JP7698524B2 - Authentication system, control device, and computer program - Google Patents

Description

The present invention relates to an authentication system that uses a mobile device that can be carried by a user. The present invention also relates to a control device that can form part of the authentication system, and a computer program that can be executed by a processing unit installed in the control device.

Patent Document 1 discloses an authentication system mounted on a vehicle, which is an example of a moving body. In this system, authentication is performed through radio wave communication between a control device that controls the operation of the vehicle door locking/unlocking device and a mobile device carried by the user. When authentication is established with the user touching a touch sensor provided on the door handle, the control device is permitted to control the operation of the locking/unlocking device.

JP 2016-211334 A

The object of the present invention is to improve the convenience of authentication systems that use mobile devices.

One aspect of the present invention to achieve the above object is an authentication system, comprising:
a communication device for wirelessly communicating with a mobile device that is portable by a user;
A control device that controls an operation of a controlled device based on an authentication process that authenticates the mobile device;
a storage device for storing authentication information used in the authentication process;
Equipped with
The control device acquires, via the communication device, authority information indicating the authority of the mobile device with respect to the controlled device that has been distributed to the mobile device, and determines whether or not to store the authentication information in the storage device based on the authority information.

One aspect for achieving the above object is a control device that controls the operation of a controlled device based on an authentication process for authenticating a mobile device that can be carried by a user, the control device comprising:
a reception unit that receives authority information indicating an authority of the mobile device with respect to the controlled device, the authority information being distributed to the mobile device, through a communication device capable of wireless communication with the mobile device;
a processing unit that determines whether or not authentication information used in the authentication process can be stored in a storage device based on the authority information;
It is equipped with:

One aspect for achieving the above object is a computer program executable by a processing unit mounted on a control device that controls the operation of a controlled device based on an authentication process for authenticating a mobile device that can be carried by a user, the computer program comprising:
By being executed, the control device
receiving authority information indicating an authority of the mobile device with respect to the controlled device delivered to the mobile device through a communication device capable of wireless communication with the mobile device;
Based on the authority information, it is determined whether or not authentication information used in the authentication process can be stored in a storage device.

According to the configurations relating to each of the above aspects, the control device controls the operation of the controlled device through a mobile device authenticated using authentication information stored in the storage device. Whether or not the authentication information can be stored in the storage device is determined by the control device based on the authority information distributed to the mobile device. This can prohibit the use of the controlled device by a mobile device that has not been granted proper authority, while eliminating the need for a user to visit a facility that possesses a dedicated tool to grant authority information to the mobile device. This effect becomes more pronounced as the number of mobile devices that share the authentication system increases. Therefore, the convenience of the authentication system that uses mobile devices can be improved.

1 illustrates an example of a configuration of an authentication system according to an embodiment. 2 illustrates an example of a functional configuration of the authentication system of FIG. 1. 2 illustrates an example of a flow of a mobile device registration process executed by the control device of FIG. 1 .

Examples of embodiments are described in detail below with reference to the accompanying drawings. In each figure, the scale has been appropriately changed so that each illustrated element is of a recognizable size.

FIG. 1 illustrates an example of the configuration of an authentication system 10 according to one embodiment. The authentication system 10 can be used to authorize a user carrying a mobile device to use a vehicle 20 by authenticating the mobile device. The shape of the vehicle 20 is merely an example. The vehicle 20 is an example of a moving body.

The authentication system 10 includes a communication device 11. In this example, the communication device 11 is mounted at an appropriate position in the vehicle 20. The communication device 11 is equipped with an antenna capable of performing short-range wireless communication with a mobile device.

The term "short-range wireless communication" used in this specification refers to non-contact communication using radio waves while conforming to the standard IEEE 802.15 or IEEE 802.11. Technologies capable of short-range wireless communication include Bluetooth (registered trademark), Bluetooth Low Energy (registered trademark), Ultra Wide Band (UWB), ZigBee (registered trademark), and Wi-Fi (registered trademark). In this specification, "short-range wireless communication" is distinguished from "near-field wireless communication," which is non-contact communication that transmits information through coupling by electromagnetic induction. Technologies capable of short-range wireless communication include NFC (Near Field Communication), RF-ID, and the like.

The expression "transmitting a signal by radio waves" used in this specification means wirelessly transmitting a signal by radio waves at a frequency or frequency band defined in the short-range wireless communication standard mentioned above.

The authentication system 10 includes a control device 12. In this example, the control device 12 is mounted on the vehicle 20.

The control device 12 is configured to control the operation of a locking/unlocking device 21 mounted on the vehicle 20 based on an authentication process that authenticates the mobile device. The locking/unlocking device 21 is a device that locks and unlocks a door 22 that opens and closes the vehicle compartment. The locking/unlocking device 21 is an example of a controlled device.

The authentication system 10 is configured to be shared by a first mobile device 41 carried by a first user 31 and a second mobile device 42 carried by a second user 32. That is, each of the first mobile device 41 and the second mobile device 42 is equipped with an antenna capable of performing short-range wireless communication.

The first mobile device 41 is configured to be able to acquire first authentication information TE1 and first authority information TO1 distributed from the external server device 60 via the wireless communication network 50. The second mobile device 42 is configured to be able to acquire second authentication information TE2 and second authority information TO2 from the external server device 60 distributed from the external server device 60 via the wireless communication network 50.

The first authentication information TE1 is information that identifies at least one of the first user 31 and the first mobile device 41. The second authentication information TE2 is information that identifies at least one of the second user 32 and the second mobile device 42.

The first authority information TO1 is information indicating the authority of the first mobile device 41 with respect to the locking/unlocking device 21. The second authority information TO2 is information indicating the authority of the second mobile device 42 with respect to the locking/unlocking device 21.

As used in this specification, the expression "authority of a mobile device over the locking/unlocking device" refers to the degree of freedom of instruction that the mobile device is allowed to use to control the operation and change the settings of the locking/unlocking device 21 installed in the vehicle 20, and the length of the period of use.

2, the first mobile device 41 is configured to transmit a first response signal RS1 when the received radio wave strength of the trigger signal TR transmitted from the communication device 11 exceeds a threshold value. Similarly, the second mobile device 42 is configured to transmit a second response signal RS2 when the received radio wave strength of the trigger signal TR transmitted from the communication device 11 exceeds a threshold value. Each of the first response signal RS1 and the second response signal RS2 may be an analog signal or a digital signal.

The control device 12 includes a reception unit 121. The reception unit 121 is configured as an interface capable of receiving the first response signal RS1 and the second response signal RS2 through the communication device 11. When the first response signal RS1 and the second response signal RS2 are each an analog signal, the reception unit 121 includes an appropriate conversion circuit including an A/D converter.

The control device 12 includes a processing unit 122 and an output unit 123. The processing unit 122 is configured to determine that a communication link has been established between the communication device 11 and the first mobile device 41 when the reception unit 121 receives a first response signal RS1 in response to the trigger signal TR, and to output a request signal RQ from the output unit 123. Similarly, the processing unit 122 is configured to determine that a communication link has been established between the communication device 11 and the second mobile device 42 when the reception unit 121 receives a second response signal RS2 in response to the trigger signal TR, and to output a request signal RQ from the output unit 123. The request signal RQ is a signal that requests information necessary for the registration of the mobile device. The request signal RQ may be an analog signal or a digital signal.

The output unit 123 is therefore configured as an interface that outputs the request signal RQ to the communication device 11. If the request signal RQ is an analog signal, the output unit 123 is equipped with an appropriate conversion circuit including a D/A converter.

The first mobile device 41 is configured to transmit the first authentication information TE1 and the first authority information TO1 by radio waves in response to the request signal RQ. Similarly, the second mobile device 42 is configured to transmit the second authentication information TE2 and the second authority information TO2 by radio waves in response to the request signal RQ. Each of the first authentication information TE1, the first authority information TO1, the second authentication information TE2, and the second authority information TO2 may be in the form of analog data or in the form of digital data.

The reception unit 121 of the control device 12 is therefore configured as an interface capable of receiving the first authentication information TE1, the first authority information TO1, the second authentication information TE2, and the second authority information TO2 through the communication device 11. When each of the first authentication information TE1, the first authority information TO1, the second authentication information TE2, and the second authority information TO2 is in the form of analog data, the reception unit 121 is provided with an appropriate conversion circuit including an A/D converter.

The processing unit 122 is configured to determine whether the first authority information TO1 received by the receiving unit 121 is appropriate. For example, if the first authority information TO1 includes information indicating the usable period, it is determined whether the current time is within the usable period. If the processing unit 122 determines that the first authority information TO1 is inappropriate, it is configured to prohibit the first mobile device 41 from using the locking/unlocking device 21. The same applies when the first authority information TO1 cannot be obtained.

The authentication system 10 includes a storage device 13. As illustrated in FIG. 1, the storage device 13 is mounted on a vehicle 20. The storage device 13 is configured to store authentication information used to authenticate a mobile device together with authority information associated with the authentication information. The storage device 13 can be realized by a semiconductor memory or a hard disk device.

When the processing unit 122 of the control device 12 determines that the first authority information TO1 accepted by the accepting unit 121 is appropriate, it is configured to determine whether the first authority information TO1 and the first authentication information TE1, which are associated with each other, are stored in the storage device 13.

When it is determined that the first authority information TO1 and the first authentication information TE1 are not stored in the storage device 13, the processing unit 122 is configured to store the first authority information TO1 and the first authentication information TE1 accepted by the acceptance unit 121 in the storage device 13. As a result, the first mobile device 41 is registered as a mobile device capable of controlling the operation of the locking/unlocking device 21.

When the first authority information TO1 and the first authentication information TE1 are stored in the storage device 13, it means that the first mobile device 41 has been registered as a mobile device that is permitted to control the operation of the locking/unlocking device 21. The processing unit 122 authenticates the first mobile device 41 using the first authentication information TE1 accepted by the acceptance unit 121.

Similarly, the processing unit 122 is configured to determine whether the second authority information TO2 received by the receiving unit 121 is appropriate. For example, if the second authority information TO2 includes information indicating the usable period, it is determined whether the current time is within the usable period. If the processing unit 122 determines that the second authority information TO2 is inappropriate, it is configured to prohibit the second mobile device 42 from using the locking/unlocking device 21. The same applies to the case where the second authority information TO2 cannot be obtained.

When the processing unit 122 of the control device 12 determines that the second authority information TO2 accepted by the accepting unit 121 is appropriate, it is configured to determine whether the second authority information TO2 and the second authentication information TE2, which are associated with each other, are stored in the storage device 13.

When it is determined that the second authority information TO2 and the second authentication information TE2 are not stored in the storage device 13, the processing unit 122 is configured to store the second authority information TO2 and the second authentication information TE2 accepted by the acceptance unit 121 in the storage device 13. As a result, the second mobile device 42 is registered as a mobile device capable of controlling the operation of the locking/unlocking device 21.

When the second authority information TO2 and the second authentication information TE2 are stored in the storage device 13, it means that the second mobile device 42 has been registered as a mobile device that is permitted to control the operation of the locking/unlocking device 21. The processing unit 122 authenticates the second mobile device 42 using the second authentication information TE2 accepted by the acceptance unit 121.

When the authentication process is successful, the processing unit 122 is configured to output a notification signal NT from the output unit 123. The notification signal NT is a signal that notifies the mobile device that transmitted the authentication information that the authentication process has been successful. The notification signal NT may be an analog signal or a digital signal.

The output unit 123 is therefore configured as an interface that outputs the notification signal NT to the communication device 11. If the notification signal NT is an analog signal, the output unit 123 is equipped with an appropriate conversion circuit including a D/A converter.

When the first mobile device 41 receives the notification signal NT, it is put into a state in which it can transmit a locking/unlocking signal LK that instructs the locking/unlocking device 21 to perform a locking/unlocking operation. When the first user 31 performs a predetermined operation on the first mobile device 41, the locking/unlocking signal LK is transmitted by radio waves to the communication device 11. The locking/unlocking signal LK may be an analog signal or a digital signal.

Similarly, when the second mobile device 42 receives the notification signal NT, it is put into a state in which it can transmit a locking/unlocking signal LK that instructs the locking/unlocking device 21 to perform a locking/unlocking operation. When the second user 32 performs a predetermined operation on the second mobile device 42, the locking/unlocking signal LK is transmitted by radio waves to the communication device 11. The locking/unlocking signal LK may be an analog signal or a digital signal.

The reception unit 121 of the control device 12 is therefore configured as an interface that can also receive the lock/unlock signal LK through the communication device 11. If the lock/unlock signal LK is an analog signal, the reception unit 121 is equipped with an appropriate conversion circuit including an A/D converter.

The processing unit 122 is configured to output a control signal CT from the output unit 123 when the locking/unlocking signal LK is received by the receiving unit 121. The control signal CT is a signal that causes the locking/unlocking device 21 to perform a locking/unlocking operation. The control signal CT may be an analog signal or a digital signal. When the control signal CT is an analog signal, the output unit 123 is provided with an appropriate conversion circuit including a D/A converter.

The locking/unlocking device 21 is configured to lock or unlock the door 22 based on the control signal CT.

Figure 3 illustrates an example of the flow of the mobile device registration process executed by the processing unit 122 of the control device 12 configured as described above. The following describes an example in which the first user 31 shown in Figure 1 registers the first mobile device 41.

First, the processing unit 122 causes the communication device 11 to transmit a trigger signal TR via radio waves (STEP 1).

Next, the processing unit 122 determines whether a response signal has been received from any of the mobile devices in response to the trigger signal TR (STEP 2). Specifically, it determines whether the response signal has been received by the reception unit 121 through the communication device 11. This process is repeated until it is determined that the response signal has been received by the reception unit 121 (NO in STEP 2).

When the reception unit 121 determines that the response signal has been received (YES in STEP 2), the processing unit 122 transmits a request signal RQ by radio wave through the communication device 11 (STEP 3). In this example, the first response signal RS1 is transmitted from the first mobile device 41, and therefore the request signal RQ is transmitted to the first mobile device 41.

Next, the processing unit 122 acquires the authentication information and authority information transmitted from the mobile device in response to the request signal RQ (STEP 4). In this example, the first authentication information TE1 and the first authority information TO1 transmitted from the first mobile device 41 are acquired.

Then, the processing unit 122 judges whether the first authority information TO1 acquired in STEP 4 is appropriate (STEP 5). If it is judged that the first authority information TO1 is not appropriate (NO in STEP 5), the processing ends without allowing the first mobile device 41 to control the operation of the locking/unlocking device 21. The processing unit 122 may notify the first mobile device 41 that appropriate authority has not been granted.

If it is determined that the first authority information TO1 is appropriate (YES in STEP 5), the processing unit 122 determines whether the first authority information TO1 and the first authentication information TE1, which are associated with each other, are stored in the storage device 13 (STEP 6).

If it is determined that the first authority information TO1 and the first authentication information TE1 are not stored in the storage device 13 (NO in STEP 6), the processing unit 122 stores the first authority information TO1 and the first authentication information TE1 in the storage device 13 (STEP 7). As a result, the first mobile device 41 is registered as a mobile device capable of controlling the operation of the locking/unlocking device 21.

When it is determined that the first authority information TO1 and the first authentication information TE1 are stored in the storage device 13 (YES in STEP 6), the processing unit 122 ends the registration process and proceeds to authentication process of the registered mobile device.

According to the above configuration, the control device 12 controls the operation of the locking/unlocking device 21 through a mobile device authenticated using the authentication information stored in the storage device 13. Whether or not the authentication information can be stored in the storage device 13 is determined by the control device 12 based on the authority information distributed to the mobile device. This can prohibit the use of the locking/unlocking device 21 by a mobile device that has not been granted the proper authority, while eliminating the need for a user to visit a facility that has a dedicated tool to grant authority information to the mobile device. This effect becomes more pronounced as the number of mobile devices that share the authentication system 10 increases. This can therefore increase the convenience of the authentication system 10 that uses mobile devices.

The authority information distributed from the external server device 60 to the mobile device may include information related to the hierarchical relationship between users. For example, the second authority granted to mobile devices owned by the owner's family, friends, car sharing partners, etc. is more restricted than the first authority granted to a mobile device owned by the owner of the vehicle 20. In other words, the authority information distributed from the external server device 60 to the mobile device may include at least information regarding whether the first authority or the second authority has been granted.

In this case, the processing unit 122 of the control device 12 is configured not to allow the storage of authentication information for authenticating the mobile device to which the above-mentioned second authority has been granted in the storage device 13 if authentication information for authenticating the mobile device to which the above-mentioned first authority has been granted is not stored in the storage device 13.

The flow of the mobile device registration process executed by the processing unit 122 configured as described above will be explained using an example in which the first user 31 shown in FIG. 1 is the owner of the vehicle 20 and has not registered the first mobile device 41, and the second user 32, who is the car sharing partner of the owner, is attempting to register the second mobile device 42.

That is, the first authority information TO1 includes information indicating that the first mobile device 41 has been granted the first authority. The second authority information TO2 includes information indicating that the second mobile device 42 has been granted the second authority, which is restricted.

The processing unit 122 causes the communication device 11 to transmit a trigger signal TR by radio waves (STEP 1 in FIG. 3). The second mobile device 42 transmits a second response signal RS2 by radio waves in response to the trigger signal TR. The second response signal RS2 is received by the receiving unit 121 of the control device 12 (YES in STEP 2).

The processing unit 122 therefore transmits a request signal RQ to the second mobile device 42 by radio waves (STEP 3). In response to the request signal RQ, the second mobile device 42 transmits the second authentication information TE2 and the second authority information TO2 by radio waves. The second authentication information TE2 and the second authority information TO2 are received by the reception unit 121 of the control device 12 (STEP 4).

Then, the processing unit 122 judges whether the second authority information TO2 is appropriate (STEP 5). Specifically, in addition to judging the appropriateness of the usable period and the like, the appropriateness of the relationship between the first authority and the second authority is judged. That is, if the authority associated with the second authority information TO2 is the restricted second authority, it is judged whether authentication information for authenticating a mobile device to which the less restricted first authority has been granted is stored in the storage device 13.

In this example, the first authentication information TE1 for authenticating the first mobile device 41 to which the first authority has been granted is not stored in the storage device 13, so the second authority information TO2 is determined to be inappropriate (NO in STEP 5). Therefore, storage of the second authentication information TE2 in the storage device 13 is not permitted, and the operation of the locking/unlocking device 21 cannot be controlled using the second mobile device 42.

With this configuration, when the authentication system 10 is shared by multiple users, the hierarchical relationship between the users can be reflected in the authentication system 10. In other words, in a situation where a user who is ranked higher in the hierarchical relationship cannot use the locking/unlocking device 21, it is possible to not allow a user who is ranked lower in the hierarchical relationship to use the locking/unlocking device 21.

The processing unit 122 of the control device 12 having the various functions described above can be realized by a general-purpose microprocessor that operates in cooperation with a general-purpose memory. Examples of the general-purpose microprocessor include a CPU, an MPU, and a GPU. Examples of the general-purpose memory include a ROM and a RAM. In this case, the ROM can store a computer program that executes the above-mentioned processing. The ROM is an example of a non-transient computer-readable medium that stores a computer program. The storage device 13 may be used as a general-purpose memory. The general-purpose microprocessor specifies at least a part of the computer program stored in the ROM, expands it on the RAM, and executes the above-mentioned processing in cooperation with the RAM. The above-mentioned computer program may be pre-installed in the general-purpose memory, or may be downloaded from the external server device 60 via the wireless communication network 50 and then installed in the general-purpose memory. In this case, the external server device 60 is an example of a non-transient computer-readable medium that stores a computer program.

The processing unit 122 may be realized by a dedicated integrated circuit capable of executing the above computer program, such as a microcontroller, an ASIC, or an FPGA. In this case, the above computer program is pre-installed in a memory element included in the dedicated integrated circuit. The memory element is an example of a non-transitory computer-readable medium that stores a computer program. The memory element may be used as the storage device 13. Each processor may also be realized by a combination of a general-purpose microprocessor and a dedicated integrated circuit.

The above-described embodiments are merely examples to facilitate understanding of the present invention. The configurations according to the above-described embodiments may be modified or improved as appropriate without departing from the spirit and scope of the present invention.

In FIG. 1, the communication device 11, the control device 12, and the storage device 13 are illustrated as multiple devices independently mounted at separate locations in the vehicle 20. However, at least one of the communication device 11 and the storage device 13 may be provided as part of the control device 12.

At least a part of the authentication process performed by the processing unit 122 of the control device 12 may be performed in the external server device 60 illustrated in FIG. 1. Therefore, the storage device 13 may be mounted on the external server device 60.

The controlled device controlled by the control device 12 as a result of the authentication process is not limited to the locking/unlocking device 21. Other examples of controlled devices include an ignition power supply, an engine, an air conditioning device, audiovisual equipment, lighting equipment, and seat and steering wheel position adjustment mechanisms mounted on the vehicle 20. Therefore, the authority information delivered to the mobile device may include information related to the type of controlled device whose operation can be controlled. The number of hierarchical levels between users distinguished by the authority information may be three or more.

The authentication system 10 can also be applied to moving objects other than the vehicle 20. Examples of other moving objects include trains, airplanes, ships, etc. The moving object may not require a driver.

The opening and closing body that is locked and unlocked by the locking/unlocking device 21 is not limited to the door of a mobile body. Doors and windows in a house or facility can also be examples of opening and closing bodies. Various types of equipment in a house or facility can also be examples of controlled devices. In other words, the communication device 11, the control device 12, and the storage device 13 do not need to be mounted on a mobile body.

10: Authentication system, 11: Communication device, 12: Control device, 121: Reception unit, 122: Processing unit, 13: Storage device, 20: Vehicle, 21: Locking/unlocking device, 22: Door, 31: First user, 32: Second user, 41: First mobile device, 42: Second mobile device, TE1: First authentication information, TE2: Second authentication information, TO1: First authority information, TO2: Second authority information

Claims (5)

a communication device for wirelessly communicating with a mobile device that is portable by a user;
A control device that controls an operation of a controlled device based on an authentication process that authenticates the mobile device;
a storage device for storing authentication information used in the authentication process;
Equipped with
The control device acquires authority information indicating the authority of the mobile device with respect to the controlled device distributed to the mobile device through the communication device, and determines whether or not the authentication information can be stored in the storage device based on the authority information;
the authority information includes information indicating whether a first authority or a second authority that is more restricted than the first authority has been granted;
the control device does not permit storage of authentication information for authenticating the second mobile device granted the second authority in the storage device when authentication information for authenticating the first mobile device granted the first authority is not stored in the storage device;
Authentication system. The controlled device is a locking/unlocking device that locks and unlocks the opening/closing body.
The authentication system according to claim 1 . The communication device and the control device are mounted on a moving object.
3. An authentication system according to claim 1 or 2 . A control device that controls the operation of a controlled device based on an authentication process for authenticating a mobile device that can be carried by a user,
a reception unit that receives authority information indicating an authority of the mobile device with respect to the controlled device, the authority information being distributed to the mobile device, through a communication device capable of wireless communication with the mobile device;
a processing unit that determines whether or not authentication information used in the authentication process can be stored in a storage device based on the authority information;
Equipped with
the authority information includes information indicating whether a first authority or a second authority that is more restricted than the first authority has been granted;
the processing unit does not permit storage of authentication information for authenticating a second mobile device granted with the second authority in the storage device when authentication information for authenticating a first mobile device granted with the first authority is not stored in the storage device;
Control device. A computer program executable by a processing unit mounted on a control device that controls the operation of a controlled device based on an authentication process for authenticating a mobile device that can be carried by a user, the computer program comprising:
By being executed, the control device
receiving authority information indicating an authority of the mobile device with respect to the controlled device delivered to the mobile device through a communication device capable of wireless communication with the mobile device;
determining whether or not authentication information used in the authentication process is to be stored in a storage device based on the authority information;
the authority information includes information indicating whether a first authority or a second authority that is more restricted than the first authority has been granted;
the control device does not permit storage of authentication information for authenticating the second mobile device granted the second authority in the storage device when authentication information for authenticating the first mobile device granted the first authority is not stored in the storage device;
Computer program.

Images