JP2017062644A - Authentication device and authentication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an authentication device and an authentication system capable of dynamically changing authentication information while improving security.SOLUTION: A sensor device is a device that stores information collected by the sensor while associating with time segments, and while being carried by a user, the sensor device accumulates the collection information based on actions of the user. The authentication device compares a piece of new collection information which is newly read by the sensor device and a piece of a previously collected information stored by the authentication device to thereby performs an authentication whether or not the new collection information has authenticity. When the authenticity of the new collection information is confirmed, the authentication device completes the authentication successfully, and permits the user to use the devices and the services which require the authentication.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an authentication device and an authentication system.

  Recently, IT systems are widely used in daily life, and many user authentication methods have been devised. For example, in a method using an IC chip (Integrated Circuit Chip), user authentication information is stored in an IC chip mounted on a card or device. The user can omit the conventional input of ID and password by using the card or device for authentication. An example of a technique for preventing unauthorized login when authentication information is copied is an authentication system described in Patent Document 1.

Japanese Patent No. 4372093

  However, the system described in Patent Document 1 uses a method of replacing authentication information stored in an IC chip each time authentication is performed. For this reason, when using the method of updating authentication information from the outside like the system of patent document 1, it is necessary for the apparatus used for authentication to be writable, and there is a risk of destroying information in the apparatus from outside. There was sex.

  Therefore, the present invention has been made in view of the above problems, and an object of the present invention is to perform authentication using information collected by the device itself used for authentication while improving security. It is an object of the present invention to provide a new and improved authentication device and authentication system.

  In order to solve the above-described problem, according to an aspect of the present invention, a storage unit that stores collection information collected by a sensor device in association with a time segment, and collection information associated with the time segment from the sensor device are stored. Based on a comparison between the acquisition unit to be acquired, the collection information acquired by the acquisition unit, and the collection information stored in the storage unit in association with the same time segment as the collection information acquired by the acquisition unit An authentication device is provided that includes an authentication unit that performs authentication.

  The collected information may include user activity information.

  The collected information may include user step information.

  In the authentication unit, the step count information associated with the time segment including the previous authentication start time stored in the storage unit includes the previous authentication start time in the step count information acquired by the acquisition unit. When exceeding the step count information associated with the same time segment as the time segment, the authenticity of the step count information acquired by the acquisition unit may be denied and authentication may be failed.

  The authentication unit denies the authenticity of the step count information acquired by the acquisition unit when the step count information acquired by the acquisition unit does not include step count information associated with a time segment including a start time of authentication. May fail.

  The authentication unit stores each of all the step count information except the step count information associated with the time segment including the previous authentication start time among the step count information acquired by the acquisition unit, and is stored in the storage unit. When the step information associated with the same time segment as each of all the step information is not the same among all the step information, the authenticity of the step information acquired by the acquisition unit is denied and authentication is failed. Also good.

  When the step count information acquired by the acquisition unit deviates from a setting range, the authentication unit may deny the authenticity of the step count information acquired by the acquisition unit and cause the authentication to fail.

  The setting range may be determined by step count information associated with a time segment and environment information.

  When the authentication unit recognizes the authenticity of the step information acquired by the acquisition unit and succeeds in authentication, the authentication unit updates the step number information stored in the storage unit with the step information acquired by the acquisition unit. May be.

  In order to solve the above problems, according to another aspect of the present invention, a sensor unit including one or more sensors, and collected information collected by the sensor unit are stored in association with time divisions and identification information. A storage unit, a storage unit that stores the collection information collected by the sensor device in association with a time segment, an acquisition unit that acquires the collection information associated with the time segment from the sensor device, and An authentication system comprising: an authentication unit that includes an authentication unit that performs authentication based on a comparison between the acquired collected information and the collected information stored in association with the same time segment as the acquired collected information Is provided.

  As described above, according to the present invention, it is possible to perform authentication using information collected by the apparatus itself used for authentication while improving security.

It is explanatory drawing which shows the outline | summary of the authentication system which concerns on embodiment of this invention. It is a block diagram which shows the function structure of the sensor apparatus which concerns on the same embodiment. It is a block diagram which shows the function structure of the authentication apparatus which concerns on the same embodiment. It is an example of the step count information memorize | stored in the authentication apparatus which concerns on the embodiment. It is an example of the step number information of the sensor apparatus which succeeds in authentication according to the embodiment. It is an example of the step number information of the sensor apparatus that violates the first condition according to the embodiment. It is an example of the step count information of the sensor apparatus that violates the second condition according to the embodiment. It is an example of the step information of the sensor apparatus which violates the 3rd condition concerning the embodiment. It is a flowchart which shows the authentication step which concerns on the same embodiment. It is a figure which shows the step count information after the authentication success of the authentication apparatus which concerns on the embodiment. It is explanatory drawing which shows the analysis of the step count information which concerns on the embodiment. It is a block diagram which shows the hardware structural example of the sensor apparatus which concerns on the same embodiment. It is a block diagram which shows the hardware structural example of the authentication apparatus which concerns on the same embodiment.

  Exemplary embodiments of the present invention will be described below in detail with reference to the accompanying drawings. In addition, in this specification and drawing, about the component which has the substantially same function structure, duplication description is abbreviate | omitted by attaching | subjecting the same code | symbol.

<1. Embodiment of the Invention>
{1-1. Schematic configuration of authentication system}
First, a schematic configuration of an authentication system according to an embodiment of the present invention will be described with reference to FIG. FIG. 1 is an explanatory diagram showing an overview of an authentication system according to an embodiment of the present invention.

  As shown in FIG. 1, the authentication system according to the embodiment of the present invention includes a sensor device 100, a terminal 300 to which a short-range wireless reception device 200 is connected, and an authentication device 500.

  An authentication system according to an embodiment of the present invention is characterized in that a device provided with a sensor is used as an authentication target device for authentication. For example, a wearable device, a smartphone, or the like provided with an acceleration sensor, a gyro sensor, or the like can be defined as the sensor device 100 according to the embodiment of the present invention. In FIG. 1, a watch-type wearable device is shown as an example of the sensor device 100, but any portable device provided with a sensor is used as the sensor device 100 according to the embodiment of the present invention. be able to. The sensor device 100 is a device that stores the collected information collected by the sensor in association with a time segment, and accumulates collected information based on the user's behavior by being carried by the user. The collection information collected by the sensor device 100 is read by the short-range wireless reception device 200 connected to the terminal 300. Here, the short-range wireless reception device 200 is a reader that reads collected information from the sensor device 100 using short-range wireless communication, and the terminal 300 is an information terminal that controls the operation of the short-range wireless reception device 200. obtain. The collected information read by the short-range wireless reception device 200 is transmitted to the authentication device 500 via the network 400. The authentication device 500 includes collection information newly read from the sensor device 100 (hereinafter also referred to as new collection information) and past collection information read from the same sensor device 100 stored in the authentication device 500 (hereinafter referred to as the previous time). (Also referred to as collection information) and authentication is performed to determine whether the new collection information has authenticity. When the authenticating apparatus 500 recognizes the authenticity of the newly collected information, the authenticating apparatus 500 succeeds in authenticating and permits the user to use an authenticating apparatus or an authentication service that is not shown.

  Here, the short-range wireless reception device 200 may be directly connected to the authentication device 500 without going through the terminal 300 and the network 400. Further, the short-range wireless reception device 200 may be provided as a member constituting the authentication device 500.

  Further, the network 400 may include a public line network such as the Internet, a telephone line network, a satellite communication network, various LANs (Local Area Network) including Ethernet (registered trademark), a WAN (Wide Area Network), and the like. The network 400 may also include a dedicated line network such as an IP-VPN (Internet Protocol-Virtual Private Network).

  The authentication required apparatus may include various information processing apparatuses including a PC (Personal Computer), a smartphone, a printer, and the like, and an unlocking apparatus that manages entrance / exit and opening / closing permission. The authentication-required service may include an IT service provided in an on-premises type or a cloud type, or a single sign-on system for making resources on a plurality of computers available.

{1-2. Functional configuration of sensor device 100}
Next, a functional configuration of the sensor device according to the embodiment of the present invention will be described with reference to FIG. FIG. 2 is a block diagram showing a functional configuration of the sensor device according to the embodiment of the present invention.

  The sensor device 100 is a device that stores collection information collected by a sensor in association with a time segment, and can be defined as any device that includes one or more sensors. For example, it may be a mobile phone including a wearable device or a smartphone. The sensor device 100 may be an information processing device such as a portable music playback device or a portable game device.

  As shown in FIG. 2, the sensor device 100 mainly includes a sensor unit 110, a storage unit 120, and a communication unit 130.

(Sensor unit 110)
The sensor unit 110 includes one or more sensors and collects information according to the type of sensor. The information collected by the sensor unit may be, for example, activity amount information associated with the user activity. When the collected information is user activity amount information, the sensor unit 110 includes an acceleration sensor, a gyro sensor, a pulse sensor, and the like. At this time, the activity amount information may include user step count information, pulse information, sleep information, and the like. The collected information may be environment information that depends on the environment in which the sensor device 100 is placed. When the collected information is environmental information, the sensor unit 110 includes a barometric sensor, an optical sensor, a microphone, and the like. At this time, the environmental information may include altitude information, ultraviolet information, noise information, and the like.

(Storage unit 120)
The storage unit 120 has a function of storing the collected information collected by the sensor unit 110 in association with the time segment. For example, the time divisions may be set continuously in the same time width, such as every day or every 6 hours. When the time division is determined by date, the collected information collected by the sensor unit 110 is aggregated every day and stored in the storage unit 120. FIG. 5 shows an example of collected information stored in the storage unit 120. In this example, a date is used as the time division. In the example shown in FIG. 5, the collection information indicating the number of steps of 8732 steps is associated with the time division on August 1st. The method of using the collected information shown in FIG. 5 will be described later in the description of the authentication method according to the embodiment of the present invention. Further, the time divisions may be set discontinuously with different time widths such as 3 hours from 9:00 am to 12:00 am and 5 hours from 1:00 pm to 6:00 pm. When the time division is determined as described above, the collected information may be aggregated for each designated time width, and the collected information collected outside the designated time may be discarded.

(Communication unit 130)
The communication unit 130 has a function of extracting the collected information associated with the time segment stored in the storage unit 120 and transmitting the same together with the identification information of the sensor device 100. The transmission may be performed using short-range wireless communication. At this time, NFC (Near Field Communication), Bluetooth (registered trademark), RFID (Radio Frequency IDentification), or the like may be used for short-range wireless communication. The transmission may be performed using a network such as a wired or wireless LAN.

{1-3. Functional configuration of authentication device 500}
Next, a functional configuration of the authentication apparatus according to the present embodiment will be described with reference to FIG. FIG. 3 is a block diagram showing a functional configuration of the sensor device according to the embodiment of the present invention.

  The authentication device 500 is an information processing device that compares new collection information with previous collection information and performs authentication to determine whether the new collection information has authenticity. As illustrated in FIG. 3, the authentication device 500 mainly includes an acquisition unit 510, a storage unit 520, an authentication unit 530, and a communication unit 540.

(Acquisition unit 510)
The acquisition unit 510 has a function of newly acquiring the collection information associated with the identification information of the sensor device 100 and the time section and transmitting the collected information to the authentication unit 530. If the acquisition unit 510 fails to acquire new collection information, the acquisition unit 510 may return error information to the terminal 300 that is the transmission source.

(Storage unit 520)
The storage unit 520 has a function of storing collected information associated with the identification information of the sensor device 100 and the time segment. The storage unit 520 may be a database that stores collection information associated with the identification information of the sensor device 100 and the time segment. The database may be generated for each collection information content and time segment setting. FIG. 4 shows an example of collected information stored in the storage unit 520. In this example, a date is used as the time division. In the example shown in FIG. 4, collected information indicating 8732 steps is associated with the time segment on August 1st. A method of using the collected information shown in FIG. 4 will be described later in the description of the authentication method according to the embodiment of the present invention.

(Authentication unit 530)
The authentication unit 530 has a function of comparing the newly collected information with the previously collected information and performing authentication to determine whether the newly collected information has authenticity. When the authenticating unit 530 recognizes the authenticity of the newly collected information and succeeds in the authentication, the authenticating unit 530 updates the previously collected information with the newly collected information. That is, the authentication unit 530 performs a process of writing the collection information newly collected by the sensor device 100 from the time when the previous authentication is successful to the time when the current authentication is started into the storage unit 520. A detailed authentication method will be described later with an example.

(Communication unit 540)
The communication unit 540 has a function of transmitting the result of authentication by the authentication unit 530 to an authentication required apparatus or an authentication required service. In addition, when the authentication result is unsuccessful, the communication unit 540 may transmit a command for transmitting a warning mail, a command for starting recording of a security camera, or the like to an information processing device that controls each function. Transmission is performed via a wired or wireless network.

  Heretofore, examples of functions of the sensor device 100 and the authentication device 500 according to the present embodiment have been shown. Each component described above may be configured using a general-purpose member or circuit, or may be configured by hardware specialized for the function of each component. In addition, a calculation device such as a CPU (Central Processing Unit) calls a control program that realizes the function of each component from a storage medium such as a ROM (Read Only Memory) or a RAM (Random Access Memory), and interprets the program. May be executed. In the present embodiment, the configuration to be used can be changed as appropriate according to the technical level at the time of implementation.

{1-4. Detailed description of authentication method}
Next, the authentication method according to the embodiment of the present invention will be described in detail with reference to FIGS. Here, step number information is used as an example of collected information collected by the sensor device 100 and a date is used as an example of a time segment, but the present invention is not limited to such an example. The collected information may be pulse information, and the time segment may be every 12 hours. As the collection information and time division according to the embodiment of the present invention, any collection information collected by the sensor device 100 and any time division arbitrarily set can be used.

  FIG. 4 is an example of step count information stored in the storage unit 520 of the authentication device 500. As illustrated in FIG. 4, the storage unit 520 stores step count information associated with a date. Although not shown in the drawing, the identification information of the sensor device 100 may be held in each record, or may be held in a header. In the following description, it is assumed that each record in FIGS. 4 to 8 holds the same identification information.

  The authentication unit according to the embodiment of the present invention compares the newly collected information with the previously collected information, performs authentication, and if the authentication is successful, updates the previously collected information with the newly collected information, To do. Specifically, the authenticity of the newly collected information is authenticated based on the following three conditions.

(First condition)
The first condition is that the collection information associated with the time segment including the authentication start time exists in the new collection information. That is, in this example, it can be said that there is a step count information record on the authentication day in the new step count information. The authentication unit according to the present invention compares the new step count information with the previous step count information to perform authentication, and therefore prevents unauthorized access due to the copied new step count information when the entire authentic new step count information is copied. Means are needed. The first condition is one of means for preventing the unauthorized access. Even when the step count information is illegally copied, the sensor device 100 newly stores the step count information by being carried by a legitimate user. For this reason, when the step count information used for authentication is the regular step count information collected by the sensor device 100, it is assumed that the step count information includes the step count information on the day of authentication. On the other hand, the illegal copy data cannot satisfy the first condition except on the day of copying unless new data is added. In addition, when trying to newly add step count information on the day, it is necessary to accurately recognize the data specification of the step count information, so that it is difficult to create data. As described above, the first condition can eliminate unauthorized access by authentication information illegally copied before the previous day.

(Second condition)
The second condition is that new collection information associated with a time segment older than the time segment including the authentication start time at the time of successful previous authentication completely matches the previous collection information associated with the same time segment. is there. That is, in this example, the new step information from August 1 to August 4, which is a date older than August 5, which is the previous successful authentication date, completely matches the previous step information of the same date, I can say that. In this case, the authentication method according to the embodiment of the present invention has a feature that the previous step information is updated with the new step information when the authentication is successful, and the first step is a step information record on the current day, which is the first condition. Therefore, it can be determined that the latest date of the previous step count information is the previous authentication date. The second condition aims to prevent unauthorized access by authentication information forged from zero. In order to forge the authentication information from scratch, it is necessary to recognize the authentication method according to the embodiment of the present invention and the data specification of the identification information. However, even if the authentication method according to the embodiment of the present invention and the data specification of the identification information are leaked to a malicious third party, by providing the second condition, the step information of the authentication device 500 and Unauthorized access due to inconsistent forged data can be prevented. As described above, unauthorized access due to authentication information forged from zero can be eliminated by the second condition.

(Third condition)
The third condition is that the value of the new collection information is equal to or greater than the value of the previous collection information when comparing the collection information associated with the time division including the authentication start time when the previous authentication was successful in the new collection information and the previous collection information. It is. That is, in this example, when comparing the number of steps on August 5, which is the previous successful authentication date, it can be said that the number of steps in the new number of steps information is greater than or equal to the number of steps in the previous steps information. As described in the first condition, even when the step count information is illegally copied, the sensor device 100 newly stores the step count information by being carried by a legitimate user. For this reason, when authenticating a plurality of times on the same day using regular step count information, it is assumed that the number of step count information on the day of authentication increases every time the authentication is performed. On the other hand, the illegal copy data does not increase the step count information on the day of copying unless the data is processed. The third condition focuses on an increase in the number of steps information during the same day. When the step number information of the sensor device 100 is illegally copied, the authorized user succeeds in authentication using the step number information on the day of authentication that has increased from the time when the step number information was copied, after the time when the step number information was copied. Unauthorized copy data does not satisfy the third condition. As described above, by the third condition, it is possible to limit the unauthorized access by the authentication information illegally copied on the day of authentication until the legitimate user performs the authentication again.

  Hereinafter, the above three conditions will be described with specific examples. Here, it is assumed that the date of authentication is August 7th. The new step count information includes step count information from August 1 to August 7, and the previous step count information includes at least step count information from August 1 to August 5. Suppose that In this example, the new step count information includes step count information for seven days, but the new step count information may include step count information for an arbitrary number of days.

  FIG. 5 is an example of new step count information when authentication is successful. First, the first condition will be described while confirming new step count information. Referring to FIG. 5, there is a step count information record on August 7, which is the day of authentication. Therefore, it can be said that the new step count information shown in FIG. 5 satisfies the first condition. Next, the second condition will be described while comparing the new step count information and the previous step count information. Referring to FIGS. 4 and 5, the number of steps from August 1 to August 4, which is older than August 5, which is the previous certification date, is completely different between the new step information and the previous step information. Match. Therefore, it can be said that the new step count information shown in FIG. 5 satisfies the second condition. Furthermore, the third condition will be described while comparing the new step count information and the previous step count information. Referring to FIGS. 4 and 5, on August 5, which is the previous successful authentication date, the number of steps in the new step count information is equal to or greater than the number of steps in the previous step count information. Therefore, it can be said that the new step count information shown in FIG. 5 satisfies the third condition.

  FIG. 6 is an example of new step count information that violates the first condition. Referring to FIG. 6, it can be seen that there is no step count information record for August 7, which is the day of authentication. For this reason, the new step count information shown in FIG. 6 does not satisfy the first condition. At this time, the authentication unit 530 of the authentication device 500 denies the authenticity of the new step count information and causes the authentication to fail.

  FIG. 7 is an example of new step count information that violates the second condition. Referring to FIGS. 4 and 7, the number of steps on August 4 older than August 5 which is the previous successful authentication date does not match between the new step count information and the previous step count information. For this reason, the new step count information shown in FIG. 7 does not satisfy the second condition. At this time, the authentication unit 530 of the authentication device 500 denies the authenticity of the new step count information and causes the authentication to fail.

  FIG. 8 is an example of new step count information that violates the third condition. Referring to FIGS. 4 and 8, on August 5, which is the previous successful authentication date, the number of steps in the new step count information is less than the number of steps in the previous step count information. For this reason, the new step count information shown in FIG. 8 does not satisfy the third condition. At this time, the authentication unit 530 of the authentication device 500 denies the authenticity of the new step count information and causes the authentication to fail.

{1-5. Flow of authentication method}
Next, with reference to FIG. 9, the authentication step according to the embodiment of the present invention will be described. FIG. 9 is a flowchart showing the flow of the authentication method according to the embodiment of the present invention.

  First, the acquisition unit 510 of the authentication device 500 acquires new step count information (S600). When the acquisition is completed normally, the acquisition unit 510 transmits the new step count information to the authentication unit 530. Upon receiving the new step count information, the authentication unit 530 determines whether the data format of the new step count information is valid (S610). When the data format of the new step count information is not valid (S610: NO), the authentication unit 530 denies the authenticity of the new step count information and fails the authentication (S665).

  On the other hand, when the data format of the new step count information is valid (S610: YES), the authentication unit 530 determines whether the new step count information satisfies the first condition (S620). Here, when the new step count information does not satisfy the first condition (S620: NO), the authentication unit 530 denies the authenticity of the new step count information and causes the authentication to fail (S665).

  When the new step count information satisfies the first condition (S620: YES), the authentication unit 530 calls the previous step count information (S630). Although not shown, when the previous step information having the same identification information as the new step information does not exist in the storage unit 520, the authentication unit 530 denies the authenticity of the new step information and fails the authentication ( S665). However, in the case of an exception such as initial authentication after user registration, the authentication unit 530 may move to a process of successful authentication (S660) without determining the second and third conditions. After calling the previous step count information, the authentication unit 530 compares the new step count information with the previous step count information, and determines whether the new step count information satisfies the second condition (S640). When the new step count information does not satisfy the second condition (S640: NO), the authentication unit 530 denies the authenticity of the new step count information and causes the authentication to fail (S665).

  When the new step count information satisfies the second condition (S640: YES), the authentication unit 530 determines whether the new step count information satisfies the third condition (S650). When the new step count information does not satisfy the third condition (S650: NO), the authentication unit 530 denies the new step count information authenticity and causes the authentication to fail (S665).

  On the other hand, when the new step count information satisfies the third condition (S650: YES), the authentication unit 530 recognizes the authenticity of the new step count information and succeeds in authentication (S660). At this time, the authentication unit 530 updates the previous step count information with the new step count information. That is, the authentication unit 530 updates the step count information in the storage unit 520 with the step count information of the sensor device 100 (S670), and ends the process.

  Next, update of the step count information stored in the storage unit 520 of the authentication device 500 will be described with reference to FIGS. 4, 5, and 10. When the number of steps information stored in the storage unit 520 at the start of authentication has the contents shown in FIG. 4 and the number of steps information acquired from the sensor device 100 has the contents shown in FIG. In order to satisfy all the third conditions, the authentication unit 530 recognizes the authenticity of the new step count information and makes the authentication successful. At this time, the authentication unit 530 updates the step count information in the storage unit 520 with the step count information acquired from the sensor device 100. FIG. 10 shows the updated step count information in the storage unit 520. When the step count information before update shown in FIG. 4 is compared with the step count information after update shown in FIG. 10, the step count information for August 6 and August 7 is newly inserted in the updated step count information. I understand that. It can also be seen that the step count information on August 5 has been updated with the step count information of the sensor device 100 shown in FIG.

{1-6. Setting additional conditions}
Although not shown in FIG. 9, in the authentication according to the embodiment of the present invention, an additional condition can be set in addition to the above-described authentication step. Hereinafter, setting of additional conditions will be described.

(Fourth condition)
The fourth condition that can be set as the additional condition is that the new step count information is a value within a predetermined setting range. When the new step count information deviates from the setting range, the authentication unit 530 denies the authenticity of the new step count information and causes the authentication to fail. The setting range can be arbitrarily determined according to the type of collected information and the setting of the time section. For example, when the number of steps information per day exceeds 100,000 steps, the authentication unit 530 determines that the number of steps is significantly greater than the number of steps collected by normal behavior, and that the possibility of forgery is high. You may deny the authenticity of the information. Further, when the pulse rate for one minute is less than 40, the authentication unit 530 determines that the pulse rate is significantly lower than the average pulse rate of healthy adults, and therefore it is highly likely that the pulse has been counterfeited. You may deny sex. According to the fourth condition, an abnormal value included in the collected information can be detected, and the authenticity of the newly collected information can be determined more strictly.

(Determining the setting range based on the analysis result of collected information)
The setting range used for the fourth condition may be determined based on the result of analyzing past collection information. Hereinafter, determination of the setting range based on the analysis of the collected information will be described with reference to FIG.

  FIG. 11 shows the step count information stored in the storage unit 520 of the authentication device 500. In this example, the step count information is stored in association with day information and weather information in addition to the date. Referring to FIG. 11, December 3, December 9, and December 10 in which the weather is rain or snow may tend to have fewer steps than other dates that are sunny or cloudy. Recognize. At this time, the authentication unit 530 may determine an upper limit value of the number of steps as a fourth condition for the number of steps on a rainy or snowy day. The upper limit value of the number of steps may be an average number of steps calculated from the number of steps on a sunny or cloudy day. Thus, the tendency of the step information depending on the weather is analyzed, and the setting range used for the fourth condition can be determined based on the obtained result. Further, referring to FIG. 11, it can be seen that Friday, December 5 and December 12, tend to have more steps than other days of the week. At this time, the authentication unit 530 may determine a lower limit value of the number of steps as a fourth condition for the number of steps on a day of the week that tends to have a large number of steps. The lower limit value of the number of steps may be an average number of steps calculated from the number of steps on other days of the week. Thus, the tendency of the step count information depending on the day of the week is analyzed, and the setting range can be determined based on the obtained result.

  The setting range may be determined based on a result obtained from analysis of collected information acquired from a single sensor device 100, or determined based on a result obtained from analysis of collected information acquired from a plurality of sensor devices 100. May be. The setting range may be determined individually for each sensor device 100, or may be determined in common for a plurality of sensor devices 100. As described above, by setting a setting range based on the analysis result of collected information, authentication according to the characteristics of an individual or a group can be performed.

<2. Hardware configuration example>
Next, a hardware configuration example of the sensor device 100 and the authentication device 500 according to the embodiment of the present invention will be described with reference to FIGS. 12 and 13. FIG. 12 is a block diagram illustrating a hardware configuration example of the sensor device 100 according to the embodiment. FIG. 13 is a block diagram illustrating a hardware configuration example of the authentication device 500 according to the embodiment.

(Sensor device 100)
First, an example of the configuration of the sensor device 100 will be described. Referring to FIG. 12, the sensor device 100 includes, for example, a short-range wireless communication unit 131, a geomagnetic sensor 111, an acceleration sensor 112, a gyro sensor 113, an atmospheric pressure sensor 114, an optical sensor 115, and a temperature / humidity sensor 116. A CPU (Central Processing Unit) 141, a ROM (Read Only Memory) 142, a RAM (Random Access Memory) 143, an operation unit 144, a display unit 145, a decoder 146, a speaker 147, an encoder 148, And a microphone 117 and a storage unit 121. Note that the hardware configuration shown here is an example, and some of the components may be omitted. The hardware configuration of the sensor device 100 according to the embodiment of the present invention may further include components other than the components shown here.

(Short-range wireless communication unit 131)
The short-range wireless communication unit 131 is a communication device for realizing short-range wireless communication, and may be configured by NFC, Bluetooth (registered trademark), RFID, or the like, for example.

(Geomagnetic sensor 111)
The geomagnetic sensor 111 is a sensor that detects geomagnetism as a voltage value. The geomagnetic sensor 111 may be a triaxial geomagnetic sensor that detects geomagnetism in the X axis direction, the Y axis direction, and the Z axis direction. The geomagnetic sensor 111 can supply the detected geomagnetic data to the CPU 141.

(Acceleration sensor 112)
The acceleration sensor 112 is a sensor that detects acceleration as a voltage value. The acceleration sensor 112 may be a three-axis acceleration sensor that detects acceleration along the X-axis direction, acceleration along the Y-axis direction, and acceleration along the Z-axis direction. The acceleration sensor 112 can supply the detected acceleration data to the CPU 141.

(Gyro sensor 113)
The gyro sensor 113 is a kind of measuring instrument that detects the angle and angular velocity of an object. The gyro sensor 113 may be a three-axis gyro sensor that detects a speed (angular speed) at which the rotation angle around the X axis, the Y axis, and the Z axis changes as a voltage value. The gyro sensor 113 can supply the detected angular velocity data to the CPU 141.

(Atmospheric pressure sensor 114)
The atmospheric pressure sensor 114 is a sensor that detects ambient atmospheric pressure as a voltage value. The atmospheric pressure sensor 114 can detect atmospheric pressure at a predetermined sampling frequency and supply the detected atmospheric pressure data to the CPU 141.

(Optical sensor 115)
The optical sensor 115 is a sensor that detects electromagnetic energy such as light. The optical sensor 115 can supply electromagnetic energy data such as detected light to the CPU 141.

(Temperature and humidity sensor 116)
The temperature / humidity sensor 116 is a sensor that detects ambient temperature and humidity. The temperature / humidity sensor 116 can supply the detected temperature and humidity data to the CPU 141.

(CPU 141)
The CPU 141 functions as an arithmetic processing device and a control device, and controls the overall operation in the sensor device 100 according to various programs. The CPU 141 may be a microprocessor. The CPU 141 can realize various functions according to various programs.

(ROM142, RAM143)
The ROM 142 can store programs used by the CPU 141, calculation parameters, and the like. The RAM 143 can temporarily store programs used in the execution of the CPU 141, parameters that change as appropriate during the execution, and the like.

(Operation unit 144)
The operation unit 144 has a function of generating an input signal for a user to perform a desired operation. The operation unit 144 includes an input unit for a user to input information, such as a touch sensor, a button, a microphone, and a switch, and an input control circuit that generates an input signal based on an input by the user and outputs the input signal to the CPU 141. It's okay.

(Display unit 145)
The display unit 145 is an example of an output device, and may be a display device such as a liquid crystal display (LCD) device or an organic light emitting diode (OLED) display device. The display unit 145 can provide information by displaying a screen to the user.

(Decoder 146, speaker 147)
The decoder 146 has a function of performing decoding and analog conversion of input data under the control of the CPU 141. The decoder 146 can perform decoding and analog conversion of the input audio data and output an audio signal to the speaker 147. The speaker 147 can output audio based on the audio signal supplied from the decoder 146.

(Encoder 148, microphone 117)
The encoder 148 has a function of performing digital conversion and encoding of input data under the control of the CPU 141. The encoder 148 can perform digital conversion and encoding of an audio signal input from the microphone 117 and output audio data. The microphone 117 can collect sound and output it as a sound signal.

(Storage unit 121)
The storage unit 121 is a device for storing data, and includes a storage medium, a recording device that records data on the storage medium, a reading device that reads data from the storage medium, and a deletion device that deletes data recorded on the storage medium. Can be included. Here, examples of the storage medium include flash memory, MRAM (Magnetorological Random Access Memory), FeRAM (Ferroelectric Random Access Memory), PRAM (Phase Change Random Access Memory), and PRAM (Phase Change Random Access Memory). Or a magnetic recording medium such as an HDD (Hard Disk Drive) may be used.

(Authentication device)
Next, an example of the configuration of the authentication device 500 will be described. Referring to FIG. 13, the authentication device 500 includes, for example, a CPU 551, a ROM 552, a RAM 553, a host bus 554, a bridge 555, an external bus 556, an interface 557, an input unit 558, an output unit 559, A storage unit 560, a drive 561, a connection port 562, and a communication unit 563 are included. Note that the hardware configuration shown here is an example, and some of the components may be omitted. Moreover, you may further include components other than the component shown here.

(CPU 551)
The CPU 551 functions as, for example, an arithmetic processing unit or a control unit, and controls the overall operation of each component or a part thereof based on various programs recorded in the ROM 552, RAM 553, storage unit 560, or removable recording medium 601. .

(ROM552, RAM553)
The ROM 552 is a means for storing a program read by the CPU 551, data used for calculation, and the like. The RAM 553 temporarily or permanently stores, for example, a program read by the CPU 551 and various parameters that change as appropriate when the program is executed.

(Host bus 554, bridge 555, external bus 556, interface 557)
The CPU 551, the ROM 552, and the RAM 553 are connected to each other via, for example, a host bus 554 capable of high-speed data transmission. On the other hand, the host bus 554 is connected to an external bus 556 having a relatively low data transmission speed via a bridge 555, for example. The external bus 556 is connected to various components via the interface 557.

(Input unit 558)
For the input unit 558, for example, a mouse, a keyboard, a touch panel, a button, a switch, a lever, or the like is used. Further, as the input unit 558, a remote controller (hereinafter referred to as a remote controller) capable of transmitting a control signal using infrared rays or other radio waves may be used.

(Output unit 559)
In the output unit 559, for example, a CRT (Cathode Ray Tube), a display device such as an LCD or an organic EL, an audio output device such as a speaker or a headphone, a printer, a mobile phone, or a facsimile, etc. It is a device that can notify visually or audibly.

(Storage unit 560)
The storage unit 560 is a device for storing various data. As the storage unit 560, for example, a magnetic storage device such as a hard disk drive (HDD), a semiconductor storage device, an optical storage device, a magneto-optical storage device, or the like is used.

(Drive 561)
The drive 561 is a device that reads information recorded on a removable recording medium 601 such as a magnetic disk, an optical disk, a magneto-optical disk, or a semiconductor memory, or writes information to the removable recording medium 601.

(Removable recording medium 601)
The removable recording medium 601 is, for example, a DVD medium, a Blu-ray medium (registered trademark), an HD DVD medium, or various semiconductor storage media. Of course, the removable recording medium 601 may be, for example, an IC card on which a non-contact IC chip is mounted, an electronic device, or the like.

(Connection port 562)
The connection port 562 is a port for connecting an external connection device 602 such as a USB (Universal Serial Bus) port, an IEEE 1394 port, a SCSI (Small Computer System Interface), an RS-232C port, or an optical audio terminal. is there.

(External connection device 602)
The external connection device 602 is, for example, a printer, a portable music player, a digital camera, a digital video camera, or an IC recorder.

(Communication unit 563)
The communication unit 563 is a communication device for connecting to the network 400. For example, a communication card for wired or wireless LAN, Bluetooth (registered trademark), or WUSB (Wireless USB), a router for optical communication, ADSL (Asymmetric) A digital subscriber line) or a modem for various types of communication. The network 400 connected to the communication unit 563 is configured by a wired or wireless network, such as the Internet, home LAN, infrared communication, visible light communication, broadcast, or satellite communication.

<3. Summary>
As described above, the authentication apparatus 500 according to the embodiment of the present invention is an information processing apparatus including the acquisition unit 510, the storage unit 520, the authentication unit 530, and the communication unit 540. Further, the authentication unit 530 compares the collected information newly acquired from the sensor device 100 with the collected information acquired at the previous authentication from the same sensor device 100, and determines whether or not the new collected information has authenticity. It is characterized by performing authentication. According to such a configuration, it is possible to perform authentication using information collected by the device itself used for authentication while improving security.

  The preferred embodiments of the present invention have been described in detail above with reference to the accompanying drawings, but the present invention is not limited to such examples. It is obvious that a person having ordinary knowledge in the technical field to which the present invention pertains can come up with various changes or modifications within the scope of the technical idea described in the claims. Of course, it is understood that these also belong to the technical scope of the present invention.

DESCRIPTION OF SYMBOLS 100 Sensor apparatus 110 Sensor part 120 Storage part 130 Communication part 500 Authentication apparatus 510 Acquisition part 520 Storage part 530 Authentication part 540 Communication part

Claims (10)

A storage unit for storing the collection information collected by the sensor device in association with the time segment;
An acquisition unit for acquiring collection information associated with a time segment from the sensor device;
An authentication unit that performs authentication based on a comparison between the collection information acquired by the acquisition unit and the collection information stored in the storage unit in association with the same time segment as the collection information acquired by the acquisition unit; ,
An authentication device comprising:   The authentication apparatus according to claim 1, wherein the collected information includes user activity amount information.   The authentication apparatus according to claim 2, wherein the collected information includes user step count information.   In the authentication unit, the step count information associated with the time segment including the previous authentication start time stored in the storage unit includes the previous authentication start time in the step count information acquired by the acquisition unit. The authentication device according to claim 3, wherein when the step count information associated with the same time segment as the time segment exceeds, the authenticity of the step count information acquired by the acquisition unit is denied and authentication is failed.   The authentication unit denies the authenticity of the step count information acquired by the acquisition unit when the step count information acquired by the acquisition unit does not include step count information associated with a time segment including a start time of authentication. The authentication device according to claim 4, wherein the authentication device fails.   The authentication unit stores each of all the step count information except the step count information associated with the time segment including the previous authentication start time among the step count information acquired by the acquisition unit, and is stored in the storage unit. When the step information associated with the same time segment as each of all the step information is not the same among all the step information, the authenticity of the step information acquired by the acquisition unit is denied and authentication is failed. The authentication device according to claim 5.   The authentication device according to claim 6, wherein when the step count information acquired by the acquisition unit deviates from a setting range, the authentication unit denies the authenticity of the step count information acquired by the acquisition unit and causes the authentication to fail. .   The authentication apparatus according to claim 7, wherein the setting range is determined by step count information associated with a time segment and environment information.   When the authentication unit recognizes the authenticity of the step information acquired by the acquisition unit and succeeds in authentication, the authentication unit updates the step number information stored in the storage unit with the step information acquired by the acquisition unit. The authentication device according to any one of claims 4 to 8. A sensor unit comprising one or more sensors,
And a storage unit for storing the collected information collected by the sensor unit in association with the time division and the identification information,
A sensor device comprising:
A storage unit for storing the collection information collected by the sensor device in association with a time segment;
An acquisition unit for acquiring collection information associated with a time segment from the sensor device;
And an authentication unit that performs authentication based on a comparison between the acquired collected information and the collected information stored in association with the same time segment as the acquired collected information,
An authentication device comprising:
Including authentication system.

Images