JP2002096715A - Method for authorization of driver, its system and its recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To cooperate with an authorization system on a network and prevent burglary of a vehicle by loading the authorization system of a driver on the vehicle. SOLUTION: The driver to ride on the vehicle is demanded to present an electronic certificate to be used for personal authorization on a car loading machine 2. The car loading machine 2 demands authorization by reference with personal information of the driver previously registered in authorization information DB 8 to an authorization organ 3 in accordance with the electronic certificate presented to the car loading machine 2. The car loading machine 2 permits driving of the vehicle only to the driver succeeded in authorization. Additionally, the authorization organ 3 acquires additional information through a network 5 connected to the outside, and reflects it to judgement of whether to drive or not by authorizing by its combination.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method for driver authentication, in which a vehicle is equipped with a vehicle-mounted computer and performs driver authentication by cooperating with an authentication system on a network, a vehicle-mounted system, and a record thereof. Regarding the medium.

[0002]

2. Description of the Related Art A vehicle is unlocked by a driver inserting a key into a door or, in the case of a keyless entry, by turning on a remote control toward a detection unit.
After boarding, the key is further inserted into the ignition switch and turned to the ignition ON position to start the engine and enable driving. Incidentally, the determination as to whether or not the boarded driver is operable is not made at the time of boarding, but is made only by confirming the driver's license when necessary. Therefore, as long as the key is owned, anyone can unlock the vehicle and drive, regardless of whether the driver is a legitimate driver or a stolen person.

On the other hand, with personal authentication performed on the Internet along with the spread of online shopping and the like, for example, an electronic certificate issued by a certification organization is imported into a browser or the like on a personal computer and transmitted to a partner via the Internet. Authentication is performed by presenting. For facilities and equipment that require authentication at the time of use, use magnetic cards, IC cards, etc., and read user registration information from a card reader installed in these facilities or equipment, or use The user himself / herself performs authentication by inputting a registered password or the like.

[0004]

[Problems to be solved by the invention] On the Internet,
In the case of importing a digital certificate issued by a certification authority into a browser on a personal computer, the digital certificate can be used only on the personal computer, and the usage target is limited to sites on the Internet. I have. In addition, in equipment / equipment that requires authentication at the time of use, the registration information recorded on the user's card is read from the card reader installed in these equipment / equipment, or the user himself / herself, When personal authentication is performed by inputting a registered password or the like, these inputs are performed directly by contacting a predetermined input device. Therefore, it is impossible to use any of the above methods for driver authentication. In particular, it is possible to cope with theft prevention, etc., and for vehicles that have coordination with information systems already established, such as police and hospitals. The emergence of a driver authentication system was desired.

SUMMARY OF THE INVENTION The present invention has been made in view of the above circumstances, and has a driver authentication system mounted on a vehicle to enable cooperation with an authentication system on a network to prevent theft of the vehicle. An object of the present invention is to provide a method for driver authentication, a vehicle-mounted system thereof, and a recording medium thereof.

[0006]

According to the present invention, there is provided a method for driver authentication, which prompts a boarding driver to present an electronic certificate to be used for personal authentication, wherein the presented electronic certificate is registered in advance. The personal information of the driver is collated, and only the driver whose match is confirmed as a result of the collation is permitted to drive the vehicle.

Further, in the method for driver authentication of the present invention, the driver in which the personal information is registered is a driver who has been permitted to board the vehicle by the owner of the vehicle in advance.

Further, in the method for driver authentication of the present invention, a license information of the boarding driver is requested to a police information system externally connected via a network, and the license information of the boarding driver is transmitted. Is characterized in that the operation of the vehicle is not permitted.

Further, in the method for driver authentication of the present invention, a request for treatment information of the boarding driver is made to a hospital information system externally connected via a network, and the treatment information of the boarding driver is transmitted. Is characterized in that the operation of the vehicle is not permitted.

A driver authentication system according to the present invention is a driver authentication system which authenticates a boarding driver and permits only a driver who is permitted to drive to drive the vehicle.
Prompts the boarding driver to present an electronic certificate to be used for personal authentication, compares the presented electronic certificate with the personal information of the driver registered in advance, and only the driver who succeeds in the verification checks the vehicle for the vehicle. It is characterized by having authentication control for permitting operation.

Further, in the driver authentication system of the present invention, an additional information request unit for requesting an information system externally connected via a network to transmit additional information required for the driver authentication, and obtaining the additional information And an additional information reflecting unit for reflecting the additional information on the authentication of the registered driver by the driver authentication unit. With the above-described configuration, for example, coordination with an external information system such as a police system or a hospital system is provided, and not only mere identification of the driver, but also the prohibition of driving due to the presence or absence of a license or the suspension of driving depending on the treatment content is promoted. be able to.

[0012] The recording medium of the present invention is a driver authentication program used for an in-vehicle system connected to an authentication system of an authentication organization via a network, wherein the driver authentication program authenticates a boarding driver. Requesting the presentation of an electronic certificate for authentication, transferring the presented electronic certificate to an authentication system of the certificate authority to make an authentication request, and receiving a result of the personal authentication from the certificate authority. And determining whether the boarding driver can drive the vehicle is programmed and recorded.

[0013] In the recording medium of the present invention, the driver authentication program may further include a license information or a hospital treatment information received from the information system externally connected through the network via the authentication institution. The method is characterized in that the method includes a step of reflecting the determination in the determination of whether or not the driver can drive.

[0014]

Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a block diagram showing a connection form of the driver authentication system of the present invention. In FIG. 1, reference numeral 1 denotes a mobile terminal, which has a function of communicating with the vehicle-mounted device 2 and managing personal information (electronic certificate). The in-vehicle device 2 has functions of authenticating the user and accessing the vehicle in addition to communicating with the mobile terminal 1. The on-vehicle device 2 is a wireless LAN.
(Local Area Network) or Internet 4
Is connected to the certification institution 3 via. An authentication system is built in the authentication institution 3, the authentication information DB 8 is built in, personal authentication is performed by referring to the authentication information DB 8, and a connection is made via the network 5 such as the police system 6. It also has an inquiry function for information systems. The police system 6 has a license information DB 7 and outputs a search result based on a request from the certification organization 3.

FIG. 2 is an event flow cited for describing the operation flow of the embodiment of the present invention shown in FIG. Hereinafter, the operation of the embodiment of the present invention shown in FIG. 1 will be described with reference to FIG. Here, the description will be made assuming that the personal information of the driver who is permitted to board the vehicle is set and registered in the authentication information DB 8 in advance by the vehicle owner.

First, a driver who intends to get on the vehicle uses the portable terminal 1 in which the electronic certificate is stored, connects to the in-vehicle device 2 by wireless communication, and makes an authentication request (). Next, the vehicle-mounted device 2 receives the request and returns a certificate request to the portable terminal 1 (). The portable terminal 1 transmits the electronic certificate to the vehicle-mounted device 2 in response to the request (). As a result, the vehicle-mounted device 2 that has received the electronic certificate from the mobile terminal 1 transfers the electronic certificate to the certification organization 3 (). And
The authentication system of the authentication organization 3 that has received the electronic certificate searches the authentication information DB 8 for authentication information (). Next, the authentication system authenticates, based on the search result, whether or not the boarding driver is a driver for which the owner has obtained boarding permission in advance, and transmits the result to the certification organization 3 (). Further, the certification organization 3 transmits a license information request for inquiring whether or not the driver has acquired a driving license to the police system 6 via the network 5 ().

The police system 6 searches the license DB 7 based on the license information request (). The license DB 7 transmits the search result to the police system 6 (). Next, the police system 6 notifies the certification organization 3 of the license information as a search result (a). Next, when the certification body 3 successfully completes the personal identification and the certification of the driver's vehicle license,
The authentication result is transmitted to the on-vehicle device 2 (b). Although not shown here, when a hospital system is connected via the network 5, it is also possible to inquire about hospital treatment data of the boarding driver and transmit the authentication result to the vehicle-mounted device 2. The connected system is not limited to the hospital system, but may be any system that provides suitable information for use in boarding driver authentication, and may output an authentication result based on the information.

Upon receiving the above authentication result, the on-vehicle device 2 unlocks the vehicle door and permits the engine start, or prohibits the unlocking of the door and prohibits driving by the driver. (C). Drivers who are disapproved by the certification body 3 may have not obtained a boarding permit from the vehicle owner in advance, or their driver's license has expired even if they have obtained a boarding permit. It is considered that driving is difficult due to surgery, medication, or the like.
Further, when the boarding driver has not obtained the boarding permission in advance (unregistered driver), it is possible to notify the owner of the car or the registered driver by e-mail or the like.

FIG. 3 shows an operation conceptual diagram of the above-mentioned driver authentication system. As described above, a drivable driver is a driver who has been given a boarding permit by the owner of the vehicle in advance, can present an electronic certificate for personal identification, and further has a driver's license, hospital treatment, etc. The driver is determined to be in a state in which driving is possible based on additional information such as. Therefore, it is necessary to register a driver capable of driving in advance, and the authentication information and the additional information are stored in the local DB 9 of the vehicle-mounted device 2 or the D
B or ASP on the network (Application S
ervice Provider) and stored in any form.

When the driver gets on the vehicle, the user inputs user identification information A such as a user ID and a password via the portable terminal 1 to judge whether the driver is specified or not. The registered driver authentication B for performing the authentication is performed, and the digital certificate can be used. The authentication system constructed in the authentication organization 3 accepts an authentication service (D) in response to an authentication request C (connection request by wireless communication) from the vehicle-mounted device 2 and performs personal authentication using an electronic certificate (E). In addition, at this time, the driver information is also reflected on the operable driver authentication based on the license information, the hospital chart, and the like. Here, it is assumed that the agent automatically collects the data from a police system, a hospital system, or the like connected via a network.

The behavior of the agent is defined by the scenario description (F). According to the authentication scenario defined here, the job given at the time of agent generation is analyzed, and services on the network are searched to determine a physical destination (G, H). Then, the destination of the agent is determined, and the desired process is executed by sending the agent itself to the destination. In addition, ASP
Any information that can be provided via a network can be additionally used in a complex manner.

The authentication institution 3 receives the processing result, and transmits an authentication result based on the integrated information in which the authentication based on the additional information is reflected in the personal authentication to the vehicle-mounted device 2 (I, J).
Based on the result, the door of the vehicle is unlocked and the engine start is permitted, or the unlocking of the door is prohibited and the driving by the driver is not permitted.

FIG. 4 shows the system configuration shown in FIG.
FIG. 2 is a block diagram showing a function of only a part for authenticating a driver. In FIG. 4, the mobile terminal 1 includes a user authentication unit 11, a service access unit 12, and a certificate transmission unit 13.
And a certificate storage unit 14. This mobile terminal 1
For example, a mobile phone terminal or a PDA (Pe
rsonal Digital Assistants)
And so on.

The certificate storage unit 14 stores data of an electronic certificate issued by the certification organization 3 (hereinafter, the data of the electronic certificate is referred to as an electronic certificate) and data for user authentication performed in the portable terminal 1. Information such as passwords and fingerprints serving as data (personal identification information) is stored. Certificate storage unit 1
The electronic certificate stored in 4 has information unique to the owner, and includes, for example, an ID (identification number or the like) for identifying an individual and data for the certificate. In addition, the certificate storage unit 14
Specifically, it is configured using a storage medium such as a built-in memory in the mobile terminal 1 or a removable memory card connected to the mobile terminal 1. Also, this certificate storage unit 14
In order to prevent the stored information from being tampered with, any erasure / update is not possible. When the certificate storage unit 14 is configured using a removable memory card as described above, the certificate storage unit 14 can be used by being mounted on another portable terminal.

The user authentication unit 11 authenticates a user by inputting a password, inputting a user's fingerprint, or the like, as to whether a person who intends to use the electronic certificate is an individual who can use the electronic certificate. Has functions. When the user is confirmed to be legitimate by this authentication, the use of the electronic certificate is permitted.

The service access unit 12 has a function of receiving a connection request to the service reception unit 21 incorporated in the vehicle-mounted device 2 and receiving and executing a connection application program sent from the service reception unit 21 to the portable terminal 1. . For example, when the connection application program is configured as a Java applet, the service access unit 12 stores a Java VM (Java Virt).
ual Machine) is installed, and this program is executed. By the connection application program, the display unit (not shown) of the portable terminal 1 communicates with the in-vehicle device 2 to perform authentication, operates the in-vehicle device 2, or enjoys the service provided by the in-vehicle device 2. A screen menu specific to the in-vehicle device 2 is displayed to perform the operation.
Then, the portable terminal 1 functions as a remote controller corresponding to the vehicle-mounted device 2. Then, a service request for requesting the service specified by the user is transmitted to the vehicle-mounted device 2.
Also, when there are a plurality of in-vehicle devices 2 and they respond at the same time, a menu for selecting one of them is displayed on the display unit, and the user is made to make a selection.

The certificate transmitting section 13 has a function of receiving an electronic certificate request sent from the vehicle-mounted device 2 and transmitting an electronic certificate in response to the electronic certificate request. Note that security can be further enhanced by encrypting the electronic certificate when transmitting it. In this encryption, since the electronic certificate is transmitted by wireless communication, it is desirable that the encryption method, the encryption key used for the encryption, and the like be different each time the electronic certificate is transmitted.

The on-board unit 2 incorporates a service receiving unit 21 and an authentication control unit 22. The service reception unit 21
It has a function of receiving a connection request from the service access unit 12 of the mobile terminal 1 and transmitting the above-described connection application program in response to the connection request. The reason why the connection application program is transmitted in response to the connection request from the mobile terminal 1 is to display various screens and menus on the mobile terminal 1, because various in-vehicle devices 2 are assumed. . The authentication control unit 22 has a function of requesting an electronic certificate to the mobile terminal 1, transferring an electronic certificate of the authentication organization 3, receiving an authentication result by the authentication organization, and determining whether service provision is permitted or not. For this purpose, an additional information requesting unit 221 for requesting transmission of additional information necessary for driver authentication, and an additional information reflecting unit 222 for obtaining the additional information and reflecting the additional information in authentication of a registered driver by the driver authentication unit are provided. . Here, between the vehicle-mounted device 2 and the portable terminal 1, here, a short-range wireless communication standard (Bluetooth)
o)).

The authentication system constructed in the authentication organization 3 is as follows:
It comprises an authentication execution unit 31 and a personal information storage unit 32. The authentication execution unit 31 receives and decrypts the electronic certificate transferred from the service reception unit 21 incorporated in the vehicle-mounted device 2, and stores the personal information included in the electronic certificate and the personal information storage unit 32. Collation with existing personal information. Then, it has a function of transmitting the collation result to the authentication control unit 22 of the vehicle-mounted device 2. The personal information storage unit 32 has a function of storing and managing information (personal information) of the individual who issued the electronic certificate. The personal information stored in the personal information storage unit 32 includes an ID (identification number, etc.) for identifying an individual, data for verifying an electronic certificate, name, gender, age, address, telephone number, and other information belonging to the owner. Has become. Note that the personal information storage unit 32 is configured by a non-volatile recording device such as a hard disk or a magneto-optical disk.

The user authentication section 11 of the portable terminal 1
The functions of the service access unit 12, the certificate transmission unit 13, the service reception unit 21 and the authentication control unit 22 of the vehicle-mounted device 2, and the authentication execution unit 31 of the authentication system 3 are implemented by a memory and a CPU (Central Processing Unit). It is assumed that the function is realized by loading and executing a program (not shown) for realizing each of these functions into the memory by the configured processing unit.

Next, the portable terminal 1 and the in-vehicle device 2 having the personal authentication function configured as described above, and the authentication institution 3
The operation at the time of using the system including the authentication system described above will be described with reference to flowcharts shown in FIGS.

First, a driver who intends to board a vehicle inputs personal identification information, such as a password and fingerprint information, which can identify the user, to the portable terminal 1. When the personal identification information is input, the user authentication unit 11 determines whether the input information specifies a valid user (step S1). Then, if it is determined in this determination that a valid driver is specified (YES in the determination in step S1), the electronic certificate is made usable (step S2). Step S1
If the determination is NO, the use of the electronic certificate is prohibited (step S3).

Next, the service access unit 1 of the portable terminal 1
2 transmits a connection request to the service reception unit 21 of the vehicle-mounted device 2 by wireless communication in response to an operation from the driver (step S4). Next, when receiving the connection request from the mobile terminal 1 (step S5), the service reception unit 21 transmits the connection application program to the service access unit 12 of the mobile terminal 1 (step S6). Then, when receiving the connection application program, the service access unit 12 executes this program (step S7). With this connection application program, the mobile terminal 1 can send a service request for receiving a desired service from the vehicle-mounted device 2 to the service receiving unit 21.

The service access unit 12 that has executed the connection application program further receives an operation from the user, and issues a service request to the service reception unit 21 in response to the operation (step S8). Next, when the service reception unit 21 receives the service request transmitted from the service access unit 12 (step S9), the authentication control unit 2
2 transmits a certificate request for an electronic certificate of the mobile terminal 1 (step S10).

When receiving the certificate request (step S11), the certificate transmitting unit 13 acquires an electronic certificate from the certificate storage unit 14 and encrypts it (step S12). After confirming the user (driver) once for safety, this digital certificate is transmitted to the authentication control unit 22 (step S
13). In transmitting the electronic certificate, it is desirable to perform encryption as described above, but this is not a limitation. Hereinafter, it is assumed that this electronic certificate is encrypted and transmitted. Next, upon receiving the encrypted electronic certificate (step S14), the authentication control unit 22
The electronic certificate is transferred as it is to the authentication execution unit 31 provided in the authentication system (step S15).

Upon receiving the encrypted digital certificate (step S16), the authentication executing section 31 decrypts the received digital certificate (step S17), and stores the information and the user information stored in the personal information storage section 32. (Step S18), and the result (matching result) is returned to the authentication control unit 22 (Step S19). The collation result returned here includes a judgment result of affirmation / denial of the personality and a part of the personal information (for example, an address). Authentication control unit 22
Receives the collation result (step S20), determines the collation result (step S21), and if the personality is assured (if it is determined to be OK in the determination in step S21), the service is permitted. (Step S22) If personality is not guaranteed (N in step S21
If it is determined to be O), a notification (NG) for denying the identity is transmitted to the certificate transmitting unit 13 (step S2).
3).

When the certificate transmitting unit 13 receives the notification denying the identity, the service access unit 12 sets the on-board unit 2
In step S24, a message notifying the user that his / her identity has not been confirmed in the personal authentication is displayed.

In the above, the operation at the time of using the system including the portable terminal 1 having the personal authentication function, the vehicle-mounted device 2 and the authentication system of the authentication organization 3 has been described. Note that the operation flowchart described above is an example,
The present invention is not limited to the above processing flow. In the present embodiment, personal authentication (personal authentication) using the mobile terminal 1
However, the user authentication unit 11, the service access unit 12, the certificate transmission unit 13, and the certificate storage unit 14 may be incorporated in the vehicle-mounted device 2 to perform the authentication.

According to the invention described in the claims, which are the basis of the present embodiment, various certificates used for personal authentication in the real world are digitized and stored in a portable terminal that can be used by individuals. The idea was to use it.
The present invention relates to short-range wireless communication, embedded OS / Java
By using such technologies, it is possible to provide and implement an interface for authentication in any device, and a mobile terminal such as a mobile phone terminal can execute a connection application program or have a conversation with the service providing device side. Communication becomes possible. Therefore, if the user carries only the mobile terminal according to the above-described invention, the user can reliably perform personal authentication with various service providing devices requiring personal authentication by simple operation.

A program for realizing the functions of the user authentication unit 11, the service access unit 12, and the certificate transmission unit 13 of the portable terminal 1 shown in FIG. A program for realizing the function of the unit 22 is recorded on a computer-readable recording medium, and the program recorded on the recording medium is recorded on a computer system corresponding to the portable terminal 1 and a vehicle system corresponding to the on-vehicle device 2, respectively. A system including the portable terminal 1 and the in-vehicle device 2 having the human authentication function may be configured to be read and executed by a computer system. The “computer system” here means
It includes hardware such as an OS and peripheral devices.

The "computer system" is a WW
If the W system is used, a homepage providing environment (or display environment) is also included. The “computer-readable recording medium” refers to a floppy (registered trademark) disk, a magneto-optical disk, an RO
M, a portable medium such as a CD-ROM, and a storage device such as a hard disk built in a computer system. Further, the “computer-readable recording medium” refers to a volatile memory (RAM) inside a computer system that becomes a server or a client when a program is transmitted through a network such as the Internet or a communication line such as a telephone line. And those holding programs for a certain period of time.

The above program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the "transmission medium" for transmitting a program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line. Further, the program may be for realizing a part of the functions described above. further,
What can realize the above-mentioned function in combination with a program already recorded in the computer system, that is, a so-called difference file (difference program) may be used.

Although the embodiment of the present invention has been described in detail with reference to the drawings, the specific configuration is not limited to this embodiment, and includes a design and the like within a range not departing from the gist of the present invention. It is.

[0044]

As described above, according to the present invention, a service involving authentication can be provided without being restricted by a place by storing an electronic certificate for assuring personality in a portable terminal used personally. Can be provided and enjoyed. Also, by installing an authentication system on the vehicle,
Cooperation with the authentication system on the network becomes possible,
Furthermore, by integrating information collected from other information systems via a network, such as license information and hospital treatment information, and performing authentication, a highly reliable driver authentication method and a driver authentication system can be provided. In addition, since only a driver registered in advance is permitted to drive the vehicle, the vehicle is prevented from being stolen. In addition, the certification body:
The spread of services involving authentication will lead to an increase in users. According to the present invention, the personal authentication of the user is performed on the portable terminal, and furthermore, the personal authentication is ensured by the double authentication in which the personal authentication is performed by the authentication organization in the vehicle-mounted device.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a connection form of a driver authentication system according to the present invention.

FIG. 2 is an event flow cited for describing an operation flow of the embodiment of the present invention shown in FIG. 1;

FIG. 3 is an operation conceptual diagram showing an operation concept of the driver authentication system of the present invention.

FIG. 4 is a block diagram showing, in the system configuration shown in FIG. 1, only a part for authenticating a driver in which functions are developed;

FIG. 5 is a flowchart cited for explaining the operation of the embodiment shown in FIG. 4;

FIG. 6 is a flowchart continued from FIG. 5 cited for explaining the operation of the embodiment shown in FIG. 4;

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1 ... Mobile terminal, 2 ... Onboard equipment, 3 ... Certification organization, 4 ... Wireless L
AN (Internet), 5 network, 11 user authentication unit, 12 service access unit, 13 certificate transmission unit, 14 certificate storage unit, 21 service reception unit,
22: Authentication control unit, 31: Authentication execution unit, 32: Personal information storage unit, 221: Additional information request unit, 222: Additional information reflection unit

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) // H04L 9/32 H04L 9/00 673A (72) Inventor Kazue Kobayashi 1-9-9 Konan, Minato-ku, Tokyo 1 NTT Communicationware Co., Ltd. (72) Inventor Katsuya Kitaoka 9-1 Konan, Minato-ku, Tokyo 1-9-1 NTT Communicationware Co., Ltd. (72) Inventor Large Hisako Muro 1-9-1 Konan, Minato-ku, Tokyo NTT Communicationware Co., Ltd. (72) Inventor Nobuhiko Ohtsuru 9-1-1 Konan, Minato-ku, Tokyo Communicationware Co., Ltd. F term (reference) 5B049 BB31 BB41 CC16 DD01 EE01 FF03 FF04 GG04 GG07 5J104 AA07 KA01 NA33 PA16

Claims (8)

[Claims] 1. A driver who is going to board a vehicle is prompted to present an electronic certificate used for personal authentication, and checks the presented electronic certificate with personal information of a driver registered in advance. A method for driver authentication, comprising: permitting only the driver who succeeds in the verification to drive the vehicle. 2. The driver in which the personal information is registered,
The method for authenticating a driver according to claim 1, wherein the driver is a driver who has been permitted to board by a vehicle owner in advance. 3. Requesting license information of the boarding driver from a police information system externally connected via a network, and rejecting the driving of the vehicle depending on the transmitted license information of the boarding driver. The method for driver authentication according to claim 1 or 2, wherein: 4. Requesting hospital treatment information of the boarding driver to a hospital information system externally connected via a network, and disabling operation of the vehicle depending on the transmitted hospital treatment information of the boarding driver. The method for driver authentication according to claim 1 or 2, wherein: 5. A driver authentication system which authenticates a driver who wants to board a vehicle, and permits only a driver who is allowed to drive the vehicle to drive the vehicle, wherein the driver who attempts to board the vehicle authenticates himself / herself. Receiving an electronic certificate to be used for verification, prompting the user to compare the presented electronic certificate with personal information of a driver registered in advance, and permitting only the driver who succeeds in the verification to drive the vehicle. A driver authentication system comprising a control unit. 6. An additional information requesting unit for requesting an information system externally connected via a network to transmit additional information required for the driver authentication, the authentication control unit obtaining the additional information, The driver authentication system according to claim 5, further comprising: an additional information reflection unit that reflects the additional information in authentication of a registered driver by a driver authentication unit. 7. An authentication system possessed by a certification institution is a computer-readable recording medium on which a driver authentication program used for a driver authentication system connected via a network is recorded, wherein the driver authentication program comprises: Requesting the driver to present an electronic certificate for personal authentication; transferring the presented electronic certificate to an authentication system of the certification authority to make an authentication request; and Recording a driver authentication program for causing a computer to execute a step of receiving a result of the personal authentication and determining whether or not driving by the boarding driver is possible. 8. The driver authentication program further comprises:
8. The method according to claim 7, further comprising a step of reflecting license information or hospital treatment information arriving from the information system externally connected via the network via the certification organization in the determination of whether or not driving is possible by the boarding driver.
A computer-readable recording medium according to claim 1.