JP2007150668A - Apparatus authentication control system and its program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve the security of an electronic settlement function with the receipt of money, and prevent improper use of a tertiary person. <P>SOLUTION: The system is provided with an apparatus 1 which comprises a function realizing means 10 which divides a proper function into a plurality of functions according to the importance weight to realize them, a first communication means 14 which can change a communication distance into at least two communication distance steps of a first communication distance and a second communication distance, a reporting means 13, and a first control means 12 which controls the function realizing means 10, the first communication means 14, and the reporting means 13; and an portable authentication key 2 which comprises a second communication means 20, and a second control means 21 which controls the second communication means 20. When neither of the communications can not be performed, the first control means 12 limits the all functions of the function realizing means 10, or reports from the reporting means 13; when the communication can be performed in the second communication distance, it releases a part of the function limitation of the function realizing means 10; and when the communication can be performed in the first communication distance, it releases all function limitation of the function realizing means 10. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention performs wireless communication between a device and a portable authentication key, and restricts the function of the device (mobile phone) when the distance between the device (mobile phone) and the portable authentication key is more than a certain distance. The present invention relates to an authentication control system and its program.

  In recent years, the functions of devices such as mobile phones and personal computers have become more sophisticated. For example, mobile phones are related to money transfer such as electronic payments in addition to the basic function of calling. On the other hand, it has remarkable convenience for the user, but the degree of danger at the time of theft or loss is also very high.

  Therefore, in order to prevent the theft of the mobile phone, the user of the mobile phone holds the mobile authentication key and communicates a predetermined authentication code between the mobile phone and the mobile authentication key. However, there has also been proposed a mobile phone that can be used when both sides can confirm the authentication code (see, for example, Patent Document 1).

Patent Document 1 shows that a mobile phone detects an authentication signal of a certain strength from a mobile authentication key and restricts the use of the mobile phone when the distance between them is more than a certain distance. ing.
Japanese Patent Laid-Open No. 11-88499

  However, in Patent Document 1, if the distance between the device (mobile phone) and the mobile-side authentication key is within a certain distance, it is possible to operate any function near the user without the user's knowledge. This can cause serious problems in some cases.

  That is, for example, the user goes to bed while riding, the device (mobile phone) is stolen in the meantime, and money is given to the account by electronic payment at a nearby seat (for example, the back seat) There is a case where it is done.

  In addition, since the payment function is performed in a non-contact manner, even if the user is not sleeping while riding, a so-called electronic slip that is unjustly settled in a non-contact manner, for example when the user approaches in a crowded train. The danger comes out.

  In this way, even if the distance between the device (mobile phone) and the mobile-side authentication key is a fixed distance (for example, several meters), not all the functions of the device (mobile phone) are permitted, but the device ( It is conceivable that the function is limited depending on the importance of the function of the mobile phone. For example, for electronic payment, it is necessary to switch the communication distance and enhance the security compared to the function of making and receiving calls.

Therefore, in order to solve the above-described problem, in the present invention, the unique function is divided into a plurality of parts according to the degree of importance, and the function realizing means for realizing the function, and the communication distance as the first communication distance and the first communication distance. A first communication means that can be changed to at least two stages of communication distance (first communication distance <second communication distance), two notification distances, the function realizing means, and the first communication. A first control means for controlling the means and the notification means, a second communication means, and the second
A portable authentication key having a second control means for controlling the communication means, wherein the device is the portable authentication key, and the first communication means and the second communication means perform the first When communication using both the communication distance and the second communication distance cannot be performed, the first control unit restricts all the functions of the function realizing unit, or notifies from the notification unit. However, when the communication at the second communication distance can be performed, a part of the function restriction of the function realizing means is released, and when the communication at the first communication distance can be performed, the function realizing means All the function restrictions were removed.

  As a result, when the distance between the device and the mobile authentication key is away from the second stage communication distance (for example, several meters or more) due to theft or misplacement, all the functions of the device (mobile phone) are restricted. It becomes unusable and prevents misuse, and it is possible to receive a warning of theft or misplacement by notifying with the notification means.

  If the distance between the device (mobile phone) and the mobile-side authentication key is within the second stage communication distance (for example, several meters), normal functions can be used but only important functions are restricted. Unless the distance from the mobile-side authentication key is close to the first communication distance (for example, about several centimeters), an important function related to money award such as electronic payment cannot be operated.

  As a result, even if the communication distance is within the second stage (for example, several meters), it is possible to avoid a large amount of money being awarded by electronic payment without the user's knowledge.

  In a device authentication control system, the first invention divides a unique function into a plurality of functions according to the degree of importance, realizes the function, a communication distance between the first communication distance and the second communication A first communication means that can be changed to a communication distance of at least two stages (first communication distance <second communication distance), a notification means, the function realizing means, the first communication means, and the A device comprising a first control means for controlling the notification means, a second communication means, and a portable authentication key comprising a second control means for controlling the second communication means; When the device is the portable authentication key and the first communication means and the second communication means cannot communicate with each other by the first communication distance and the second communication distance, the first control means Restricts all functions of the function realizing means, and When the communication is performed from the notification means and communication at the first communication distance cannot be performed but communication at the second communication distance is performed, a part of the function restriction of the function realization means is released, and the first All the function restrictions of the function realization means are canceled when communication by the communication distance can be performed.

  As a result, when the distance between the device (mobile phone) and the mobile-side authentication key is more than the second stage due to theft or misplacement, all the functions of the device are restricted and cannot be used, thus preventing abuse. At the same time, it is possible to receive a warning of theft or misplacement by notifying with the notification means.

  When the distance between the device (mobile phone) and the mobile-side authentication key is closer than the second stage, the normal functions can be used, but only important functions are limited, and the distance is closer than the first communication distance. As long as this is not necessary, important functions related to monetary grants such as electronic payments cannot be operated. For example, in a state closer than the second stage, the user sleeps in the vicinity of the user without knowing it. Even if the device (cell phone) is stolen in the meantime, it is possible to avoid a large amount of money awarded by electronic payment at a nearby seat.

That is, even if a thief steals a device (cell phone), it cannot release the function restrictions of electronic payment, for example, unless it is close to the mobile authentication key, and where the user carries the mobile authentication key to release it (For example, trouser pockets, jacket pockets, bags, etc.) must be examined and approached. This can dramatically improve security.

  According to a second aspect of the present invention, in the device authentication control system, a unique function is divided into a payment function and a call origination / reception function according to the degree of importance, and a function realization means for realizing the function, a first control means, It can be changed to medium-range communication that can communicate up to several meters, and short-range communication that can only be communicated within a few centimeters (← if you check it, do you need to expand it to a few centimeters?) A first communication means, a notification means, a device (cellular phone) comprising the function realizing means, the first communication means, and a first control means for controlling the notification means, and a second communication And a second authentication means for controlling the second communication means, and the device is the portable authentication key, the first communication means and the second communication key. With short distance communication and medium distance communication When both cannot be performed, the first control means places a restriction on the settlement function and the outgoing / incoming function, or reports from the notification means, and short distance communication cannot be performed, but medium distance communication can be performed, Only the outgoing / incoming function of the function realization means is released, and when the near field communication can be performed, the restriction of the settlement function and outgoing / incoming function of the function realization means is released.

  As a result, when the distance between the device (mobile phone) and the mobile-side authentication key is more than a few meters due to theft or misplacement, all the functions of the device (mobile phone) are restricted and cannot be used. In addition, it is possible to receive a theft or misplacement warning by notifying with the notification means. When the distance between the device (mobile phone) and the mobile phone authentication key is several meters, normal functions can be used but only important functions are restricted, and the distance between the device (mobile phone) and the mobile phone authentication key is limited. If you do not get close to a few centimeters, important functions related to monetary grants such as electronic payment can not be operated. For example, if it is a short distance (for example, about several meters), the user will not know near the user. Even if the user goes to bed while riding and the device (cell phone) is stolen in the meantime, a large amount of money can be avoided by electronic payment at a nearby seat.

  According to a third aspect of the present invention, in the device authentication control system, a unique function is divided into a payment function and a call origination / reception function according to the importance, and the function realizing means for realizing the function, a first control means, A device comprising a first communication means that can be changed to a medium-range communication capable of communicating up to several meters, and a short-range communication that can be communicated only within a few centimeters; a notification means; and a second communication means And a mobile authentication key having a second control means, and when the first communication means and the second communication means cannot perform both short-range communication and medium-range communication, When the control means restricts the settlement function and the outgoing / incoming function, or informs from the informing means and short-distance communication can be performed, the restriction of the settlement function of the function realizing means is released, and the outgoing / incoming function is I tried to limit it.

  As a result, unless the distance between the device (cell phone) and the mobile-side authentication key is reduced to a few centimeters, important functions related to money transfer such as electronic payment cannot be operated. If the device (cell phone) is stolen in the middle of the ride without knowing it and the device (cell phone) is stolen in the meantime, a large amount can be paid by electronic payment at a nearby seat. Can be avoided.

  In addition, when using the payment function, by restricting the outgoing / incoming call function, the user may be inadvertent when receiving a call during payment (such as making a mistake in the payment amount due to the phone being distracted). Disappear. Also, in the future, there may be a risk that the processing information (account number, authentication number, etc.) may be sent to a third party without being noticed by the user when making a payment with a mobile phone by a virus program. This can be prevented by prohibiting outgoing and incoming calls.

  According to a fourth aspect of the present invention, particularly in the device authentication control system according to the first to third aspects of the present invention, the device (mobile phone) includes a timer means and can perform the first communication distance (short-distance communication). Then, the function realizing means is restricted again after a predetermined time (for example, after 3 minutes) according to the timer means.

  In this way, when an authorized user uses an important function related to monetary grant such as electronic payment, after contacting the device (mobile phone) with the mobile side authentication key to several centimeters, By completing the operation within a certain time (for example, 3 minutes), it becomes possible to use the device more conveniently and safely.

  That is, even if the thief steals the device (cell phone) and closes the mobile authentication key to cancel the function restriction such as electronic payment, the function restriction is applied again after a certain time. For example, the security time can be further improved because the time limit is imposed while the electronic payment authentication (password input) is suspended, and the function is restricted.

  A fifth invention is a program for causing a computer to execute at least one operation, particularly in the device authentication control system of the first to fourth inventions, and includes a CPU, a RAM, a ROM, a storage device, an I / O, and the like. A part or all of the present invention can be easily realized as a program by cooperating hardware resources such as electrical information devices and computers. Also, by distributing the program on a recording medium or using a communication line, program distribution can be realized very easily compared to other means.

  Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings. Note that the present invention is not limited to the embodiments.

(Embodiment 1)
FIG. 1 is a diagram showing an example of the configuration of a device authentication control system according to the present invention.

  The mobile phone (equipment) 1 includes a function realization unit 10, a first control unit 12, a notification unit 13, and a first communication unit 14. Further, the function realization means 10 includes a settlement function 10A that performs important functions such as electronic settlement related to money granting, and a call origination / reception function 10B that is a normal outgoing / incoming function that a mobile phone originally has. . The details of the settlement function 10A and the call origination / reception function 10B are the same as those of the conventional patent, and thus the description thereof is omitted.

  The function limitation to the payment function 10A or the call origination / reception function 10B is the simplest and easy-to-understand implementation method of stopping the power supply to the circuit block (function realization means), but the execution of the software for realizing the function is stopped. It can be realized by a logical method.

  The settlement function 10A is assumed to be a function that performs cash exchange such as access to a bank account or transfer to an account, and includes the exchange of money such as ticket gate processing in public transportation.

  Further, the first communication means 14 includes, for example, a medium distance communication means 14B capable of performing communication at a medium distance of several tens of centimeters to several meters, and a short distance communication means 14C capable of communicating only within a few centimeters, for example. ing.

The portable authentication keys 2B and 2C include second communication means 20B and 20C and second control means 21B and 20C. The second control means 21B and 21C hold a unique ID code and are portable. This unique ID code is transmitted during communication with the telephone (device) 1, and compared with the unique ID code held by the first control means 12, the mobile authentication keys 2B and 2C are connected to the mobile phone (device) 1. It is determined whether or not it is an official authentication key.

  It should be noted that the portable authentication keys 2B and 2C have the same configuration and the same ID code, and are written in two parts for the sake of explanation. Only the positional relationship (distance) with the mobile phone (device) 1 is different.

  The internal configurations of the medium-range communication unit 14B and the short-range communication unit 14C included in the first communication unit 14 will be described in detail later, and are omitted here.

  The medium-range communication described here assumes a distance of, for example, about several tens of centimeters to several meters, that is, a mobile phone (device) 1 as belongings, and a portable authentication key 2B is worn. Yes. Short-distance communication assumes a state in which the mobile phone (device) 1 is in close contact with the portable authentication key 2C at a close contact distance of, for example, several centimeters or less.

  When the distance between the cellular phone (device) 1 and the portable authentication key 2B is about several tens of centimeters to several meters, the portable authentication key 2B cannot communicate with the short-range communication means 14C, but the medium distance Since communication with the communication means 14B is possible, the mobile phone (device) 1 can determine that the distance from the portable authentication key 2B is about several tens of centimeters to several meters.

  In this case, the first control unit 12 restricts the settlement function 10A of the function realization unit 10 to be unusable and causes only the outgoing / incoming function 10B to function. Thereby, only a telephone call which is a basic function of the mobile phone (device) 1 can be performed.

  If the cellular phone (device) 1 moves away from the portable authentication key 2B owned by the owner due to theft or misplacement, the cellular phone (device) 1 becomes a portable authentication key 2B. Since the communication is impossible and the portable authentication key 2B is no longer present, the notification means 13 notifies the user and warns the user, and the first control means 12 performs all functions of the function realizing means 10. The mobile phone (device) 1 is prevented from being abused by restricting (here, the settlement function 10A and the outgoing / incoming function 10B) to be completely unusable. Of course, it is also conceivable that the mobile authentication keys 2B and 2C are also provided with notification means for notification.

  When the user makes a payment, when the user brings the mobile phone (device) 1 close to the portable authentication key 2C in a pocket or the like, for example, several centimeters or less, the short distance communication means 14C and Communication is possible, and the mobile phone (device) 1 can determine that the distance from the portable authentication key 2C is several centimeters or less.

  In this case, the first control unit 12 releases all restrictions including the restriction of the settlement function 10A of the function realizing unit 10, and the user can perform settlement.

  Alternatively, when authentication is performed by short-distance communication of several centimeters or less, only the settlement function is enabled and the outgoing / incoming call function is stopped. In other words, from a practical point of view, there is a risk of not making a call when making a payment, and when receiving an incoming call, the call contents may be distracted and the payment amount may be wrong. Speaking programmatically, if the program for making and receiving calls is interrupted during settlement processing, the entire processing program becomes complicated. Therefore, by prohibiting the program, the reliability of the software can be improved.

Furthermore, there is a possibility that the processing information (account number, authentication number, etc.) may be sent to a third party without being noticed by the user when making a payment with a mobile phone by a virus program in the future. This can be prevented by prohibiting incoming and outgoing calls.

  The time required for this settlement is arbitrary, but generally it is completed in about 3 minutes. Therefore, after the user brings the mobile phone (device) 1 close to the portable authentication key 2C to several centimeters or less, the mobile phone ( For safety reasons, it is preferable to re-limit the settlement in about 3 minutes using the timer means 15 provided in the device 1).

  Of course, the user can change the setting for the time of 3 minutes, and the payment function may be limited regardless of the timer means when the payment process is completed.

  In addition, during the period of 3 minutes, communication between the first communication unit 14 and the second communication unit 20 may be stopped to switch to a low power consumption operation to prevent battery power consumption.

  For example, the timer unit 15 is a down counter, and it is conceivable that an interrupt is generated in the first control unit 12 (actually the CPU) at the end of the count, and an important function is stopped in software processing.

  Next, the communication distance change mechanism performed by the first communication means 14, that is, the medium distance communication means 14A (for example, communication is possible from several tens of centimeters to several meters) and the short distance communication means 14B (with a few centimeters or less). The mechanism for changing the communication distance to the communication possible) is realized by changing the transmission / reception strength of the radio wave. This mechanism will be described later with reference to FIG.

  FIG. 2 shows an example of the internal configuration of the first communication unit 14 of the mobile phone 1. The attenuation unit 140 attenuates the antenna signal, the first transmission unit 141, and the first reception unit 142. , First communication control means 143.

The attenuation unit 140 is controlled by the first communication control unit 143 and can change the attenuation rate in at least the following two stages.
First communication distance: Strong attenuation (for example, attenuation of about 50 to 60 dB). Near field communication (for example, communication distance of several centimeters or less)
Second communication distance: no attenuation. Medium distance communication (for example, communication distance of several tens of centimeters to several meters)
By switching these communication distances, it is possible to detect the distance to the mobile authentication keys 2B and 2C and to perform an operation according to the distance.

  That is, if communication is not possible at the second communication distance (medium distance) but communication is possible at the first communication distance (short distance), it can be understood that the communication distance is short, and communication can be performed at the second communication distance (medium distance). If it is, it can be easily determined that the distance is medium. Further, if communication cannot be performed at the second communication distance (medium distance), it can be understood that the distance from the mobile authentication keys 2B and 2C is at least the second communication distance (for example, several meters or more).

  Of course, as described here, the method of changing the communicable distance using the attenuation means is merely an example, and it is possible to reduce the sensitivity by separating the transmitting / receiving antenna only in the case of short-range communication. Also, a method of estimating the distance between each other by simultaneously monitoring the received electric field strength is possible.

  Furthermore, the communication has been described assuming low-power radio or weak radio. However, the present invention is not limited to this. For example, even if the first communication unit 14 is an RFID reader / writer such as a non-contact IC tag. The second communication means 2B and 2C may be configured to use RFID (passive type or active type) together. In addition, it is of course possible to use a system that uses infrared rays instead of radio waves.

  In the explanation so far, it has been explained that the device is a mobile phone. However, the present invention is not limited to this, and it can be applied to household devices, in-vehicle devices, etc., and the same effect can be expected. is there.

  In addition, the contents of communication data for confirming the existence of each other are not particularly limited, but it is generally performed that the unique ID code is not transmitted as it is, but is encrypted and transmitted. In order to prevent eavesdropping and misuse, a method in which a password is changed every time (a challenge response method) is also realized, and it is desirable to increase security by using such an encryption technology.

  In addition, in order to increase security when making a settlement, communication encryption and ID may be switched for a predetermined time (for example, 3 minutes) after authentication in short-distance communication of several centimeters.

  Note that the function realization means and control means described in the present embodiment include CPUs (or microcomputers), RAMs, ROMs, storage / recording devices, electrical / information devices equipped with I / O, computers, servers, etc. You may implement in the form of the program which cooperates a hard resource. In the form of a program, new functions can be easily distributed / updated and installed by recording them on a recording medium such as magnetic media or optical media, or distributing them using a communication line such as the Internet.

  As described above, the present invention prevents theft and misplacement by detecting a middle distance (for example, several meters or less), and is important for money award such as electronic payment by detecting a short distance (for example, several centimeters or less). It is possible to increase the security of various functions and provide a safer device (for example, a mobile phone with a payment function).

The figure which shows an example of a structure of the apparatus authentication control system of Embodiment 1 of this invention. The figure which shows an example of a structure of the 1st communication means of Embodiment 1 of this invention, and a 2nd communication means.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Mobile phone 2B The mobile authentication key which exists in the position of several meters from a mobile phone 2C The mobile authentication key which exists in the position of several centimeters from the mobile phone 10 Function realization means 10A Settlement function 10B Incoming / outgoing function 12 First control means (communication Holds the other party's unique ID code)
13 Notification means 14 First communication means 14A Medium distance communication means 14B Short distance communication means 15 Timer means 20 Second communication means 20B Second communication means of the mobile authentication key 2B 20C Second communication means of the mobile authentication key 2C 21B Second control means of the mobile authentication key 2B (holds a unique ID code)
21C Second control means (for mobile authentication key 2C) (holds unique ID code)
140 Attenuation means 141 First transmission means 142 First reception means 143 First communication control means 210 Second transmission means 211 Second reception means 212 Second communication control means

Claims (5)

A function realizing means for realizing the function by dividing the unique function into a plurality according to the degree of importance, and a communication distance of at least two stages of communication distances (first communication distance and first communication distance (first First communication means that can be changed to communication distance <second communication distance), notification means, the function realizing means, the first communication means, and first control means for controlling the notification means. A portable authentication key comprising a device provided, a second communication means, and a second control means for controlling the second communication means;
When the device is the portable authentication key and the first communication means and the second communication means cannot communicate with each other by the first communication distance and the second communication distance, the first control means Restrict all functions of the function realization means, or notify from the notification means,
When the communication at the first communication distance cannot be performed but the communication at the second communication distance can be performed, a part of the function restriction of the function realizing means is canceled,
A device authentication control system for canceling all the function restrictions of the function realizing means when communication can be performed with a first communication distance. Medium-distance communication capable of communicating up to several meters of communication distance by dividing the unique function into payment function and outgoing / incoming function according to the degree of importance, and realizing the function and the first control means And first control means for controlling the short-range communication that can be communicated only within a few centimeters or less, a notification means, the function realizing means, the first communication means, and the notification means. A device (mobile phone) equipped with means,
A mobile authentication key comprising second communication means and second control means for controlling the second communication means;
The device is the mobile authentication key,
When the first communication means and the second communication means cannot perform both short-range communication and medium-range communication, the first control means limits the settlement function and the outgoing / incoming function, or Notification from the notification means,
When short-distance communication cannot be performed but medium-distance communication can be performed, only the outgoing / incoming function of the function realizing means is released,
A device authentication control system for releasing restrictions on the settlement function and the outgoing / incoming function of the function realization means when near field communication can be performed. Medium-distance communication capable of communicating up to several meters of communication distance by dividing the unique function into payment function and outgoing / incoming function according to the degree of importance, and realizing the function and the first control means And first control means for controlling the short-range communication that can be communicated only within a few centimeters or less, a notification means, the function realizing means, the first communication means, and the notification means. A device (mobile phone) equipped with means,
A mobile authentication key comprising second communication means and second control means for controlling the second communication means;
The device is the mobile authentication key,
When the first communication means and the second communication means cannot perform both short-range communication and medium-range communication, the first control means limits the settlement function and the outgoing / incoming function, or Notification from the notification means,
A device authentication control system for canceling restriction on a settlement function of the function realization means and restricting a calling / receiving function when short-range communication can be performed. The device (mobile phone) includes a timer means, measures the time from the time when the first communication distance (short-distance communication) can be performed, and after a predetermined time (for example, after 3 minutes) according to the timer means The device authentication control system according to any one of claims 1 to 3, wherein the function of the function realizing means is restricted again. The program for making a computer perform at least 1 operation | movement in the apparatus authentication control system in any one of Claims 1-4.

Images