JP7716277B2 - Mobile device, computer program, and authentication system - Google Patents

Description

The present invention relates to an authentication system that uses a mobile device that can be carried by a user. The present invention also relates to a mobile device that can form part of the authentication system, and a computer program that can be executed by a processing unit installed in the mobile device.

Patent Document 1 discloses an authentication system installed in a vehicle, which is an example of a mobile object. In this system, authentication is performed through radio wave communication between a control device that controls the operation of the vehicle's door locking/unlocking device and a mobile device carried by the user. When authentication is established with the user touching a touch sensor installed on the door handle, the control device is permitted to control the operation of the locking/unlocking device.

JP 2016-211334 A

The object of the present invention is to improve the security of authentication systems that use mobile devices that can be carried by users.

One aspect of the present invention to achieve the above object is a mobile device that can be carried by a user, comprising:
a communication unit capable of performing short-range wireless communication and close-proximity wireless communication;
a processing unit that executes a first authentication process for authenticating a close proximity wireless communication device using at least the close proximity wireless communication, and when the first authentication process is successful, transmits authentication information used in a second authentication process for authenticating the mobile device, which is executed by a control device that controls the operation of a controlled device, via the short-range wireless communication;
It is equipped with:

One aspect for achieving the above object is a computer program executable by a processing unit installed in a mobile device that can be carried by a user and is capable of close proximity wireless communication with a close proximity wireless communication device and short distance wireless communication with a short distance wireless communication device, the computer program comprising:
When executed, the mobile device:
performing a first authentication process for authenticating the close proximity wireless communication device using at least the close proximity wireless communication;
If the first authentication process is successful, authentication information used in a second authentication process to authenticate the mobile device, which is executed by a control device that controls the operation of the controlled device, is sent to the short-range wireless communication device.

One aspect of the present invention to achieve the above object is an authentication system, comprising:
a mobile device that can be carried by a user;
a short-range wireless communication device capable of short-range wireless communication with the mobile device;
a close proximity wireless communication device capable of close proximity wireless communication with the mobile device;
a control device that controls the operation of a controlled device;
It is equipped with
the mobile device is configured to execute a first authentication process for authenticating the close proximity wireless communication device using at least the close proximity wireless communication, and to transmit authentication information to the short-range wireless device when the first authentication process is successful;
The control device controls the operation of the controlled device based on a second authentication process that authenticates the mobile device using the authentication information.

The configurations according to the above aspects can prevent the initiation of authentication processing on the mobile device to allow the user to use the controlled device simply by establishing a close proximity wireless communication link between the close proximity wireless communication device and the mobile device. In other words, by introducing a dual authentication framework that requires authentication to be established between the mobile device and the close proximity wireless communication device, the security of authentication systems that use mobile devices that can be carried by users can be improved.

1 illustrates an example of the configuration of an authentication system according to an embodiment. 2 shows an example of a functional configuration of the authentication system of FIG. 1 . 3 illustrates an example of a process performed by a processing unit of the mobile device of FIG. 2. 2 illustrates another example of the functional configuration of the authentication system of FIG. 1. 5 illustrates another example of processing performed by the processing unit of the mobile device of FIG. 4.

Example embodiments will be described in detail below with reference to the accompanying drawings. In each figure, the scale has been appropriately adjusted to ensure that each illustrated element is large enough to be recognizable.

Figure 1 illustrates the configuration of an authentication system 10 according to one embodiment. The authentication system 10 includes a mobile device 11. The mobile device 11 is a device that can be carried by a user 20. The authentication system 10 can be used, for example, to authenticate the mobile device 11 and thereby permit the user 20 carrying the mobile device 11 to use a vehicle 30. The shape of the vehicle 30 is merely illustrative. The vehicle 30 is an example of a moving object.

The authentication system 10 includes a control device 12. In this example, the control device 12 is mounted on a vehicle 30. The control device 12 is configured to control the operation of a locking/unlocking device 31 mounted on the vehicle 30 based on an authentication process that authenticates the mobile device 11. The locking/unlocking device 31 is a device that locks and unlocks the door 32 of the vehicle 30. The locking/unlocking device 31 is an example of a controlled device. The door 32 is an example of an opening/closing body.

The authentication system 10 includes a short-range wireless communication device 13. In this example, the short-range wireless communication device 13 is mounted at an appropriate position in the vehicle 30. The short-range wireless communication device 13 has an antenna capable of performing short-range wireless communication with the mobile device 11.

As used in this specification, the term "short-range wireless communication" refers to contactless communication using radio waves while complying with the IEEE 802.15 or IEEE 802.11 standard. Technologies that can implement short-range wireless communication include Bluetooth (registered trademark), Bluetooth Low Energy (registered trademark), Ultra Wide Band (UWB), ZigBee (registered trademark), and Wi-Fi (registered trademark).

The authentication system 10 includes a close proximity wireless communication device 14. In this example, the close proximity wireless communication device 14 is mounted at an appropriate position in the vehicle 30.

As illustrated in FIG. 2, the close proximity wireless communication device 14 is equipped with an antenna 141 capable of performing close proximity wireless communication with the mobile device 11.

As used in this specification, the term "near-field wireless communication" refers to contactless communication that transmits information through electromagnetic induction coupling. Technologies that can implement near-field wireless communication include NFC (Near Field Communication) and RF-ID.

On the other hand, the mobile device 11 has a communication unit 111 and a processing unit 112. The communication unit 111 has an antenna capable of performing close proximity wireless communication. The processing unit 112 is configured to supply power to the antenna, causing the antenna to emit a magnetic field of the frequency used in close proximity wireless communication as a carrier wave.

The close proximity wireless communication device 14 includes a processing unit 142 and a memory unit 143. When the user 20 brings the mobile device 11 close to the close proximity wireless communication device 14 (see Figure 1), a magnetic field emitted from the communication unit 111 causes a current to flow through the antenna 141 of the close proximity wireless communication device 14, supplying power to the processing unit 142. The processing unit 142 is configured to read confirmation information CF from the memory unit 143 and transmit it from the antenna 141. The confirmation information CF is received by the communication unit 111 of the mobile device 11.

The confirmation information CF can be any information that can confirm that close proximity wireless communication has been established between the mobile device 11 and the close proximity wireless communication device 14.

The processing unit 142 having such functions may be realized by a dedicated integrated circuit. A computer program for executing the processing related to the functions may be pre-installed in a memory element included in the integrated circuit. The confirmation information CF may be stored in the memory element.

The control device 12 includes a storage unit 120. The storage unit 120 stores first identification information ID1 in advance. The first identification information ID1 is information that identifies the close proximity wireless communication device 14. The storage unit 120 can be realized by a semiconductor memory or a hard disk drive.

On the other hand, second identification information ID2 is pre-stored in the memory unit 143. The second identification information ID2 is also information that identifies the close proximity wireless communication device 14. The second identification information ID2 can be stored in the same memory element as the confirmation information CF.

When the processing unit 112 of the mobile device 11 confirms that the appropriate confirmation information CF has been received by the communication unit 111, it is configured to transmit a first request signal RQ1 by radio waves to the short-range wireless communication device 13. That is, the communication unit 111 also has an antenna capable of performing short-range wireless communication. The first request signal RQ1 is configured to request the control device 12 to transmit first identification information ID1. The first request signal RQ1 may be an analog signal or a digital signal.

The control device 12 includes a reception unit 121. The reception unit 121 is configured as an interface capable of receiving the first request signal RQ1 via the short-range wireless communication device 13. If the first request signal RQ1 is an analog signal, the reception unit 121 includes an appropriate conversion circuit including an A/D converter.

The control device 12 includes a processing unit 122 and an output unit 123. The processing unit 122 is configured to read out the first identification information ID1 stored in the memory unit 120 and output it from the output unit 123 in response to the first request signal RQ1 received by the reception unit 121.

In other words, the output unit 123 is configured as an interface capable of outputting the first identification information ID1. The first identification information ID1 output from the output unit 123 may be in the form of analog data or digital data. If the first identification information ID1 output from the output unit 123 is in the form of analog data, the output unit 123 is equipped with an appropriate conversion circuit including a D/A converter.

The first identification information ID1 output from the output unit 123 is transmitted by radio waves from the short-range wireless communication device 13 and received by the communication unit 111 of the mobile device 11.

The processing unit 112 of the mobile device 11 is configured to cause the communication unit 111 to transmit a second request signal RQ2 to the close proximity wireless communication device 14 when the first identification information ID1 is received by the communication unit 111. The second request signal RQ2 is configured to cause the close proximity wireless communication device 14 to transmit the second identification information ID2.

When the second request signal RQ2 is received by the antenna 141, the processing unit 142 of the close proximity wireless communication device 14 is configured to read the second identification information ID2 stored in the memory unit 143 and transmit it to the mobile device 11.

When second identification information ID2 is received by communication unit 111, processing unit 112 of mobile device 11 is configured to execute first authentication processing to authenticate close proximity wireless communication device 14. Specifically, processing unit 112 is configured to compare first identification information ID1 with second identification information ID2, and determine that the first authentication processing has been successful if the degree of match between the two exceeds a threshold.

When the processing unit 112 determines that the first authentication process has been successful, it is configured to transmit authentication information AU stored in a memory unit (not shown) from the communication unit 111 to the short-range wireless communication device 13. The authentication information AU includes information for authenticating at least one of the mobile device 11 and the user 20. The authentication information AU may be in the form of analog data or digital data.

The reception unit 121 of the control device 12 is also configured as an interface capable of receiving authentication information AU via the short-range wireless communication device 13. If the authentication information AU is in the form of analog data, the reception unit 121 is equipped with an appropriate conversion circuit including an A/D converter.

The processing unit 122 of the control device 12 is configured to execute a second authentication process to authenticate the mobile device 11 when the authentication information AU is received by the reception unit 121. Specifically, the processing unit 122 is configured to compare the authentication information AU with authentication information previously stored in the memory unit 120, and determine that the second authentication process has been successful if the degree of match between the two exceeds a threshold.

When the processing unit 122 determines that the second authentication process is successful, it is configured to output a communication control signal CC from the output unit 123. The communication control signal CC is configured to cause the short-range wireless communication device 13 to transmit an authorization signal EN to the mobile device 11. The communication control signal CC may be an analog signal or a digital signal.

In other words, the output unit 123 is configured as an interface that can also output the communication control signal CC. If the communication control signal CC is an analog signal, the output unit 123 is equipped with an appropriate conversion circuit including a D/A converter.

The processing unit 112 of the mobile device 11 is configured to transmit an instruction signal IS from the communication unit 111 to the short-range wireless communication device 13 when the communication unit 111 receives the permission signal EN. The instruction signal IS is configured to cause the control unit 12 to control the operation of the locking/unlocking device 31. The instruction signal IS may be an analog signal or a digital signal. The instruction signal IS may be transmitted in response to a predetermined operational input by the user 20, or may be transmitted automatically.

The reception unit 121 of the control device 12 is configured as an interface that can also receive the instruction signal IS. If the instruction signal IS is an analog signal, the reception unit 121 is equipped with an appropriate conversion circuit including an A/D converter.

The processing unit 122 of the control device 12 is configured to output a control signal CT from the output unit 123 when the instruction signal IS is received by the receiving unit 121. The control signal CT is configured to cause the locking/unlocking device 31 to perform an operation corresponding to the instruction signal IS. The control signal CT may be an analog signal or a digital signal.

In other words, the output unit 123 is configured as an interface that can also output the control signal CT. If the control signal CT is an analog signal, the output unit 123 is equipped with an appropriate conversion circuit including a D/A converter.

With reference to Figure 3, an example of the processing flow executed by the processing unit 112 of the mobile device 11 configured as described above will be described.

First, the processing unit 112 determines whether close proximity wireless communication has been established with the close proximity wireless communication device 14 (STEP 11). Specifically, the processing unit 112 determines whether appropriate confirmation information CF has been received by the communication unit 111. This process is repeated until it is determined that close proximity wireless communication has been established (NO in STEP 11).

When it is determined that close proximity wireless communication has been established (YES in STEP 11), the processing unit 112 acquires first identification information ID1 from the control device 12 (STEP 12). Specifically, the processing unit 112 transmits a first request signal RQ1 from the communication unit 111 to the short-range wireless communication device 13, and receives first identification information ID1 from the short-range wireless communication device 13 in response.

Next, the processing unit 112 determines whether the first authentication process for authenticating the close proximity wireless communication device 14 has been successful (STEP 13). Specifically, the processing unit 112 transmits a second request signal RQ2 from the communication unit 111 to the close proximity wireless communication device 14, and receives second identification information ID2 from the close proximity wireless communication device 14 in response. The processing unit 112 compares the first identification information ID1 with the second identification information ID2, and determines whether the degree of match between the two pieces of information exceeds a threshold value.

If it is determined that the first authentication process is successful (YES in STEP 13), the processing unit 112 transmits authentication information AU to the short-range wireless communication device 13 (STEP 14). The control device 12 executes second authentication process to authenticate the mobile device 11 using the authentication information AU.

Next, the processing unit 112 determines whether an authorization signal EN has been received from the short-range wireless communication device 13 (STEP 15). This process is repeated until the communication unit 111 determines that an authorization signal EN has been received (NO in STEP 15). If an authorization signal EN is not received even after a predetermined time has elapsed since the authentication information AU was sent, the processing may be terminated by notifying the user 20 of an error.

When the communication unit 111 determines that the permission signal EN has been received (YES in STEP 15), the processing unit 112 transmits an instruction signal IS corresponding to the desired operation of the locking/unlocking device 31 from the communication unit 111 to the short-range wireless communication device 13 (STEP 16). The control unit 12 controls the operation of the locking/unlocking device 31 according to the instruction signal IS.

If it is determined that the first authentication process is not successful (NO in STEP 13), the processing unit 112 ends the process without sending authentication information AU for the second authentication process.

With the above configuration, simply establishing a proximity wireless communication link between the proximity wireless communication device 14 and the mobile device 11 does not initiate authentication processing of the mobile device 11 to allow the user 20 to use the locking/unlocking device 31. In other words, by introducing a dual authentication framework that requires authentication to be established between the mobile device 11 and the proximity wireless communication device 14, the security of the authentication system 10 can be improved.

In this example, the close proximity wireless communication device 14 is identified by the first specific information ID1 stored in the control device 12 and the second specific information ID2 stored in the close proximity wireless communication device 14, and the close proximity wireless communication device 14 is authenticated by comparing the two pieces of information. Because the first specific information ID1 is stored in a device different from the mobile device 11 and the close proximity wireless communication device 14, the security of the information identifying the close proximity wireless communication device 14 can be improved. Furthermore, any unexpected changes that occur in the second specific information ID2 stored in the close proximity wireless communication device 14 can be easily detected.

In addition, because the first identification information ID1 is stored in the control device 12, which controls the operation of the locking/unlocking device 31 through short-range wireless communication with the mobile device 11, there is no need to add a new communication path to improve the security of the authentication system 10. This helps prevent increases in the construction costs of the authentication system 10.

However, the first identification information ID1 may be stored in a device other than the control device 12 that is different from the close proximity wireless communication device 14. For example, as illustrated in FIG. 1, the authentication system 10 may include a server device 15 that is capable of communicating with the mobile device 11 via a wireless communication network 40. The wireless communication network 40 may be a network that complies with wireless communication standards such as LTE (Long Term Evolution), 4G, or 5G.

As illustrated in FIG. 2, the first identification information ID1 may be stored in the server device 15. The server device 15 may be configured to transmit the first identification information ID1 in response to a first request signal RQ1 transmitted from the communication unit 111 of the mobile device 11.

Figure 4 shows another example of the functional configuration of the authentication system 10. In this example, the mobile device 11 includes a memory unit 113. The memory unit 113 is configured to store a first rolling code RC1 generated by the processing unit 112. The first rolling code RC1 is an example of first information. The memory unit 113 can be realized by a semiconductor memory or a hard disk drive.

On the other hand, the memory unit 143 of the close proximity wireless communication device 14 is configured to store a second rolling code RC2 generated by the processing unit 142. The second rolling code RC2 is an example of second information.

The processing unit 112 of the mobile device 11 and the processing unit 142 of the close proximity wireless communication device 14 are configured to update the first rolling code RC1 and the second rolling code RC2, respectively, based on the same rules.

In this example, the processing unit 112 of the mobile device 11 is configured to transmit a request signal RQ to the close proximity wireless communication device 14 upon confirming that appropriate confirmation information CF has been received from the close proximity wireless communication device 14.

The processing unit 142 of the close proximity wireless communication device 14 is configured to transmit the second rolling code RC2 stored in the memory unit 143 to the mobile device 11 in response to the request signal RQ.

When the second rolling code RC2 is received by the communication unit 111, the processing unit 112 of the mobile device 11 is configured to execute a first authentication process to authenticate the close proximity wireless communication device 14. Specifically, the processing unit 112 is configured to compare the first rolling code RC1 with the second rolling code RC2 and determine that the first authentication process has been successful if, for example, the degree of match between the two exceeds a threshold.

When the processing unit 112 of the mobile device 11 determines that the first authentication process has been successful, it is configured to update the first rolling code RC1 stored in the memory unit 113 based on a predetermined rule. In addition, the processing unit 112 is configured to send an update signal UD to the close proximity wireless communication device 14. The update signal UD is configured to notify the close proximity wireless communication device 14 that the first rolling code RC1 has been updated.

When the antenna 141 receives the update signal UD, the processing unit 142 of the close proximity wireless communication device 14 is configured to update the second rolling code RC2 stored in the memory unit 143 based on a predetermined rule. The update rule for the first rolling code RC1 and the update rule for the second rolling code RC2 are the same. In other words, the first rolling code RC1 and the second rolling code RC2 are updated based on the same rule each time the first authentication process is successful.

The values of the first rolling code RC1 and the second rolling code RC2 used for matching do not necessarily have to be the same, as long as they correspond to each other based on the above rules. Furthermore, if the two pieces of information are updated based on the same rules each time the first authentication process is completed, it is not necessary to use a rolling code.

Furthermore, when the processing unit 112 of the mobile device 11 determines that the first authentication process has been successful, it is configured to transmit authentication information AU stored in a memory unit (not shown) from the communication unit 111 to the short-range wireless communication device 13. The subsequent processing is the same as the example described with reference to Figures 2 and 3, so repeated explanations will be omitted.

With reference to Figure 5, we will explain another example of the processing flow executed by the processing unit 112 of the mobile device 11 configured as described above. Processing elements that are substantially the same as those explained with reference to Figure 3 will be assigned the same reference numerals, and repeated explanations will be omitted.

When it is determined that close proximity wireless communication has been established (YES in STEP 11), the processing unit 112 acquires the second rolling code RC2 from the close proximity wireless communication device 14 (STEP 22). Specifically, the processing unit 112 transmits a request signal RQ from the communication unit 111 to the close proximity wireless communication device 14, and receives the second rolling code RC2 from the close proximity wireless communication device 14 in response.

Next, the processing unit 112 determines whether the first authentication process for authenticating the close proximity wireless communication device 14 has been successful (STEP 23). Specifically, the processing unit 112 compares the first rolling code RC1 stored in the memory unit 113 with the second rolling code RC2, and determines whether the degree of match between the two values exceeds a threshold.

If it is determined that the first authentication process is successful (YES in STEP 23), the processing unit 112 updates the first rolling code RC1 stored in the memory unit 113 based on a predetermined rule (STEP 24). The processing unit 112 also transmits an update signal UD from the communication unit 111 to the close proximity wireless communication device 14. Upon receiving the update signal UD, the close proximity wireless communication device 14 updates the second rolling code RC2 stored in the memory unit 143.

Next, the processing unit 112 transmits the authentication information AU to the short-range wireless communication device 13 (STEP 14). The control device 12 executes a second authentication process to authenticate the mobile device 11 using the authentication information AU.

If it is determined that the first authentication process has not been successful (NO in STEP 23), the processing unit 112 ends the process without updating the first rolling code RC1 or sending authentication information AU for the second authentication process.

In this example, the first rolling code RC1 stored in the memory unit 113 of the mobile device 11 is compared with the second rolling code RC2 stored in the memory unit 143 of the close proximity wireless communication device 14, thereby authenticating the close proximity wireless communication device 14. The first rolling code RC1 and second rolling code RC2 are updated each time the first authentication process is successful, thereby improving the security of the information identifying the close proximity wireless communication device 14. Furthermore, any unexpected changes to the second rolling code RC2 stored in the close proximity wireless communication device 14 can be easily detected.

The processing unit 112 of the mobile device 11, which has the various functions described above, may be realized by a general-purpose microprocessor operating in cooperation with general-purpose memory. Examples of general-purpose microprocessors include a CPU, MPU, and GPU. Examples of general-purpose memory include ROM and RAM. In this case, the ROM may store a computer program that executes the above-described processing. ROM is an example of a non-transitory computer-readable medium that stores a computer program. The general-purpose microprocessor specifies at least a portion of the computer program stored in the ROM, expands it into RAM, and executes the above-described processing in cooperation with the RAM. The computer program may be pre-installed in the general-purpose memory, or may be downloaded from the server device 15 via the wireless communication network 40 illustrated in FIG. 1 and then installed in the general-purpose memory. In this case, the server device 15 is an example of a non-transitory computer-readable medium that stores a computer program. Note that the general-purpose memory may be used as the storage unit 113.

The processing unit 112 may be implemented by a dedicated integrated circuit capable of executing the computer program, such as a microcontroller, ASIC, or FPGA. In this case, the computer program is pre-installed in a memory element included in the dedicated integrated circuit. The memory element is an example of a non-transitory computer-readable medium that stores a computer program. Each processor may also be implemented by combining a general-purpose microprocessor and a dedicated integrated circuit. The memory element may also be used as the memory unit 113.

The processing unit 122 of the control device 12, which has the various functions described above, can be realized by a general-purpose microprocessor operating in cooperation with general-purpose memory. Examples of general-purpose microprocessors include a CPU, MPU, and GPU. Examples of general-purpose memory include ROM and RAM. In this case, the ROM can store a computer program that executes the above-described processing. ROM is an example of a non-transitory computer-readable medium that stores a computer program. The general-purpose microprocessor specifies at least a portion of the computer program stored in the ROM, expands it into RAM, and executes the above-described processing in cooperation with the RAM. The computer program may be pre-installed in the general-purpose memory, or may be downloaded from the server device 15 via the wireless communication network 40 illustrated in FIG. 1 and then installed in the general-purpose memory. In this case, the server device 15 is an example of a non-transitory computer-readable medium that stores a computer program. Note that the general-purpose memory may be used as the storage unit 120.

The processing unit 122 may be implemented by a dedicated integrated circuit capable of executing the computer program, such as a microcontroller, ASIC, or FPGA. In this case, the computer program is pre-installed in a memory element included in the dedicated integrated circuit. The memory element is an example of a non-transitory computer-readable medium that stores a computer program. Each processor may also be implemented by a combination of a general-purpose microprocessor and a dedicated integrated circuit. The memory element may also be used as the memory unit 120.

The close proximity wireless communication device 14 may be a wirelessly powered tag device. In this case, restrictions on where the close proximity wireless communication device 14 can be installed in the vehicle 30 are relaxed, allowing for greater design freedom in the authentication system 10.

The above-described embodiments are merely examples intended to facilitate understanding of the present invention. The configurations according to the above-described embodiments may be modified or improved as appropriate without departing from the spirit and scope of the present invention.

In FIG. 1, the control device 12, short-range wireless communication device 13, and close-proximity wireless communication device 14 are illustrated as multiple devices independently mounted at different locations in the vehicle 30. However, at least one of the short-range wireless communication device 13 and the close-proximity wireless communication device 14 may be provided as part of the control device 12.

At least a portion of the authentication process performed by the processing unit 122 of the control device 12 may be performed by the server device 15 illustrated in Figure 1.

Controlled devices controlled by the control device 12 as a result of the authentication process are not limited to the locking/unlocking device 31. Other examples of controlled devices include the ignition power supply, engine, air conditioning system, audiovisual equipment, lighting equipment, and seat and steering wheel position adjustment mechanisms installed in the vehicle 30.

The authentication system 10 can also be applied to moving objects other than vehicles 30. Examples of other moving objects include trains, airplanes, ships, etc. The moving object may not require a driver.

The opening/closing object that is locked and unlocked by the locking/unlocking device 31 is not limited to the door of a mobile object. Doors and windows in a home or facility can also be examples of opening/closing objects. Furthermore, various pieces of equipment in a home or facility can also be examples of controlled devices. In other words, the control device 12, short-range wireless communication device 13, and close-proximity wireless communication device 14 do not need to be installed on a mobile object.

10: Authentication system, 11: Mobile device, 111: Communication unit, 112: Processing unit, 113: Storage unit, 12: Control device, 13: Short-range wireless communication device, 14: Close-proximity wireless communication device, 15: Server device, 20: User, 30: Vehicle, 31: Locking/unlocking device, 32: Door, AU: Authentication information, ID1: First identification information, ID2: Second identification information, RC1: First rolling code, RC2: Second rolling code

Claims (7)

A mobile device that can be carried by a user, comprising:
a communication unit capable of performing short-range wireless communication and close-proximity wireless communication;
a processing unit that executes a first authentication process for authenticating a close proximity wireless communication device using at least the close proximity wireless communication, and when the first authentication process is successful, transmits authentication information used in a second authentication process for authenticating the mobile device, which is executed by a control device that controls the operation of a controlled device, via the short-range wireless communication;
It is equipped with
the first authentication process is performed by, after close proximity wireless communication is established with the close proximity wireless communication device, acquiring first identification information that identifies the close proximity wireless communication device from the control device through the short-range wireless communication, and comparing the first identification information with second identification information that is stored in the close proximity wireless communication device and identifies the close proximity wireless communication device;
Mobile devices. a storage unit that stores first information,
the first authentication process is performed by comparing second information acquired from the close proximity wireless communication device through the close proximity wireless communication with the first information;
the first information and the second information are updated based on the same rule every time the first authentication process is successful;
The mobile device of claim 1 . A computer program executable by a processing unit installed in a mobile device that can be carried by a user and that is capable of close proximity wireless communication with a close proximity wireless communication device and short range wireless communication with a short range wireless communication device,
When executed, the mobile device:
performing a first authentication process for authenticating the close proximity wireless communication device using at least the close proximity wireless communication;
When the first authentication process is successful, authentication information used in a second authentication process for authenticating the mobile device, which is executed by a control device that controls the operation of the controlled device, is transmitted to the short-range wireless communication device;
the first authentication process is performed by, after close proximity wireless communication is established with the close proximity wireless communication device, acquiring first identification information that identifies the close proximity wireless communication device from the control device through the short-range wireless communication, and comparing the first identification information with second identification information that is stored in the close proximity wireless communication device and identifies the close proximity wireless communication device;
Computer program. a mobile device that can be carried by a user;
a short-range wireless communication device capable of short-range wireless communication with the mobile device;
a close proximity wireless communication device capable of close proximity wireless communication with the mobile device;
a control device that controls the operation of a controlled device;
It is equipped with
the mobile device is configured to perform a first authentication process for authenticating the close proximity wireless communication device using at least the close proximity wireless communication, and to transmit authentication information to the short-range wireless communication device when the first authentication process is successful;
the control device controls the operation of the controlled device based on a second authentication process that authenticates the mobile device using the authentication information;
the first authentication process is performed by, after close proximity wireless communication is established with the close proximity wireless communication device, acquiring first identification information for identifying the close proximity wireless communication device from the control device through the short-range wireless communication, and comparing the first identification information with second identification information that is stored in the close proximity wireless communication device and identifies the close proximity wireless communication device;
Authentication system. the near field communication device is a wirelessly powered tag device,
The authentication system according to claim 4 . The controlled device is a locking/unlocking device that locks and unlocks the opening/closing body.
6. The authentication system according to claim 4 or 5 . a mobile device that can be carried by a user;
a short-range wireless communication device capable of short-range wireless communication with the mobile device;
a close proximity wireless communication device capable of close proximity wireless communication with the mobile device;
a control device that controls the operation of a controlled device;
It is equipped with
the mobile device is configured to perform a first authentication process for authenticating the close proximity wireless communication device using at least the close proximity wireless communication, and to transmit authentication information to the short-range wireless communication device when the first authentication process is successful;
the control device controls the operation of the controlled device based on a second authentication process that authenticates the mobile device using the authentication information;
the controlled device, the control device, the short-range wireless communication device, and the close-proximity wireless communication device are mounted on a moving body ;
Authentication system.