to the present embodiment receives an authentication information transmission request from the authentication server 111 and does not receive password information from the user terminal 121, A request for transmitting password information is made to 121.

  Accordingly, when the authentication server 111 requests the communication device 131 to transmit authentication information, but the communication device 131 does not receive the password information from the user terminal 121, the communication device 131 The information of the password can be retransmitted to the communication device 131 by the communication device 131. Therefore, the communication device 131 can receive the password information from the user terminal 121, and can transmit the received password information and the specific information to the authentication server 111 in association with each other.

  Further, in the present embodiment, the case where the authentication device of the present invention is realized by the authentication server 111 (card company server) of the card company that performs settlement by the credit card 122 has been described, but the present invention is not limited to this. For example, the authentication device of the present invention can be realized by a bank server or a server of a company other than the card company. In addition, when various kinds of information can be shared between different types of business using an API (Application Programming Interface) of the credit card 122, the authentication device of the present invention can be realized by, for example, a server of an insurance company. It is possible to

  The authentication method described in the present embodiment can be realized by executing a prepared program on a computer such as a personal computer or a workstation.

  The authentication program includes a hard disk, a flexible disk, a CD (Compact Disc), a ROM (Read Only Memory), an MO (Magneto-Optical Disk), a DVD (Digital Versatile Disk), and a USB (Universal Serial Bus) memory that can be read by a computer. It is executed by being stored in a simple storage medium and read out from the storage medium by a computer. The authentication program may be distributed via a network such as the Internet.

  As described above, the authentication device, the authentication method, the authentication program, and the communication device according to the present invention are suitable for the authentication device, the authentication method, the authentication program, and the communication device used for card authentication.

100 authentication system 111 authentication server 112 card information DB
113 Authentication Information DB
121 User terminal 131 Communication device 140 Network 211, 211, 231 CPU
212, 222, 232 Memory 213, 225, 236 Communication IF
223 output device 224 input device 233 operation unit 234 sensor 235 drive unit 210, 220, 230 bus 501, 511, 531 reception unit 502 authentication unit 503 output control unit 504 payment unit 505, 513, 534 transmission unit 506 storage unit 512 transmission control Unit 514 Specific information acquisition unit 515 Additional information acquisition unit 532 Password input unit 533 Destination input unit 535 Location information acquisition unit

Claims (10)

Identifying the communication device from the communication device in response to the communication device receiving an authentication request request transmitted from the terminal device that receives the request destination of the authentication request from the user to the communication device indicated by the request destination Receiving means for receiving specific information for performing
Authentication means for authenticating the use of the card based on the specific information stored in the storage means in association with the identification information of the card, and the specific information received by the receiving means;
When the authentication by the authentication unit succeeds, an output control unit that outputs an authentication result indicating that the card indicated by the identification information corresponding to the specific information received by the reception unit can be used,
Have a,
The communication device is a home electric appliance installed in the home of the user having an IoT (Internet of Things) function,
The authentication device , wherein the specific information is unique address information assigned to the communication device. In response to the communication device receiving the password information transmitted from the terminal device that receives the password information and the destination of the password information from the user to the communication device indicated by the destination, from the communication device, Receiving means for receiving information of the password and identification information for identifying the communication device,
Authentication for authenticating the use of the card based on the password information and the specific information stored in the storage unit in association with the identification information of the card and the password information and the specific information received by the receiving unit. Means,
When the authentication by the authentication unit succeeds, an output control unit that outputs an authentication result indicating that the card indicated by the identification information corresponding to the information of the password received by the reception unit can be used,
Have a,
The communication device is a home electric appliance installed in the home of the user having an IoT (Internet of Things) function,
The authentication device , wherein the specific information is unique address information assigned to the communication device. The receiving unit receives, from the communication device, information of a password, specific information, and additional information corresponding to a predetermined function of the communication device,
The authentication unit includes a password information, specific information, and additional information stored in the storage unit in association with card identification information, and a password information, specific information, and additional information received by the receiving unit. Authenticate based on,
The authentication device according to claim 2, wherein: The receiving means receives information indicating the start of authentication transmitted from the terminal device when information of a password is transmitted from the terminal device to the communication device,
The output control means, the information indicating the start of authentication is received from the terminal device by the receiving means, and, when the authentication is successful, outputs an authentication result indicating that the card can be used,
The authentication device according to claim 2 or 3, wherein   The output control unit, when the password information and the specific information are not received from the communication device within a predetermined time period after the information indicating the start of authentication is received from the terminal device by the reception unit, the communication device The authentication device according to claim 4, wherein a request for transmission of password information and specific information is made to the authentication device. The receiving means, from any of the terminal device and the communication device, receives information on the position of the communication device,
The output control unit is configured to use the card when the authentication is successful and when it is determined that the communication device is at a predetermined position based on the information on the position received by the receiving unit. The authentication device according to any one of claims 2 to 5, wherein an authentication result indicating that the authentication is possible is output. Identifying the communication device from the communication device in response to the communication device receiving an authentication request request transmitted from the terminal device that receives the request destination of the authentication request from the user to the communication device indicated by the request destination Receiving specific information to
Based on the specific information stored in the storage unit in association with the identification information of the card, the received specific information, based on the authentication of the use of the card,
If the authentication is successful, output an authentication result indicating that the card indicated by the identification information corresponding to the received specific information can be used,
The computer performs the processing ,
The communication device is a home electric appliance installed in the home of the user having an IoT (Internet of Things) function,
The authentication method , wherein the specific information is unique address information assigned to the communication device . Identifying the communication device from the communication device in response to the communication device receiving an authentication request request transmitted from the terminal device that receives the request destination of the authentication request from the user to the communication device indicated by the request destination Receiving specific information to
Based on the specific information stored in the storage unit in association with the identification information of the card and the received specific information, perform authentication related to the use of the card,
If the authentication is successful, output an authentication result indicating that the card indicated by the identification information corresponding to the received specific information can be used,
Let the computer execute the process ,
The communication device is a home electric appliance installed in the home of the user having an IoT (Internet of Things) function,
The authentication program , wherein the specific information is unique address information assigned to the communication device . It is composed of home electric appliances installed in the home of a user having an Internet of Things (IoT) function,
From a terminal device that accepts a request destination of the authentication request from the user, receiving means for receiving an authentication request requests that the request receiving the own device,
In response to the reception of the authentication request request by the receiving unit, the identification device transmits identification information including unique address information assigned to the own device to the authentication device for identifying the own device by the authentication device. Transmission control means;
A communication device comprising: The authentication request includes password information,
The transmission control unit, in response to the information of the password is received by the receiving unit, the information of the password, the specific information, and causes the authentication device to transmit,
The communication device according to claim 9, wherein:

Images