JP2004102940A - Authentication system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an authentication system capable of providing authentication without inputting a personal identification number or a password. <P>SOLUTION: A portable apparatus 60 sends a stored ID code from the portable apparatus 60 to a mobile telephone 50, and the mobile telephone 50 sends the received ID code to a Web server 40. The ID code sent from the mobile telephone 50 is received, and it is judged whether or not the ID code and a precedently registered authentication code match. When the codes match, the Web server 40 sends an indication signal for operating a lock mechanism of each door of a vehicle 10 to a communication module 30, and a security ECU 20 receiving the indication signal via the communication module sends a signal for operating the lock mechanism of each door to the lock mechanism of each door. By this, a user can obtain authentication with respect to the Web server 40 even without inputting a personal identification number or a password. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an authentication system.
[0002]
[Prior art]
Conventionally, there is a method of performing authentication using a password or password input by a user. For example, when withdrawing cash at an ATM such as a bank or a post office, a user inserts a predetermined cash card into a card insertion slot of the ATM and inputs a password corresponding to the inserted cash card. Then, the ATM compares the personal identification number entered by the user with the personal identification number assigned to the inserted cash card, and if they match, it is determined that the user is a legitimate user and the cash can be withdrawn. I do.
[0003]
For example, when accessing the Internet using a personal computer at home, the user inputs a user name and a password associated with the user name to a server of a provider to which the user has contracted. Then, the server of the provider refers to the password corresponding to the user name input by the user, and compares the referred password with the password input by the user. Then, if they match, it is determined that the user is a legitimate user who has contracted, and access to the Internet is enabled.
[0004]
As described above, in the conventional authentication method, it is determined whether the user is a legitimate user by inputting a personal identification number, a password, and the like assigned to the user.
[0005]
[Problems to be solved by the invention]
In a conventional authentication method, a user cannot obtain authentication without inputting a password, a password, and the like. Therefore, if the user forgets the password or password, for example, it is necessary to inquire the management company or the like that manages the password or password for the personally registered password or password, which is inconvenient. there were.
[0006]
The present invention has been made in view of such a problem, and has as its object to provide an authentication system that can obtain authentication without inputting a password or a password.
[0007]
[Means for Solving the Problems]
The authentication system according to claim 1, further comprising a determination unit configured to determine whether the input code has a predetermined relationship with an authentication code registered in advance. An authentication device that performs predetermined authentication when it is determined that the device has a predetermined relationship, a portable device that stores a unique code uniquely defined for each device, and outputs the unique code, A communication device for inputting a unique code output from the communication device and outputting the input unique code to the authentication device, wherein the determination unit determines the unique code transmitted from the communication device as an input code and Is determined to have the relationship
[0008]
As described above, the authentication system of the present invention inputs a unique code output from the portable device via the communication device, and compares the input unique code with a previously registered authentication code to determine authentication. . As a result, the user can be authenticated only by, for example, performing an operation of outputting a code output request from the communication device to the portable device. As a result, there is no need to input a password or a password.
[0009]
Note that the authentication system of the present invention can be widely applied to systems that require authentication, such as authentication of cash cards in ATMs, and authentication between on-board ETC devices and roadside communication devices in tollgates on toll roads.
[0010]
In the authentication system according to the second aspect, the portable device is a portable device used in an electronic key system that activates a predetermined vehicle-mounted device based on a verification result of a unique code by bidirectional communication with a vehicle-mounted controller. It is characterized by the following.
[0011]
In an electronic key system capable of controlling a lock mechanism and the like of each door of a vehicle from a place away from the vehicle, for example, a vehicle-mounted controller receives a unique code transmitted from a portable device, and receives the received unique code and A determination is made as to whether or not a predetermined relationship exists, such as a match with a code stored in advance by the vehicle-mounted controller. Then, when these codes match, the lock mechanism and the steering lock mechanism of each door of the vehicle are unlocked or controlled to allow the engine of the vehicle to start.
[0012]
According to the present invention, the authentication using the code between the portable device and the on-vehicle controller is executed between the portable device and the authentication system via the communication device. That is, by registering a code having the same content as the code stored in advance by the in-vehicle controller in the authentication system as an authentication code, authentication between the portable device and the authentication system can be performed.
[0013]
The portable device may be, for example, a transmitter in a keyless entry system that controls a lock mechanism of each door of the vehicle by a remote operation of a user. That is, even in the keyless entry system, the receiver mounted on the vehicle receives the code transmitted from the transmitter carried by the user, and performs authentication using the received code and the code stored in advance on the receiver side. Is going. Therefore, by registering the code stored in the receiver in the authentication system, authentication between the transmitter and the authentication system can be performed.
[0014]
According to a third aspect of the present invention, in the authentication system, the communication device is a mobile phone having communication means for performing communication with the mobile device. For example, by adopting a mobile phone provided with a communication means corresponding to Bluetooth for realizing short-range wireless communication, communication with a portable device and communication with an authentication system become possible.
[0015]
Note that the communication means is not limited to the one connected to the portable device by short-range wireless communication as described above, but may be one that can be connected by wire. Also, the communication device is not limited to a mobile phone, and may be, for example, a PDA (Personal Digital Assistants) or a PC (Personal Computer) that includes the above-described communication means and can be connected by communication with an authentication device. good.
[0016]
According to the authentication system according to claim 4, the communication system includes a communication module mounted on the vehicle and communicates with the outside of the vehicle, and an on-vehicle control device connected to the communication module and operating a predetermined on-board device. The authentication device includes a control command output unit that outputs a control command to the communication module when receiving a control command for operating the in-vehicle device from the communication device after the certification, and the in-vehicle control device controls the control command via the communication module. When receiving the information, the in-vehicle device is operated.
[0017]
Thereby, the user can operate the predetermined in-vehicle device even in a place far from the vehicle by the authentication between the portable device and the authentication system.
[0018]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, an authentication system according to an embodiment of the present invention will be described with reference to the drawings. In this embodiment, an example in which a door lock mechanism of a vehicle is controlled by the authentication system of the present invention will be described.
[0019]
FIG. 1 is a diagram showing a schematic configuration of the authentication system of the present embodiment. As shown in the figure, the authentication system of the present embodiment includes a Web server 40, a mobile phone 50, and a mobile device 60 used for an electronic key system. Further, the Web server 40 can communicate with a communication module 30 mounted on the vehicle 10, and the security ECU 20 is connected to the communication module 30.
[0020]
The security ECU 20 mounted on the vehicle 10 is connected to a door lock mechanism for each door of the vehicle 10 and a body ECU (not shown). Output a lock / unlock signal for each door. Upon receiving the lock / unlock signal, the door lock mechanism operates according to the signal. The body ECU detects lock / unlock of each door and outputs a detection signal to the security ECU 20.
[0021]
The security ECU 20 is connected to a transceiver (not shown) for performing bidirectional communication with the portable device 60 described later, and is uniquely determined for each portable device input from the portable device 60. It has a determination unit (not shown) that determines whether the ID code matches a code stored in the security ECU 20 in advance. When the determination unit determines that the two codes match, the security ECU 20 outputs an unlock signal for each door to the door lock mechanism. That is, the portable device 60 and the security ECU 20 perform authentication using an ID code by two-way communication, and when this authentication is obtained, a mechanism for controlling a lock mechanism and the like of each door of the vehicle 10 is provided. .
[0022]
The communication module 30 is connected to the security ECU 20 and transmits a control command for activating a predetermined vehicle-mounted device received from a Web server 40 described later to the security ECU 20 or transmits a response signal to the control command received from the security ECU 20 to the Web server 40. Or to the server 40.
[0023]
The Web server 40 is a server that can be connected via the Internet, and an authentication code having the same content as the code stored in the security ECU 20 is registered in advance. Further, when an ID code output from the portable device 60 described later is input, it is determined whether or not the input ID code matches the above-mentioned authentication code. When it is determined that the two codes match, the Web server 40 outputs a control command to the communication module 30 to activate a predetermined vehicle-mounted device. That is, the Web server 40 executes an authentication process similar to the authentication process using the code in the security ECU 20 mounted on the vehicle 10.
[0024]
As is well known, the mobile phone 50 includes input keys, a liquid crystal display, a wireless circuit, and the like, and can be connected to the Internet via a mobile phone network. The mobile phone 50 has a built-in communication unit (not shown) corresponding to a communication standard such as Bluetooth using the 2.4 GHz band, for example, and is configured to be able to execute short-range wireless communication. ing. This short-range wireless communication enables the mobile phone 50 to communicate with a mobile device 60 described later.
[0025]
The portable device 60 is a portable device used for an electronic key system capable of controlling a lock mechanism and the like of each door of the vehicle 10 from a position away from the vehicle 10, and includes a transmission / reception circuit therein. The portable device 60 stores an ID code uniquely defined for each portable device, and outputs the ID code to the security ECU 20.
[0026]
Further, the portable device 60 has a built-in communication unit (not shown) corresponding to the above-described Bluetooth, like the portable phone 50, and can communicate with the portable phone 50. Upon receiving the code output request signal from the mobile phone 50, the mobile device 60 outputs the above-described ID code to the mobile phone 50 via the communication unit.
[0027]
The connection between the portable device 60 and the portable telephone 50 is not limited to a communication unit capable of short-range wireless communication. For example, a communication unit for connecting by wire may be used. Further, in the present embodiment, the mobile phone 50 is adopted as a communication device for connecting the Web server 40 and the mobile device 60. However, the present invention is not limited to this. Furthermore, a PDA (Personal Digital Assistants) or a PC (Personal computer) that can be connected to the Internet may be used.
[0028]
Next, the operation of remotely controlling the lock mechanism of each door of the vehicle 10 by the authentication using the mobile phone 50 and the mobile device 60 according to the characteristic portion of the present embodiment will be described with reference to the flowcharts of FIGS. explain.
[0029]
In step S1 shown in FIG. 2, in order to access the Web server 40 from the mobile phone 50, an access operation of the mobile phone 50 by the user is requested. In step S2, an attempt is made to access the Web server 40 input by the user from the mobile phone 50. When accessing the Web server 40 from the mobile phone 50, access is made with a user name or the like. In this way, the Web server 40 identifies the user who has accessed it.
[0030]
When this access is completed, in step S3, a request signal for transmitting the ID code of the portable device 60 to the web server 40 is transmitted from the web server 40 to the mobile phone 50. At the same time, the Web server 40 extracts a pre-registered authentication code (authentication code) corresponding to the user name transmitted from the mobile phone 50.
[0031]
In step S4, the mobile phone 50 that has received the ID code request signal establishes a short-range wireless communication link with the mobile device 60. In step S5, when the communication link in step S4 is established, a request signal for requesting transmission of an ID code is transmitted from the mobile phone 50 to the mobile device 60.
[0032]
In step S6, upon receiving the ID code transmission request signal, the portable device 60 transmits the ID code to the portable telephone 50. Since the ID code to be transmitted has a risk of eavesdropping at the time of transmission, it may be transmitted after being encrypted. In step S7, the mobile phone 50 receives the ID code transmitted from the mobile device 60, and transmits this ID code to the Web server 40.
[0033]
In step S8 shown in FIG. 3, Web server 40 receives the ID code transmitted from mobile phone 50, and determines whether the received ID code matches the extracted authentication code. Here, if the two codes match, the process proceeds to step S9, and if not, the authentication is determined to be impossible and the process ends.
[0034]
In step S9, Web server 40 transmits an instruction signal to mobile phone 50 to display a menu screen for remote operation on mobile phone 50. After receiving the instruction signal, the mobile phone 50 displays a menu screen for remote operation. On this menu screen, operation items such as lock / unlock operation of each door of the vehicle 10 are displayed. In the present embodiment, it is assumed that a lock operation of each door is selected by the user.
[0035]
In step S10, a request signal for requesting a lock operation of each door is transmitted from the mobile phone 50 to the Web server 40. In step S11, upon receiving this request signal, the Web server 40 transmits a request signal for transmitting the ID code of the portable device 60 to the Web server 40 again to the mobile phone 50.
[0036]
In step S12, a request signal requesting transmission of an ID code is transmitted from the mobile phone 50 to the mobile device 60. In step S13, upon receiving the ID code transmission request signal, the portable device 60 transmits the ID code to the portable telephone 50. The ID code to be transmitted may be encrypted and transmitted in the same manner as in the process of step S6. In step S14, the mobile phone 50 receives the ID code transmitted from the mobile device 60, and transmits this ID code to the Web server 40.
[0037]
In step S15 shown in FIG. 4, the ID code transmitted from the mobile phone 50 is received, and it is determined whether or not the received ID code and the authentication code match, similarly to the processing in step S8. Here, if the two codes match, the process proceeds to step S16; otherwise, the authentication is determined to be impossible and the process ends.
[0038]
As described above, the authentication system according to the present embodiment receives the ID code transmitted from the portable device 60 via the mobile phone 50 and compares the received ID code with the authentication code registered in the Web server 40 in advance. Authentication is being determined. As a result, the user can be authenticated only by performing an operation of transmitting a code output request from the mobile phone 50 to the mobile device 60, and as a result, there is no need to input a password or a password.
[0039]
In this embodiment, after the authentication is obtained in step S8, the process associated with the authentication is performed again in steps S11 to S15. However, after the instruction of the door lock operation is requested in step S10, The processing from step S16 may be executed without executing the authentication processing from S11 to step S15.
[0040]
Subsequently, in step S16, a control command signal for instructing a lock operation of each door of the vehicle 10 is transmitted from the Web server 40 to the communication module 30 mounted on the vehicle 10. When receiving the control command signal, the communication module 30 transmits a door lock signal to the security ECU 20 and activates the lock of each door by the door lock mechanism.
[0041]
In step S17, when the door lock is detected by the body ECU, the vehicle 10 transmits to the Web server 40 a notification signal indicating that the door lock has been completed. Then, in step S18, when Web server 40 receives this communication signal, it transmits an instruction signal to mobile phone 50 to display that door lock has been completed. The user confirms that the door is securely locked by the message of door lock completion displayed on the mobile phone 50.
[0042]
As described above, the authentication system according to the present embodiment allows the user to operate the vehicle-mounted devices such as the lock mechanism even at a location far from the vehicle 10. It should be noted that the authentication system of the present embodiment can be widely applied to a system that requires authentication, such as authentication of a cash card in an ATM, authentication of an on-board ETC device and a roadside communication device in a tollgate on a toll road, and the like. Needless to say.
[0043]
Further, in the present embodiment, as the portable device 60, a portable device used in an electronic key system capable of controlling a lock mechanism and the like of each door of the vehicle 10 from a place away from the vehicle 10 is employed. For example, a transmitter in a keyless entry system that controls a lock mechanism of each door of a vehicle by a remote operation of a user may be used. That is, also in the keyless entry system, the receiver mounted on the vehicle receives the code transmitted from the transmitter carried by the user, and performs authentication using the received code and the code stored in advance on the receiver side. Is going. Therefore, by registering the code stored in the receiver in the Web server 40, it becomes possible to authenticate the transmitter and the Web server 40.
[Brief description of the drawings]
FIG. 1 is a conceptual diagram of an authentication system according to an embodiment of the present invention.
FIG. 2 is a flowchart illustrating an authentication process until a remote operation menu screen is displayed according to the embodiment of the present invention.
FIG. 3 is a flowchart illustrating an authentication process after requesting a door lock operation instruction according to the embodiment of the present invention.
FIG. 4 is a flowchart illustrating a process after authentication for a door lock operation instruction according to the embodiment of the present invention.
[Explanation of symbols]
10 Vehicle 20 Security ECU
Reference numeral 30 Communication module 40 Web server 50 Mobile phone 60 Mobile device

Claims (4)

A determination unit that determines whether the input code has a predetermined relationship with an authentication code registered in advance; and the determination unit determines that the input code and the authentication code have a predetermined relationship. An authentication device that performs predetermined certification when it is determined that
A portable device that stores a unique code uniquely determined for each device and outputs the unique code,
A communication device that inputs a unique code output from the portable device, and outputs the input unique code to the authentication device;
The authentication system according to claim 1, wherein the determination unit determines whether the unique code transmitted from the communication device has a predetermined relationship with the authentication code using the input code as an input code. 2. The portable device according to claim 1, wherein the portable device is a portable device used in an electronic key system that activates a predetermined in-vehicle device based on a verification result of a unique code by bidirectional communication with an in-vehicle controller. Authentication system. The authentication system according to claim 1, wherein the communication device is a mobile phone including a communication unit that performs communication with the mobile device. A communication module mounted on a vehicle and communicating with the outside of the vehicle,
An in-vehicle control device connected to the communication module and operating a predetermined in-vehicle device,
The authentication device includes, after the authentication, a control command output unit that outputs the control command to the communication module when receiving a control command for operating the in-vehicle device from the communication device,
The authentication system according to any one of claims 1 to 3, wherein the on-vehicle control device activates the on-vehicle device when receiving the control command via the communication module.

Images