JP4108429B2 - Device selection method and device selection device - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a computer in a home network (hereinafter referred to as a home network) connected to home appliances such as a television, a washing machine, a refrigerator, a computer, and a telephone installed in a dwelling unit.
[0002]
[Prior art]
With UPnP (Universal Plug and Play), home appliances such as TVs and washing machines in the home are recognized as part of so-called network home appliances that constitute home networks without complicated operations and settings. It has become. As a similar technique, HAVi (Home Audio / Video interoperability), ECHONET and the like that can be remotely operated from outside the home network by using a gateway have been proposed.
[0003]
In addition, when controlling home appliances, a technology is disclosed that allows a server to authenticate who is a user of a home appliance, performs settings for each user, and provides detailed home appliance environment settings. (For example, refer to Patent Document 1).
[0004]
[Patent Document 1]
JP 2000-347970
[0005]
[Problems to be solved by the invention]
However, standards such as UPnP and HAvi have not yet been able to authenticate who each user is. Further, Patent Document 1 does not disclose a function for authenticating each user when connecting the outside of the home network and the inside of the home network. For this reason, there is a problem in that it is impossible to ascertain whether the user of the home appliance in the home network is a family or not, and that unauthorized use of the home appliance by a person other than the family is allowed. That is, there is a problem of how each user is specifically authenticated by the home appliance. In addition, when trying to connect to the outside of the home network through home appliances, how to give permission to use services provided on the external network is also a problem. Specifically, there are the following problems, for example.
[0006]
There is a problem in which home appliances are used to authenticate a user when using home appliances in a home network or using a service on an external network. As a method for authenticating a user, a method is generally performed that uses authentication information such as an ID and a password assigned in advance to each user. However, many home appliances do not have a means for inputting authentication information. For example, home appliances such as a radio have an audio output function, but in most cases do not have means for inputting information. In addition, when a child tries to use a paid service on an external network without the parent's permission, it is desirable that the parent can restrict the use according to the service content.
[0007]
Then, an object of this invention is to provide the technique which can authenticate a user irrespective of the kind of household appliances which are going to be used.
Another object of the present invention is to provide a technique for restricting the use of a service on an external network by a user of a home network.
[0008]
[Means for Solving the Problems]
In order to solve the above problems, the first invention of the present application is a device selection method performed by a computer connected via a network to a household electrical appliance group including a first household electrical appliance and a second household electrical appliance, and the household electrical appliance group A device data storage step for storing home appliance data relating to each home appliance included in the device, and identification data corresponding to a predetermined event for the home appliance group, for each user and type permitted to use the home appliance group A user storage step stored for each and a predetermined event for the first home appliance The first event that is Detected and detected The first Event Said Any user stored in the user storage step when the first home appliance is in use The first user who is A user identification step for identifying whether or not the use is started, and the identified First Identification data corresponding to the start of use of the first home appliance stored in association with the user First identification data An input determination step of determining whether or not the first home appliance can accept the input based on home appliance data of the first home appliance;
The first home appliance is the First If it is determined that the input of identification data is not accepted, First A device selection step of selecting the second home appliance capable of accepting input of identification data based on the home appliance data; The input data input to the selected second home appliance is compared with the first identification data stored in the user storing step, and the first user is authenticated based on the comparison result. In the authentication step for determining whether or not to perform, and in the input determination step, when the occurrence of a predetermined second event is detected after the authentication step, and the first user is authenticated in the authentication step, the first step Converting the identification data into second identification data that is identification data corresponding to the second event of the first user; A device selection method including
[0009]
In this method, a household electrical appliance that accepts input of identification data required according to an event that occurs is selected. The user of the home appliance can input the identification data on the selected home appliance even if the identification data cannot be input on the home appliance in use. The event includes, for example, the start of use of any home appliance, the occurrence of a connection request from the home appliance to the external network, and the generation of a request for identification data from a computer on the external network.
[0010]
According to a second invention of the present application, in the first invention of the present application, the household electrical appliance group further includes a third household electrical appliance, and the device selection step accepts an input of identification data corresponding to the first event. A device selection method for further extracting a device based on the home appliance data and selecting either the selected second home appliance or the third home appliance is provided.
[0011]
An optimal home appliance can be selected from a plurality of home appliances that can input identification data. For example, it is possible to select the home appliance closest to the user of the first home appliance.
A third invention of the present application is a device selection apparatus for a computer connected via a network to a household electrical appliance group including a first household electrical appliance and a second household electrical appliance, and the household electrical appliance related to each household electrical appliance included in the household electrical appliance group Device data storage means for accumulating data; and user storage means for storing identification data corresponding to a predetermined event for the household electrical appliance group for each user and type permitted to use the household electrical appliance group; , A predetermined event for the first home appliance The first event that is Detected and detected The first Event Said Any user stored in the user storage means when the first home appliance is in use The first user who is A user specifying means for specifying whether or not the use is started, and the specified First Identification data corresponding to the start of use of the first home appliance stored in association with the user First identification data Input judging means for judging whether or not the first home appliance can accept the input based on home appliance data of the first home appliance, and the first home appliance First If it is determined that the input of identification data is not accepted, First Device selection means for selecting the second home appliance capable of accepting input of identification data based on the home appliance data; The input data input to the selected second home appliance is compared with the first identification data stored in the user storage means, and the first user is authenticated based on the comparison result. Authentication means for determining whether or not to perform, and the input determination means detects the occurrence of a predetermined second event after the authentication, and if the first user is authenticated by the authentication means, the first identification Conversion means for converting data into second identification data that is identification data corresponding to the second event of the first user; An apparatus selection apparatus including the above is provided.
[0012]
The third invention of the present application has the same effects as the first invention.
No. of this application 4 The invention is the first 3 In the invention, an authorized information storage means for storing or acquiring an address of an authorized computer which is a computer on a second network different from the network and is permitted to connect from the household electrical appliance group, Detecting a connection request from the first home appliance operated by the first user who has been authenticated by the authentication means to any computer on the second network, whether or not the computer is an authorized computer, If the computer is not a certified computer, and if the computer is not a certified computer, a second user who is a user of a household electrical appliance other than the first household electrical appliance goes to the computer. Connection request means for requesting connection permission, and accepting a response to the connection permission request And connection control means for executing a stop connection or connection with the first home device and the computer according to the response results further including, providing a device selection device.
No. of this application 5 The invention is the third Or 4th In the invention, the identification corresponding to the start of use of the first home appliance by the first user who is the user of the first home appliance with respect to the selected home appliance which is one of the home appliances selected by the device selection means There is provided an apparatus selection device further including an input request means for requesting the first user to input first identification data as data.
No. of this application 6 The invention provides a device selection program executed by a computer connected via a network to a group of home appliances including a first home appliance and a second home appliance. This program causes the computer to function as the device selection device, and has the same effects as the first invention.
[0013]
No. of this application 7 The invention provides a computer-readable recording medium that records a device selection program executed by a computer connected to a group of home appliances including a first home appliance and a second home appliance via a network. This program executes the method described in the first aspect of the invention, and has the same effects as the first aspect of the invention. Here, examples of the recording medium include a computer readable / writable flexible disk, hard disk, semiconductor memory, CD-ROM, DVD, magneto-optical disk (MO), and others.
[0014]
DETAILED DESCRIPTION OF THE INVENTION
The authentication system to which the device selection method of the present invention is applied will be described below. In FIG. 1, a home appliance group 1, a home gateway server (hereinafter referred to as an HGW server) 2, and an external server 3 are connected via a home network 4 and an external network (hereinafter referred to as an external network) 5. It is explanatory drawing which shows. The household electrical appliance group 1 includes household electrical appliances 1a, 1b, 1c... Connected to each other via a home network 4. Examples of home appliances include personal computers, televisions, and radios. The HGW server 2 performs integrated control of the home appliance group 1 and connection between the home appliance group 1 and the external server 3 in a lump. The external server 3 provides various services such as an online shopping service, a music download service, and an information search service to the HGW server 2 and the personal computers in the home appliance group 1 via the external network 5. Although only one external server 3 is shown in the figure, a plurality of external servers 3 a, 3 b, 3 c... Can be connected to the HGW server 2. The home network 4 is not particularly limited as long as the home appliance group 1 and the HGW server 2 can be connected. A network conforming to a protocol such as LAN (Local Area Network), Ethernet (registered trademark), TCP / IP (Transmission Control Protocol / Internet Protocol), or ISDN is used. When TCP / IP is used in the home, the HGW server 2 also serves as a router. The external network 5 only needs to be able to connect the HGW server 2 and the external server 3, and can be constructed by the Internet, ISDN (Integrated Service Digital Network), public network or the like.
[0015]
First, an outline of a personal authentication method when using any home appliance 1a in the home network 4 and a use authentication method when using an external service by the home appliance 1a will be described.
(1) Outline of authentication method in home network
First, an outline of a personal authentication method in the home network 4 will be described.
[0016]
FIG. 2 is an explanatory diagram illustrating a case where the user authentication ID cannot be input by the home appliance 1a that the user A intends to use. Here, the personal authentication ID is authentication information such as a password for identifying a person who can use the household electrical appliance group 1.
In FIG. 2, before the user A starts using, for example, the refrigerator 1a in the household electrical appliance group 1, the HGW server 2 requests input of the personal authentication ID through the input screen 6 of the refrigerator 1a. Here, it is assumed that the required personal authentication ID is the fingerprint of the user A. Since the refrigerator 1a does not have a fingerprint input function, the user A cannot input a personal authentication ID using the refrigerator 1a. Therefore, the HGW server 2 displays on the input screen 6 of the refrigerator 1a to request input of a personal authentication ID by fingerprint, and selects a home appliance 1b capable of inputting a fingerprint from the home appliance group 1 Then, the home appliance 1b is requested to input the personal authentication ID. For example, when the HGW server 2 selects the operation panel 1b capable of inputting a fingerprint and a numeric keypad as the home appliance 1b capable of inputting a fingerprint, the user authentication ID is input to the input screen 6 of the refrigerator 1a by the fingerprint input device 1b. The request is displayed. The user A uses the fingerprint input device 1b to input the personal authentication ID using a fingerprint according to the display on the input screen 6 of the refrigerator 1a. The personal authentication ID input by the fingerprint input device 1b is transmitted to the HGW server 2, and an authentication process is performed. If the personal authentication ID matches the registrant ID stored in the HGW server 2, the user A can use the refrigerator 1a. When it is necessary to input the personal authentication ID, the HGW server 2 selects at least one home appliance that can input the personal authentication ID, and requests input from the home appliance, so any home appliance is used. However, user A can be authenticated. Thereby, it is possible to prevent the use of the home appliance by the user A who is not registered in the HGW server 2 and to increase the security in the home network. Moreover, it also becomes a step which specifies the user himself / herself when using the external service provided by the external server 3 using the home appliance 1a described later.
[0017]
(2) Outline of the usage authentication method when using external services
Next, an outline of a usage authentication method when using an external service will be described.
FIG. 3 is an explanatory diagram showing a case where the use authentication ID cannot be input by the home appliance 1a that the user A intends to use. The use authentication ID required for the home appliance group 1 is authentication information for using an external service provided by the external server 3.
[0018]
In FIG. 3, for example, the user A once uses the refrigerator 1 a and the connection password is started to use the external service stored in the DB in the HGW server 2. The HGW server 2 acquires a connection password when the user A uses the external service, that is, a so-called usage authentication ID, based on the user authentication ID of the user A confirmed in the above-described user authentication step, and uses the authentication. The user A is prompted to input the ID. The usage authentication ID may be requested from the external server 3 to the refrigerator 1a via the HGW server 2. When there is a request for input of the use authentication ID, the HGW server 2 requests the user A to input the use authentication ID through the input screen 6 of the refrigerator 1a. Consider a case where the requested use authentication ID is a password with a combination of numbers registered in advance by the user A. In this case, the HGW server 2 detects that the refrigerator 1a does not have a numeric input function, and inputs a request for input of a use authentication ID by the operation panel 1b selected from the household electrical appliance group 1 and capable of inputting a numeric keypad. To display. User A inputs the use authentication ID using the numeric keypad 1b. The use authentication ID input from the numeric keypad 1b is transmitted from the HGW server 2 to the external server 3, and authentication processing is performed. When the usage authentication ID is requested, the HGW server 2 selects at least one home appliance that can input the requested authentication information. Therefore, even if the user A cannot input authentication information on the home appliance 1a being used. The information can be input by the other home appliance 1b. Therefore, the authentication of the user A when using the external service can be performed regardless of the type of home appliance.
[0019]
In FIG. 3, the use authentication ID may be an ID requested from the external server 3 when receiving the external service of the external server 3, or an ID that the user A voluntarily inputs to receive the external service. There may be.
In the above example, when authentication information cannot be input by one home appliance, an example of selecting one other home appliance is given. However, user A can easily input a plurality of home appliances, for example, You may make it request | require the input by the household appliances nearest to you.
[0020]
<Example 1>
The authentication system according to the first embodiment will be described below. First, the configuration of the authentication system will be described.
(1) Configuration
(1-1) Connection configuration of home appliances and external services
The connection configuration of the household electrical appliance group 1, the HGW server 2, and the external server 3 is the same as that in FIG. For the connection between the HGW server 2 and the external server 3, for example, TCP / IP protocol group, FTP (File Transfer Protocol), HTTP (Hyper Text Transfer Protocol), SMTP (Simple Mail Transfer Protocol) and other standards used on the Internet. Protocol is used.
(1-2) HGW server configuration
FIG. 4 is an example of the configuration of the HGW server 2. The HGW server 2 includes a gateway unit 10 that transmits / receives data to / from the external network 5, an input / output unit 11 that transmits / receives data to / from the home appliance group 1, and a home appliance management unit 12 that performs authentication of a user of the household appliance group 1. And a profile management unit 13 for storing various data. In order to enhance security against external attacks, the HGW server 2 desirably has a NAT (Network Address Translation) function (including IP masquerade) and a firewall function such as packet filtering. Furthermore, the home appliance management unit 12 includes a status management unit 12a, an authentication processing unit 12b, a home appliance selection unit 12c, and an access control unit 12d. The profile management unit 13 includes a user information DB 13a, a home appliance information DB 13b, a service usage information DB 13c, and an access control information DB 13d. Below, the household appliance management part 12 and the profile management part 13 are demonstrated in detail. First, each part of the profile management unit 13 will be described with reference to FIGS.
[User information DB]
FIG. 5 shows an example of user information stored in the user information DB 13a. In this example, in the user information DB 13a, a user who can use the household electrical appliance group 1, for example, a user ID, a name, a relationship, a gender, a date of birth, an age, and a personal authentication ID of each member of a family are recorded in one record. Including user information. The user ID is unique in the home network 4 and may be generated dynamically by the HGW server 2 or may be generated by a person who inputs it. Examples of the personal authentication ID include passwords, fingerprint data, and voiceprint data. The user information is useful for maintaining security in the home network 4 such as limiting who can use the home appliance group 1.
[0021]
Examples of a method for registering the information in the HGW server 2 include a method in which the HGW server 2 outputs a registration screen to a personal computer that is one of the household electrical appliance groups 1 and accepts registration of the information from this screen. FIG. 6 shows an example of a user information registration screen displayed on the screen of the personal computer by the HGW server 2. Registration of information that cannot be input from a personal computer is performed by another device in the household electrical appliance group 1, such as a fingerprint input device or a voice input device.
[Home Appliance Information DB]
FIG. 7 shows an example of home appliance information stored in the home appliance information DB 13b. In this example, the home appliance information DB 13b has one record of the home appliance ID, IP address, type of home appliance, input / output function, charge manager, user name that can use each home appliance, and installation location of the home appliance. Including home appliance information. The home appliance ID is unique in the home network 4 and may be dynamically generated by the HGW server 2 or may be generated from an ID of the home appliance, such as a MAC address (Media Access Control Address). Further, the IP address of the home appliance may be allocated using a dynamic IP address allocation function of the HGW server 2, for example, DHCP (Dynamic Host Configuration Protocol).
[0022]
Examples of a method for registering home appliance information in the HGW server 2 include a method of accepting registration of home appliance information by a personal computer as described above. FIG. 8 shows an example of a home appliance information registration screen displayed on the screen of the personal computer by the HGW server 2. When a new home appliance is connected to the home network 4 at the time of registration, the HGW server 2 recognizes the addition of the new home appliance with a plug-and-play function and displays the registration screen on the display of the personal computer. May be prompted to input home appliance information.
[0023]
In addition, you may make it accumulate | store the positional relationship in the house of each household appliance in the household appliance group 1 in household appliance information DB13b. When a plurality of home appliances capable of inputting a personal authentication ID and a use authentication ID are selected, the HGW server 2 selects a home appliance that is close to the home appliance currently being used by the user and accepts input from there Thus, the user can easily move to a device that can input authentication information.
[Service usage information DB]
FIG. 9 shows an example of service usage information stored in the service usage information DB 13c. The service usage information DB 13c stores service usage information including a user ID, a connectable address for each individual, and a usage authentication ID in one record. In this example, the use authentication ID is a connection password for using an external service. The usage authentication ID may be stored for each user with respect to the external service, or may be registered as the entire user registered in the user information DB 13a. Registration of the service usage information may be performed by the user himself using one of the home appliances. In addition, when a user inputs a password or the like to any home appliance in order to use an external service for the first time, it is preferable that this is automatically stored. Further, when storing a password or the like, it is more preferable to store not only the contents of the password but also the registration date and time. In this case, the password registration date and time are compared with the date and time when the external service is used, and it is detected that the predetermined period has passed, and the password is entered by prompting the user to enter the password again. It can be replaced. Therefore, the stored password can be kept up-to-date and the correctness can be ensured.
[Access control information DB]
FIG. 10 shows an example of access control information stored in the access control information DB 13d. The access control information means that when a user uses an external service by any home appliance in the home network 4, a specific user uses the external service depending on the content provided by the external service. It is information for restricting. For example, when a minor child uses a specific external service, there is a case where the parent who is the guardian needs to consent. At this time, the guardian can restrict the use of the external service by setting the access control information in advance. In this example, the access control information DB 13d stores access control information including the user ID of the person who uses the external service, the use restriction condition, the use restriction method, and the user ID of the administrator who manages the use restriction in one record. ing. By using this access control information, it is possible to restrict the use of an external service that matches the use restriction condition.
[0024]
FIG. 11 shows an example of a registration screen for registering access control information. This screen is provided from the HGW server 2 to a personal computer or the like in the home appliance group 1. The user may input the access control information from the screen. Further, the HGW server 2 may acquire the access control information from a supplier that provides the access control information and store it in the access control information DB 13d. In addition, when there are information on a plurality of use restriction conditions, use restriction methods, etc., it is preferable that priority order can be set.
[0025]
FIG. 12 shows another example of access control information stored in the access control information DB 13d. In this example, the access control information DB 13d stores access control information including a user ID of a person who uses an external service, a connectable address, and a user ID of an administrator who manages usage restrictions in one record. By accumulating address information of external services that can be used for each user, it is possible to limit the use of external services other than the addresses set by each user.
[0026]
FIG. 13 shows an example of a registration screen for registering the access control information. The registration method is the same as described above.
Registration of information in each database in the profile management unit 13 may be performed using various input means included in the HGW server 2 instead of from each home appliance in the home appliance group 1.
[Status Management Department]
Next, each part of the household appliance management part 12 is demonstrated.
[0027]
The status management unit 12 a manages the usage status of any home appliance connected to the HGW server 2. For example, which household appliances are used by who, what functions the household appliances used have, what users are starting to use which external services, etc. Manage. Further, it is determined that authentication information such as a personal authentication ID and a usage authentication ID is necessary, and it is determined whether the authentication information can be input by a device currently used by the user. If the authentication information can be input from the currently used device, the device is requested to input the authentication information. On the other hand, when the authentication information cannot be input from the device, the authentication information is requested to be input from the home appliance that can input the authentication information selected by the home appliance selection unit 12c.
[0028]
In addition, a user using any home appliance is about to start using an external service, or is requested to use a usage authentication ID from the external server 3 when using the external service, and the usage authentication ID needs to be input. If this is the case, it is determined whether the external service is used for the first time. Whether the service is used for the first time is first determined by the status management unit 12a as to which external service is currently used, and then determined based on whether the information on the external service is stored in the service usage information DB 13c. To do. If it is not the first use, the status management unit 12a does not request the use authentication ID. On the other hand, in the case of an external service used for the first time, the status management unit 12a requests the user to input a usage authentication ID in response to a request from the external server 3.
[Authentication processor]
When the personal authentication ID is input from the household electrical appliance group 1 in the home network 4, the authentication processing unit 12b determines whether the input information matches the information stored in the user information DB 13a. . If they match, the use of this home appliance is permitted, and if it does not match, it is prohibited. Further, the authentication processing unit 12 b reads the usage authentication ID of the user of the external service from the service usage information DB 13 c and transmits the usage authentication ID to the external server 3 via the gateway unit 10.
[0029]
It is preferable that the authentication processing unit 12b stores service usage information such as the address of the external server 3 that provides the external service used for the first time and the input usage authentication ID in the service usage information DB 13c.
[Home Appliance Selection Department]
It is required for home appliances currently used by users when a personal authentication ID is required to use home appliances in the home network 4 or when a use authentication ID is required to use an external service. You may not be able to enter authentication information such as passwords. For example, in the refrigerator 1a that does not have a fingerprint input function, there is a scene where a personal authentication ID or a usage authentication ID by a fingerprint is required. In this case, the home appliance selection unit 12c can input the personal authentication ID and the use authentication ID requested from the home appliance group 1 connected to the home network 4 with reference to the input / output function data of the home appliance information DB 13b. Select household appliances. And the situation management part 12a requests | requires the input of the authentication information by the household appliances. As described above, it is preferable that a plurality of input home appliances can be selected and authentication information input can be received from the home appliance optimal for input.
[Access control section]
Based on the access control information in the access control information DB 13d, the access control unit 12d permits the user to use only a specific external service or prohibits the use of a specific external service.
(2) Process flow
Next, the flow of processing in the authentication system will be described.
(2-1) Flow of authentication process
FIG. 14 is a flowchart showing an example of the flow of the personal authentication process of FIG.
[0030]
Step S1: The status management unit 12a of the HGW server 2 detects that the user A is about to start using any home appliance 1a in the home network 4. For example, the user A carries a non-contact type IC card in which his / her user ID is stored, and when the user A approaches the home appliance (refrigerator in FIG. 2) 1a, the user A is built in the home appliance 1a. The read device (not shown) reads the contents of the IC card. Thereby, the user ID of the user A may be grasped and it may be determined that the user A is about to start using the home appliance 1a. In addition, you may judge that the user A is going to start using the household appliances 1a by detecting the input of the user ID by the user A. In addition, it is not judged whether the home appliance 1a is used by the input of the IC card or the user A, but is detected that the user A is approaching by an infrared sensor or the like, or that the user A touches the home appliance 1a. Use may be determined by detection.
[0031]
Step S2: The situation management unit 12a determines whether the user A can input a necessary personal authentication ID from the home appliance 1a. Specifically, the situation management unit 12a requests a personal authentication ID using a fingerprint, but if the home appliance 1a does not have a fingerprint input function, the home appliance 1a determines that the user authentication ID cannot be input. Which type of personal authentication ID is requested varies depending on the user information stored in the user information DB 13a, the needs of the home that constructs the home network 4, and the like.
[0032]
Step S3: When the personal authentication ID requested by the home appliance 1a cannot be input, the home appliance selection unit 12c selects another inputable home appliance 1b. As described above, the home appliance selection unit 12c selects a plurality of home appliances 1b, 1c... And selects the home appliance 1b most suitable for input, for example, the home appliance 1b closest to the current position of the user A. You may make it select.
[0033]
Step S4: When it is determined that the personal authentication ID requested in Step S2 can be input from the home appliance 1a, or when the home appliance 1b capable of inputting the personal authentication ID requested in Step S3 is selected, the HGW server The second status management unit 12a requests the user A to input a personal authentication ID. When requesting an input in the home appliance 1a, the status management unit 12a displays a message “please enter the personal authentication ID” on a display screen of the home appliance 1a, for example. On the other hand, when requesting input in the home appliance 1b, for example, a message “Please enter your identity ID. Use the home appliance 1b for input” on the display screen of the home appliance 1a. Display (see FIG. 2).
[0034]
Step S5: The input / output unit 11 receives the personal authentication ID input by the home appliance 1a or 1b.
Step S6: The authentication processing unit 12b of the HGW server 2 determines whether or not the received user authentication ID matches any of the stored user information DB 13a. If the user ID is known in step S1, the user authentication ID stored in the user information DB 13a in association with the user ID is read using the user ID as a key, and whether or not the input ID matches the input information. It may be determined.
[0035]
Step S7: When the personal authentication ID is authenticated in step S6, the user A can use the home appliance 1a. If the user A is not authenticated, the user A cannot use the home appliance 1a.
When a personal authentication ID is requested by the above personal authentication process, the HGW server 2 determines whether the requested personal authentication ID can be input and selects a home electric appliance that can be input. Even if input is impossible, input is possible with other home appliances. In addition, since a person other than the family cannot use the home appliance without permission, security in the home network 4 can be ensured at the same time.
(2-2) Flow of usage authentication processing
FIG. 15 is a flowchart showing an example of the flow of the use authentication process of FIG. This process is executed, for example, after the user A of the home appliance 1a is authenticated by the above-described personal authentication process.
[0036]
Step S10: The status management unit 12a determines whether it is necessary to input a usage authentication ID for using the external service. If necessary, the status management unit 12a proceeds to step S11. The case where the use authentication ID needs to be input is, for example, when the status management unit 12a detects a connection request from any home appliance 1a to the external server 3, or the use authentication ID from the external server 3 to the home appliance 1a. The case where an input request is detected.
[0037]
Step S11: The situation management unit 12a has been authenticated by the above-described personal authentication process when, for example, the user A has used it once and the connection service is stored in the service usage information DB 13c. Based on the user ID of user A, it is determined in the same manner as in step S2 whether or not the requested use authentication ID can be input from the home appliance 1a. Alternatively, it may be determined whether the usage authentication ID requested from the external server 3 can be input from the home appliance 1a.
[0038]
Step S12: When the usage authentication ID cannot be input by the home appliance 1a, the home appliance selection unit 12c selects another inputable home appliance 1b in the same manner as the process in Step S3. Here, for ease of explanation, a case where one home appliance 1b is selected is considered.
Step S13: If it is determined in step S11 that the usage authentication ID can be input from the home appliance 1a, or if the home appliance 1b in which the usage authentication ID can be input is selected in step S12, the situation management unit 12a uses The user A is requested for a use authentication ID in the same manner as the process in step S4.
[0039]
Step S14: The input / output unit 11 accepts a usage authentication ID.
Step S15: The authentication processing unit 12b transmits the use authentication ID to the external server 3 via the gateway unit 10.
Step S <b> 16: After the use authentication ID is authenticated by the external server 3, the result is transmitted to the HGW server 2 via the gateway unit 10. The situation management unit 12a performs processing according to the authentication result. For example, if the input usage authentication ID is authenticated, the situation management unit 12a connects the home appliance 1a and the external server 3. On the other hand, if it is not authenticated, the connection with the external server 3 is canceled or disconnected.
[0040]
When a usage authentication ID is requested by the above-described usage authentication process, the HGW server 2 determines whether the requested usage authentication ID can be input and selects an inputable home appliance. Even if the input is impossible with 1, it is possible to input with other home appliances. Also, security within the home network 4 can be ensured at the same time.
[0041]
Here, in the above-described personal authentication processing and usage authentication processing, if the personal authentication ID is confirmed by one home appliance in the home network 4, the use of all home appliances in the home network 4 is permitted. However, only the use of one home appliance for which authentication processing has been performed may be permitted. In this case, a personal authentication process is performed for each home appliance.
[0042]
<Example 2>
The authentication system according to the second embodiment has a function that makes it possible to omit the use authentication ID when the user A uses the external service when the validity of the user A is confirmed by the personal authentication process. is doing.
(1) Outline of conversion process
FIG. 16 is a schematic explanatory diagram of an authentication system according to the second embodiment. Here, the authentication system includes the same components as those of the first embodiment shown in FIGS.
[0043]
A user A (user ID = ichiro) uses, for example, a personal computer 1c which is a home appliance in the home network 4. User A is going to connect to the external server 3a whose connection destination address is www.aaa.co.jp. The HGW server 2 grasps the status of the user A of the personal computer 1c, the connection destination address, etc. by the status management unit 12a. Next, the status management unit 12a in the HGW server 2 determines whether the address of the external server 3a to be connected is registered based on the service usage information in the service usage information DB 13c. In the case of FIG. 16, the connection destination address www.aaa.co.jp and the connection password AAAAAA are registered in the service usage information DB 13c for the user ID = ichiro. Therefore, the authentication processing unit 12b converts the user A's personal authentication ID into a connection password using the user ID as a key, and transmits the connection password to the external server 3a via the gateway unit 10. In this way, the personal computer 1c and the external server 3a can be connected without requiring the user A for a connection password.
(2) Flow of conversion process
FIG. 17 is a flowchart illustrating an example of the flow of conversion processing in the authentication system according to the second embodiment. This process is executed, for example, after the user A of the home appliance 1c is authenticated by the above-described personal authentication process.
[0044]
Step S20: The status management unit 12a of the HGW server 2 determines whether or not it is necessary to input a usage authentication ID for using the external service, and if necessary, proceeds to Step S21.
Step S21: The status management unit 12a of the HGW server 2 determines which external server 3a the user A is connected to or connected to, which user A is about to start using the external service, and which external server is authenticated for use. Know if you are requesting an ID. Next, the status management unit 12a determines whether the usage authentication ID related to the external server 3a has been registered in the service usage information DB 13c.
[0045]
Step S22: If it is determined in step S21 that the usage authentication ID has been registered in the service usage information DB 13c, the authentication processing unit 12b uses the user ID as a key to obtain the usage authentication ID of the user A from the profile management unit 13. read out. Step S23: If it is determined in step S21 that the usage authentication ID has not been registered in the service usage information DB 13c, the status management unit 12a of the HGW server 2 requests the user A to input the usage authentication ID.
[0046]
Step S <b> 24: The HGW server 2 receives the usage authentication ID from the input / output unit 11.
Step S25: When the usage authentication ID is read out at step S22 or when the usage authentication ID is received at step S24, the gateway unit 10 transmits the usage authentication ID to the external server 3a.
[0047]
Step S26: After the authentication of the use authentication ID by the external server 3a, the result is transmitted to the HGW server 2 via the gateway unit 10. If the use authentication ID is authenticated, the situation management unit 12a performs processing according to the authentication result in the same manner as the processing in step S16.
Therefore, if the usage authentication ID is registered in the service usage information DB 13c by the above conversion process, the personal authentication ID can be converted into the usage authentication ID. Therefore, the trouble of requesting the user A to input the use authentication ID can be omitted.
[0048]
In the above, after the validity of the user A is confirmed by the personal authentication process, an external service is accessed using the usage authentication ID stored in advance in association with the user A. The use authentication ID that can be input by the home appliance currently used by the person A may be converted into the requested use authentication ID. For example, when fingerprint data is requested as a usage authentication ID by the external server 3a, but fingerprint input is not possible with the currently used home appliance, the usage authentication ID that can be input with the currently used home appliance Either input may be accepted, and the input usage authentication ID may be converted into fingerprint data. In addition, in the above, the usage authentication ID necessary for using the external service is the target of conversion, but any personal authentication ID that can be input on the home appliance currently used is converted into the requested personal authentication ID. You may do it. For example, when fingerprint data is requested by the HGW server 2 as a personal authentication ID, but fingerprint input is not possible with the home appliance currently used by the user A, it can be entered with the current home appliance. The user authentication ID may be requested, and the input user authentication ID may be converted into fingerprint data.
[0049]
<Example 3>
The authentication system according to the third embodiment has a function of restricting the use when an external service in which the user A of the home appliance is restricted is used.
(1) Outline of usage restriction processing
FIG. 18 is a schematic explanatory diagram of an authentication system according to the third embodiment. Here, the authentication system includes the same components as those of the first embodiment shown in FIGS.
[0050]
The user A is about to start using an external service provided by the external server 3b using, for example, the personal computer 1c which is a home appliance in the home network 4. A user B (hereinafter, referred to as an administrator B) who manages usage restrictions on external services uses the television 1d. The HGW server 2 has a situation where the user A is about to start using an external service by the personal computer 1c from the situation management unit 12a, a situation where the administrator B is using the television 1d, and an input / output function of the personal computer 1c and the television 1d. Etc. Next, the access control unit 12d in the HGW server 2 determines whether or not the use of the external service is permitted from the access control information. Here, when the use of the external service is prohibited, for example, the screen of FIG. 18B is displayed on the screen of the personal computer 1c to notify the user A that the use is prohibited. Alternatively, in order to confirm with the administrator B whether to permit the use, for example, the screen of FIG. 18C is displayed on the screen of the television 1d used by the administrator B, and the personal authentication ID of the administrator B is set. Request. Here, when the personal authentication ID of the administrator B is input, it is determined that the administrator B has permitted the use of the external service by the user A, and if the authentication processing unit 12b authenticates, the situation of the HGW server 2 The management unit 12a connects the external server 3b and the personal computer 1c.
[0051]
In the above usage restriction processing, the parent restricts the use of the external service by the child when the person using the external service (for example, the child) and the person who permits the use of the external service (for example, the parent) are in different places. It is effective in the case. Further, when any home appliance operates spontaneously, it is also effective when the administrator B of the home appliance group 1 restricts or permits the operation.
(2) Flow of usage restriction processing
FIG. 19 is a flowchart illustrating an example of the flow of use restriction processing in the authentication system according to the third embodiment. This process is executed, for example, after the users of the home appliances 1c and 1d are authenticated by the above-described personal authentication process.
[0052]
Step S30: The status management unit 12a of the HGW server 2 sends a connection request to any external server 3, in this case, for example, the external server 3b, from any household electrical appliance 1c used by the user A If detected, the process proceeds to step S31.
Step S31: The situation management unit 12a grasps the situation in which the administrator B who manages the use restriction of the external service is using the home appliance 1d, the input / output functions of the home appliances 1c and 1d, and the like. Further, the access control unit 12d of the HGW server 2 determines whether or not the use of the external service provided by the external server 3b by the user A is permitted based on the access control information. When the use is permitted, the situation management unit 12a connects the home appliance 1c and the external server 3b (step S38 described later).
[0053]
Step S32: When it is determined in step S31 that the use of the external service by the user A is not permitted, the status management unit 12a notifies the administrator B. The notification to the administrator B is performed using the output function of the home appliance 1d used by the administrator B. For example, when the administrator B is using a television, the user A is notified through the television screen that the user A is about to start using the external service. In addition, when the administrator B uses the radio, the notification is made through the radio speaker.
[0054]
Step S33: After notifying the administrator B in step S32, the situation management unit 12a inquires of the administrator B whether the administrator B permits the user A to use the external service. Here, instead of using permission, the administrator B is requested to input the personal authentication ID.
Steps S34 and S35: The status management unit 12a determines whether or not a personal authentication ID has been obtained (S34). When the personal authentication ID is not obtained, that is, when the use permission of the external service is not obtained, the status management unit 12a stops the connection between the home appliance 1c and the external server 3b (S35).
[0055]
Step S36: When the personal authentication ID is obtained in step S34, the authentication processing unit 12b performs an authentication process to determine whether or not the personal authentication ID input by the administrator B is a genuine ID.
Steps S37 and S38: When the administrator B is authenticated in step S36, the status management unit 12a connects the home appliance 1c and the external server 3b (S38). When the administrator B is not authenticated, the situation management unit 12a stops the connection between the home appliance 1c and the external server 3b (S35).
[0056]
Although the above flow of use restriction processing includes the step of requesting the administrator B to use the external service, the step of notifying the user A that the external service cannot be used may be used in combination. .
The use restriction process described above can prevent the user A of the home appliance in the home network 4 from using the external service without restriction, and can improve the security in the home network 4.
[0057]
<Other examples>
A program for executing the method in the HGW server 2 and a computer-readable recording medium on which the program is recorded are included in the present invention. Here, examples of the recording medium include a computer readable / writable flexible disk, hard disk, semiconductor memory, CD-ROM, DVD, magneto-optical disk (MO), and others.
[0058]
<Appendix>
(Appendix 1)
A device selection method performed by a computer connected to a group of household electrical appliances including a first household electrical appliance and a second household electrical appliance via a network,
A device data storage step for storing home appliance data relating to each home appliance included in the home appliance group; and
Input that detects occurrence of a predetermined event and determines whether or not the first home appliance can accept input of identification data corresponding to the generated first event based on home appliance data of the first home appliance A decision step;
When the first home appliance determines that the input of the identification data cannot be accepted, a device selection step of selecting the second home appliance that can accept the input of the identification data based on the home appliance data;
Device selection method including:
[0059]
(Appendix 2)
The household appliance group further includes a third household appliance,
The device selection step further extracts the third home appliance that can accept input of identification data according to the first event based on the home appliance data and selects the selected second home appliance or the second Select one of the 3 home appliances,
The device selection method according to attachment 1.
[0060]
(Appendix 3)
A user storage step of storing identification data corresponding to each event including the first event for each user permitted to use the household electrical appliance group;
Identification data (corresponding to the first event of the user of the first home appliance (hereinafter referred to as the first user) for any of the home appliances selected in the device selection step (hereinafter referred to as the selected home appliance) Input request step for requesting the first user to input (hereinafter referred to as first identification data);
The device selection method according to appendix 1 or 2, further comprising:
[0061]
In this method, identification data that needs to be input can be determined based on a combination of the type of event that has occurred and the user, and this can be input by the user.
(Appendix 4)
Whether to compare the input data input to the selected household electrical appliance with the first identification data stored in the user storage step and to authenticate the first user based on the comparison result 4. The device selection method according to appendix 3, further comprising an authentication step of determining
[0062]
For example, by starting the use of home appliances by authenticating the user with identification data, it is possible to prevent the home appliances in the home network from being used by anyone other than family members. Therefore, security in the home network can be enhanced.
(Appendix 5)
The input determination step detects occurrence of a predetermined second event after the authentication step,
Conversion that converts the first identification data into identification data corresponding to the second event of the first user (hereinafter referred to as second identification data) when the first user is authenticated in the authentication step. The device selection method according to appendix 4, further comprising a step.
[0063]
For example, after the first user inputs and authenticates identification data necessary for using the first home appliance, the first user tries to connect to the external server on the external network from the first home appliance. . In this case, since the first user has already been authenticated, the first identification data of the first user is converted into the second identification data necessary for connection to the external server. This saves the trouble of requesting input of the second identification data.
[0064]
(Appendix 6)
An authorized information storage step of storing or acquiring an address of an authorized computer that is a computer on a second network different from the network and that is permitted to connect from the household electrical appliance group;
Detecting a connection request from the first home appliance operated by the first user authenticated by the authentication step to an arbitrary computer on the second network, whether or not the computer is a certified computer, An authorization step for judging based on the address stored or acquired in the authorization information storage step;
If the computer is not an authorized computer, a connection request step for requesting connection permission to the computer to a user of a home appliance other than the first home appliance (hereinafter referred to as a second user);
A connection control step of accepting a response to the connection permission request and executing connection or cancellation of the connection between the first home appliance and the computer according to a response result;
The device selection method according to appendix 4, further comprising:
[0065]
By using this method, for example, a parent can restrict websites that children connect from a personal computer. You can access websites that you allow, but you won't be able to connect to websites you don't allow without your permission. Of course, you may not always connect to an unauthorized website without asking for confirmation from the parent.
[0066]
(Appendix 7)
A device selection device for a computer connected via a network with a group of home appliances including a first home appliance and a second home appliance,
Appliance data storage means for storing appliance data relating to each appliance included in the appliance group; and
Input that detects occurrence of a predetermined event and determines whether or not the first home appliance can accept input of identification data corresponding to the generated first event based on home appliance data of the first home appliance Judgment means,
When the first home appliance determines that the input of the identification data cannot be accepted, the device selection means for selecting the second home appliance that can accept the input of the identification data based on the home appliance data;
A device selection device including:
[0067]
(Appendix 8)
A device selection program executed by a computer connected via a network with a group of home appliances including a first home appliance and a second home appliance,
Appliance data storage means for storing appliance data relating to each appliance included in the appliance group,
Input that detects occurrence of a predetermined event and determines whether or not the first home appliance can accept input of identification data corresponding to the generated first event based on home appliance data of the first home appliance Judgment means,
A device selection means for selecting, based on the home appliance data, the second home appliance that can accept the input of the identification data, when the first home appliance determines that the input of the identification data cannot be accepted;
A device selection program for causing the computer to function as
[0068]
(Appendix 9)
A computer-readable recording medium that records a device selection program executed by a computer connected via a network to a group of home appliances including a first home appliance and a second home appliance,
A device data storage step for storing home appliance data relating to each home appliance included in the home appliance group; and
Input that detects occurrence of a predetermined event and determines whether or not the first home appliance can accept input of identification data corresponding to the generated first event based on home appliance data of the first home appliance A decision step;
When the first home appliance determines that the input of the identification data cannot be accepted, a device selection step of selecting the second home appliance that can accept the input of the identification data based on the home appliance data;
The computer-readable recording medium which recorded the apparatus selection program which performs this.
[0069]
【The invention's effect】
If this invention is used, a user's authentication can be performed irrespective of the kind of household appliances which are going to be used in a home network. In addition, the use of external services by users of the home network can be restricted.
[Brief description of the drawings]
FIG. 1 is an explanatory diagram illustrating a connection relationship among a household electrical appliance group, an HGW server, and an external server.
FIG. 2 is an explanatory diagram illustrating a case where the user authentication ID cannot be input to the home appliance that the user intends to use.
FIG. 3 is an explanatory diagram illustrating a case where a user authentication ID cannot be input to a home appliance that a user intends to use.
FIG. 4 shows an example of the configuration of an HGW server.
FIG. 5 shows an example of user information stored in a user information DB.
FIG. 6 shows an example of a user information registration screen.
FIG. 7 shows an example of home appliance information stored in a home appliance information DB.
FIG. 8 shows an example of a home appliance information registration screen.
FIG. 9 shows an example of service usage information stored in a service usage information DB.
FIG. 10 shows an example of access control information stored in the access control information DB.
FIG. 11 shows an example of a registration screen for registering access control information.
FIG. 12 shows another example of access control information stored in the access control information DB.
FIG. 13 shows another example of a registration screen for registering access control information.
FIG. 14 is a flowchart showing an example of the flow of personal authentication processing.
FIG. 15 is a flowchart showing an example of the flow of use authentication processing.
FIG. 16 is a schematic explanatory diagram of an authentication system according to a second embodiment.
FIG. 17 is a flowchart showing an example of the flow of processing in the authentication system according to the second embodiment.
FIG. 18A is a schematic explanatory diagram of an authentication system according to a third embodiment.
(B) Screen example of user A in the authentication system according to the third embodiment.
(C) Screen example of administrator B in the authentication system according to the third embodiment.
FIG. 19 is a flowchart illustrating an example of a process flow in the authentication system according to the third embodiment;
[Explanation of symbols]
1: Home appliance group
2: HGW server
3: External server
4: Home network
5: External network
10: Gateway part
11: Input / output section
12: Home Appliance Management Department
12a: Situation management department
12b: Authentication processing unit
12c: Home appliance selection unit
12d: Access control unit
13: Profile management department
13a: User information DB
13b: Home appliance information DB
13c: Service usage information DB
13d: Access control information DB

Claims (7)

A device selection method performed by a computer connected to a group of household electrical appliances including a first household electrical appliance and a second household electrical appliance via a network,
A device data storage step for storing home appliance data relating to each home appliance included in the home appliance group; and
A user storage step of storing identification data corresponding to a predetermined event for the household electrical appliance group for each user and type permitted to use the household electrical appliance group;
Detecting the first event is a predetermined event for the first home device, when the first event has been detected is the start of use of the first home appliance, any stored in the user storage step A user specifying step for specifying whether or not the first user who is the user has started use;
Whether first the first home appliance the input of the first identification data is identification data corresponding to the start of use of the first home device stored in association with the user can accept that the identified, An input determination step for determining based on home appliance data of the first home appliance;
If the first home device is determined to not accept the input of the first identification data, device the second home device can accept an input of said first identification data, selected based on the home appliance data A selection step;
The input data input to the selected second home appliance is compared with the first identification data stored in the user storing step, and the first user is authenticated based on the comparison result. An authentication step for deciding whether to
In the input determination step, the occurrence of a predetermined second event is detected after the authentication step,
A conversion step of converting the first identification data into second identification data that is identification data corresponding to the second event of the first user when the first user is authenticated in the authentication step;
Device selection method including: The household appliance group further includes a third household appliance,
The device selection step further extracts the third home appliance that can accept input of identification data according to the first event based on the home appliance data and selects the selected second home appliance or the second Select one of the 3 home appliances,
The device selection method according to claim 1. A device selection device for a computer connected via a network with a group of home appliances including a first home appliance and a second home appliance,
Appliance data storage means for storing appliance data relating to each appliance included in the appliance group; and
User storage means for storing identification data corresponding to a predetermined event for the household electrical appliance group for each user and type permitted to use the household electrical appliance group,
Detecting the first event is a predetermined event for the first home device, when the first event has been detected is the start of use of the first home appliance, any stored in the user storage means A user specifying means for specifying whether or not the first user who is the user has started use;
Whether first the first home appliance the input of the first identification data is identification data corresponding to the start of use of the first home device stored in association with the user can accept that the identified, Input determining means for determining based on home appliance data of the first home appliance;
If the first home device is determined to not accept the input of the first identification data, device the second home device can accept an input of said first identification data, selected based on the home appliance data A selection means;
The input data input to the selected second home appliance is compared with the first identification data stored in the user storage means, and the first user is authenticated based on the comparison result. An authentication means for deciding whether to
The input determination means detects the occurrence of a predetermined second event after the authentication,
Conversion means for converting the first identification data into second identification data which is identification data corresponding to the second event of the first user when the first user is authenticated by the authentication means;
A device selection device including: Authorization information storage means for storing or acquiring an address of an authorization computer that is a computer on a second network different from the network and that is permitted to connect from the household electrical appliance group;
Detecting a connection request from the first home appliance operated by the first user who is authenticated by the authentication means to any computer on the second network, whether or not the computer is a certified computer, Authorization means for judging based on the address stored or acquired by the authorization information storage means;
If the computer is not a certified computer, a connection request means for requesting connection permission to the computer to a second user who is a user of a household electrical appliance other than the first household electrical appliance;
A connection control means for accepting a response to the connection permission request, and executing connection or cancellation of the connection between the first home appliance and the computer according to a response result;
The device selection device according to claim 3 , further comprising: It is identification data corresponding to the start of use of the first home appliance of the first user who is the user of the first home appliance with respect to the selected home appliance selected by the appliance selection means. The apparatus selection apparatus of Claim 3 or 4 which further contains the input request | requirement means which requests | requires the said 1st user to input 1st identification data. A device selection program executed by a computer connected via a network with a group of home appliances including a first home appliance and a second home appliance,
Appliance data storage means for storing appliance data relating to each appliance included in the appliance group,
User storage means for storing identification data corresponding to a predetermined event for the household electrical appliance group for each user and type permitted to use the household electrical appliance group,
Detecting the first event is a predetermined event for the first home device, when the first event has been detected is the start of use of the first home appliance, any stored in the user storage means A user specifying means for specifying whether the use is started by the first user who is a user;
Whether first the first home appliance the input of the first identification data is identification data corresponding to the start of use of the first home device stored in association with the user can accept that the identified, Input determination means for determining based on the home appliance data of the first home appliance;
If the first home device is determined to not accept the input of the first identification data, device the second home device can accept an input of said first identification data, selected based on the home appliance data Selection means,
The input data input to the selected second home appliance is compared with the first identification data stored in the user storage means, and the first user is authenticated based on the comparison result. Authentication means for deciding whether to
The input determination means detects the occurrence of a predetermined second event after the authentication,
If the first user has been authenticated by said authentication means, converting means for converting the first identification data, the second identification data is identification data corresponding to the second event of the first use for persons,
A device selection program for causing the computer to function as A computer-readable recording medium that records a device selection program executed by a computer connected via a network to a group of home appliances including a first home appliance and a second home appliance,
A device data storage step for storing home appliance data relating to each home appliance included in the home appliance group; and
A user storage step of storing identification data corresponding to a predetermined event for the household electrical appliance group for each user and type permitted to use the household electrical appliance group;
Detecting the first event is a predetermined event for the first home device, when the first event has been detected is the start of use of the first home appliance, any stored in the user storage step A user specifying step for specifying whether or not the first user who is the user has started use;
Whether first the first home appliance the input of the first identification data is identification data corresponding to the start of use of the first home device stored in association with the user can accept that the identified, An input determination step for determining based on home appliance data of the first home appliance;
If the first home device is determined to not accept the input of the first identification data, device the second home device can accept an input of said first identification data, selected based on the home appliance data A selection step;
The input data input to the selected second home appliance is compared with the first identification data stored in the user storing step, and the first user is authenticated based on the comparison result. An authentication step for deciding whether to
In the input determination step, the occurrence of a predetermined second event is detected after the authentication step,
A conversion step of converting the first identification data into second identification data that is identification data corresponding to the second event of the first user when the first user is authenticated in the authentication step;
The computer-readable recording medium which recorded the apparatus selection program which performs this.

Images