JP2000092567A - Authenticating device for terminal equipment - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent illegal use in two or more terminal equipments. SOLUTION: A terminal equipment 100 sends current position information to an information center 300 together with user ID and a password. A authenticating device 36 in the center 300 certificates cates a user by the user ID and the password stored in an authenticating can memory 38 and judges whether the terminal equipment 100 can be moved from position information inputted at the time of preceding use and position information inputted at the time of current use. At the time of judging the disablement of movement, the use is rejected.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an authentication device in an information center or the like for providing an information providing service, and more particularly to prevention of unauthorized use.

[0002]

2. Description of the Related Art Conventionally, various communication systems using computers have become widespread. E-mails (messages) are transmitted and received using terminal devices such as portable terminals and in-vehicle terminals, and online information services are used. Or something has been proposed. In particular, while the vehicle is traveling, there are high demands for information on parking lots around the destination and traffic information, and a desire to use an online information service.

[0003] For example, Japanese Patent Application Laid-Open No. 7-105492 discloses a system in which a driver can obtain desired information (various facility information, restaurant information, etc.) using an on-vehicle telephone.

[0004] Here, this online information service is
In many cases, only users registered in advance are permitted. In this case, it is common to use a service (access by a user) after taking steps such as inputting a user ID and a password.

[0005]

However, in such a terminal device, when a user ID and a password are known, a plurality of users can access an information center from various places and receive a service. May occur. If access from the same user occurs at the same time, it is possible not to permit it. However, if the access time is different, unauthorized use cannot be prevented.

SUMMARY OF THE INVENTION It is an object of the present invention to provide an authentication apparatus for a terminal device which can prevent unauthorized use of a single user ID by a plurality of users from a plurality of places.

[0007]

SUMMARY OF THE INVENTION The present invention is an authentication device for performing authentication for access from a terminal device, and performing authentication using a user ID and a password registered for access from a terminal device. In addition, the use position information is transmitted from the terminal device, and when a change in the position information in a plurality of accesses is determined to be physically immovable, access is not permitted.

[0008] As described above, according to the present invention, not only collation of the password but also the possibility of movement is determined from the change in the position information, and if it is determined that movement is not possible, access is rejected. Thus, it is possible to prevent unauthorized use in which a plurality of users using a plurality of terminal devices access with the same user ID and password.

[0009]

Embodiments of the present invention (hereinafter referred to as embodiments) will be described below with reference to the drawings.

FIG. 1 is a diagram showing an entire information providing system using an apparatus according to an embodiment.

This system comprises a terminal device 100 mounted on a vehicle,
It comprises a public telephone line base station 200 and an information center 300 for providing information providing services.

The terminal device 100 has, as communication means, a mobile phone 10 for performing wireless telephone communication. This mobile phone 10 is connected to a communication control device 12. The communication control device 12 controls the mobile phone 10 to perform a process of acquiring information from the information center 300 and manage transmission and reception of e-mail. For this purpose, the communication control device 12 has a built-in modem for performing modulation / demodulation processing for data communication.

The mobile phone 10 is connected to a communication control device 12 via a connection device called a cradle connected to an antenna, a speaker, a microphone, and the like. It is also preferable to operate as. In this case, a modem for data communication may be built in the cradle.

A navigation device 14 is connected to the communication control device 12. The navigation device 14 performs various processes for route guidance. The communication control device 12 and the navigation device 14 include a display 16, a speaker 18, an operation unit 20, and a storage unit 22.
Is connected. The display 16 is composed of a liquid crystal display or the like, and displays a map and various texts. The speaker 18 is also used as an audio speaker, and outputs various guide sounds and information reading sounds. The operation unit 20 includes several switches and a touch panel provided on the front of the display 16, and inputs various kinds of information by a user operation. Also, the storage unit 2
Reference numeral 2 stores received online service information, e-mail to be transmitted / received, and other various information.

The navigation device 14 has a map database 24 for storing map data and a position detecting device 26 such as a GPS device.
, The map around the current position is acquired from the map database 24 while constantly detecting the current position. Then, a map around the current location including the current position mark is displayed on the display 16. It is also preferable that the position detection device 26 performs position detection using a beacon receiver, autonomous traveling based on traveling distance or direction, map matching, or the like.

On the other hand, a large number of base stations 200 are provided on the ground, and the terminal device 100 is connected to the nearest base station 20.
Wireless communication is performed with 0. The base station 200 is connected to the information center 300 via a telephone station or the like.
0 and the information center 300 are connected via a line. It is substantially the same whether the information center or the mobile phone makes a call.

The information center 300 has a communication unit 30 for controlling communication with the outside. The communication unit 30
Is connected to not only the terminal device 100 but also various external databases and the like, and collects various information. The processing unit 32 is connected to the communication unit 30. This processing unit 32
The exchange of information via the communication unit 30 is controlled. In addition, a database 34 that stores various information is connected to the processing unit 32. The processing unit 32 stores various information in the database 34, reads out appropriate information from the database 34 in response to a request, and sends out the information via the communication unit 30.

An authentication device 36 is connected to the processing unit 32. The authentication device 36 authenticates whether or not the terminal device 100 that has accessed is an authorized user registered in advance. An authentication memory 38 connected to the authentication device 36 stores data for user authentication. As the user authentication data, a password is stored in association with the user ID, and the time of last use and the current position data are stored. here,
The use time may be sent from the terminal device 100, or the current time detected by its own clock may be written. The current position data is written as it is sent.

When the terminal device 100 intends to receive provision of a service (for example, acquisition of information) from the information center 300, a user ID, a password, and a use telephone number are registered in the information center 300 in advance. There is a need. This registration work may be performed by a paper contract or online. In any case, a user ID, password,
The use telephone number is stored in the authentication memory 38 of the information center 300. The terminal device 100 also stores the user ID. This user ID is stored in a memory whose stored contents do not disappear when the power is turned off.

[Authentication Processing] The processing when a user attempts to obtain information from the information center 300 using the terminal device 100 will be described with reference to FIG. First,
The user performs a call operation using the operation unit 20. Thereby, the communication control device 12 controls the mobile phone 10 to transmit to the information center 300. Information center 30
When the line between the terminal device 100 and the terminal device 100 is connected, the terminal device 100 transmits the user ID and the password, the own vehicle position, and the information request to the information center 300 (S
11). Here, the own vehicle position is the current position detected by the position detection device 26. The information request is information on desired information input by the operation unit 20.

The information center 300 determines a user based on the data stored in the authentication memory 38. That is, the password stored corresponding to the transmitted user ID is read out from the authentication memory 38 (S2).
1) It is determined whether the transmitted password matches the read password (S22). Then, when both passwords match, it is determined that the verification is OK. If the user ID is not registered or the passwords do not match, the information provision is rejected as user determination NG (failure) (S25).

Further, the authentication device 36 writes the sent current position and current time (use time) to the authentication memory 38 in correspondence with the user ID. Read the use time and location.

Then, the authentication device 36 determines whether or not it is possible to move based on the sent current position and the previous use time (S23). If it is determined that it is possible to move, information corresponding to the information request is obtained from the database 34 and transmitted as usual (S24). Therefore, the user receives the transmitted information (S12), and the information acquisition process ends.

On the other hand, if it is determined that movement is impossible, provision (access) of the service is rejected as unauthorized use (S25). If the use is refused in S25, this is transmitted to the terminal device 100. Therefore, the user receives this information and ends the processing.

As described above, according to the present embodiment, the terminal device 100 transmits the position data when accessing the information center 300. Therefore, the information center 300
Then, the position of the terminal device 100 that has accessed can be known each time. Then, the own vehicle position is stored together with the use time. As a result, the current terminal device 100
It is possible to determine whether or not the terminal device 100 can be moved based on the position and time of the terminal device 100 and the previous position and time of the terminal device 100. For example, only 1 minute has passed since the last access,
Cannot be moved if there is an access from a distant point, and it is not considered that the access uses the same terminal device 100. By rejecting the use in such cases,
It is possible to effectively prevent an unauthorized use in which a plurality of persons use a service using a plurality of terminal devices 100 using a set of a user ID and a password.

In the terminal device 100, if the position detecting device 26 is not provided, the base station 20 of the portable telephone 10
The position may be determined based on information about 0.
When the information center 300 has data on the position of each base station 200, the information center 300 may receive data for specifying the base station 200. Alternatively, the telephone station may create position data for the base station 200 and notify the information center 300 of the position data. Also, the serial number of the software used is used for the transmission data.
Is given, the illegal copy of the software can be checked by the check in the information center 300, and this can be prevented. In the above embodiment, the description has been given by taking the mobile phone as the communication means, but the present invention is not limited to this. For example, it is possible to use all radio communication media such as a vehicle-mounted telephone, a beacon device such as light and radio waves, two-way satellite communication, business radio, and low-power radio.

[0027]

As described above, according to the present invention,
By performing authentication using the location information, unauthorized use using two or more terminal devices can be effectively prevented.

[Brief description of the drawings]

FIG. 1 is a block diagram showing the overall configuration of a system.

FIG. 2 is a flowchart illustrating an operation of the terminal device when acquiring information.

[Explanation of symbols]

10 mobile phone, 12 communication control device, 14 navigation device, 16 display, 18 speaker, 2
0 operation unit, 22 storage unit, 30 communication unit, 32 processing unit, 34 database, 36 authentication device, 38 authentication memory, 100 terminal device, 200 base station, 300
Information center.

Claims (1)

[Claims] An authentication device for authenticating an access from a terminal device, wherein the authentication is performed using a user ID and a password registered for the access from the terminal device, and a use position of the authentication device is determined from the terminal device. An authentication device for a terminal device, wherein information is transmitted, and access is not permitted when a change in position information in a plurality of accesses is determined to be physically immovable.