JP2013142916A - Authentication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an authentication system capable of preventing pranks and spoofing while using user terminal IDs such as telephone numbers.SOLUTION: An authentication system selects and outputs a new access ID from a group of IDs for communicating with a data processing unit 5, which performs authentication, via a user terminal 9 every time a request is made, and associates access ID outputting means 8 with the selected specific access ID and stores the association in a storage unit 6. When there is an access to the data processing unit 5 with one ID of the group of access IDs, the system acquires the accessing user terminal ID, determines whether or not the one access ID is the specific access ID and the acquired user terminal ID is the pre-registered user terminal ID, outputs the determination result, and dissolves the association between the access ID outputting means and the specific access ID at a prescribed timing so as not to keep the access ID permanently valid.

Description

  The present invention relates to an authentication system in a place where authentication is required, such as opening / closing of an entrance / exit of an apartment house or a building.

Conventionally, as an authentication system, such as determining who is allowed to enter or exit at an entrance / exit provided with an electric lock, the authentication device stores in advance an authentication ID for a user who is permitted to unlock a specific electric lock. It is known that when a card ID storing an authentication ID is read via a dedicated input device, it is determined whether or not it is a previously stored ID.
Such a system requires a card in which an authentication ID is stored. It takes time and money to issue the card, and authentication is not possible if the user forgets to carry the card.

On the other hand, what uses user terminals, such as a mobile telephone, is known instead of the said user authentication ID.
Specifically, the mobile phone number of the user authorized to unlock is registered in advance in the authentication server, and when the user accesses the server by telephone, the mobile phone number used for access is registered. A telephone number is specified, and this telephone number is authenticated against a telephone number registered in advance.
In this way, if the user's mobile phone number is used as an ID, the user does not need to carry a dedicated authentication card or the like in which the authentication ID is recorded, and a device that reads the ID from the card around the entrance / exit. There is no need to provide them individually.

JP 2009-263892 A JP 2011-094468 A

In the above-described authentication system using a mobile phone, the user can be authenticated and the electric lock can be unlocked simply by calling the authentication server with the mobile phone.
However, since the authentication server can be called from anywhere, any user registered in advance can call the server and unlock the electric lock from anywhere. Therefore, even if the registered user is not near the entrance / exit where the electric lock is provided, the registered user can unlock the electric lock any number of times. This makes it possible for people other than registered users to enter and exit.

Further, even an unauthorized user other than a regular user registered in advance can make a call if he / she knows the telephone number of the authentication server. Of course, even if an unauthorized user makes a call to the authentication server with his / her mobile phone, the user is not authenticated. For example, the electric lock is not unlocked.
However, if unauthorized users continue to make phone calls to the above phone numbers, the telephone line for accessing the authentication server is in use, and legitimate users can call the authentication server. There was also a problem of not.
Moreover, since the user authentication is based on the condition that only the telephone number of the user terminal matches the registered number, the security against impersonation of an unauthorized user is low.

  An object of the present invention is to provide an authentication system that uses the ID of a user terminal such as a telephone number to improve the convenience of the user and is less likely to be mischievous or impersonated and has improved security.

  According to a first aspect of the present invention, there is provided a data processing unit, a storage unit linked to the data processing unit and storing an access ID group including a plurality of telephone numbers or mail addresses for accessing the data processing unit, and the data processing unit And an access ID output means for outputting the access ID transmitted from the unit.

  The data processing unit specifies an arbitrary access ID from the access ID group and transmits it to the access ID output means on condition that a request signal for requesting a specific access ID is input. A function, a function of associating the specific access ID and the access ID output means in association with each other and storing them in the storage unit, and the data using one access ID in the access ID group from a specific user terminal When there is a communication to the processing unit, the user terminal ID with which the communication was made is acquired, the one access ID is the specific access ID, and the acquired user terminal ID is registered in advance. A function for determining whether or not the registered terminal ID is a user terminal ID, a function for outputting the determination result, and the access ID selected as the access ID. A function for canceling the correspondence between the access ID output means stored in the storage unit and the specific access ID at a preset timing after output to the output means. And

Note that the data processing unit may specify any procedure for specifying an arbitrary access ID from the access ID group. For example, one access ID can be selected at random, or one access ID can be specified according to a predetermined procedure.
The access ID is output based on the input of the request signal, but the access ID is not limited to when the request signal is input. For example, a new access ID may be specified every fixed time, and when a request signal is input, the access ID specified at that time may be output.

The second invention is based on the first invention, and is connected to the data processing unit and includes a control unit for controlling a control target, and the data processing unit outputs the determination result to the control unit. With functionality,
The control unit includes a function of controlling a control target based on a determination result of the data processing unit.

  The third invention is based on the second invention and is characterized in that the control object is an electrical opening / closing mechanism, and the access ID output means is provided integrally with or close to the electrical opening / closing mechanism.

The fourth invention is based on the second invention, and is a content server including a content storage unit in which the control target stores one or more contents, and the data processing unit outputs one or more access IDs. A means is connected, and an output means ID for identifying an access ID output means is stored in the storage section linked to the data processing section.
The data processing unit includes a registered terminal ID, in which communication from a specific user terminal is the specific access ID, and the acquired user terminal ID is a user terminal ID registered in advance. When it is determined that they match, together with the determination result, either one or both of the user terminal ID or the output means ID corresponding to the user terminal ID is output to the control unit, and the control unit Based on the result, together with the control signal for operating the content server, either one or both of the user terminal ID or the output means ID corresponding to the user terminal ID is output to the content server. The server uses either one or both of the output means ID and the user terminal ID output from the data processing unit. It selects content from the content storage unit Zui, characterized by comprising a function to output the selected content.

In the first aspect of the invention, the user authentication is not limited to the coincidence between the user terminal ID of the user terminal and the registered terminal ID, but the specific ID output by the user to the access ID and access ID output means used for communication. Since the access IDs match and the user terminal ID and the registered terminal ID match, the security is higher than when only the user terminal ID is used.
Moreover, the access ID associated with the user terminal ID of the user terminal is newly output every time an access ID is requested, and its validity has a time limit.
That is, when a user seeking authentication communicates with the data processing unit, the access ID output to the access ID output means must be used within the validity period, and even if the user is registered, Authentication cannot be requested many times using an access ID that has been obtained once.
As described above, since the access ID of the keys used for authentication changes every time, the security is further improved.
In addition, since the effective access ID for communicating with the data processing unit is not fixed, unauthorized users cannot concentrate access and disturb legitimate users.

According to the authentication systems of the second to fourth inventions, the control target can be controlled according to the determination result by the authentication method with high security as described above.
In the third aspect of the invention, the electrical opening / closing mechanism is an object to be controlled, and the access ID output means is provided integrally with or near the electrical opening / closing mechanism. Therefore, in order to access the data processing unit, the user must be in the vicinity of the electrical switching mechanism. That is, it becomes impossible to open / close only the electrical opening / closing mechanism at a location away from the entrance / exit provided with the electrical opening / closing mechanism.
Therefore, it is possible to reliably prevent an unregistered user from entering and exiting an entrance / exit provided with an electrical opening / closing mechanism, and to prevent the registered user from opening and closing the electrical switching device.

  According to the fourth invention, content can be provided to an authenticated user. In particular, the content server may provide content related to the installation location of the access ID output means based on the output means ID, or may provide content for a specific user based on the user terminal ID. it can.

FIG. 1 is a block diagram of an authentication system according to the first embodiment. FIG. 2 shows an example of data stored in advance in the storage unit in association with the registered terminal ID and the access ID request unit in the first embodiment. FIG. 3 is an example of data in which the access ID selected by the data processing unit is associated with the data shown in FIG. FIG. 4 is a block diagram of an authentication system according to the second embodiment. FIG. 5 is an example of data stored in the storage unit of the second embodiment. FIG. 6 is an example of data in which the access ID selected by the data processing unit is associated with the data shown in FIG. FIG. 7 is a block diagram of an authentication system according to the third embodiment. FIG. 8 is an example of data stored in the box control device of the third embodiment.

1st Embodiment shown in FIGS. 1-3 controls the electric lock 2 provided in the door 1 using the authentication system of this invention. And the said electric lock 2 is an electrical opening / closing means which is a control object of this invention.
As shown in FIG. 1, this system includes a center server 3, which includes a control unit 4 that controls the electric lock 2, a data processing unit 5 connected to the control unit 4, and a storage. Part 6. The center server 3 is installed at a location different from the door 1 such as the administrator side of the authentication system of this embodiment.

On the other hand, an ID request button 7 for outputting an access ID request signal of the present invention and an ID display display 8 serving as an access ID output means are provided in the vicinity of the door 1. The ID request button 7 and the ID display 8 are connected to the data processing unit 5 of the center server 3.
In the first embodiment, the ID request button 7 and the ID display 8 are associated with the electric lock 2 on a one-to-one basis, and the correspondence is registered in the storage unit 6 of the center server 3 in advance. It shall be. Therefore, the correspondence between the three can be specified from any of the ID request button 7, the ID display display 8, and the electric lock 2.
In this authentication system, when a previously registered user communicates with the data processing unit 5 using his / her user terminal 9, the data processing unit 5 is based on the user terminal ID of the user terminal 9. Then, the user is authenticated, and the control unit 4 unlocks the electric lock 2 based on the authentication result.

The authentication system according to the first embodiment will be described in detail below.
The storage unit 6 of the center server 3 stores an access ID group that can access the data processing unit 5 of the center server 3.
The access ID is an ID required when the user terminal 9 such as a mobile phone used by the user communicates with the center server 3, and is a telephone number or a mail address. In the first embodiment, the user terminal 9 is a mobile phone, and the access ID is a telephone number of the data processing unit 5.
However, the user terminal 9 is not limited to a mobile phone, and may be a mobile terminal having a mail function. When communication from the user terminal 9 to the data processing unit 5 is performed by electronic mail, the mail address of the data processing unit 5 is the access ID of the present invention.

The storage unit 6 uses a telephone number which is a user terminal ID of a user terminal 9 used by a user who is permitted to unlock the electric lock 2 as a registered terminal ID, and the registered terminal ID and the unlocked information. The button number of the ID request button 7 installed in the vicinity of the permitted electric lock 2 is stored in association with each other.
As described above, in addition to the correspondence between the ID request button 7 and the ID display display 8, the storage unit 6 includes the ID request button 7 and the ID display display 8 and the electric lock 2 to be controlled. Correspondence relationships are also stored in advance. Therefore, instead of associating the registration terminal ID with the ID request button 7 as shown in FIG. 2, the registration terminal ID may be associated with the ID display display 8 or the electric lock 2 in the storage unit 6.

  The correspondence between the button numbers stored in the storage unit 6 and the registered terminal IDs is not limited to one-to-one correspondence, and a plurality of registered terminal IDs can be associated with one button number. That is, it is possible to permit a plurality of users to enter and exit from one door 1. For example, as shown in FIG. 2, the storage unit 6 is permitted to unlock the electric lock 2 corresponding to the ID request button 7 at a1, a2, a3,. , Y1, y2, y3,... That are registered user IDs are stored in association with each other. Here, two registered terminal IDs y1 and y2 are assigned to one button number a1. Corresponds.

In FIG. 1, only one electric lock 2 is connected to the control unit 4 of the center server 3, but any number of electric locks 2 may be controlled by the control unit 4. Also in the first embodiment, the center server 3 is connected to a plurality of electric locks 2 (not shown) and an ID request button 7 and an ID display display 8 facing each electric lock 2.
Further, when a specific user can unlock the electric locks 2 of different doors 1, the storage unit 6 stores a plurality of button numbers in association with one registered terminal ID. I will let you.

The ID request button 7 has a function of transmitting an access ID request signal to the data processing unit 5 when it is pressed.
The ID display 8 has a function of displaying the access ID transmitted from the data processing unit 5 in response to the access ID request signal.

Next, a procedure for controlling the electric lock 2 based on the authentication of a specific user will be described focusing on the function of the data processing unit 5.
First, when the user presses the ID request button 7 in the vicinity of the door 1, an access ID request signal is transmitted from the ID request button 7 to the data processing unit 5. When the access ID request signal is input, the data processing unit 5 uses the access ID request signal as a trigger, and randomly selects one access ID, for example, s1 that is an access ID, from the access ID group stored in the storage unit 6.

The data processing unit 5 transmits s1 as the selected specific access ID to the ID display display 8 corresponding to the ID request button 7, and the ID display display 8 displays the received access ID s1. .
Further, the data processing unit 5 associates the specific access ID s1 with the ID request button 7, and registers the registered terminal ID associated with the ID request button 7, the ID request button 7, and the access. The correspondence relationship of the three parties with ID s1 is stored in the storage unit 6.

  When the ID request button 7 has the button number a1, as shown in FIG. 3, a table in which s1 as the access ID is associated with the button number a1 of the ID request button 7 associated with the registered terminal ID is stored. Is done. Here, the button number a1 of the ID request button 7 is associated with two registered terminal IDs y1 and y2. In the table of FIG. 3, the data corresponding to the button number a1 is described in a row. However, the storage unit 6 stores the correspondence between the three of the button number a1, the registered terminal ID y1, and the access ID s1. And the correspondence relationship between the three of the button number a1, the registered terminal ID y2, and the access ID s1.

On the other hand, the user who previously pressed the ID request button 7 makes a call using the user terminal 9 to s1 that is the specific access ID displayed on the ID display 8.
Here, it is assumed that the user terminal ID which is the telephone number of the user terminal 9 is y1, and this ID is stored in the storage unit 6 as a registered terminal ID.
In this way, when a call is made from the user terminal 9 to the access ID s1, the data processing unit 5 specifies y1 that is the user terminal ID of the user terminal 9 that has been called, and the access ID is used. It is determined whether or not the correspondence between a certain s1 and the user terminal ID y1 matches the correspondence between the selected access ID registered in the storage unit 6 and the registered terminal ID.

Specifically, it is determined whether or not there is data in which the specific access ID s1 is associated with the registered terminal ID y1 in the table shown in FIG.
When the data processing unit 5 determines that the correspondence relationship is the same, as a determination result, the data processing unit 5 sends a command signal for controlling the unlocking of the electric lock 2 corresponding to the button number a1 corresponding to the ID to the control unit 4. Output.

As described above, the fact that the registered terminal ID y1 is associated with the specific access ID s1 in the table of FIG. 3 is used when the user communicates with the data processing unit 5. The access ID is s1 which is the specific access ID, and the user terminal ID used for communication is the registered terminal ID. That is, the user is authenticated.
The control unit 4 controls the unlocking of the electric lock 2 based on the command signal input from the data processing unit 5.

  The data processing unit 5 deletes the data associated with the access ID s1 from the storage unit 6 after determining the correspondence. That is, in this first embodiment, the time when the correspondence between the user terminal ID and the access ID is determined is the correspondence between the selected one access ID and the access request means or access output means in the present invention. This is a preset timing for canceling, and thereafter, even if this selected one access ID is used, no authentication is performed. As a result, the access ID once acquired cannot be used many times.

However, the timing for canceling the correspondence relationship is not limited to the determination time point.
For example, after the data processing unit 5 transmits the selected access ID to the access ID output means such as the ID display 8, the correspondence relationship may be canceled when a certain time has elapsed. In this way, even when the user requests an access ID and does not communicate using the user terminal 9, the selected access ID does not function effectively indefinitely. Can be.

As described above, in the authentication system of the first embodiment, the user changes the access ID for accessing the data processing unit 5 of the center server 3 every time, thereby improving the accuracy of authentication and increasing the security. be able to.
In particular, since the ID button 7 and the ID display 8 are provided in the vicinity of the door 1, it is possible to prevent the electric lock 2 from being unlocked and unlocked from a place away from the door 1.

In the first embodiment, the ID request button 7 serving as the access ID requesting unit and the ID display display 8 serving as the access ID output unit are individually provided. However, they may be integrated. For example, a device such as a touch panel monitor that doubles as an access ID requesting unit and an access ID output unit can be used.
In the first embodiment, the electric lock 2 constitutes the electric opening / closing mechanism of the present invention. However, instead of the electric lock 2, an automatic door may be controlled by the control unit 4 as an electric opening / closing mechanism. it can.

  Further, when the mobile phone is used as a door key as in the first embodiment, the function as the key can be stopped only by stopping the mobile phone function. For example, even if a mobile phone is dropped, if the telephone function is stopped, the person who picks it up cannot be used illegally. If the key that directly unlocks the lock on the door is lost, all keys must be exchanged together with the door lock to prevent unauthorized use. This is not necessary in the system of the first embodiment.

The second embodiment illustrated in FIGS. 4 to 6 is an authentication system in which the control target is the content server 10.
The content server 10 includes a content data processing unit 11 and a content storage unit 12, and the content selected from the content storage unit 12 based on a command signal from the control unit 4 of the center server 3 is displayed on the display 13. It has a function to display.
And the system of this 2nd Embodiment provides a content via the specific display 13 with respect to the user registered previously.
In addition, the same code | symbol as FIG. 1 is used for the same component as the said 1st Embodiment.

In the system of the second embodiment, the center server 3 includes a data processing unit 5, a control unit 4, and a storage unit 6, and the data processing unit 5 includes an ID request button 7 serving as an access ID requesting unit and a display 13. And connected. Each component of the center server 3 and the ID request button 7 function in the same manner as in the first embodiment, and thus detailed description thereof is omitted.
However, the display 13 has a function of displaying the content transmitted from the content server 10 as well as a function as an access ID output means of the present invention, and is provided in the vicinity of the corresponding ID request button 7 and its correspondence relationship. Is stored in the storage unit 6.

In FIG. 4, only one ID request button 7 and one display 13 are displayed, but a plurality of ID request buttons 7 and display 13 (not shown) are provided.
The storage unit 6 stores an access ID group in the same manner as in the first embodiment, and includes a button number that is a request means ID for identifying each request button 7, each button number, and the display 13. The correspondence is also memorized.

Further, the storage unit 6 stores a registered terminal ID including a telephone number of the user terminal 9 registered in advance in association with the display number (see FIG. 5).
As described above, in the second embodiment, the registered terminal ID is associated with the display number of the display 13 serving as the access ID output means, but the registered terminal ID is associated with the ID request button 7 as in the first embodiment. You may do it.

The data processing unit 5 of the second embodiment functions in the same manner as the data processing unit 5 of the first embodiment to authenticate the user. Then, based on the determination result, the content server 10 is controlled to transmit the content to the specific display 13, and the procedure will be described below.
First, when a user who wants to display content on a specific display 13 presses an ID request button 7 provided adjacent to the display 13, an access ID request signal is transmitted to the data processing unit 5.

The data processing unit 5 uses the input of the access ID request signal as a trigger to specify one access ID at random from the access ID group stored in the storage unit 6 and uses it as an access ID output means for the display 13 is transmitted. The display 13 displays the received specific access ID, for example, the access ID s1.
The data processing unit 5 has a function of specifying which ID request button 7 is a source of the access ID request signal when the access request signal is input. The specified ID request button The selected access ID is transmitted to the display 13 corresponding to 7.

  Further, the data processing unit 5 stores the data shown in FIG. 6 in which the specific access ID transmitted to the display 13 is associated with the corresponding display number, for example, b1 and the registered terminal ID, for example, y1. Store in unit 6.

On the other hand, the user who has previously pressed the ID request button 7 makes a call to the center server 3 using the user terminal 9 to the specific access ID s1 displayed on the ID display 13.
Here, it is assumed that the user terminal ID which is the telephone number of the user terminal 9 is y1, and this user terminal ID is registered in the storage unit 6 as a registered terminal ID.
In this way, when a call is made from the user terminal 9 to the access ID s1, the data processing unit 5 specifies y1 that is the user terminal ID of the user terminal 9 that has been called, and the access ID is used. It is determined whether or not the correspondence between a certain s1 and the user terminal ID y1 matches the correspondence between the selected access ID registered in the storage unit 6 and the registered terminal ID.

The determination procedure is the same as in the first embodiment, and when the data processing unit 5 determines that the correspondence relationship matches, that is, the access ID used when the user communicates with the data processing unit 5 is the same. When the user terminal ID used for communication is the specific access ID and the registered terminal ID, the display number is displayed together with a command signal for displaying content on the display number b1 corresponding to the access ID. b1 is output to the control unit 4.
Then, the control unit 4 outputs a control signal based on the command signal input from the data processing unit 5 to the content data processing unit 11 of the content server 10. This control signal includes a display number b1 for specifying the display 13.

  The content data processing unit 11 of the content server 10 that has received this control signal transmits the content to the display 13 specified by the input display number b1. At this time, the content data processing unit 11 can select and transmit content corresponding to the installation location of the specific display 13 from the content storage unit 12. However, when content corresponding to the installation location of the display 13 is transmitted in this way, the content storage unit 12 of the content server 10 needs to store the content associated with the installation location of each display 13. .

Further, after the data processing unit 5 authenticates the user, the registered terminal ID of the user together with the control signal may be output to the content server 10 via the control unit 4. If the content server 10 stores the attribute information of the registered user in advance in association with the registered terminal ID, the content data processing unit 11 selects and transmits the content according to the attribute information of the registered user. You can also.
Further, both the display number and the registered terminal ID are transmitted to the content server 10, and the content data processing unit 11 selects and outputs the content corresponding to both the display number and the registered terminal ID. You can also
As described above, in the system according to the second embodiment, it is possible to provide content according to the installation location of the display 13 and the user.

Furthermore, the data processing unit 5 transmits the selected one access ID s1 to the display 13, and then associates the access ID s1 with any set timing. Is deleted from the storage unit 6.
Thereby, also in this 2nd Embodiment, it becomes impossible to use access ID acquired once many times, and can raise the precision of authentication.

In the second embodiment, the display 13 for displaying content also serves as the access ID output means of the present invention. However, an access ID output means different from the display 13 may be provided.
Further, a button for transmitting an access ID request signal may be displayed on the display 13 so that the display 13 serves as an access ID requesting unit and an access ID output unit.
Further, in addition to the display 13 for displaying the content, a device such as a touch panel monitor serving as an access ID requesting unit and an access ID output unit may be used.

  In the first and second embodiments, one center server 3 includes the data processing unit 5, the storage unit 6, and the control unit 4, but the data processing unit 5, the storage unit 6 and the control unit 4 are respectively Individual devices may be used, or these may be connected via communication means.

The third embodiment shown in FIG. 7 is a system that is installed at the entrance of an apartment house such as a condominium and performs authentication for unlocking the delivery box 14 for temporarily storing delivered packages.
In the third embodiment, the same reference numerals as those in FIG. 1 are used for the same components as those in the first embodiment, and the detailed description thereof is omitted.
The delivery box 14 is partitioned into a plurality of units, and each unit is provided with a door and an electric lock. A box control device 15 for controlling the locking and unlocking of these electric locks is connected to the delivery box 14.
The third embodiment is also a system in which the center server 3 including the data processing unit 5, the storage unit 6, and the control unit 4 authenticates the user, and the control unit 4 based on the determination result. The controlled object controlled by the control signal is the box control device 15.

The delivery box 14 is provided with a monitor 16 connected to the box control device 15.
The monitor 16 is a touch panel monitor having a function of data input / output means of the box control device 15, and can input necessary information to the box control device 15 through the monitor 16.
The box control device 15 has a function of storing data input via the monitor 16 in addition to a function of locking and unlocking each unit of the delivery box 14.

  The monitor 16 also serves as an access ID requesting unit and an access ID output unit, and is also connected to the data processing unit 5 via the box control device 15. Accordingly, when the access ID request button displayed on the monitor 16 is touched, an access ID request signal is input to the data processing unit 5 and a specific access ID output from the data processing unit 5 is displayed on the monitor 16. It will be.

The procedure for using the delivery box 14 in the system of the third embodiment will be described below.
Here, a case where a package addressed to a resident in room 101 is placed in a delivery box unit with unit number c1 will be described as an example.
When delivering the package, the delivery company puts the package in the unit number c1 and inputs the correspondence between the unit number c1 and the room number 101 via the monitor 16. This data is stored in the box management device 15 as a table shown in FIG.
After the data input, the delivery company puts a slip stating that the package has been put into the delivery box into the mailbox of the 101 room. Alternatively, the residents in room 101 are notified that the package has been delivered by telephone or e-mail. This is the end of the work of the delivery company.

The user of the present invention who is a resident of the 101 room who has returned home transmits an access ID request signal to the data processing unit 5 of the center server 3 using the monitor 16.
The data processing unit 5 identifies one access ID from the access ID group stored in the storage unit 4 and displays it on the monitor 16 in the same manner as in the other embodiments, and monitors this specific access ID. 16 or the box control device 15 and stored.

The user uses the user terminal 9 to make a call to the center server 3 using a telephone number that is a specific access ID stored in the monitor 16.
It is assumed that the user terminal ID of the user is registered in advance in the storage unit 6 in association with the monitor 16 as a registered terminal ID. However, in the third embodiment, since the monitor 16 corresponds to the box control device 15, the registration terminal ID can be registered in association with the box control device 15.

  As described above, when a call is made from the user terminal 9, the data processing unit 5 specifies the user terminal ID of the user terminal 9 that has been called, and the access ID used for this communication is the monitor 16 first. Whether the user terminal ID matches the registered terminal ID associated with the monitor 16 or not. This determination procedure is the same as that in the first embodiment, and the data processing unit 5 determines that the correspondence relationship between the access ID and the user terminal ID matches the specific access ID and the registered terminal ID. The determination result is output to the control unit 4.

However, the data control unit 5 not only determines the user terminal ID of the user terminal 9 that has made the call, but also the room number of the user of the user terminal ID and the registration terminal. The specific information of the monitor 16 corresponding to the ID is also output to the control unit 4.
When the terminal ID of the user terminal is registered as the registered terminal ID in association with the monitor 16 in the storage unit 4, the room number of the user is also stored in association with it.
Therefore, the control unit 4 transmits an unlocking command specifying the room number to cause the box control device 15 to unlock the unit corresponding to the room number input from the data processing unit 5.

Receiving the unlock signal, the box control device 15 specifies a unit number corresponding to the room number specified by the unlock signal from the table shown in FIG. 8 registered by the delivery company, and unlocks the unit. Lock. The user can now receive his / her parcels.
When the data storage unit 5 of the center server 3 determines that the authentication condition is satisfied, the specific access ID and the registered terminal ID are output after a predetermined time has elapsed, for example, after the determination result is output to the control unit 4. The correspondence with is canceled.
The box control device 16 also deletes the correspondence data between the unit number and the room number when the specific unit is unlocked.

The authentication system of the third embodiment can also perform authentication using the user terminal 9 without requiring a card or the like for releasing each unit of the delivery box 14. In addition, since the access ID for communicating with the data processing unit 5 is changed each time, it is difficult to be tampered with, and the specific access ID is used as an authentication key, so that the security is improved accordingly.
If the registered terminal ID registered in the storage unit 4 is individually registered even in the same family, it is possible to accept and receive the parcels addressed to individuals, and it is possible to keep secrets between families.

In the third embodiment, when the delivery company puts the package in the delivery box 14, the data specifying the unit number is registered in the box control device 15 provided on the delivery box 14 side. Data may be stored in the storage unit 6 of the center server 3, or the storage unit 4 may be provided outside the center server 3.
The system for controlling the delivery box 14 can be applied to, for example, a coin locker management system, a hotel rental room management system, and a guest room in an apartment house.

  Then, when it is desired to temporarily prohibit entry / exit of a room provided with a door that opens and closes using the authentication system, the data processing unit 5 stops the process of outputting a specific access ID to the access ID output means for a certain period of time. Good. Even if the access ID request signal is input, the data processing unit 5 can simply close the door or the like during the period only by not outputting the specific access ID.

Although the said 1st-3rd embodiment is the authentication system which outputs the determination result which authenticated the user with respect to the control part 4, and controls a specific control object according to the result, The function of the control unit 4 may be provided in the data processing unit 5, and the data processing unit 5 may directly output a control signal corresponding to the determination result to the control target.
Furthermore, the control target controlled using the authentication system of the present invention is not limited to the above embodiment. For example, it can be used for authentication when using a bank cash dispensing apparatus or a net banking system, and each apparatus can be controlled based on the determination result.

  The output destination from which the data processing unit 5 outputs the determination result is not limited to the control unit 4 or the control target, and may be anywhere. For example, a system that outputs to a display or a printer and displays or prints the determination result of the data processor 5 and does not control a specific control target is also included in the authentication system of the present invention.

  The authentication system of the present invention can be used in various situations where authentication is required.

2 Electric Lock 3 Center Server 4 Control Unit 5 Data Processing Unit 6 Storage Unit 7 ID Request Button 8 ID Display Display 9 User Terminal 10 Content Server 11 Content Data Processing Unit 12 Content Storage Unit 13 Display 15 Box Control Device 16 Monitor

Claims (4)

A data processing unit, a storage unit linked to the data processing unit and storing an access ID group including a plurality of telephone numbers or mail addresses for accessing the data processing unit, and an access transmitted from the data processing unit Access ID output means for outputting an ID;
The data processing unit specifies an arbitrary access ID from the access ID group and transmits it to the access ID output means on condition that a request signal for requesting a specific access ID is input. And a function for storing the specific access ID and the access ID output means in association with each other and storing them in the storage unit, and using one access ID in the access ID group from a specific user terminal. When there is a communication to the data processing unit, the user terminal ID with which the communication was made is acquired, the one access ID is the specific access ID, and the acquired user terminal ID is registered in advance. A function for determining whether or not the registered terminal ID is a user terminal ID, a function for outputting the determination result, and the one access ID selected as the access ID. After outputting against the force means, the authentication system at a preset timing, and a function to eliminate the correspondence between the access ID output means and said particular access ID which the storage unit is stored.   The control unit is connected to the data processing unit and controls a control target, the data processing unit has a function of outputting the determination result to the control unit, and the control unit determines the data processing unit. The authentication system of Claim 1 provided with the function to control a control object based on a result.   The authentication system according to claim 2, wherein the control target is an electrical opening / closing mechanism, and the access ID output means is provided integrally with or close to the electrical opening / closing mechanism.   The control target is a content server including a content storage unit that stores one or a plurality of contents. The data processing unit is connected to one or a plurality of access ID output means and linked to the data processing unit. The storage unit stores an output unit ID for identifying the access ID output unit, and the data processing unit transmits the communication from the specific user terminal with the specific access ID and the acquired use. When it is determined that the user terminal ID matches the registered terminal ID, which is a user terminal ID registered in advance, along with this determination result, either the user terminal ID or the output means ID corresponding to the user terminal ID or A function of outputting both to the control unit, and the control unit operates the content server based on the determination result. And either one or both of the user terminal ID and the output means ID corresponding to the user terminal ID are output to the content server, while the content server is output from the data processing unit The authentication system according to claim 2, further comprising a function of selecting content from the content storage unit based on one or both of output means ID and user terminal ID, and outputting the selected content.

Images