JP2007312180A - Authentication method and information reader - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an authentication method and information reader which allows a new authentication process that uses non-contact communication between an information reader and a communication terminal. <P>SOLUTION: An information reader (R/W device) 30 reads the information saved in a first communication terminal (mobile phone) 10A by non-contact communication, and reads the information saved in a second communication terminal (mobile phone) 10B by non-contact communication. The information reader 30 performs an authentication process for each communication terminal, based on the information read from the first communication terminal 10A and the second communication terminal 10B. In the case of success in authentication, a predetermined authentication post operation is performed for the couple of the first communication terminal 10A and the second communication terminal. For example, a pair authentication success is displayed. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an authentication method for authenticating a communication terminal device by performing short-range wireless communication with a communication terminal device such as a mobile phone, and an information reading device used for the authentication method.

  Conventionally, as this type of authentication method, the information reading device reads the authentication information stored in the mobile phone by performing short-range wireless communication with the mobile phone (communication terminal device), and the read authentication. There is known a method for authenticating whether or not the mobile phone is a user capable of paying for various products and services based on the usage information.

  However, the conventional authentication method has a restriction that authentication information read from a mobile phone is used only for authentication of the mobile phone.

  An object of the present invention is to provide an authentication method and an information reading apparatus that enable a new authentication process using non-contact communication between an information reading apparatus and a communication terminal apparatus.

In order to achieve the above-mentioned object, the invention according to claim 1 performs non-contact communication between an information reading device and a communication terminal device close to the information reading device so that the information reading device can communicate with the communication terminal device. Reading the information stored in the communication terminal device and authenticating the communication terminal device, wherein the information reading device reads the information stored in the first communication terminal device by non-contact communication; and The information reading device reads information stored in the second communication terminal device by non-contact communication, and the information reading device reads from each of the first communication terminal device and the second communication terminal device. Authentication processing is performed for each communication terminal device based on the information, and when each authentication is successful, a combination of the first communication terminal device and the second communication terminal device is predetermined. Is characterized in that comprises the steps of performing a constant post-authentication operation, the.
The invention according to claim 2 is the authentication method according to claim 1, wherein the second communication terminal apparatus before the predetermined time elapses after the information is read from the first communication terminal apparatus. The above-described post-authentication operation is executed when the information is read from.
According to a third aspect of the present invention, in the authentication method according to the first or second aspect, the post-authentication operation is an operation for displaying the authentication result.
According to a fourth aspect of the present invention, in the authentication method of the first or second aspect, the information reading device is provided in a device with a locking function, and the post-authentication operation is an operation of opening a key in the device with the locking function. It is characterized by this.
Further, the invention of claim 5 is the authentication method of claim 1 or 2, wherein the post-authentication operation is a charge for both the user of the first communication terminal device and the user of the second communication terminal device. This operation is characterized in that the total is charged to the user of one of the communication terminal devices.

The invention according to claim 6 is an information reading device that reads information stored in the communication terminal device by performing non-contact communication with the communication terminal device and authenticates the communication terminal device. A communication means for performing non-contact communication between the first communication terminal device and the second communication terminal device; information stored in the first communication terminal device; and information stored in the second communication terminal device. Information is read by contactless communication, and each communication terminal device is authenticated based on the read information read from each of the first communication terminal device and the second communication terminal device, and the first communication terminal device and the first communication terminal device Control means for executing a predetermined post-authentication operation that is predetermined for a combination of the communication terminal apparatuses when authentication of the two communication terminal apparatuses is successful. Ah .
The invention according to claim 7 is the information reading device according to claim 6, wherein the control means is configured to read the information from the first communication terminal device before the predetermined time elapses. When the information is read from the second communication terminal device, the post-authentication operation is executed.
The invention according to claim 8 is the information reading device according to claim 6 or 7, wherein the control means executes an operation of displaying an authentication result of each communication terminal device as an operation after the authentication process. It is a feature.
The invention according to claim 9 is the information reading apparatus according to claim 6 or 7, further comprising: an opening / closing means; and a locking means for locking the opening / closing means, wherein the control means is the locking means as the post-authentication operation. It is characterized in that an operation of opening the key is executed.
The invention according to claim 10 is the information reading apparatus according to claim 6 or 7, wherein the control means uses the user of the first communication terminal device and the second communication terminal device as the post-authentication operation. A charging process for charging the user of either one of the communication terminal devices is performed.

In the first and sixth aspects of the invention, the information reading device reads the first communication terminal device and the second communication based on the information read from each of the first communication terminal device and the second communication terminal device by non-contact communication. A predetermined post-authentication operation that is determined in advance is executed only when the terminal device is successfully authenticated.
According to the second and seventh aspects of the present invention, when information is read from a plurality of communication terminal devices within a predetermined time, the post-authentication operation is executed to read information from subsequent communication terminal devices. Therefore, it is possible to avoid an unstable state waiting for the execution of the authentication process and the post-authentication operation for a long time.
In invention of Claim 3 and 8, based on the display of the authentication result obtained about the several communication terminal device, utilization of the authentication result which elaborated, such as providing a prize to the user of the several communication terminal device Is possible.
In the inventions of claims 4 and 9, since the key of the device with the locking function is unlocked only when the authentication is successful for a plurality of communication terminal devices, as compared with the case of using the authentication for one communication terminal device, Security in devices with a locking function is improved.
According to the fifth and tenth aspects of the present invention, the non-contact communication is performed by bringing the plurality of communication terminal devices close to the information processing device, so that the sum of the charges for the users of the plurality of communication terminal devices is calculated as either one of the communication terminal devices New billing processing can be performed to bill the user.

  The second communication terminal device may be composed of a plurality of communication terminal devices, and the information reading and authentication processing may be executed for the first communication terminal device and the plurality of second communication terminal devices. Good. In this case, the authentication process can be executed for a combination of three or more communication terminal devices or a combination of users of those communication terminal devices.

  According to the present invention, on the first communication terminal device and the second communication terminal device based on the information read by the information reading device from each of the first communication terminal device and the second communication terminal device by non-contact communication. Only when the authentication is successful, there is an effect that a new authentication process of executing a predetermined predetermined post-authentication operation can be performed.

Hereinafter, an embodiment in which the present invention is applied to an authentication method using contactless communication between an information reading device installed in a store or the like and a mobile phone as a communication terminal device will be described.
FIG. 1 is a schematic configuration diagram of an authentication system using a mobile phone according to the present embodiment. The authentication system of this embodiment includes a management server 20 provided on a communication network, and a reader / writer device (hereinafter referred to as “R / W device”) as an information reading device installed in various restaurants, stores, event venues, and the like. It is composed of 30 etc.

  The management server 20 is composed of, for example, a WEB server, and is communicable with the mobile phone 10 (10A, 10B) via a mobile phone network 40 as a mobile communication network. As a communication protocol between the management server 20 and the mobile phone 10, for example, HTTP (HyperText Transfer Protocol) is used. The management server 20 executes user authority management for a service for managing entrance to the event venue, an electronic wallet service that can pay for various products and services without having cash, and the like. Further, the management server 20 is provided with a dedicated module for managing encryption processing necessary for the authority management and an authentication key (encryption key) used for the encryption processing.

  The R / W device 30 is a communication terminal device installed in various restaurants, stores, event venues, and the like. The R / W device 30 includes an entrance gate device at an event venue, a cash register device such as a restaurant or a store, a ticket gate device at a station, a fare collection device in a bus or the like, a board card reader, a station And ticketing devices at event venues, automatic cash payment devices at financial institutions, and ETC base stations on highways. The R / W device 30 can perform non-contact wireless communication with the mobile phone 10 by a predetermined communication method. Various methods can be employed as this communication method. For example, a short-range wireless communication method using radio waves such as Bluetooth, a communication method using infrared rays, or the like can be employed. As a data transfer method, for example, a serial data transfer method can be adopted. The R / W device 30 is connected to a personal computer (PC) 35 that can communicate with the management server 20 via a network 50 of a fixed communication line. As a communication protocol between the management server 20 and the personal computer 35, for example, HTTP is used. The R / W device 30 can exchange various data used for the electronic wallet service with the management server 20 via the personal computer 35.

  FIG. 2 is a block diagram showing a basic configuration of the R / W device 30. The R / W device 30 includes a non-contact communication module 31, a display unit 32 including a liquid crystal display, an interface unit 33 for communicating with a personal computer 35, and a main control unit 34 for controlling them. . The non-contact communication module 31 includes a dedicated IC chip and an IC card, and has an antenna and a wireless communication circuit for performing non-contact communication with the mobile phone 10 using a predetermined communication protocol. The main control unit 34 reads information such as authentication data stored in the mobile phone 10, performs authentication processing for each mobile phone 10, and performs a predetermined post-authentication operation when authentication is successful. The program is embedded. As the post-authentication operation, an authentication result display operation for displaying the fact on the display unit 32 when authentication is successful for a plurality of predetermined mobile phones, settlement for products purchased by the user and services provided. For example, a settlement processing operation.

FIG. 3 is a block diagram illustrating an example of a hardware configuration of the mobile phone 10. The mobile phone 10 includes a main control unit 110, a wireless communication unit 111, a baseband processing unit 112, a sound input / output unit 113, a display unit 114, and an operation unit 115.
The main control unit 110 includes an MPU (Micro Processing Unit), a RAM, a ROM, and the like, and controls each unit such as the baseband processing unit 112 by executing a program such as a predetermined basic OS and middleware. Build a configuration native platform environment or application execution environment.
The wireless communication unit 111 includes, for example, a synthesizer, a frequency converter, a high frequency amplifier, and the like, and executes high frequency signal processing for wireless communication with the base station 41 of the mobile phone communication network 40.
The baseband processing unit 112 performs digital processing for performing telephone and data transmission / reception communication with an external mobile communication terminal or server. The baseband processing unit 112 and the wireless communication unit 111 are connected via a D / A converter or an A / D converter.
The sound input / output unit 113 includes a microphone, a speaker, a sound signal processing unit, and the like. The analog audio signal output from the microphone is converted into a digital signal by the sound signal processing unit and sent to the main control unit 110, the baseband processing unit 112, and the like. The speaker receives an analog signal converted from a digital signal by the sound signal processing unit, and outputs a voice during a call, or outputs a ringtone for a mail, a ringing tone for a telephone, music, or the like. The speaker may be configured by separately providing a receiver speaker (receiver) for listening to voice during a call and an external output speaker for outputting ringtones, music, etc. You may comprise with one speaker so that a speaker and an external output speaker may be combined.
The display unit 114 is configured by an LCD (liquid crystal display) or the like, and displays various images based on commands from the main control unit 110.
The operation unit 115 includes a plurality of keys such as a data input key (ten key, * key, # key), a call start key, a call end key, a scroll key, and a multi-function key. The operation unit 115 is used when the user gives an instruction to start or end a call, select a menu, switch screens, or input information.

  The mobile phone 10 includes a clock unit (not shown). The clock unit is composed of a clock circuit or the like, and is used as a timer for control or counts the exact date and time to generate time information for update processing or the like.

  In addition, the mobile phone 10 includes a non-contact communication module 116 configured with a dedicated IC chip or an IC card. The non-contact communication module 116 includes an antenna and a wireless communication circuit for performing non-contact communication with the above-described R / W device 30 using a predetermined communication protocol.

FIG. 4 is a flowchart when the R / W device 30 performs pair authentication processing for each mobile phone by non-contact communication with the two mobile phones 10A and 10B.
First, the user A holds his / her mobile phone 10 </ b> A over the R / W device 30. Then, a non-contact communication line is established between the R / W device 30 and the mobile phone 10A, and the R / W device 30 reads authentication information stored in the mobile phone 10A (S101, S102). The R / W device 30 communicates with the management server 20 based on the authentication information read from the mobile phone 10A and executes the authentication process. At this time, communication may be performed between the mobile phone 10A and the management server 20 via the mobile phone communication network 40, and information transmitted from the mobile phone 10A to the management server 20 may be used for the authentication process.

  If, as a result of the authentication process, the mobile phone 10A is a pre-registered mobile phone and the mobile phone 10A (user A) has been successfully authenticated (Yes in S103), non-contact communication with the next mobile phone The timer for is started (S104). If the authentication is not successful (No in S103), an error is displayed and the process ends (S109). Also, if there is no non-contact communication between the next mobile phone 10B and the R / W device 30 (Yes in S110) before the predetermined time elapses, an error is displayed and the process ends (S111). ).

  The user B who is paired with the user A holds his / her mobile phone 10B over the R / W device 30 within a predetermined time after the timer starts. Then, a non-contact communication line is established between the R / W device 30 and the mobile phone 10B, and the R / W device 30 reads authentication information stored in the mobile phone 10B (S105, S106). The R / W device 30 communicates with the management server 20 on the basis of the authentication information read from the mobile phone 10B and executes authentication processing. Also at this time, communication may be performed between the mobile phone 10B and the management server 20 via the mobile phone communication network 40, and information transmitted from the mobile phone 10B to the management server 20 may be used for the authentication process. .

  As a result of the authentication process, if the mobile phone 10B is a pre-registered mobile phone and the mobile phone 10B (user B) is successfully authenticated (Yes in S107), the two mobile phones 10A and 10B are A display indicating that the pair authentication is successful is performed (S108). When this display is present, a privilege such as a free gift or a free ticket is given to the users A and B who have succeeded in pair authentication.

As described above, according to the present embodiment, the R / W device 30 is determined in advance only when pair authentication is successful for the mobile phones 10A and 10B based on information read from the mobile phones 10A and 10B by non-contact communication. As the predetermined post-authentication operation, a new authentication process of displaying that the pair authentication is successful can be performed.
In addition, according to the present embodiment, when the authentication information is read from the two mobile phones 10A and 10B within a predetermined time, the post-authentication operation is executed, whereby the subsequent mobile phone 10B. It is possible to avoid an unstable state waiting for the execution of authentication processing and post-authentication operation without reading information from the user for a long time.

  In the above embodiment, when pair authentication is successful for the two mobile phones 10A and 10B, the pair authentication success is displayed as the post-authentication operation. However, the present invention performs other post-authentication operations. The same applies to the case. For example, the above-mentioned R / W device is incorporated in a safe placed at home, etc., and a plurality of users' mobile phones are sequentially held over the R / W devices of the safe, and between all the mobile phones and the R / W devices. The unlocking operation for opening the key of the safe may be performed only when authentication by non-contact communication is successful. In this case, a pair of mobile phone users includes a couple, a parent and a child, and a plurality of managers of an organization such as a company.

  Further, as the post-authentication operation, an operation of charging the sum of the charges for both users of the two mobile phones 10A and 10B to the user of one of the mobile phones (for example, an operation in the “skill mode”) It may be. For example, at the time of accounting at a restaurant used by the user A and the user, the authentication process is performed by holding the two mobile phones 10A and 10B over the cash register apparatus incorporating the R / W device. If the authentication is successful, a charging operation may be performed in which the user is charged for two accounts.

  FIG. 5 is a flowchart showing an example of a “scoring mode” process for charging one of a plurality of users who have succeeded in pair authentication. The pair authentication processing part (S201) is the same as steps S101 to S111 in FIG. However, in the pair authentication process (S201) of FIG. 5, prior to reading information from the mobile phone 10A, the user A operates the mobile phone 10A, and the accounts for the two users individually used by the users A and B respectively. That only user A pays. After this operation, when the user A holds the mobile phone 10A and holds it over the cash register apparatus incorporating the above R / W device, only the user A accounts for the above two accounts together with other information such as user identification information. The information of the identifier that designates to pay is read. The cashier apparatus determines whether the information read from the mobile phone 10A includes the identifier (S202). Here, when the information read from the mobile phone 10A includes the above identifier (Yes in S202), it is determined that the user A has beaten the user A and B only to the mobile phone 10A (user A). The billing process for billing the accounting for the two is performed (S203). On the other hand, when the above-mentioned identifier is not included in the information read from the mobile phone 10A (No in S202), normal charging for charging each of the mobile phones 10A and 10B (users A and B) is performed and set in advance. The other post-authentication operation is executed (S204).

  In the above embodiment, the cellular phone 10 has been described as an example, but the present invention can be similarly applied to communication terminal devices such as other mobile communication terminals. Further, the present invention can be similarly applied to a case where authentication processing by non-contact communication is performed on communication terminal devices such as three or more mobile phones.

1 is a schematic configuration diagram of an authentication system in which a mobile phone according to an embodiment of the present invention can be used. The block diagram which shows an example of the fundamental structure of a R / W apparatus. The block diagram which shows an example of the hardware constitutions of a mobile telephone. The flowchart when performing pair authentication processing by non-contact communication with two mobile phones in the R / W device. The flowchart which shows an example of the process which charges one of the some users who succeeded in pair authentication.

Explanation of symbols

10 (10A, 10B) Mobile phone 20 Management server 30 R / W device 31 Non-contact communication module 32 Display unit 34 Main control unit 35 Personal computer 40 Mobile phone communication network

Claims (10)

By performing non-contact communication between the information reading device and the communication terminal device close to the information reading device, the information reading device reads information stored in the communication terminal device and authenticates the communication terminal device. An authentication method for performing
The information reading device reading information stored in the first communication terminal device by non-contact communication;
The information reading device reading information stored in the second communication terminal device by non-contact communication;
The information reading device performs authentication processing for each communication terminal device based on information read from each of the first communication terminal device and the second communication terminal device, and when each authentication is successful, the first communication terminal Executing a predetermined post-authentication operation predetermined for the combination of the device and the second communication terminal device;
An authentication method comprising: The authentication method according to claim 1,
After the information is read from the first communication terminal device, if the information is read from the second communication terminal device before the predetermined time has elapsed, the post-authentication operation is performed. An authentication method characterized by being executed. The authentication method according to claim 1 or 2,
The post-authentication operation is an operation for displaying an authentication result of each communication terminal device. The authentication method according to claim 1 or 2,
The information reader is provided in a device with a locking function,
The authentication method is characterized in that the post-authentication operation is an operation of unlocking the lock-equipped device. The authentication method according to claim 1 or 2,
The post-authentication operation is an operation of charging the user of either one of the communication terminal devices for the sum of the charges for both the user of the first communication terminal device and the user of the second communication terminal device. An authentication method characterized by that. An information reading device that reads information stored in the communication terminal device by performing non-contact communication with the communication terminal device and authenticates the communication terminal device,
Communication means for performing contactless communication between the first communication terminal device and the second communication terminal device;
The information stored in the first communication terminal device and the information stored in the second communication terminal device are read by non-contact communication, and from each of the first communication terminal device and the second communication terminal device Authentication of each communication terminal device is performed based on the read information read, and when both the first communication terminal device and the second communication terminal device are successfully authenticated, the combination of these communication terminal devices is determined in advance. Control means for executing the predetermined post-authentication operation,
An information reading apparatus comprising: The information reader according to claim 6.
When the information is read from the second communication terminal apparatus before the predetermined time elapses after the information is read from the first communication terminal apparatus, An information reading apparatus that performs the post-authentication operation. The information reading apparatus according to claim 6 or 7,
The information reading apparatus, wherein the control means executes an operation of displaying an authentication result of each communication terminal device as an operation after the authentication process. The information reading apparatus according to claim 6 or 7,
Opening and closing means, and locking means for locking the opening and closing means,
The information reading apparatus according to claim 1, wherein the control means executes an operation of unlocking the locking means as the post-authentication operation. The information reading apparatus according to claim 6 or 7,
The control means, as the post-authentication operation, gives the total of charges for both the user of the first communication terminal device and the user of the second communication terminal device to the user of one of the communication terminal devices. An information reading apparatus that executes a charging process for charging.

Images