JP2023072529A - Authentication server device, authentication method, and content receiving program - Google Patents

Abstract

To provide an authentication server device and an authentication method for easily authenticating a wireless communication device to which a communication terminal is connected and to which digital content is distributed, under any communication environment.SOLUTION: An authentication server device 10 includes: a storage unit 13 that stores identification information capable of identifying one of a plurality of facilities capable of providing digital content; a receiving unit 11 that receives, from a communication terminal 30 requesting provision of digital content, identification information on a wireless communication device 40 to which the communication terminal 30 is connected or identification information on wireless communication provided by the wireless communication device 40; a processing unit 12 that collates the identification information received from the communication terminal 30 with the identification information stored in the storage unit 13, and if collation results match, authenticates the wireless communication device 40 and determines that the communication terminal 30 is a communication terminal 30 capable of providing digital content; and a transmission unit 14 that transmits results of the authentication in the processing unit 12 to the communication terminal.SELECTED DRAWING: Figure 1

Description

The present disclosure relates to an authentication server device, an authentication method, and a content reception program.

2. Description of the Related Art In recent years, for the purpose of customer service, etc., there has been provided a service of distributing digital content to communication terminals of users who come to a store. For example, when a communication terminal exists within a range where radio waves from a predetermined wireless communication antenna reach, digital content is temporarily distributed to the communication terminal (for example, Patent Document 1). .

JP 2004-157784 A

Such a digital content distribution service is provided to each store by a service provider, for example, and is connected to a wireless communication antenna of the store through wireless communication in the store (for example, a wireless LAN (Local Area Network)). Provides digital content to communication terminals. At this time, when providing digital content to a communication terminal connected to a wireless communication device in a store, it may be necessary to authenticate the communication terminal that provides the digital content. However, the wireless communication environment differs depending on the store, and it may be difficult to easily authenticate the communication terminal under any communication environment.
The present disclosure has been made in view of such problems. The purpose is to provide an authentication method.

In order to solve the above-described problems, an authentication server device according to an aspect of the present disclosure includes a storage unit that stores identification information that can identify one of a plurality of facilities that can provide digital content; a receiving unit that receives the wireless communication device to which the communication terminal is connected or the wireless communication identification information provided by the wireless communication device from the communication terminal requesting the provision of the identification information received from the communication terminal and stored in the storage unit a processing unit that verifies the wireless communication device against the identification information stored therein, and if the verification result matches, authenticates the wireless communication device and determines that the communication terminal is a communication terminal capable of providing digital content; and a transmission unit for transmitting the result of the above to the communication terminal.

Further, an authentication method according to an aspect of the present disclosure stores identification information that can identify one of a plurality of facilities that can provide digital content, and a communication terminal that requests provision of digital content. is connected to the wireless communication device or the wireless communication identification information provided by the wireless communication device is received, the identification information received from the communication terminal is compared with the stored identification information, and the result of the comparison is a match First, the wireless communication device is authenticated, the communication terminal is determined to be a communication terminal capable of providing digital content, and the authentication result is transmitted to the communication terminal.

Further, a content reception program according to an aspect of the present disclosure communicates with an authentication server device that authenticates that digital content can be provided to a communication terminal and a content server device that distributes the digital content; is connected to the wireless communication device or the wireless communication identification information provided by the wireless communication device is transmitted to the authentication server device, and the identification information that can identify one facility among a plurality of facilities that can provide digital content The identification information stored and transmitted from the communication terminal is collated with the stored identification information, and if the collation result matches, the wireless communication device is authenticated, and the communication terminal is a communication terminal capable of providing digital content. Receiving an authentication result as to whether or not the communication terminal is capable of providing digital content from an authentication server device that determines that the communication terminal is capable of providing digital content, and determining that the communication terminal is capable of providing digital content. and requesting the content server device to distribute the digital content when the request is made.

According to the present disclosure, it is possible to provide an authentication server device, an authentication method, and a content reception program that can easily authenticate a wireless communication device to which a communication terminal is connected under any communication environment and to which digital content is distributed. can be done.

2 is a block diagram showing one configuration example of functions and operations of an authentication server device according to the first embodiment of the present disclosure; FIG. 1 is a schematic diagram schematically explaining an authentication method by an authentication server device according to a first embodiment of the present disclosure; FIG. It is a flow chart explaining the authentication method concerning this embodiment. FIG. 4 is a schematic diagram showing an example of display on the display unit of the communication terminal when the wireless communication device to which the communication terminal is connected is not authenticated; FIG. 4 is a schematic diagram showing an example of display on the display unit of the communication terminal when the wireless communication device to which the communication terminal is connected is authenticated; FIG. 5 is a schematic diagram schematically explaining an authentication method by an authentication server device according to a second embodiment of the present disclosure; FIG. 7 is a schematic diagram showing an example of a communication terminal screen during authentication by the authentication server device according to the second embodiment of the present disclosure; 3 is a block diagram showing an example of a hardware configuration that implements each functional unit of an authentication server device according to each embodiment of the present disclosure; FIG.

Embodiments of the present disclosure will be described below with reference to the drawings. However, the embodiments described below are merely examples, and are not intended to exclude various modifications and application of techniques not explicitly described below. The present disclosure can be implemented in various modifications (for example, by combining each embodiment) without departing from the gist of the disclosure.

1. First Embodiment Hereinafter, an authentication server device and an authentication method according to a first embodiment will be described with reference to FIGS. 1 to 3 and FIGS. 4A and 4B.

(1.1) Basic Configuration of System Including Authentication Server Device With reference to FIGS. 1 and 2, the basic configuration and the function of each part of the authentication server device 10 according to the first embodiment will be described. FIG. 1 is a block diagram showing a configuration example of functions and operations of the authentication server device 10. As shown in FIG. FIG. 2 is a schematic diagram for schematically explaining an authentication method by the authentication server device 10. As shown in FIG.

The authentication server device 10 authenticates the communication terminal 30 connected via the network based on the identification information of the wireless communication to which the communication terminal 30 is connected or the identification information of the wireless communication device 40 that provides the wireless communication.
In this embodiment, as an example, as shown in FIG. 1, an authentication server device 10 is connected via a network to a content server device 20 that distributes digital content and a wireless communication device 40 that is placed in a facility. explain. Here, "facility" means a store, hospital, facility, mobile body (for example, an airplane, a train, a bus, a taxi, etc.) that provides digital contents to a communication terminal, or a predetermined outdoor area. In this embodiment, the communication terminal 30 is connected to the wireless communication device 40 via a network such as a wireless LAN, thereby connecting to the authentication server device 10 and the content server device 20 via the wireless communication device 40 . The authentication server device 10 has a function of determining whether or not the content server device 20 can distribute digital content to the communication terminal 30, for example. The content server device 20 distributes the digital content to the communication terminal 30 when the authentication server device 10 authenticates, that is, determines that the digital content can be distributed to the communication terminal 30 .
The content server device 20, wireless communication device 40, and communication terminal 30 connected to the authentication server device 10 will be described below.

<Content server device>
The content server device 20 has a storage unit 22 that stores digital content to be distributed to the communication terminal 30 . The content server device 20 also includes a receiving unit 21 that receives a request for digital content distribution from the communication terminal 30, and a communication terminal 30 that is connected to the wireless communication device 40 via the wireless communication device 40 installed in the facility. and a transmission unit 23 for transmitting the digital content. The content server device 20 performs an authentication check on the authentication server device 10 in response to a request from the communication terminal 30 and transmits digital content to the authenticated communication terminal 30 .

The digital content stored by the content server device 20 may be any content that can be distributed to the communication terminal 30, and examples thereof include electronic books such as magazines, comics, information magazines, and books for children. Further, the digital content may be moving images, still images, music, electronic coupons that can be used at facilities where the wireless communication device 40 is installed, discounts that can be used, or that can be exchanged for products. A case where the digital content is an electronic book will be described below.

Also, the content server device 20 can distribute different content for each facility. The content server device 20 can distribute optimum content for each facility, for example, content rooted in the regional characteristics of the area where the facility is located, or content suitable for the industry of the facility. As a result, the content server device 20 distributes, for example, sightseeing information near the facility, advertisements with strong local characteristics, and works of artists with ties to the area, or distributes hair catalog magazines when the facility is a beauty salon. You can do

<Wireless communication device>
The wireless communication device 40 is a device that provides wireless communication to the communication terminal 30 . The wireless communication device 40 is, for example, an access point for wireless LAN communication, and has a MAC (Media Access Control address) address, which is a physical address that is an identification number assigned to uniquely identify itself. An IP address is assigned to the wireless communication device 40 by an Internet service provider (ISP) with which the facility has a contract for Internet communication.

In this embodiment, the case where the IP address assigned to the wireless communication device 40 is a global fixed IP address will be described. In the authentication server device 10 of this embodiment, the global fixed IP address assigned to the wireless communication device 40 is used as identification information for authenticating the communication terminal 30 .

<Communication terminal>
The communication terminal 30 is, for example, a mobile communication terminal such as a smart phone or a tablet personal computer, and is a communication terminal that can be carried by the user when visiting the facility. The communication terminal 30 may include, for example, a display unit 31 that displays a list of digital content that can be provided and digital content transmitted from the content server device 20 . The communication terminal 30 may also include an audio output unit (not shown) that outputs audio of the digital content transmitted from the content server device 20, for example.

The communication terminal 30 is carried by the user when visiting the facility, and is connected to a wireless communication device 40 placed at the facility. The communication terminal 30 is connected to the wireless communication device 40 when it is located within the reach of radio waves from the wireless communication device 40 connected to the authentication server device 10 via the network. That is, the communication terminal 30 may be connected to the wireless communication device 40 even outside the facility.
As a result, when the communication terminal 30 connects to the authentication server device 10 via the wireless communication device 40, the global fixed IP address included in the wireless communication device 40 is transmitted to the authentication server device 10, and the authentication server device 10 certification work is done.

(1.2) Basic Configuration of Authentication Server Device The authentication server device 10 will be described in detail below. The authentication server device 10 according to the present embodiment, for example, as shown in FIG. By accessing the server device 10, the global fixed IP address, which is the identification information included in the wireless communication device 40, is acquired, and the global fixed IP address matches the global fixed IP address stored in the authentication server device 10. In this case, the communication terminal 30 is authenticated. The content server device 20 displays the authentication result on the communication terminal 30 according to the authentication result in the authentication server device 10 .
Such an authentication server device 10 includes a receiver 11 , a processor 12 , a storage 13 and a transmitter 14 .
Each unit of the authentication server device 10 will be described in detail below.

<Memory part>
The storage unit 13 stores identification information that can identify one of a plurality of facilities that can provide digital content. Here, "one facility out of a plurality of facilities capable of providing digital content" is, for example, a facility that has a content distribution contract with a content distribution company that provides digital content stored in the content server device 20. say. The storage unit 13 contains a global fixed IP address assigned to the wireless communication device 40 of one facility as identification information assigned to the wireless communication device 40 of the facility capable of providing digital content.

In addition, the storage unit 13 may store the available time for providing digital content for each facility capable of providing digital content. The available time may be, for example, the opening hours or business hours of the facility specified by the identification information stored in the storage unit 13, and may be a predetermined available time (for example, "2 hours") preset for each facility. ) may be By storing such available time, the expiration date of distribution of the digital content can be set, and the digital content can be provided to the communication terminal 30 within the operation (business) hours of the facility or at a predetermined time for each communication terminal 30. can be limited.
Furthermore, the storage unit 13 may store identification information in association with information for specifying facilities (position information, facility name, etc.) other than the global fixed IP address.

<Receiver>
The receiving unit 11 receives, from the communication terminal 30 requesting the provision of digital content, the identification information of the wireless communication device 40 providing wireless communication to which the communication terminal 30 is connected, that is, the global fixed IP address. The receiving unit 11 transmits the acquired identification information (global fixed IP address) to the processing unit 12 .

<Processing unit>
The processing unit 12 collates the identification information (global fixed IP address) received from the communication terminal 30 with the identification information (global fixed IP address) stored in the storage unit 13 . The processing unit 12 authenticates the wireless communication device 40 to which the communication terminal 30 is connected when the matching result is matched. If the collation results in a match, the processing unit 12 determines that the communication terminal 30 connected to the wireless communication device 40 is a communication terminal capable of providing digital content.

Further, when the storage unit 13 stores the opening hours (business hours) of the facility as the digital content provisionable time for each facility that can provide digital content, the processing unit 12 stores the matching result based on the identification information, It may be determined whether or not the communication terminal 30 is a communication terminal capable of providing digital content from the available time and the current time.

Furthermore, when the storage unit 13 stores the opening hours (business hours) of facilities capable of providing digital content and the available time of digital content, the processing unit 12 stores the authentication result based on the verification result based on the identification information. , a delivery expiration date calculated from the facility's opening hours or available hours and the current time (for example, the time two hours after the current time) may be associated.

Further, when the receiving unit 11 receives an authentication token from the content server device 20 as will be described later, the processing unit 12 transmits authentication information indicating that the communication terminal 30 has been authenticated to the content server device 20. It can be sent via unit 14 .

<Transmitter>
The transmission unit 14 transmits the determination (authentication) result of the processing unit 12 to the communication terminal 30 . Upon receiving the authentication result, the communication terminal 30 connects to the content server device 20 and receives a list of digital content and the provision of the digital content.
Further, the transmission unit 14 may transmit an authentication token indicating that the communication terminal 30 can provide digital content to the communication terminal 30 . As a result, the communication terminal 30 can transmit the authentication token to the content server device 20, and the content server device 20 can use the authentication token to perform an authentication check on the authentication server.

In addition, the transmission unit 14 may transmit the expiration date for which the digital content can be provided as the authentication information to the content server device 20 . As a result, the provision of digital content to the communication terminal 30 by the content server device 20 can be restricted within the available period of provision.

(1.3) Authentication method An authentication method according to this embodiment will be described below. The authentication server device 10 according to the present embodiment determines whether or not the communication terminal is capable of providing digital content according to a pre-stored program that causes a computer to execute an authentication method.

The authentication method according to this embodiment is executed at least by the following method.
(a) Stores identification information that can identify one of a plurality of facilities capable of providing digital content (b) A wireless communication device or device to which a communication terminal is connected from a communication terminal that requests provision of digital content receiving wireless communication identification information provided by the wireless communication device; (c) comparing the identification information received from the communication terminal with the stored identification information; Authenticate and determine that the communication terminal is capable of providing digital content (d) Send the result of authentication to the communication terminal

Hereinafter, the authentication method according to this embodiment will be described in more detail with reference to FIG. 3 together with FIG. FIG. 3 is a flowchart for explaining the authentication method according to this embodiment.

<Registration of identification information>
First, identification information is registered with the authentication server device 10 (steps S11 and S12).
First, in the storage unit 13 of the authentication server device 10, a global fixed IP address, which is identification information that can specify a facility capable of providing digital content, is registered, and a database of identification information is generated (step S11). . The global fixed IP address to be registered is, for example, a global fixed IP address assigned to the wireless communication device 40 of a facility that has a content distribution contract with a content distribution company that provides digital content stored in the content server device 20. be.
The identification information is registered several times a day, for example, and when there is new identification information stored, the identification information database stored in the storage unit 13 is updated (step S12).
It should be noted that the updating of the identification information database is performed in parallel with the distribution of the digital content, which will be described later.

<Distribution of digital content>
First, the communication terminal 30 is connected to wireless communication provided by the wireless communication device 40, which is placed in the facility and assigned the global fixed IP address stored in the authentication server device 10 (step S21).
Subsequently, a WEB browser for displaying the digital content or a list thereof or an application having a digital content browsing function is started (step S22). Activation of the WEB browser may be automatically activated by reading a two-dimensional barcode including URL information for connecting to the authentication server device 10 posted in the facility, for example. Also, the application may be activated by, for example, the user of the communication terminal 30, and the two-dimensional barcode may be read using the two-dimensional barcode reading function in the application. Furthermore, the connection of the communication terminal 30 to the wireless communication within the facility may be performed after the application is started.

When the communication terminal 30 is connected to the wireless communication in the facility and the WEB browser and the application are activated, a confirmation screen for using the digital content distribution service is displayed on the display unit 31 of the communication terminal 30 (step S23). ). It should be noted that the display of the confirmation screen in step S12 is not necessarily required in the connection where the identification information is the global fixed IP address.
Subsequently, an authentication request including, as identification information, the global fixed IP address of wireless communication device 40 to which communication terminal 30 is connected is transmitted to authentication server device 10 (step S24). At this time, the identification information may include other information (position information, facility name, etc.) for specifying other facilities as necessary.

Upon receiving the authentication request, the authentication server device 10 collates the identification information (global fixed IP address) included in the authentication request with the identification information (global fixed IP address) of the database stored in the storage unit 13 (step S25). The authentication server device 10 authenticates the wireless communication device 40 to which the communication terminal 30 is connected, and determines that the communication terminal 30 is a communication terminal capable of providing digital content when the verification results match. If the verification result does not match, the authentication server device 10 does not authenticate the wireless communication device 40 to which the communication terminal 30 is connected, and determines that the communication terminal 30 is not a communication terminal capable of providing digital content. .
The authentication server device 10 transmits the authentication result of the communication terminal 30 to the communication terminal 30 (step S26). At this time, the authentication server device 10 may transmit an authentication result including an authentication token indicating that the communication terminal 30 is capable of providing digital content.

The communication terminal 30 acquires the authentication result from the authentication server device 10 (step S27), and if the wireless communication device 40 to which the communication terminal 30 is connected is not authenticated, wireless communication is performed as shown in FIG. 4A. An alert screen indicating that the device 40 is not authenticated is displayed (step S28).
Further, when the wireless communication device 40 to which the communication terminal 30 is connected is authenticated, the communication terminal 30 transmits a content list page request to the content server device 20 (step S29). At this time, the request includes an authentication token and information (facility name, etc.) for specifying the facility.

Upon receiving the content list page request, the content server device 20 performs an authentication check on the authentication server device 10 (step S30). At this time, the authentication token received from the communication terminal 30 is transmitted to the authentication server device 10 .
Subsequently, the authentication server device 10 verifies the authentication token received from the content server device 20 (step S31), and transmits the authentication result based on the authentication token to the content server device 0 (step S32). At this time, the authentication server device 10 may include the delivery expiration date of the digital content in the authentication result.
With the above, the authentication operation of the authentication server device 10 is completed.

After obtaining the authentication result from the authentication server device 10, the content server device 20 transmits a content list page (step S33).
Finally, the communication terminal 30 displays the content list page on the display unit 31 as shown in FIG. 4B (step S34). At this time, the display unit 31 of the communication terminal 30 displays a list of digital content distribution services contracted by the facility where the wireless communication device 40 to which the communication terminal 30 is connected is arranged.
Thereafter, communication terminal 30 requests desired content from content server device 20 according to the user's selection of content displayed on the content list page, receives the content, and displays it on display unit 31 .
Thus, the display of the digital content ends.

By displaying the digital content authenticated by such a method on the communication terminal 30, there is no need to put magazines in the store, for example, and the digital content can be displayed on the communication terminal 30 owned by the customer. improves.
Moreover, when using a global fixed IP address as an identification method, digital content can be displayed using a WEB browser.

(1.4) Effect of this embodiment This embodiment has the following effects.
(1) The authentication server device of this embodiment authenticates the wireless communication device using the global fixed IP address assigned to the wireless communication device to which the communication terminal is connected, and determines whether or not digital content can be distributed to the communication terminal. judge.
Therefore, it is possible to easily authenticate the wireless communication device to which the communication terminal is connected and to which the digital content is to be distributed, using the unique global fixed IP address.

(2) In the authentication server device of the present embodiment, the available time of digital content is stored for each facility that can provide digital content, and the transmission unit stores the delivery expiration date of the digital content to the content server device. can be sent.
Therefore, the provision of digital content can be restricted within the available time limit.

2. Second Embodiment An authentication server device and an authentication method according to a second embodiment will be described below.

(2.1) Basic Configuration of Authentication Server Device In the authentication server device 110 according to the second embodiment, the identification information used for authentication of the communication terminal 30 is the global static IP of the wireless communication device 40 to which the communication terminal 30 is connected. It differs from the authentication server device 10 in that the physical address (MAC address) of the wireless communication device 40 is used instead of the address.
The storage unit 13 of the authentication server device 110 stores the physical address (MAC address) of the wireless communication device 40 as identification information instead of the global fixed IP address.
Then, the communication terminal 30, the wireless communication device 40, and the content server device 20 use the physical address (MAC address) of the wireless communication device 40 instead of the global fixed IP address to authenticate the wireless communication device 40. Works similarly to morphology.

(2.2) Authentication Method As for the authentication method executed by the authentication server device 110, the physical address (MAC address) of the wireless communication device 40 is used instead of the global fixed IP address to authenticate the wireless communication device 40. It is the same as the first embodiment.

(2.3) Effect of this embodiment This embodiment has the same effect as the first embodiment because it authenticates the wireless communication device using the unique MAC address.

3. Third Embodiment An authentication server device and an authentication method according to a third embodiment will be described below.

(3.1) Basic Configuration of Authentication Server Device The authentication server device 210 will be described in detail below.
The authentication server device 210 according to the third embodiment, like the authentication server device 10, includes a receiving unit 11, a processing unit 12, a storage unit 13, and a transmitting unit 14. It has In the authentication server device 210 according to the third embodiment, the identification information used for authentication of the communication terminal 30 is provided by the wireless communication device 40 instead of the global fixed IP address of the wireless communication device 40 to which the communication terminal 30 is connected. It is different from the authentication server device 10 in that it is a service identifier (SSID) for wireless communication.

For example, as shown in FIG. 5, the authentication server device 210 according to the present embodiment starts the application for receiving digital contents installed in the terminal itself in the communication terminal 30, and after connecting to the wireless communication in the facility, , the authentication server device 10 is accessed to acquire at least a service identifier (SSID), which is identification information. The authentication server device 210 authenticates the communication terminal 30 when the acquired service identifier (SSID) matches that it is stored. The content server device 20 displays the authentication result on the communication terminal 30 according to the authentication result in the authentication server device 210 . As shown in FIG. 5, before providing the identification information to the authentication server device 210, the communication terminal 30 confirms the connection to the wireless communication and the permission to use the location information according to the program.

The authentication server device 210 according to the third embodiment can perform authentication without using a global fixed IP address. In recent years, the depletion of global fixed IP addresses has become a problem, and the number of Internet service providers (ISPs) that use dynamic (variable) IP addresses to connect to the Internet is increasing. Further, when assigning a global fixed IP address, an additional fee is often required, and many facilities provide Internet connection using a dynamic (variable) IP address.
Since the authentication server device 210 according to the third embodiment performs authentication using a service identifier (SSID), the wireless communication device 40 in a facility that provides Internet connection using a dynamic (variable) IP address It is also preferable because authentication can be easily performed, and distribution of digital content becomes easy.

The authentication server device 210 and the communication terminal 30 will be described in detail below. Note that the wireless communication device 40 and the content server device 20 are the same as those in the first embodiment, so description thereof will be omitted.

<Memory unit>
The storage unit 13 contains, as identification information, a service set identifier (SSID: Service Set Identifier) of the wireless communication device 40 connected to the authentication server device 10 . A service set identifier (SSID) is an identifier for wireless communication conforming to IEEE 802.11. A service set identifier (SSID) is, for example, an identification name of an access point, which is the wireless communication device 40 .

When the service set identifier (SSID) is identification information that can identify one facility, that is, when the same service set identifier (SSID) is not used in different facilities, the storage unit 13 stores the service set identifier (SSID) may be stored as identification information.
Note that even if the same service set identifier (SSID) is not used in different facilities, the storage unit 13 stores the service set identifier (SSID) as identification information and an identifier for specifying another facility. Information (positional information, facility name, etc.) may be associated with and stored.

Further, when the service set identifier (SSID) of the wireless communication device 40 is the same in a plurality of facilities, that is, when the same service set identifier (SSID) is used in different facilities, the storage unit 13 stores It is necessary to store service set identifiers (SSIDs) in association with location information of facilities capable of providing digital content (addresses of facilities or location information such as latitude and longitude).

Since the global static IP address and MAC address used in the first and second embodiments are assigned by the Internet service provider (ISP) or the manufacturer of the wireless communication device 40, the facility managing the wireless communication device 40 cannot be changed with On the other hand, the service set identifier (SSID) used in this embodiment can be set/changed by the facility managing the wireless communication device 40, and the same service set identifier (SSID) may be set in different facilities. have a nature. In this case, since the service set identifier (SSID) is no longer unique information for each facility, only some of these multiple facilities (for example, only stores in the Kanto region, only large stores, etc.) It becomes difficult to provide content distribution services.

Therefore, when using the service set identifier (SSID) as the identification information of the wireless communication device 40, it is preferable to use the location information of the communication terminal 30 connected to the wireless communication device 40 together with the service set identifier (SSID). In this case, it is possible to specify one facility where the wireless communication device 40 connected to the communication terminal 30 is located, and the communication terminal 30 is connected to the wireless communication device 40 of the facility to which the digital content distribution service is contracted. It is possible to determine whether

Further, the storage unit 13 associates, as identification information, a service set identifier (SSID) and location information of facilities capable of providing digital contents with facility information such as company names and store names of facilities capable of providing digital contents. may be stored. In many cases, it is not possible to detect the positional difference in the height direction of the position information of the own device acquired by the communication terminal 30. For example, although it is possible to detect that the communication terminal 30 is located in a building, it is possible to detect the location on which floor of the building. It may not be possible to detect whether the Therefore, by using facility information such as company name and store name for authentication, more accurate authentication becomes possible.

<Receiver>
The receiving unit 11 receives the service set identifier (SSID) and the location information of the communication terminal 30 as identification information from the communication terminal 30 requesting provision of the digital content. Further, the receiving unit 11 may further acquire facility information of a facility in which the wireless communication device 40 connected to the communication terminal 30 is arranged from the communication terminal 30 requesting provision of the digital content.

<Processing unit>
The processing unit 12 receives the identification information (the service set identifier (SSID) and the location information of the communication terminal 30) received from the communication terminal 30, and the identification information (the service set identifier (SSID) and the location of the facility) stored in the storage unit 13. location information). The processing unit 12 authenticates the wireless communication device 40 to which the communication terminal 30 is connected when the matching result is matched. At this time, the stored location information of the facility and the location information of the communication terminal 30 do not need to match perfectly. For example, when the communication terminal 30 is located in an area with a radius of several tens of meters to 100 meters centered on the facility, it is determined that the location information of the facility and the location information of the communication terminal 30 match.
In addition, the processing unit 12 may compare facility information acquired from the communication terminal 30 with facility information of facilities capable of providing digital content stored in the storage unit 13 .

<Communication terminal>
The communication terminal 30 used in this embodiment transmits a service set identifier (SSID) to the authentication server device 210 via the wireless communication device 40 . Further, when the authentication server device 10 authenticates the wireless communication device 40 using the service set identifier (SSID) and the location information of the communication terminal 30, the communication terminal 30 sends the location information of its own device to the authentication server device 210. Send to
The position information of the communication terminal 30 may be position information acquired by, for example, a global positioning system (GPS). It may be position information acquired by station positioning.

(3.2) Authentication Method The authentication method executed by the authentication server device 210 is to authenticate the wireless communication device 40 using at least the service set identifier (SSID) of the wireless communication device 40 instead of the global static IP address. are the same as in the first embodiment. In the authentication method executed by the authentication server device 210 as shown in FIG. Further, in the authentication method, when the communication terminal 30 is connected to the wireless communication device 40 of the facility, confirmation of connection to wireless communication may be performed.

(3.3) Effects of this embodiment This embodiment has the following effects.
(3) The authentication server device of the present embodiment authenticates the wireless communication device using the service set identifier (SSID) of the wireless communication device to which the communication terminal is connected, and determines whether digital content can be delivered to the communication terminal. do.
Therefore, even if a communication terminal is connected to a wireless communication device to which a dynamic (variable) IP address is assigned, the wireless communication device can be easily authenticated.

(4) The authentication server device of the present embodiment authenticates the wireless communication device using the location information of the communication terminal together with the service set identifier (SSID) of the wireless communication device to which the communication terminal is connected. It is also possible to determine whether content can be distributed.
Therefore, even if the service set identifier (SSID) is redundantly used by wireless communication devices in different facilities, it is possible to easily authenticate the wireless communication devices.

4. Fourth Embodiment A content reception program executed by the communication terminal 30 connected to the wireless communication device 40 authenticated by the authentication server device 10 according to this embodiment will be described. The communication terminal 30 receives digital content according to a program that causes a computer to execute at least the following operations (A) to (D). The following programs are non-temporarily recorded on a recording medium such as a hard disk drive or memory, or an optical disc such as a DVD disc or Blu-ray (registered trademark). The following programs may be distributed via the Internet. Furthermore, the following programs may be recorded on a cloud server and executed via the Internet.
Such a content reception program is executed, for example, by an application dedicated to digital content reception. Also, the content receiving program may have the function of the program incorporated into an application for a store, which is an example of a facility.
Also, such a content receiving program may be provided as a software development kit (SDK).

(A) Communicating with an authentication server device that authenticates that digital content can be provided to a communication terminal and a content server device that distributes digital content (B) A wireless communication device or wireless communication to which the communication terminal is connected Sending identification information of wireless communication provided by the device to the authentication server device; from an authentication server device that collates the information with stored identification information, and if the result of the collation matches, authenticates the wireless communication device and determines that the communication terminal is capable of providing digital content; Receiving a result of authentication as to whether or not the communication terminal is capable of providing digital content. (D) If the communication terminal is determined to be capable of providing digital content, the content server device. to request delivery of digital content to

5. Hardware Configuration of Authentication Server Device FIG. 7 is a block diagram showing an example of a hardware configuration that implements each functional unit of the authentication server devices 10 , 110 , and 210 .
As shown in FIG. 7, the authentication server devices 10, 110, and 210 are implemented by a computing device 1000. FIG. The computing device 1000 is an information processing device that includes a processor 1001 , a ROM (Read Only Memory) 1002 , a RAM (Random Access Memory) 103 and an auxiliary storage device (memory) 1004 . For example, an output device 1011 , an input device 1012 and a display device 1013 are connected to the computing device 1000 via an external interface (I/F) 1005 . A computer 1014 is connected to the computing device 1000 via a communication interface (I/F) 1006, for example. Also, the output device 1011 , the input device 1012 , the display device 1013 and the computer 1014 have a user interface (not shown) for connecting with the arithmetic device 1000 . Here, each function of the processing unit 12 of the authentication server device 10, 110, 210 is constructed by cooperation of the hardware resources of each unit of the arithmetic device 1000 with a predetermined program.

Processor 1001 is a processor that controls authentication server devices 10 , 110 , and 210 as a whole. Processor 1001 reads a content reception program stored in ROM 1002 via bus 1007, and controls authentication server devices 10, 110, and 210 according to the content reception program.
ROM 1002 stores a program for executing the identification code determination method.
The RAM 1003 temporarily stores calculation data, various data input by the operator via the input device 1012, and the like.

The auxiliary storage device 1004 is backed up by, for example, a battery (not shown), and retains the storage state even when the authentication server devices 10, 110, and 210 are powered off. The auxiliary storage device 1004 stores data input via the external interface 1005 and data generated by each process. The auxiliary storage device 1004 stores input data input by the operator from the input device 1012 as well as various data input via the external interface 1005 and the communication interface 1006 .

The output device 1011 outputs data to the arithmetic device 1000 via the external interface 1005 . The control of photographing by the output device 1011 may be performed by executing a program by the arithmetic device 1000 of the authentication server device 10, or may be performed by control from another device.

The input device 1012 is a voice input device such as a keyboard, pointing device, microphone, or the like, and inputs commands and input data based on operator's operations to the arithmetic device 1000 via the external interface 1005 .
The display device 1013 is, for example, a liquid crystal display (LCD) or an organic electroluminescence display (OELD), receives various data from the arithmetic device 1000 via the external interface 1005, and displays the data. The display device 1013 displays, for example, each data read into the memory of the arithmetic device 1000, data obtained as a result of execution of a program or the like, a database stored in the storage unit 13, or the like.

Computer 1014 is connected to computing device 1000 via network 1008 via communication interface 1006 . The computer 1014 includes a display device and an input device (not shown), and inputs commands and input data based on operator's operations to the arithmetic device 1000 via the input device via the network 1008, and receives various data from the arithmetic device 1000. can be displayed on the display device. Network 1008 may be either a wired network or a wireless network. If the network 1008 is a wireless network such as a wireless LAN, Bluetooth (registered trademark), mobile communication network, or the like, the authentication server device 10 receives instructions in real time from a worker in a remote location such as outside the work area, and It is possible to display the execution status of programs and the like and the acquired data to workers in the field.

As described above, the present disclosure has been described using the embodiment, but the technical scope of the present disclosure is not limited to the range described in the above embodiment. It is obvious to those skilled in the art that various modifications or improvements can be made to the above embodiments. It is clear from the scope of claims that forms with such modifications or improvements can also be included in the technical scope of the present disclosure.

10, 110, 210 authentication server device 11 reception unit 12 processing unit 13 storage unit 14 transmission unit 20 content server device 30 communication terminal 31 display unit 40 wireless communication device

Claims (9)

a storage unit that stores identification information that can identify one of a plurality of facilities capable of providing digital content;
a receiving unit that receives identification information of a wireless communication device connected to the communication terminal or wireless communication provided by the wireless communication device from the communication terminal that requests provision of the digital content;
The identification information received from the communication terminal and the identification information stored in the storage unit are collated, and if the collation results match, the wireless communication device is authenticated, and the communication terminal receives the identification information. a processing unit that determines that the communication terminal is capable of providing digital content;
a transmitting unit configured to transmit a result of authentication performed by the processing unit to the communication terminal;
An authentication server device comprising: The storage unit stores, as the identification information, any one of a global fixed IP address assigned to the wireless communication device of the one facility, a service set identifier (SSID) of the wireless communication device, or a physical address of the wireless communication device. 2. The authentication server device according to claim 1, which stores: The storage unit associates and stores the service set identifier (SSID) and location information of the facility capable of providing the digital content as the identification information,
The receiving unit obtains from the communication terminal the service set identifier (SSID) of the wireless communication to which the communication terminal is connected and location information of the communication terminal,
The processing unit compares the service set identifier (SSID) received from the communication terminal with the service set identifier (SSID) stored in the storage unit, and compares the location information of the communication terminal with the storage unit. 3. The authentication server device according to claim 2, which compares the location information of the facility capable of providing the digital content stored in the unit. The storage unit associates and stores, as the identification information, the service set identifier (SSID) and location information of the facility capable of providing the digital content, and facility information of the facility capable of providing the digital content. and
The receiving unit further acquires, from the communication terminal, facility information of a facility where the wireless communication device connected to the communication terminal is located,
4. The authentication server according to claim 2, wherein the processing unit compares the facility information acquired from the communication terminal with the facility information of the facility capable of providing the digital content stored in the storage unit. Device. If the collation results match, the processing unit determines that the communication terminal is connected to the wireless communication provided by the wireless communication device of the facility capable of providing the digital content,
5. The authentication server device according to any one of claims 1 to 4, wherein said transmission unit transmits an authentication token indicating that said communication terminal can provide said digital content to said communication terminal. The authentication server device is connected via a network to a content server device that distributes the digital content,
When the receiving unit receives the authentication token from the content server device, the processing unit transmits authentication information indicating that the communication terminal has been authenticated to the content server device via the transmitting unit. 6. The authentication server device according to claim 5, which transmits. The storage unit stores the available time for providing the digital content for each facility that can provide the digital content,
7. The authentication server device according to claim 6, wherein said transmission unit transmits a delivery expiration date of said digital content as said authentication information to said content server device. storing identification information that can identify one of a plurality of facilities capable of providing digital content;
receiving identification information of a wireless communication device to which the communication terminal is connected or wireless communication provided by the wireless communication device from the communication terminal requesting provision of the digital content;
The identification information received from the communication terminal is collated with the stored identification information, and if the collation results match, the wireless communication device is authenticated, and the communication terminal provides the digital content. determine that it is a communication terminal capable of
An authentication method for transmitting a result of the authentication to the communication terminal. communicating with an authentication server device that authenticates that the digital content can be provided to the communication terminal and a content server device that distributes the digital content;
transmitting identification information of a wireless communication device to which the communication terminal is connected or wireless communication provided by the wireless communication device to the authentication server device;
Storing identification information capable of specifying one of a plurality of facilities capable of providing digital content, comparing the identification information transmitted from the communication terminal with the stored identification information, and obtaining a result of the comparison communication that allows the communication terminal to provide the digital content from the authentication server device that authenticates the wireless communication device and determines that the communication terminal is a communication terminal that can provide the digital content when Receiving a result of authentication as to whether it is a terminal;
requesting the content server device to distribute the digital content when the communication terminal is determined to be a communication terminal capable of providing the digital content;
content-receiving program that causes a computer to run

Images