JP2012203428A - Authentication system and authentication method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an authentication system and an authentication method in which the right to utilize various functions of a vehicular information terminal managed by a server can be authenticated without depending on communication environments.SOLUTION: An account management server 100 has a user account management table 110 in which account information Ac or authentication information Ps is associated, respectively, and distributes the relevant account information Ac and authentication information Ps to a portable information terminal 200 on the basis of reception of identification information transmitted from the portable information terminal 200. When a communication with the account management server 100 is not set up, a vehicular information terminal 300 performs authentication using a guest account on the basis of emergency guest account information and guest authentication information stored in a storage area 310. Under the condition where the authentication is established using the guest account, minimum necessary functions of the vehicular information terminal 300 are made available.

Description

  The present invention relates to an authentication system and an authentication method, and more particularly to an authentication system and an authentication method that are useful when applied to authentication of authority to use service for a vehicle managed by a server.

  For example, in recent highly electronic vehicles such as automobiles, in order to determine whether a user who uses the vehicle itself or various in-vehicle devices mounted on the vehicle is a valid user, Authentication using an authentication key for exchanging a password with the user and user authentication using a predetermined password are performed.

  Also, in mobile information terminals such as mobile phones and vehicle information terminals mounted on vehicles, various content data and applications that can be used in such mobile information terminals and vehicle information terminals are acquired from information providing servers by wireless communication. By doing so, it is well known that various services can be provided. In providing these various services, authentication of portable information terminals and vehicle information terminals serving as distribution destinations is performed in order to limit users to users who have authority to use various services. That is, since the portable information terminal and the vehicle information terminal have a unique ID associated with information regarding their owners, portable information serving as a distribution destination of various content data and applications through verification of the unique ID. Authentication of the terminal and the vehicle information terminal is performed.

Conventionally, for example, an authentication system described in Patent Literature 1 is known as a system used for authentication of such portable information terminals and vehicle information terminals. That is, in this authentication system, as shown in FIG. 9, authentication of a used communication terminal device 10 such as a mobile phone, or a linked communication terminal device 20 that is mounted on a car C and operates in cooperation with the used communication terminal device 10. Is performed by the information providing server 30 installed in the base station or the like. When distributing content data and applications, first, the identification data ID ₂₀ unique to the cooperative communication terminal device 20 is transmitted to the information providing server 30 via the second communication mechanism ANW. Thereby, in the information provision server 30, if the cooperation communication terminal device 20 is authenticated through collation with the identification data previously registered in the information provision server 30 and the identification data ID ₂₀ , the information provision server 30 also passes through the second communication mechanism ANW. The electronic license els is transmitted to the cooperative communication terminal device 20. On the other hand, the cooperative communication terminal apparatus 20 that has received the electronic license els transmits the electronic license els and the identification data ID ₂₀ to the use communication terminal apparatus 10. As a result, the used communication terminal apparatus 10 transmits the electronic license els and the identification data ID ₂₀ received from the cooperative communication terminal apparatus 20 to the information providing server 30 via the first communication mechanism MNW. In this way, the information providing server 30 authenticates the used communication terminal device 10 based on the electronic license els and the identification data ID ₂₀ received from the used communication terminal device 10. As a result of this authentication, when the validity of the used communication terminal device 10 is confirmed, distribution of content data and applications from the information providing server 30 to the used communication terminal device 10 is permitted.

  Thus, according to this authentication system, content data and applications are distributed on condition that the information providing server 30 authenticates the used communication terminal device 10 and the cooperative communication terminal device 20, so that the content data and application are valid. Can be distributed only to users who have the right to use.

JP 2007-034765 A

  By the way, in this type of authentication system including the authentication system described in the above-mentioned Patent Document 1, each time a content data or application is acquired or used by a communication terminal device, a cooperative communication terminal device, that is, a vehicle It is necessary to transmit identification data (ID) and receive an electronic license by the information terminal.

  For this reason, if the communication between the vehicle information terminal and the information providing server is not established due to the deterioration of the communication environment of the vehicle information terminal, the vehicle information terminal cannot acquire the electronic license from the information providing server. In addition, there is a concern that various functions of the vehicle information terminal cannot be used, including the use of content data and applications.

  The present invention has been made in view of such circumstances, and the purpose thereof is to authenticate the authority to use various functions of the vehicle information terminal managed by the server without depending on the communication environment. To provide an authentication system and an authentication method.

Hereinafter, means for solving the above-described problems and the effects thereof will be described.
The invention according to claim 1 is a service use authority authentication system comprising an account management server for managing service use authority and a use device for use of the service, wherein the account management server includes the service Account information indicating an account assigned to each user of the service, authentication information used for authentication of the account, license information indicating the authority to use the service, and identification information unique to each user of the service are associated with each other. And having a registered user account management table, and delivering the associated authentication information to the information terminal based on reception of the identification information through an information terminal operated by a user of the service, The device used is at least the authentication information and the account A storage area for storing information in association with the service, and when using the service, authentication of the corresponding account based on a result of an inquiry to the account management server using authentication information presented via the information terminal And the authentication information and account information are stored in the storage area, and when the communication with the account management server is not established, the authentication information presented and the authentication information stored in the storage area are The gist is to authenticate the corresponding account based on the verification.

The invention according to claim 11 is an authentication method of service use authority using an account management server for managing service use authority and a use device provided for use of the service, wherein the account management server includes: Account information indicating an account assigned to each service user, authentication information used for authentication of the account, license information indicating the authority to use the service, and identification information unique to each user using the service are associated with each other. A user account management table registered, and the use device has a storage area for storing at least the authentication information and the account information in association with the service, and is operated by a user using the service. Based on reception of the identification information through the information terminal Corresponding to the step of delivering the associated authentication information to the information terminal and the inquiry result to the account management server using the authentication information presented via the information terminal when using the service Presenting the step of authenticating the account, storing the authentication information and account information used in the step of authenticating the account in the storage area, and communication with the account management server is not established And a step of authenticating the corresponding account based on verification between the authentication information and the authentication information stored in the storage area in the step of storing in the storage area.

  According to the above configuration or method, account information, authentication information, license information, and identification information necessary for using the service are managed by the account management server, and account authentication is required for using the service. Further, the authentication information necessary for the authentication of such an account is distributed from the account management server to the information terminal by transmitting the identification information of the use user from the information terminal owned by the user to the account management server. . In using the service, when the user presents the authentication information received by the information terminal to the utilization device, the utilization device transmits the authentication information presented from the information terminal to the account management server. The account management server verifies the authenticity by comparing the authentication information transmitted from the using device with the authentication information registered in the account management table. The account management server also determines the account of the user who presented the authentication information to the user device based on the account information associated with the authentication information in the user account management table, that is, the user who is requesting the use of the service. Identify. Then, when the account of the user is identified, the account management server returns this authentication result to the user device, assuming that the user has been authenticated. The user device authenticates the user account based on the authentication result transmitted from the account management server. As a result, the use device can provide services and functions according to the use authority given to the authenticated account.

  On the other hand, when the communication with the account management server is not established due to the deterioration of the communication environment, etc., the use device uses the authentication information stored in the storage area and the authentication information presented by the information terminal through verification. Identify the account of the user who presented the authentication information to the device. When the user device's account can be identified, the utilization device provides a service according to the utilization authority given to the identified account. For this reason, even if the account management server manages account information and authentication information necessary for using the service, communication between the account management server and the user device is not established. You will be able to authenticate your account. This ensures the availability of services and functions permitted for this account.

  According to a second aspect of the present invention, in the authentication system according to the first aspect, the account information is information indicating a hierarchical usage level of the service or the use device, and the highest of the hierarchical usage levels. The account information of the lower layer includes, as an emergency guest account when the corresponding account information and authentication information do not exist in the storage area of the user device when communication between the user device and the account management server is not established, Information indicating the minimum required function usage authority is included, and the authentication information includes guest authentication information corresponding to the guest account, and indicates the minimum necessary function usage authority of the devices used. Information and guest authentication information are distributed in advance from the account management server to the using device, and the storage area is The use device, when the emergency guest account authentication based on the guest authentication information is established, makes it possible to use the minimum necessary functions of the use device. And

According to a twelfth aspect of the present invention, in the authentication method according to the eleventh aspect, the account information is information indicating a hierarchical usage level of the service or the use device, and the highest of the hierarchical usage levels. The account information of the lower layer includes, as an emergency guest account when the corresponding account information and authentication information do not exist in the storage area of the user device when communication between the user device and the account management server is not established, The authentication information includes information indicating the authority to use the minimum necessary functions, and the authentication information includes guest authentication information corresponding to the guest account, and the step of authenticating the corresponding account when the communication is not established includes , When authentication of the emergency guest account based on the guest authentication information is established Further summarized in that includes the step of enabling use of the minimum necessary functions use equipment.

  According to the above configuration or method, the account is hierarchized according to the usage level of the used device. And, for example, when the device used is a vehicle information terminal mounted on a car, the right of use of necessary functions such as an air conditioner, an audio function, and a minimum necessary application is shown as the lowest level account. An emergency guest account is set up. For this reason, for example, when communication between the use device and the account management server is not established, the corresponding authentication information and account information are not stored in the storage area of the use device, so that a user having a valid account can be authenticated. Even if it is not possible, the user can log in with an emergency guest account by, for example, presenting guest authentication information managed by the user to the user device from the information terminal. Thereby, even if it is a case where it is a legitimate use user but authentication with a legitimate account is not realized, the availability of the minimum necessary function of a use apparatus can be secured.

  The invention according to claim 3 is the authentication system according to claim 2, wherein the communication between the user device and the account management server is recovered after the authentication with the emergency guest account is established. The gist is to re-authenticate the account based on the account information and authentication information of the regular account of the user.

  The invention according to claim 13 is the authentication method according to claim 12, wherein the communication between the user device and the account management server is recovered after the authentication with the emergency guest account is established. The gist further includes a step of re-authenticating the account based on account information and authentication information of a regular account of the user.

  According to the above configuration or method, when communication between the user device and the account management server is restored after authentication with the emergency guest account, the account is re-authenticated based on the account information and authentication information of the user's regular account. Is done. For this reason, the usage level of the usage device is automatically improved from the lowest usage level to the usage level corresponding to the regular account. This makes it possible to use high-level functions such as addition and deletion of applications, account management, and the like after communication recovery while ensuring the availability of the minimum necessary functions in an emergency. In addition, as described above, it is possible to verify the validity of the user again by performing re-authentication with a legitimate account after recovery of communication between the user device and the account management server. Security will be further improved.

  According to a fourth aspect of the present invention, in the authentication system according to the second or third aspect, the guest account and the guest authentication information are allocated separately for the user, and the user device is used for the guest. When the authentication of the guest account based on the authentication information is established, account information and authentication information having a higher usage level than the guest account are stored in the storage area, and the account information and authentication stored in the storage area are stored. The gist is to invalidate or delete the account information and the authentication information stored in the storage area when the information belongs to a user who is different from the guest account for which the authentication has been established.

The invention according to claim 14 is the authentication method according to claim 12 or 13, wherein the guest account and the guest authentication information are allocated separately for the user, and the guest authentication information is based on the guest authentication information. When the authentication of the guest account is established, account information and authentication information having a higher usage level than the guest account are stored in the storage area, and the account information and authentication information stored in the storage area are stored in the authentication area. The gist further includes a step of invalidating or deleting the account information and the authentication information stored in the storage area when the user account is different from the established guest account.

  According to the above configuration or method, when the usage level of the user who has requested authentication is lower than the account level indicated by the account information of the other usage users already stored in the storage area of the usage device, the storage The authentication information and account information stored in the area are invalidated or deleted. For this reason, even if authentication by a guest user by a certain user is established, browsing of account information and authentication information of other user users stored in the storage area of the user device at the time of previous authentication is restricted. . Thus, when temporary use authority is given to the guest account for emergency use, the use authority is not unduly extended by an unauthorized operation of the user authenticated by the guest account.

  Even if the account information and authentication information stored in the storage area are invalidated in this way, it is necessary for authentication when communication is not established by enabling the account information and authentication information after logging out of the guest account. Account information and authentication information can be stored in the storage area of the device used. Similarly, even if the account information and authentication information stored in the storage area are deleted, the deleted account information and authentication information can be obtained from the account management server after logout of the guest account, so In preparation for authentication, account information and authentication information can be stored in the storage area of the user device.

  The invention according to claim 5 is the authentication system according to any one of claims 2 to 4, wherein the guest account and the authentication information for the guest are allocated to each of the use users, and the use device When the authentication of the guest account based on the guest authentication information is established, account information and authentication information related to the guest account of the user who is different from the guest account for which the authentication is established are stored in the storage area. The gist is to invalidate or delete the account information and authentication information stored in the storage area, and to delete the operation history of the user device based on the guest account.

  The invention according to claim 15 is the authentication method according to any one of claims 12 to 14, wherein the guest account and the authentication information for the guest are allocated separately for the user, and for the guest When the authentication of the guest account based on the authentication information is established, the account information and the authentication information related to the guest account of the user who is different from the guest account for which the authentication is established are stored in the storage area. The present invention includes a step of invalidating or deleting the account information and the authentication information stored in the user account, and deleting the operation history of the user device based on the guest account.

According to the above configuration or method, when the guest account of the user who has requested authentication is different from the previously authenticated guest account, the authentication information or account information stored in the storage area is invalidated. Or deletion is executed. Further, in the above configuration or method, the operation history of the used device is deleted based on the previously authenticated guest account. For this reason, even if authentication with a guest account by a certain user is established, the account information and authentication information of the other user's guest account stored in the storage area of the user device at the time of previous authentication can be browsed. In addition to being restricted, browsing of personal information such as operation history is restricted. Thereby, especially when one used device is shared by a plurality of users, the use authority and the manageability of personal information are maintained while assigning the guest account to the plurality of users. Even if the account information and authentication information stored in the storage area are invalidated in this way, the account information and authentication information can be validated after logging out of the guest account to authenticate the emergency guest account. The account information and authentication information necessary for the storage can always be held in the storage area of the device used. Similarly, even if the account information and authentication information stored in the storage area are deleted, an emergency guest account can be obtained by acquiring the deleted account information and authentication information from the account management server after logging out of the guest account. The account information and authentication information necessary for authentication can be kept in the storage area of the user device.

  According to a sixth aspect of the present invention, in the authentication system according to any one of the first to fifth aspects, the service includes a plurality of different services, and the account management server uses the authority to use the services separately. And the registration information unique to each user who uses the service, the account information, and the corresponding authentication information Ps are associated with each other and registered in the user account management table.

  According to the above configuration, in the account management table of the account management server, the license information indicating the usage authority for each of a plurality of different services, identification information unique to each user of the service, account information, and corresponding authentication information Are registered in association with each other. When the authentication information is distributed to the information terminal, when the account management server receives the identification information transmitted from a certain information terminal, the authentication information associated with the same identification information as the identification information is stored in the user account management. The extracted authentication information is extracted from the table and distributed to the information terminal that is the transmission source of the identification information. In the use device, the use authority of each service is authenticated for each use user through account authentication based on the authentication information presented from each information terminal. For this reason, even if there are a plurality of services provided via a single use device and these services are shared by a plurality of users, it is possible to accurately authenticate the use authority for each service. become. That is, even when the usage authority for various services given to each user is different for each user, the presence / absence of the usage authority for each service can be accurately determined through authentication of the usage authority for each service. It becomes like this.

  A seventh aspect of the present invention is the authentication system according to any one of the first to sixth aspects, wherein the information terminal has the wireless communication function with the account management server and is distributed. Is a portable information terminal that presents the information to the device using the service.

  As described above, if a portable information terminal having a wireless communication function with the account management server is used as the information terminal, use authority authentication using a highly versatile information terminal such as a mobile phone or a smartphone is used. Is feasible. Thereby, the versatility as said authentication system comes to be improved.

  The invention according to claim 8 is the authentication system according to any one of claims 1 to 7, wherein the identification information includes a user name or user ID of the service and other unique information of the user. And are generated as information associated with each other.

According to the above configuration, the identification information is generated as information in which the user name or user ID of the service and other unique information of the user are associated with each other. It becomes possible to specify the user in various ways. As a result, the identification information associated with the license information is complicated as well as accurate acquisition of the license information by the information terminal, which makes it difficult for the user to impersonate, and this also improves the safety of the authentication system. Become figured.

  The invention according to claim 9 is the authentication system according to any one of claims 1 to 8, wherein the service is charged content data distributed in advance from the account management server or a dedicated vendor server. Alternatively, the gist is that it is an application.

  Normally, many content data and application services distributed from dedicated vendors' servers are granted usage rights on the condition that the user is charged, and the content data and application only for the charged user It is necessary to allow the use of. In this respect, according to the above configuration, since the account is authenticated when the content data or application is used, the content data or application is provided through a user device shared by a plurality of users. Through the account authentication, usage rights are authenticated in units of content data and applications. This makes it possible to accurately authenticate the usage authority for each content data or application.

  According to a tenth aspect of the present invention, in the authentication system according to the ninth aspect, the service using device is a vehicle information terminal that is mounted on an automobile and provides vehicle content data or executes a vehicle application. This is the gist.

  In recent vehicle information terminals, vehicle content data such as map data and vehicle applications are often purchased and used from a dedicated vendor server or the like. In addition, a vehicle on which such a vehicle information terminal is mounted is often used by a plurality of users, such as car sharing, and a vehicle information terminal mounted on the vehicle is also used by a plurality of users. There are many cases. For this reason, the authority to use the vehicle content data and the vehicle application that can be used in such a vehicle information terminal is usually different for each user depending on whether or not there is a charge. In this regard, according to the above configuration, even if the vehicle information terminal is used by a plurality of users, the vehicle content data and the vehicle application provided through the vehicle information terminal through the account authentication are used. It becomes possible to easily and accurately authenticate the service use authority.

The block diagram which shows schematic structure of the authentication system about one Embodiment of the authentication system and authentication method concerning this invention. The figure which shows the relationship between the account information managed by the account management server of the embodiment, authentication information, license information, and identification information. The figure which shows an example of the license information provided for every use user, and identification information. The figure which shows an example of the account provided for every user. 6 is a flowchart showing an account authentication procedure according to the authentication system and the authentication method of the embodiment. The flowchart which shows the switch procedure of the account by the authentication system and authentication method of the embodiment. The sequence diagram which shows the authentication procedure of the account at the time of communication establishment of the account management server and vehicle information terminal by the authentication system and authentication method of the embodiment. The sequence diagram which shows the authentication procedure of the account at the time of the communication failure of the account management server and vehicle information terminal by the authentication system and authentication method of the embodiment. The block diagram which shows the schematic structure about the conventional authentication system.

  Hereinafter, an embodiment embodying an authentication system and an authentication method according to the present invention will be described with reference to FIGS. Note that the authentication system and the authentication method according to the present embodiment are the authority to use various functions of the vehicle information terminal mounted on the automobile shared by a plurality of users, and the vehicle provided via the vehicle information terminal. It is used for authentication of the use authority of the content data for vehicles and the application for vehicles.

  As shown in FIG. 1, in the authentication system and authentication method of the present embodiment, an account management server 100 that manages account information and the like indicating use authority of the vehicle content data and the vehicle application is used. Further, in the authentication system and the authentication method of the present embodiment, portable information terminal 200 configured by a mobile phone or a smartphone having a wireless communication function with account management server 100 is used. In addition, in the authentication system and the authentication method of the present embodiment, the vehicle information terminal 300 that constitutes a use device that is mounted on the automobile C and used for various services such as vehicle content data and vehicle applications. Is used.

  Among these, the account management server 100 has a user account management table 110 in which license information indicating service use authority and identification information unique to each user using the service are registered in association with each other. Here, FIG. 2 and FIG. 3 show examples of information registered in the user account management table 110.

  As shown in FIG. 2, in this user account management table 110, license information ls1 to lsN indicating use authority is registered separately for each of a plurality of different vehicle content data and vehicle applications. The license information ls1 to lsN is information distributed in advance from the dedicated application vendor server 400 that distributes the vehicle content data and the vehicle application. That is, the license information ls1 to lsN is given to each purchased vehicle content data or each vehicle application by, for example, each user purchasing desired vehicle content data or a vehicle application from an application vendor or the like. Is.

  Each license information ls1 to lsN is associated with identification information Ifa unique to each user who has the license information ls1 to lsN. In the present embodiment, the identification information Ifa is generated as information in which a user name or user ID of various services is associated with unique information Ifa1 which is other unique information of the user. As the user user's unique information Ifa1, for example, information related to the possessed property having the ownership relationship with the user is used. In other words, the unique information Ifa1 of the user is attached to a unique ID previously defined for various devices such as a mobile phone and a music playback device owned by the user, a driver's license and a credit card owned by the user. Information on driver's license number and credit card number is registered. In addition, as user-specific information Ifa1, content that can identify an individual, configuration information of the content, and biometric information such as fingerprint information of the user are registered. In addition, as a use user ID, the predetermined number of alphanumeric characters provided for every use user, for example are used.

  In the present embodiment, for example, one or more account information Ac is associated with each user ID used in the identification information Ifa. The account information Ac is associated with authentication information Ps used for authentication of the account indicated by the account information Ac. The authentication information Ps is configured, for example, by combining a predetermined number of alphanumeric characters.

In the user account management table 110, various pieces of information are associated in the form shown in FIG. 3, for example, by appropriately registering the associated information for each user. That is, for the user C of the car C, for example, “owner account information A”, “general account information A”, and “account information Ac” corresponding to the usage levels of various functions of the vehicle information terminal 300 are displayed. Guest account information A "is associated. Each account information is associated with “authentication information A1”, “authentication information A2”, and “authentication information A3” as authentication information Ps corresponding thereto. Further, the “user A certificate” and the “application C certificate” as the license information ls are associated with the use user “class A”. Further, for example, a unique ID of a mobile phone owned by the user “class A”, a driver's license number, a credit card number, and biometric information expressed in 8 bits are associated with the user “class A”. Similarly, for example, “general account information B” and “guest account information B” are associated with the user “B” as account information Ac corresponding to the use levels of various functions of the vehicle information terminal 300. Each account information is associated with “authentication information B2” and “authentication information B3”. The user “B” is associated with “application B certificate”, “application C certificate”, and “application D certificate” as the license information ls. Further, for example, a unique ID of a mobile phone owned by the user “B”, a driver's license number, a credit card number, for example, biometric information expressed in 8 bits, and the like are associated with the user “B”. .

  As described above, in the present embodiment, the account information Ac and the authentication information Ps corresponding to the account information Ac are associated with each user of the automobile C (the vehicle information terminal 300) or the portable information terminal 200. Thereby, the account management server 100 can specify the user of the mobile phone associated with the unique ID and the account information Ac given to the user based on the unique ID of the mobile phone, for example. It has become. This also allows the account management server 100 to specify the usage levels of the various functions of the vehicle information terminal 300 assigned to the user. In addition, in the present embodiment, the charged vehicle content data and the vehicle application license information ls1 to lsN are associated with each user who is associated with such account information Ac. Note that the account information Ac of the present embodiment includes information indicating the license information ls associated with the user who uses the account information Ac. Thereby, in this Embodiment, it is possible to grasp | ascertain the presence or absence of the permission permission of use of the content data for vehicles of each user, and the application for vehicles only by referring account information Ac.

Further, as illustrated in FIG. 4, the account information Ac according to the present embodiment is a hierarchical structure of various functions of the vehicle information terminal 300, vehicle content data and vehicle applications that can be used in the vehicle information terminal 300. The usage level is shown. That is, in the present embodiment, each user account is hierarchized in, for example, three levels, and is configured by a top-level “owner account”, a middle-level “general account”, and a bottom-level “guest account”. Has been. The top-level “owner account” has, for example, authority to add, delete, and update vehicle content data and vehicle applications that can be used in the vehicle information terminal 300, and is subordinate to the owner account. The authority to set various usage rights for "General Account" and "Guest Account" is also given. Such “owner account” is, for example, “Exhibit A”, “Ding”, etc., which are regular owners of the automobile C on which the vehicle information terminal 300 is mounted. . Etc. Further, the minimum “usage authority” for an air conditioner, an audio device, a car phone, a navigation system, and the like that can be controlled by the vehicle information terminal 300 is assigned to the middle “general account”. In addition, in the “general account”, the vehicle content data and the vehicle application that can be used in the vehicle information terminal 300 are added, deleted, updated, and the like according to the usage authority set by the “owner account”. Permission is assigned. Such a “general account” is assigned to, for example, the family of a user who has an “owner account”. The vehicle content data and the vehicle application for which the “owner account” and the “general account” have usage rights are determined according to the license information ls associated with each user. Furthermore, the “guest account” in the present embodiment is an account that grants an emergency use right when authentication cannot be performed with an “owner account” or a “general account”. Among the various functions of the vehicle information terminal 300 The authority to use the minimum necessary functions is given. That is, to the “guest account”, for example, only the minimum use authority of an air conditioner, an audio device, a car phone, a navigation system, and the like that can be controlled by the vehicle information terminal 300 is assigned.

  In this embodiment, each account is assigned to each user, and each authentication information Ps used for authentication of each account is assigned to each user. Thereby, according to the account of the user who uses the vehicle information terminal 300, various functions of the vehicle information terminal 300 and the usage levels of the vehicle content data and the vehicle application can be defined. . Note that the authentication information Ps necessary for the authentication of such an account is managed by the account management server 100. However, the authentication information Ps and account information Ac corresponding to the “guest account” are stored in advance in the portable information terminal 200 owned by the user as emergency information, for example.

  As shown in FIG. 1, the account management server 100 includes a receiving unit 120 that receives the identification information Ifa (unique information Ifa) transmitted from the portable information terminal 200. The unique information Ifa received by the receiving unit 120 is input to the information extracting unit 130 that extracts the corresponding account information Ac and the corresponding authentication information Ps from the user account management table 110 based on the identification information Ifa. . Then, when the information extraction unit 130 extracts the account information Ac and the corresponding authentication information Ps from the user account management table 110, the extracted account information Ac and authentication information Ps are transmitted to the unique information Ifa via the transmission unit 140. Is distributed to the portable information terminal 200 that is the transmission source. The distribution destination of the account information Ac and the authentication information Ps is specified based on, for example, the unique ID of the portable information terminal 200 that is the distribution destination.

  Furthermore, the account management server 100 includes a server authentication unit 150 that authenticates the user account when the user uses the various functions of the vehicle information terminal 300, the vehicle content data, and the vehicle application. In the present embodiment, when the various functions of the vehicle information terminal 300, the vehicle content data, and the vehicle application are used, the authentication information Ps is input to the vehicle information terminal 300 by the user, whereby the authentication information Ps. Is transmitted from the vehicle information terminal 300 to the account management server 100. When the authentication information Ps is input to the server authentication unit 150 via the receiving unit 120, the server authentication unit 150 registers in the authentication information Ps transmitted from the vehicle information terminal 300 and the user account management table 110. Is compared with the authentication information Ps. As a result of such verification, if it can be confirmed that the authentication information Ps transmitted from the vehicle information terminal 300 exists in the user account management table 110, the server authentication unit 150 is transmitted from the vehicle information terminal 300. It is determined that the user who performed the input operation of the authentication information Ps, that is, the authentication information Ps is valid. Then, the server authentication unit 150 distributes the authentication result and the account information Ac associated with the authentication information Ps in the user account management table 110 to the vehicle information terminal 300 that is the distribution source of the authentication information Ps.

On the other hand, when it is determined that the authentication information Ps transmitted from the vehicle information terminal 300 does not exist in the user account management table 110 as a result of the verification by the server authentication unit 150, the server authentication unit 150 It is determined that the authentication information Ps transmitted from is invalid, and that fact is distributed to the vehicle information terminal 300 that is the distribution source of the authentication information Ps.

  The portable information terminal 200 includes an operation unit 210 that performs an operation of inputting the unique information Ifa1 by the user of the service and an operation of transmitting the unique information Ifa1 to the account management server 100. In addition, the portable information terminal 200 includes an ID storage unit 220 in which a unique ID defined in advance in the portable information terminal 200 is stored. Although illustration is omitted, the portable information terminal 200 is equipped with an authentication application used when authenticating the account with the vehicle information terminal 300.

  When the account information Ac and the authentication information Ps are acquired by the portable information terminal 200, when a predetermined operation by the user is performed on the operation unit 210 after activation of the authentication application, the unique ID stored in the ID storage unit 220 is stored. Is wirelessly transmitted to the account management server 100 via the transmission unit 230. That is, the unique ID of the portable information terminal 200 is wirelessly transmitted to the account management server 100 as unique information Ifa1 of the user who owns the portable information terminal 200. Similarly, after activation of the authentication application, when information related to the user's driving license number, credit card number, and the like of the portable information terminal 200 is input via the operation unit 210, the various types of information are used as unique information Ifa1 of the user It is wirelessly transmitted to the account management server 100 via the transmission unit 230.

  When the account information Ac and authentication information Ps extracted based on the unique information Ifa1 transmitted from the portable information terminal 200 are distributed from the account management server 100, the distributed account information Ac and authentication information Ps are stored in the portable information. It is received by the receiving unit 240 constituting the terminal 200. That is, in the present embodiment, the account information Ac and the account information indicating the account given to the user can be obtained simply by transmitting identification information Ifa such as the user's own unique information Ifa to the account management server 100 through the portable information terminal 200. It is possible to acquire authentication information Ps necessary for authentication. For this reason, the user of the portable information terminal 200 uses the account information Ac indicating the authority to use the vehicle content data and the vehicle application granted when purchasing from the application vendor or the like, and the authority to use various functions of the vehicle information terminal 300. And authentication information Ps necessary for the authentication can be easily obtained.

  The account information Ac and the authentication information Ps received by the receiving unit 240 are displayed visually on the image display unit 250 configured by, for example, a liquid crystal display. Thereby, the user of the portable information terminal 200 confirms his / her account information Ac and authentication information Ps necessary for the authentication when using the functions of the vehicle information terminal 300, the vehicle content data, and the vehicle application. Can be done.

  On the other hand, the vehicle information terminal 300 is mounted on the automobile C used by each user who owns the portable information terminal 200. The vehicle information terminal 300 has, as its various functions, for example, an air conditioner control function, an audio device control function mounted on the vehicle, and a navigation system control function. In addition, the vehicle information terminal 300 has a function of adding / deleting vehicle content data and a vehicle application, and a function of providing the user with the vehicle content data and the vehicle application. The use levels of these various functions differ according to the account assigned to each user as illustrated in FIG.

In addition, the vehicle information terminal 300 includes a storage area 310 in which a plurality of types of charged vehicle content data and vehicle applications distributed in advance from the application vendor server 400 are stored. The vehicle content data and the vehicle application stored in the storage area 310 are purchased in advance from an application vendor or the like by each user who uses the vehicle information terminal 300. In the storage area 310 of this embodiment, authentication information Ps input by each user and account information Ac distributed from the account management server 100 are stored in association with each other. The storage area 310 stores the input authentication information Ps each time the corresponding authentication information Ps is input to the vehicle information terminal 300 by the user. Similarly, in the storage area 310, each time the account information Ac corresponding to the authentication information Ps is distributed from the account management server 100, it is stored together with the authentication information Ps. Further, the storage area 310 appropriately stores the operation history of the vehicle information terminal 300 by the user who has been authenticated (logged in) for each account, the usage history of the vehicle content data, the vehicle application, and the like. It has become.

  In the storage area 310 of this embodiment, guest account information Ac and authentication information Ps (guest authentication information) necessary for guest account authentication are used as information used for authentication with an emergency guest account. Are registered separately for each user of the vehicle information terminal 300. In the present embodiment, the account information Ac, the authentication information Ps, and the operation history / use history stored in the storage area 310 are changed every time the user using the vehicle information terminal 300 changes. It is supposed to be invalidated or deleted. In the present embodiment, out of the invalidated account information Ac and authentication information Ps, even if the account information Ac for guest and the authentication information Ps necessary for authentication of the guest account are once invalidated, It is activated after each user logs out of the account. Similarly, even if the guest account information Ac and the authentication information Ps necessary for guest account authentication are once deleted from the storage area 310, the deleted guest account information Ac and authentication information Ps are account management. It is acquired from the server 100. As described above, in the present embodiment, when the vehicle information terminal 300 is used by a certain user, the storage area 310 is configured so that only the account information Ac and authentication information Ps for the guest of the user can be used. Retained. On the other hand, when the vehicle information terminal 300 is not used, in other words, when no account is logged in, account information Ac for guest of all users and corresponding authentication information Ps can be used. It is held in the storage area 310. As a result, communication between the vehicle information terminal 300 and the account management server 100 is not established, and even when the corresponding account information Ac and authentication information Ps are not stored in the storage area 310, the vehicle information terminal The guest account can be authenticated by 300 alone. Therefore, the availability of various necessary functions of the vehicle information terminal 300 is secured without being affected by the communication environment of the vehicle information terminal 300 mounted on the automobile C.

  Furthermore, the vehicle information terminal 300 includes an input device 320 that allows a user of the portable information terminal 200 to perform a predetermined input operation. In the input device 320, an operation of inputting the authentication information Ps visually displayed on the image display unit 250 of the portable information terminal 200 is performed. Further, in the input device 320, an operation for controlling the air conditioner and an operation for controlling an audio device mounted on the vehicle are performed. In addition, the input device 320 performs operations such as addition, deletion, update, and activation of the vehicle content data and the vehicle application.

  Further, the vehicle information terminal 300 authenticates the user's account based on the authentication information Ps input to the input device 320, and the vehicle information terminal 300 according to the authentication result of the vehicle-mounted authentication unit 330. And a function management unit 360 that can use these functions.

When the authentication information Ps is input to the input device 320 when communication with the account management server 100 is established, the in-vehicle authentication unit 330 transmits the authentication information Ps to the account management server 100 via the transmission unit 340. Then, when the authentication result indicating that the transmitted authentication information Ps is valid and the account information Ac corresponding to the authentication information Ps are distributed from the account management server 100, the in-vehicle authentication unit 330 determines the authentication information Ps and account information Ac are acquired via the receiving unit 350. That is, the in-vehicle authentication unit 330 authenticates the user account by inquiring the account management server 100 about the validity of the authentication information Ps when communication with the account management server 100 is established.

  On the other hand, even if the authentication information Ps is input to the input device 320, the in-vehicle authentication unit 330 does not establish communication with the account management server 100 due to the traveling environment of the automobile on which the vehicle information terminal 300 is mounted. In some cases, it is determined whether or not the corresponding authentication information Ps is already stored in the storage area 310. That is, when the vehicle information terminal 300 is used by the same user in the past, it is determined whether or not the authentication information Ps and account information Ac used for authentication of the account are stored in the storage area 310. When the corresponding authentication information Ps and account information Ac are stored in the storage area 310, the in-vehicle authentication unit 330 receives the authentication information Ps stored in the storage area 310 and the authentication information Ps input to the input device 320. Authenticate the user's account through verification. Thus, the in-vehicle authentication unit 330 authenticates whether or not the user has a regular account. Thereby, in this Embodiment, even if it is a time when communication with the account management server 100 and the vehicle information terminal 300 is not materialized, the user who has requested | required the authentication to the vehicle information terminal 300 is authenticated with a regular account. Can be done.

  On the other hand, when the corresponding authentication information Ps and account information Ac are not stored in the storage area 310 and the normal account cannot be authenticated, the in-vehicle authentication unit 330 authenticates with an emergency account, that is, a guest account. To the user. Such a request is made by, for example, visual display on voice guidance, a liquid crystal display attached to the vehicle information terminal 300, or the like. When the authentication information Ps for authenticating the guest account is input via the input device 320, the in-vehicle authentication unit 330 uses the authentication information Ps and the authentication information for the guest account registered in the storage area 310 in advance. The guest account is authenticated through verification with Ps.

  When the in-vehicle authentication unit 330 authenticates each account in this way, the authentication result manages the functions of the vehicle information terminal 300 and the vehicle content data and the vehicle application that can be used by the vehicle information terminal 300. The data is output to the function management unit 360.

  The function management unit 360 makes it possible to use various functions of the vehicle information terminal 300 based on the authentication result of the in-vehicle authentication unit 330. In addition, the function management unit 360 includes the vehicle content data and the vehicle application that are indicated as “usable” in the account information Ac among the vehicle content data and the vehicle application stored in the storage area 310. Make it available. As a result, as shown in FIG. 4, the various functions of the vehicle information terminal 300, the vehicle content data, and the vehicle application can be used in accordance with each hierarchized account. In addition, when the in-vehicle authentication unit 330 notifies that the authentication with the guest account has been established, the function management unit 360 can use only the minimum necessary functions among the various functions of the vehicle information terminal 300. . As a result, the minimum necessary functions of the vehicle information terminal 300 can be used even when authentication with a legitimate account cannot be performed when communication between the vehicle information terminal 300 and the account management server 100 is not established. It becomes.

The account authentication procedure according to the authentication system and authentication method of the present embodiment will be described in detail below with reference to FIG.
As shown in FIG. 5, first, when using the various functions of the vehicle information terminal 300, the vehicle content data, and the vehicle application, the vehicle information terminal 300 requests the user to input the authentication information Ps (step). S100). At this time, for example, on the liquid crystal display of the vehicle information terminal 300, a screen for selecting whether to log in as an “owner account” or “general account” and authentication information Ps for the selected account are input. The field to be displayed is visible.

  Then, when communication with the account management server 100 is established, the vehicle information terminal 300 performs account management based on the authentication information Ps input to the input device 320 and the validity of the user and the corresponding account information Ac. The server 100 is inquired (step S101: YES, S102). As a result, when the account management server 100 can confirm the validity of the user, information indicating the authentication result and the corresponding account information Ac are transmitted from the account management server 100 to the vehicle information terminal 300. Based on the authentication result and the account information Ac transmitted from the account management server 100, the vehicle information terminal 300 logs in the user assuming that the user who performed the input operation on the input device 320 has a valid account. Admit. In this way, the vehicle information terminal 300 can make use of a function for which the account authorized to log in has authority (steps S103: YES, S104).

  On the other hand, when communication between the vehicle information terminal 300 and the account management server 100 is not established, the vehicle information terminal 300 uses the same authentication information as the authentication information Ps input by the user who has input the authentication information Ps at the previous login. It is checked whether the account information Ac corresponding to Ps is stored in the storage area 310 (step S101: NO, S110). When the vehicle information terminal 300 confirms that the corresponding authentication information Ps and account information Ac are stored in the storage area 310, the vehicular information terminal 300 allows the user to log in as having a valid account. In this way, the vehicle information terminal 300 makes it possible to use a function that is permitted to be used for an account that has been authenticated (steps S110: YES, S104). That is, in this case, the user who has requested the use of the vehicle information terminal 300 is the same person as the user who was permitted to log in at the time of the previous authentication, and has a proper use authority from the authentication history. It is determined that the user is a user.

  On the other hand, when communication between the vehicle information terminal 300 and the account management server 100 is not established, if the corresponding authentication information Ps and account information Ac are not stored in the storage area 310, the vehicle information terminal 300 first performs step S100. The authentication information Ps input at step S110 is stored in the storage area 310 (step S110: NO, S120). Then, the vehicle information terminal 300 requests the user to log in with the guest account so that the minimum necessary functions of the vehicle information terminal 300 can be used. Here, for example, on the liquid crystal display of the vehicle information terminal 300, a screen for guiding the login with the guest account and a column for inputting the authentication information Ps necessary for authentication of the guest account are visually displayed (step S121). . Then, for example, through reference to guest account authentication information Ps stored in advance in the portable information terminal 200 owned by the user, the user user provides the guest account authentication information Ps to the input device 320 of the vehicle information terminal 300. Entered.

Thus, the vehicle information terminal 300 verifies the validity of the user by comparing the authentication information Ps input by the user with the guest account authentication information Ps stored in the storage area 310 in advance. (Step S123). And if the information terminal 300 for vehicles can confirm a user's correctness through the collation of the authentication information Ps input by the user, he will log in with a guest account. In this way, the vehicle information terminal 300 can use the minimum necessary functions of the vehicle information terminal 300 (steps S123: YES, S124). After that, when communication between the vehicle information terminal 300 and the account management server 100 is recovered due to, for example, a change in the traveling environment of the car C, the vehicle information terminal 300 authenticates the regular account stored in the previous step S120. Information Ps is transmitted to the account management server 100 (step S125: YES, S126). When the validity of the transmitted authentication information Ps is confirmed by the account management server 100, the vehicle information terminal 300 uses the various functions of the vehicle information terminal 300, vehicle content data, and vehicle applications. The level is raised according to the regular account (step S127: YES, S128).

  In steps S103, S123, and S127, when the validity of the authentication information Ps input to the input device 320 cannot be confirmed, the functions of the vehicle information terminal 300 are determined that the user does not have a proper authority. The use of the vehicle content data and the vehicle application is restricted (step S130). As a result, unauthorized use of the vehicle information terminal 300 is suppressed.

  Thus, when the communication between the account management server 100 and the vehicle information terminal 300 is not established, the minimum necessary functions of the vehicle information terminal 300 can be used, and when those communications are restored, The account level is automatically changed through the switch to the account. Thereby, while restricting the usage level of the vehicle information terminal 300, the vehicle content data, and the vehicle application according to the account, the minimum necessary amount of the vehicle information terminal 300 when communication with the account management server 100 is not established. It becomes possible to guarantee the availability of functions.

Next, account switching processing by the authentication system and authentication method of the present embodiment will be described in detail with reference to FIG.
First, as shown in FIG. 6, at the time of user user authentication, it is determined whether or not the account for which authentication has been established is a guest account (step S200). In addition, it is determined whether or not the guest account belongs to a user who is different from the account for which the previous authentication was established (step S201). Note that this user determination is performed based on, for example, whether or not the authentication information Ps used in the previous authentication is different from the authentication information Ps used in the current authentication. As a result, if it is determined that the authenticated guest account is for a different user than the previous one, the previous authenticated account is a higher-level account than the guest account, ie, a “general account” or “owner account” Is determined (step S202).

  As a result, when it is determined that the account for which the previous authentication has been established is a “general account” or “owner account”, the account information Ac and the authentication information Ps of the account for which the previous authentication has been established stored in the storage area 310 are determined. Is invalidated or deleted (step S202: YES, S203). For this reason, unauthorized use of account information Ac and authentication information Ps at a higher level than that of a user who has been authenticated by the guest account is suppressed. This makes it possible to accurately maintain the range of usage authority assigned in advance according to the account. In addition, as a result, the usage range of the charged vehicle content data and the vehicle application that can be used in correspondence with the account can be restricted only to authorized users who have made a charge.

Then, when communication between the account management server 100 and the vehicle information terminal 300 that has been in a communication disabled state is restored, the vehicle information terminal 300 uses the account management Ac and the authentication information Ps regarding the account information Ac and the authentication information Ps that are invalidated or deleted. The server 100 is notified (step S204: YES, S205). For this reason, in the account management server 100, the possession state of the account information Ac and the authentication information Ps by the vehicle information terminal 300 can be managed accurately. The vehicle information terminal 300 then validates the account information Ac and the authentication information Ps once invalidated, for example, after logging out of the user who has logged in with the guest account, and notifies the account management server 100 to that effect. Alternatively, the vehicle information terminal 300 acquires again the account information Ac and the authentication information Ps once deleted from the account management server 100 and notifies the account management server 100 to that effect (steps S206: YES, S207). Therefore, even if communication between the vehicle information terminal 300 and the account management server 100 is not established again, a user who has the invalidated or deleted account information Ac and authentication information Ps once uses the vehicle information terminal 300. When it is used again, it becomes possible to log in with a legitimate account based on the validated or reacquired information.

  On the other hand, when it is determined that the account of a different user who has been authenticated last time is a guest account, the account information Ac and authentication information Ps of the different user who has been authenticated last time stored in the storage area 310 are temporarily stored. It is invalidated or deleted (step S202: NO, 210). Further, in this case, the operation history, the vehicle content data, the vehicle application activation history, and the like performed by the previous user on the vehicle information terminal 300 are deleted from the storage area 310 (step S211). Also in this case, after the user logged in with the guest account logs out, the account information Ac and authentication information Ps for the guest account once invalidated or deleted are held in the storage area 310 in a state where they can be used again. (Step S206: YES, S207). For this reason, emergency account information Ac and authentication information Ps are always held in the vehicle information terminal 300. Accordingly, through reference to the account information Ac and the authentication information Ps, the guest account can be authenticated by the vehicle information terminal 300 alone without depending on the communication state with the account management server 100.

The operation of the authentication system and authentication method of the present embodiment will be summarized below with reference to FIGS.
As shown in FIG. 7, for example, when the vehicle information terminal 300 is activated when the accessory position (ACC) of the automobile C is switched from the off state to the on state, first, in step S300, authentication of the portable information terminal 200 owned by the user is performed. The application is started. As a result, the unique information Ifa1 of the user is wirelessly transmitted from the portable information terminal 200 to the account management server 100.

  Next, the account management server 100 determines whether or not the unique information Ifa1 that matches the unique information Ifa1 transmitted from the portable information terminal 200 exists in the user account management table 110. Then, through the verification of the unique information Ifa1, the user who has transmitted the unique information Ifa1 is identified (step S301). In the account management server 100, the authentication information Ps and the account information Ac associated with the unique information Ifa1 that matches the unique information Ifa1 transmitted from the portable information terminal 200 are extracted from the user account management table 110 (step S302). ). The extracted authentication information Ps and account information Ac are distributed from the account management server 100 to the portable information terminal 200 that is the transmission source of the unique information Ifa1. The distribution of the authentication information Ps and the account information Ac is performed every time the unique information Ifa1 is transmitted from each portable information terminal 200 owned by each user who shares the vehicle information terminal 300, with the transmission source of each unique information Ifa1. This is performed for each portable information terminal 200.

Next, when the portable information terminal 200 receives the authentication information Ps and the account information Ac distributed from the account management server 100, the portable information terminal 200 associates the received authentication information Ps with the account information Ac received together with the authentication information Ps. Visually displayed on the display unit 250. The authentication information Ps visually displayed on the image display unit 250 is input to the input device 320 of the vehicle information terminal 300 by the user of the portable information terminal 200.

  In the vehicle information terminal 300, when the authentication information Ps is input, the communication state with the account management server 100 is determined (step S303). When the vehicle information terminal 300 determines that communication with the account management server 100 is possible, the vehicular information terminal 300 requests the account management server 100 to perform user account authentication (step S304). That is, the vehicle information terminal 300 transmits the authentication information Ps input to the input device 320 to the account management server 100.

  The account management server 100 refers to the user account management table 110 based on the authentication information Ps transmitted from the vehicle information terminal 300, thereby executing the user account authentication process (step S305). Next, the account management server 100 returns the authentication result and the corresponding account information Ac from the account management server 100 to the vehicle information terminal 300.

  The vehicle information terminal 300 permits login with the account requested by the user based on the authentication result distributed from the account management server 100 and the corresponding account information Ac (step S306). In addition, the vehicle information terminal 300 stores the account information Ac and authentication information Ps used for such authentication processing in the storage area 310 (step S307). Then, the vehicle information terminal 300 permits the use of the various functions of the vehicle information terminal 300, the vehicle content data, and the vehicle application according to the use authority permitted for the account permitted to log in.

  On the other hand, as shown in FIG. 8, when it is determined that communication between the account management server 100 and the vehicle information terminal 300 is not established, it matches the authentication information Ps input to the input device 320 of the vehicle information terminal 300. It is determined whether or not the authentication information Ps is stored in the storage area 310 of the vehicle information terminal 300 (steps S310 and S311). When the authentication information Ps that matches the authentication information Ps is stored in the storage area 310, the vehicular information terminal 300 determines that the user who has requested authentication has the right usage authority, and the account requested by the user. Allow login with.

  On the other hand, when the authentication information Ps that matches the authentication information Ps input to the input device 320 of the dual-purpose information terminal 300 does not exist in the storage area 310, the vehicle information terminal 300 inputs the guest account authentication information Ps. A request is made to the user of the portable information terminal 200. Then, if the validity of the guest authentication information Ps input to the input device 320 in response to this request can be confirmed, the vehicle information terminal 300 permits login with the guest account, and the vehicle information terminal 300 The use of the minimum necessary functions is permitted (step S320). After the login with the guest account, when the communication state between the vehicle information terminal 300 and the account management server 100 is recovered, the authentication information Ps stored in the storage area 310 in the previous step S307 is the vehicle information terminal 300. To the account management server 100. Next, the account management server 100 executes account authentication processing based on the authentication information Ps received from the vehicle information terminal 300 (step S330). Then, according to the authentication result, the vehicle information terminal 300 is allowed to log in with a regular account (step S331).

As described above, according to the authentication system and the authentication method of the present embodiment, the following effects can be obtained.
(1) The account management server 100 includes a user account management table 110 in which the account information Ac, authentication information Ps used for authentication of the account, license information ls, and identification information Ifa are associated with each other. When the communication between the account management server 100 and the vehicle information terminal 300 is established, the account management server 100 performs account authentication for the user. Further, when communication between the account management server 100 and the vehicle information terminal 300 is not established, the authentication information Ps stored in the storage area 310 and the authentication information Ps input to the input device 320 by the user are used for verification. It was decided to perform user account authentication. As a result, even when the account management server 100 manages the account information Ac and the authentication information Ps and the communication between the account management server 100 and the vehicle information terminal 300 is not established, the user information is used by the vehicle information terminal 300. You will be able to perform account authentication.

  (2) The account is hierarchized, and the account information Ac is configured as information indicating various functions of the vehicle information terminal 300 and hierarchical usage levels of the vehicle content data and the vehicle application. In addition, emergency guest account information is provided at the lowest layer, and guest authentication information necessary for authentication of the guest account information is provided. The guest account information and guest authentication information are used to authenticate an emergency guest account when the account authentication cannot be performed when communication is not established. Thereby, even if it is a case where although it is a regular use user and authentication with a regular account is not materialized, the availability of the minimum required function of the information terminal 300 for vehicles can be ensured.

  (3) When the communication between the vehicle information terminal 300 and the account management server 100 is restored after the authentication with the guest account is established, the account is re-authenticated based on the authentication information Ps once stored in the storage area 310. It was decided. For this reason, the functions of the vehicle information terminal 300, the contents data for the vehicle, and the use level of the application for the vehicle that are temporarily restricted are automatically changed from the minimum use level to the use level corresponding to the regular account. Will be improved. Thereby, while ensuring the availability of the minimum necessary functions of the vehicle information terminal 300 in an emergency, after the re-authentication, the functions of the vehicle information terminal 300 corresponding to the regular account, the vehicle content data, and The use of the vehicle application can be permitted. In addition, as described above, by requesting re-authentication with a legitimate account after the communication between the vehicle information terminal 300 and the account management server 100 is restored, it becomes possible to verify the legitimacy of the user, and the authentication system In addition, security as an authentication method is further improved.

  (4) When the authentication of the guest account based on the guest authentication information Ps is established, when the account information Ac and the authentication information Ps of another person whose use level is higher than that of the guest account are stored in the storage area 310, The account information Ac and the authentication information Ps are temporarily invalidated or deleted. Thus, when temporary use authority is given to the guest account for emergency use, the use authority is not unduly extended by an unauthorized operation of the user authenticated by the guest account.

  (5) When the authentication of the guest account based on the guest authentication information Ps is established, account information Ac and authentication information Ps of the user that is different from the guest account for which the authentication is established are stored in the storage area 310. At that time, the account information Ac and the authentication information Ps are temporarily invalidated or deleted. In addition, the operation history of the vehicle information terminal 300 based on the guest account logged in last time is deleted. As a result, when the vehicle information terminal 300 is shared by a plurality of users, usage authority and manageability of personal information are maintained while assigning guest accounts to a plurality of users.

  (6) When the account is logged out after the account information Ac and the authentication information Ps are temporarily invalidated, the invalidated account information Ac and the authentication information Ps are validated. Alternatively, when the account is logged out after deleting the account information Ac and the authentication information Ps, the deleted account information Ac and the authentication information Ps are obtained again from the account management server 100. As a result, even if the user of the vehicle information terminal 300 changes, the vehicle information terminal 300 can stably hold the account information Ac and authentication information Ps necessary for the authentication prior to the account authentication. Become.

  (7) In the user account management table 110 of the account management server 100, license information ls indicating the use authority for each of a plurality of different vehicle content data and vehicle applications, and identification information unique to each user using the service Ifa, account information Ac, and authentication information Ps are associated with each other and registered. For this reason, even if there are a plurality of vehicle content data and vehicle applications that are used in one vehicle information terminal 300, it is possible to authenticate usage authority in units of the vehicle content data and vehicle applications. Become.

  (8) The portable information terminal 200 having a wireless communication function with the account management server 100 is used as the information terminal. This makes it possible to authenticate use authority using a highly versatile information terminal such as a mobile phone or a smartphone, and as a result, enhances the versatility of the authentication system and the authentication method. In addition, as a result, a unique ID can be used for each portable information terminal 200 as the unique information Ifa1, and the license information ls based on the transmission of the unique ID can be obtained more easily. Furthermore, normally, the portable information terminal 200 such as a mobile phone or a smartphone tends to have a strong correlation with the owner. Therefore, when distributing the authentication information Ps and the account information Ac used for the authentication of the use authority from the account management server 100 to the portable information terminal 200, the authentication information Ps and the account information Ac are distributed only to legitimate users. It is also easy to do.

  (9) The identification information Ifa is generated as information in which the user name or user ID of the vehicle content data and the vehicle application is associated with the other unique information Ifa1 of the user. Then, the account management server 100 specifies a corresponding user based on the unique information Ifa1 transmitted from the portable information terminal 200, and extracts the corresponding authentication information Ps and account information Ac from the user account management table 110. It was. For this reason, it becomes possible to specify the user who has the said account from various directions. This makes it difficult to impersonate the user because the identification information Ifa associated with the authentication information Ps and the account information Ac is complicated as well as the authentication information Ps and the account information Ac are accurately acquired by the portable information terminal 200. As a result, the safety as an authentication system and an authentication method can be improved.

  (10) As the above service, the charged vehicle content data and the vehicle application distributed in advance from the application vendor server 400 are provided. For this reason, it becomes possible to permit the use of the vehicle content data and the vehicle application only to the user who has purchased the vehicle content data and the vehicle application from the application vendor in advance through account authentication. As a result, unauthorized use of the vehicle content data and the vehicle application permitted to be used on the condition that it has been charged is suppressed.

  (11) The vehicle information terminal 300 that is mounted on the automobile C and that provides vehicle content data or executes a vehicle application is used as the service use device. Accordingly, even when the car C and the vehicle information terminal 300 are shared by a plurality of users by car sharing or the like, the authority for using the vehicle content data and the vehicle application provided through the vehicle information terminal 300 is confirmed. Authentication can be performed easily and accurately.

  (12) The account management server 100 manages the account information Ac, authentication information Ps, and license information ls used for the authentication. For this reason, even if the portable information terminal 200 used for authentication of the usage authority is changed, it is only necessary to change the unique ID registered in the user account management table 110. Therefore, no change occurs in the authentication process on the vehicle information terminal 300 side.

In addition, the said embodiment can also be implemented with the following forms.
The vehicle content data and the vehicle application are distributed in advance from the application vendor server 400. However, the present invention is not limited to this, and the distribution of the vehicle content data and the vehicle application may be performed via a storage medium such as a CD, a DVD, or a removable memory.

  When the unique information Ifa1 is transmitted from the mobile information terminal 200 to the account management server 100, the corresponding account information Ac is extracted together with the corresponding authentication information Ps, and the extracted authentication information Ps and account information Ac are stored in the mobile information. Distribution to the terminal 200 is made. Then, the authentication information Ps and the account information Ac are displayed in correspondence with each other on the image display unit 250 of the portable information terminal 200. Not limited to this, the information exchanged between the account management server 100 and the portable information terminal 200 may be only the authentication information Ps, and if there is the authentication information Ps, the account authentication at the vehicle information terminal 300 is performed. I can.

  As the identification information unique to the user, the unique information Ifa1 such as the unique ID of the portable information terminal 200 and the driver's license number is transmitted from the portable information terminal 200 to the account management server 100. Not limited to this, both the user name or user ID and the unique information Ifa1 may be transmitted from the portable information terminal 200 to the account management server 100 as identification information unique to the user. Then, the authentication information Ps and the account information Ac may be extracted from the user account management table 110 based on the use user name or use user ID and the unique information Ifa1.

  As the identification information Ifa registered in the user account management table 110, information generated by associating the user name or user ID with the unique information Ifa1 is used. However, the present invention is not limited to this, and at least one of the user name, user ID, and unique information Ifa1 may be registered in the user account management table 110 as user-specific identification information Ifa. In short, the identification information may be information that can identify a user who has authority to use the vehicle content data and the vehicle application.

The authentication information Ps input to the input device 320 of the vehicle information terminal 300 is different from the invalidation or deletion of the account information Ac and the authentication information Ps used for the previous authentication stored in the storage area 310. We decided to do it based on whether or not. Not limited to this, for example, when the accessory position of the car C is turned on / off at a point where the transfer operation by the user of the car C for sharing is likely to be performed, such as a car sharing station, The account information Ac and the authentication information Ps may be invalidated or deleted. Moreover, you may make it register the home etc. of each user who owns the car C concerning sharing as a point which invalidates or deletes such account information Ac and authentication information Ps. In this case, for example, at the time of waiting for the car C at the registered user's home, the account information Ac and authentication information Ps regarding the “owner account” and “general account” of the user are received from the account management server 100 as vehicle information. You may make it deliver to the terminal 300. FIG. Thus, when a certain user uses the car C, the storage information 310 of the vehicle information terminal 300 surely holds account information Ac and authentication information Ps necessary for authentication of the user's account. Thus, account authentication based on the account information Ac and the authentication information Ps can be performed more smoothly. In addition, when distributing the account information Ac and the authentication information Ps at the user's home, in addition to the wireless communication function of the vehicle information terminal 300, the account management server via the power line communication, the home wireless LAN, etc. The authentication information Ps and account information Ac can also be distributed from 100 to the vehicle information terminal 300. In this case, the distribution of the authentication information Ps and the account information Ac to the vehicle information terminal 300 can be more reliably performed using various means.

  -Deletion of operation history, vehicle content data, and vehicle application startup history, etc. stored in the storage area 310 is performed when the account of a different user who has been authenticated last time is a guest account. . However, the present invention is not limited to this, and the various histories stored in the storage area 310 may be deleted uniformly regardless of the account levels of different users who have been authenticated last time.

  The account information Ac and authentication information Ps used for the previous authentication stored in the storage area 310 are invalidated or deleted only when the account level of the user who has been authenticated is a guest account. It was. Not limited to this, every time a user who has been authenticated changes, the account information Ac and authentication information Ps of other users stored in the storage area 310 are invalidated or deleted regardless of the account level. May be.

  The license information ls, account information Ac, authentication information Ps, and various histories are stored in the storage area 310 of the vehicle information terminal 300. Not limited to this, the storage area 310 may store only the account information Ac and the authentication information Ps. In this case, the use permission of the vehicle content data and the vehicle application in the vehicle information terminal 300 is performed based on the use authority indicated by the account information Ac.

  As shown in steps S125 to S128 in FIG. 5, when the communication between the vehicle information terminal 300 and the account management server 100 is restored after the authentication with the emergency guest account is established, the storage area 310 is temporarily stored. The use authority is re-authenticated based on the stored authentication information Ps. Not limited to this, even after the communication is restored, it is possible to maintain the login state with the guest account until a re-authentication request is received from the user.

  The authentication information for each guest used for the authentication of the guest account is stored in the portable information terminal 200 in advance. For example, simple authentication information such as the user name of each user may be set as guest authentication information, and the user may be notified of this authentication information in advance.

  The guest account is assigned to each user who shares the vehicle information terminal 300. Not limited to this, one guest account may be shared by each user.

  -Upon authentication of the guest account, the user authentication information Ps is requested from the user. The guest account is not limited to this, and any guest account may be used as long as it allows a user having a regular account to temporarily allow the minimum necessary functions of the vehicle information terminal 300, and authentication information is required when authenticating the guest account. You can not. In this case, the availability of the minimum necessary functions of the vehicle information terminal 300 in an emergency can be reliably ensured.

  ・ The above account was hierarchized into three stages: “Owner account”, “General account”, and “Guest account”. However, the present invention is not limited to this, and for example, it is possible to hierarchize in two stages of “owner account” and “guest account”, or hierarchize into four or more stages. Further, in authenticating the user based on the account, the “guest account” can be omitted and one type of account can be assigned to each user.

  Distribution of authentication information Ps and the like from the account management server 100 to the portable information terminal 200 and transmission of the authentication information Ps and the like from the vehicle information terminal 300 to the account management server 100 without being particularly encrypted; did. However, the present invention is not limited to this, and exchange of such authentication information Ps or the like may be performed by, for example, a public key cryptosystem. In this case, the security of the authentication information Ps necessary for account authentication is improved.

  The presentation of the authentication information Ps to the vehicle information terminal 300 through the portable information terminal 200 is performed as an input operation to the input device 320 of the vehicle information terminal 300. For example, the account management server 100 may include a two-dimensional code conversion unit that converts the authentication information Ps distributed to the portable information terminal 200 into a two-dimensional code such as a QR code. In addition, the vehicle information terminal 300 may include a vehicle-mounted camera that can identify the two-dimensional code. When the account is authenticated, the two-dimensional code distributed from the account management server 100 is displayed visually on the image display unit 250 of the portable information terminal 200. In this case, the vehicle information terminal 300 authenticates the account by imaging the two-dimensional code visually displayed on the image display unit 250 and presented by the user using an in-vehicle camera mounted on the automobile C. In this case, the effects (1) to (13) can be obtained, and security can be improved when the authentication information Ps used for the authentication of the account is distributed from the account management server 100 to the portable information terminal 200. As a result, the amount of information that can be transmitted is increased. In addition, since such a two-dimensional code can be easily handled by an information terminal such as a mobile phone or a smartphone, versatility as the authentication system and the authentication method can be improved. Similarly, the portable information terminal 200 is provided with a function for converting the authentication information Ps into a two-dimensional code, and the portable information terminal 200 converts the authentication information Ps distributed from the account management server 100 into a two-dimensional code. Good. In addition, presentation of the authentication information Ps from the portable information terminal 200 to the vehicle information terminal 300 may be performed by wireless communication or wired communication between the portable information terminal 200 and the vehicle information terminal 300.

Although the portable information terminal 200 is used as the information terminal, a personal computer may be used instead of the portable information terminal 200. In this case, when an operation for transmitting the identification information Ifa of the user is performed via the personal computer, the identification information Ifa is transmitted from the personal computer to the account management server 100 via the Internet or the like. When the user is identified by the account management server 100, the corresponding authentication information Ps and account information Ac are distributed to the personal computer. In this case, the authentication information Ps and the account information Ac received by the personal computer are converted to a format that can be presented to the vehicle information terminal 300 by being printed on a medium such as a membership card by a printer or the like. Is done. Even in this case, the user can acquire the account information Ac and authentication information Ps managed by the account management server 100 via the personal computer.

  -As the above services, a plurality of different vehicle content data and vehicle applications are provided. However, the service is not limited to this, and one type of vehicle content data or vehicle application may be provided. In this case, in the user account management table 110, license information ls indicating the use authority and identification information Ifa unique to each user of the service are associated with one vehicle content data or vehicle application. Will be registered. Accordingly, even when one vehicular content data or vehicular application provided via the vehicular information terminal 300 is used by a plurality of users, the use authority can be easily and accurately authenticated. .

  The authentication of the account is performed by the account management server 100 and the vehicle information terminal 300. However, the present invention is not limited to this, and the authentication of the account may be performed between the application vendor server 400 that distributes the vehicle content data and the vehicle application and the portable information terminal 200. In this case, the authentication information Ps and the account information Ac distributed from the account management server 100 to the portable information terminal 200 are transferred from the portable information terminal 200 to the application vendor server 400 through wireless communication or the like. Alternatively, the authentication information Ps and the account information Ac are directly distributed from the account management server 100 to the application vendor server 400. Then, the application vendor server 400 authenticates the account based on the received authentication information Ps and account information Ac, and distributes the vehicle content data or the vehicle application approved for use to the vehicle information terminal 300. Become.

  -As the service, various functions of the vehicle information terminal 300, vehicle content data, and a vehicle application are illustrated. Not limited to this, the service may be a charging service provided via a charging station as a use device used for charging an electric vehicle. In this case, the storage area 310, the input device 320, the in-vehicle authentication unit 330, the function management unit 360, and the like are mounted on the charging stand. Accordingly, even when the charging station is used by an unspecified number of users, it is possible to provide the charging service provided via the charging station only to users who have the authority to use the charging service.

  DESCRIPTION OF SYMBOLS 100 ... Account management server 110 ... User account management table 120 ... Account management server reception part 130 ... Information extraction part 140 ... Account management server transmission part 150 ... Server authentication part 200 ... Portable information terminal 210 DESCRIPTION OF SYMBOLS ... Operation part, 220 ... ID memory | storage part, 230 ... Transmitting part of a portable information terminal, 240 ... Receiving part of a portable information terminal, 250 ... Image display part, 300 ... Information terminal for vehicles, 310 ... Storage area, 320 ... Input device , 330: In-vehicle authentication unit, 340: Transmission unit of vehicle information terminal, 350 ... Reception unit of vehicle information terminal, 360 ... Function management unit, 400 ... Application vendor server, C ... Automobile.

Claims (15)

In a service usage right authentication system comprising an account management server for managing service usage rights and a device used for using the service,
The account management server includes account information indicating an account assigned to each user using the service, authentication information used for authentication of the account, license information indicating use authority of the service, and unique to each user using the service. And a user account management table that is registered in association with the identification information, and the authentication information associated with the identification information is received from the information terminal based on the reception of the identification information through the information terminal operated by the user using the service. Are delivered,
The utilization device has a storage area for storing at least the authentication information and the account information in association with the service, and the account using the authentication information presented via the information terminal when using the service Authenticate the corresponding account based on the inquiry result to the management server, store the authentication information and account information in the storage area, and when the communication with the account management server is not established, the presented authentication information and An authentication system that performs authentication of a corresponding account based on verification with authentication information stored in the storage area. The account information is information indicating a hierarchical usage level of the service or the use device,
The account information at the lowest level of the hierarchical usage level is an emergency information when the corresponding account information and authentication information do not exist in the storage area of the usage device when communication between the usage device and the account management server is not established. Information indicating the usage authority of the minimum necessary functions of the used device as the guest account of the user, and the authentication information includes authentication information for the guest corresponding to the guest account. Information indicating the right to use a limited function and guest authentication information are distributed in advance from the account management server to the user device and stored in the storage area,
The authentication system according to claim 1, wherein, when the emergency guest account is authenticated based on the guest authentication information, the user device can use a minimum necessary function of the user device. When the communication between the user device and the account management server is recovered after the authentication with the emergency guest account is established, the account of the account is based on the account information and authentication information of the user's regular account. The authentication system according to claim 2, wherein re-authentication is performed. The guest account and the guest authentication information are allocated separately for the user.
When the authentication of the guest account based on the guest authentication information is established, the use device stores account information and authentication information having a higher use level than the guest account in the storage area, and When the stored account information and authentication information belong to a user who is different from the authenticated guest account, the account information and authentication information stored in the storage area is invalidated or deleted. Item 4. The authentication system according to Item 2 or 3. The guest account and the guest authentication information are allocated separately for the user.
When the authentication of the guest account based on the guest authentication information is established, the use device stores, in the storage area, account information and authentication information related to the guest account of the use user different from the guest account for which the authentication is established. When it is, the account information and authentication information stored in the storage area are invalidated or deleted, and the operation history of the user device is deleted based on the guest account. The authentication system according to any one of the above. The service includes a plurality of different services, and the account management server includes license information indicating usage rights for each service, identification information unique to each user of the service, the account information, and corresponding authentication information. The authentication system according to any one of claims 1 to 5, wherein each is associated and registered in the user account management table. The said information terminal is a portable information terminal which has the radio | wireless communication function with the said account management server, and presents the said license information distributed to the utilization apparatus of the said service. Authentication system. The authentication system according to any one of claims 1 to 7, wherein the identification information is generated as information in which a use user name or use user ID of the service is associated with other unique information of the user. The authentication system according to any one of claims 1 to 8, wherein the service is charged content data or an application distributed in advance from the account management server or a dedicated vendor server. The authentication system according to claim 9, wherein the service using device is a vehicle information terminal that is mounted on an automobile and that provides vehicle content data or executes a vehicle application. In a method for authenticating use of a service using an account management server for managing use of the service and a device used for using the service,
The account management server includes account information indicating an account assigned to each user using the service, authentication information used for authentication of the account, license information indicating use authority of the service, and unique to each user using the service. A user account management table in which identification information is associated with each other and registered, and the usage device has a storage area for storing at least the authentication information and the account information in association with the service;
Distributing the associated authentication information to the information terminal based on the reception of the identification information through the information terminal operated by the user using the service, and presenting the information through the information terminal when using the service A step of authenticating the corresponding account based on a result of inquiry to the account management server using the authentication information, and a step of storing the authentication information and the account information used in the step of authenticating the account in the storage area And when the communication with the account management server is not established, the corresponding account is authenticated based on the verification between the presented authentication information and the authentication information stored in the storage area in the step of storing in the storage area. An authentication method characterized by comprising the steps of: The account information is information indicating a hierarchical usage level of the service or the use device,
The account information at the lowest level of the hierarchical usage level is an emergency information when the corresponding account information and authentication information do not exist in the storage area of the usage device when communication between the usage device and the account management server is not established. Including information indicating the use authority of the minimum necessary functions of the device used as a guest account, and the authentication information includes guest authentication information corresponding to the guest account,
The step of authenticating the corresponding account when the communication is not established includes the step of making it possible to use the minimum necessary functions of the user device when the emergency guest account authentication based on the guest authentication information is established. The authentication method according to claim 11, further comprising: When the communication between the user device and the account management server is recovered after the authentication with the emergency guest account is established, the account of the account is based on the account information and authentication information of the user's regular account. The authentication method according to claim 12, further comprising a step of performing re-authentication. The guest account and the guest authentication information are allocated separately for the user.
When authentication of the guest account based on the guest authentication information is established, account information and authentication information having a higher usage level than the guest account are stored in the storage area and the account stored in the storage area The method further includes the step of invalidating or deleting the account information and the authentication information stored in the storage area when the information and the authentication information belong to a user who is different from the authenticated guest account. 14. The authentication method according to 12 or 13. The guest account and the guest authentication information are allocated separately for the user.
When authentication of the guest account based on the guest authentication information is established, when account information and authentication information related to the guest account of the user who is different from the guest account for which the authentication is established are stored in the storage area, The method further includes the step of invalidating or deleting the account information and authentication information stored in the storage area and deleting the operation history of the user device based on the guest account. The authentication method according to claim 1.

Images