JP2008004016A - Authentication method, authentication system, information processor, computer program and storage medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an authentication method which can be used even by a person who hesitates to provide biological information and an aged person or child who cannot memorize a password without requiring registration of the biological information or password, and can prevent a person who steals identification information from being authenticated as valid, and an authentication system, an information processor, a computer program and a storage medium therefor. <P>SOLUTION: A destination of an authenticated person and identification information stored by the storage medium carried by the authenticated person are registered in a database 5 in association with each other. A reader 3 reads the identification information stored in the storage medium carried by the moving authenticated person, transmits the read information and location information of itself to a communicable authentication device. The authentication device determines whether the destination registered in association with the received identification information is matched with the received location information or not, and outputs the result that the authenticated person is valid when consistency is determined. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an authentication method for authenticating the authenticity of a person to be authenticated, an authentication system for executing the method, an information processing apparatus used in the system, a computer program, and a recording medium on which the computer program is recorded.

Conventionally, as an authentication method for permitting the unlocking of the door, the biometric information of the person to be authenticated is registered in advance or a registered password is allocated, and the biometric information entered is registered at the time of authentication. There is one that recognizes the legitimacy of the person to be authenticated when the biometric information and the like match (for example, Patent Document 1).
JP 2005-48370 A

  However, in the authentication method described in Patent Document 1, the person to be authenticated needs to register biometric information indicating his / her physical characteristics in advance or memorize the password assigned from the device. For example, there is a problem that a person who is reluctant to register his / her biometric information or an elderly person and a child who cannot remember an assigned password cannot use the authentication method. In this case, as another authentication method, there may be a method in which the person to be authenticated carries the card key storing the identification information, and authenticating the validity using the identification information of the card key as a criterion. In this method, when the card key is stolen by another person, there is a problem that the other person is authenticated as a legitimate person to be authenticated based on the identification information of the card key.

  On the other hand, for example, the destination where the person to be authenticated regularly visits, such as a coffee shop or a downtown area, differs from person to person and uniquely indicates the person to be authenticated in the same manner as biometric information. Since it is a typical action, it does not impose memorizing efforts, and there is no possibility of being stolen by others unless the person to be authenticated teaches.

  The present invention has been made in view of such circumstances, and an object of the present invention is to register the identification target information stored in the storage medium carried by the authentication target person in association with the destination of the authentication target person in the database. The reading device reads the identification information stored in the storage medium carried by the moving person to be authenticated, and transmits the read identification information and its installation location information to a communicable authentication device, The authentication device determines whether or not the destination registered corresponding to the received identification information matches the received installation location information, and if it is determined that they match, the person to be authenticated is valid By outputting the result of the above, registration of biometric information or password is unnecessary, and it can be used even by those who are reluctant to provide biometric information and elderly people and children who can not remember the assigned password Rutotomoni, authentication method can not to authenticate the person as a valid object's be stolen identification information by another person, the authentication system, the information processing apparatus is to provide a computer program, and a recording medium.

  In order to solve the above problems, an authentication method according to the present invention includes a storage medium carried by a person to be authenticated, one or more reading devices that read identification information stored in the storage medium, and communication with the reading device. In the authentication method for authenticating the authentication target person using a possible authentication device, using the database in which the authentication target person moves and the identification information are registered in association with each other, When the identification information stored in the storage medium is read, the read identification information and the stored installation location information are transmitted to the authentication device, and the authentication device transmits the identification information transmitted from the reading device. When the information and the installation location information are received, the database is accessed, the movement destination corresponding to the received identification information is extracted from the accessed database, and the extracted movement destination and It is determined whether signal the location information coincides, when it is determined that they match, and outputs a result indicating the authentication target person is legitimate.

  An authentication system according to the present invention includes a storage medium carried by the person to be authenticated, one or a plurality of reading devices that read identification information stored in the storage medium, and an authentication device that can communicate with the reading device. An authentication system that performs authentication of the authentication target person, and includes a database in which a destination to which the authentication target person moves and the identification information are registered in association with each other, and the reading device has its own installation location information Storing means, means for reading the identification information stored in the storage medium, means for transmitting the read identification information and the installation location information to the authentication apparatus, and the authentication apparatus Means for accessing, means for receiving identification information and installation location information transmitted from the reader, and data for accessing a destination corresponding to the received identification information A means for extracting from the source, a means for determining whether or not the extracted destination and the received installation location information match, and if it is determined that they match, a result that the person to be authenticated is valid is output. Means.

  Also, the information processing apparatus according to the present invention associates the identification information stored in the storage destination carried by the authentication target person with the destination to which the authentication target person moves in the information processing apparatus capable of communicating with the external apparatus. Means for accessing the registered database, means for receiving the identification information transmitted from the external device and the installation location information of the external device, and extracting the movement destination corresponding to the received identification information from the accessed database. Means for determining whether the extracted destination and the received installation location information match, and means for outputting a result indicating that the person to be authenticated is valid if it is determined that they match. It is characterized by that.

  Further, the computer program according to the present invention is a computer program that enables communication with an external device. The computer stores identification information stored in a destination where the person to be authenticated moves and a storage medium carried by the person to be authenticated. Corresponding to the registered database, the step of causing the computer to receive the identification information transmitted from the external device and the installation location information of the external device, and the computer corresponding to the received identification information The destination to be extracted from the accessed database, the step to cause the computer to determine whether the extracted destination and the received installation location information match, and the computer to determine that they match And outputting a result indicating that the person to be authenticated is valid. Characterized in that to the row.

Furthermore, the recording medium according to the present invention is a computer-readable recording medium in which a computer program that enables communication with an external device is recorded.
A step of causing the computer to access a database in which the identification information stored in the storage medium carried by the authentication subject and the destination to which the authentication subject moves are associated, and transmitted from the external device to the computer The received identification information and the installation location information of the external device, the step of causing the computer to extract the movement destination corresponding to the received identification information from the accessed database, and the movement extracted by the computer A computer that executes a step of determining whether the previous and received installation location information matches, and a step of causing the computer to output a result indicating that the person to be authenticated is valid when it is determined that they match The program is recorded.

  In the present invention, the movement destination of the authentication subject and the identification information stored in the storage medium carried by the authentication subject are registered in the database in association with each other, and the moving authentication subject is carried by the reading device. The identification information stored in the storage medium is read, and the read identification information and its own installation location information are transmitted to a communicable authentication device and registered in correspondence with the received identification information. For example, stop by a daily basis by outputting a result indicating that the person to be authenticated is valid if it is determined that the destination and the received installation location information match. A person who unlocks the door after visiting the destination registers the destination in advance, and the identification information of the storage medium carried by the reader is read by the reader installed at the stop-off destination. The reader If the destination registered in advance with the location is determined to match, the door is unlocked been authenticated validity.

  In the present invention, since the authenticity of the person to be authenticated is authenticated based on the destination of the person to be authenticated, it is not necessary to register the own biometric information or the password allocated from the device, and the biometric information is provided. Even those who are reluctant to do so, and elderly people and children who can not remember the assigned password can also be used.

  In addition, in the present invention, the authentication target person who is not likely to be stolen by another person usually uses the moving destination as a criterion for determination of authentication, so it is not easily stolen by another person. Even if the identification information is stolen by another person, it is possible to prevent the other person from being authenticated as a valid person to be authenticated.

  Hereinafter, an authentication system according to the present invention will be described with reference to the drawings showing embodiments. FIG. 1 is an explanatory diagram showing the overall configuration of an authentication system according to the present invention.

  In FIG. 1, 1, 1,... Are door locking devices, and each door locking device 1 is an IC tag 2 which is a storage medium carried by the person to be authenticated when the door is locked by reading the lock information of the card key. The identification information stored in the card is read, and the read identification information is transmitted to the server 4 via a network such as the Internet or a dedicated line. On the other hand, an authentication result regarding the validity of the person to be authenticated is received from the server 4, and the card Unlock the door by reading the key.

  The readers 3, 3,... Are installed at a plurality of places, and when the person to be authenticated enters the RF field of the antenna 31a centering on the place of installation, the IC tag 2 carried by the person to be authenticated is read. The identification information is read, and the read identification information is transmitted to the server 4 via the network. That is, it is proved that the person to be authenticated who carries the storage medium from which the identification information has been read has stopped near the installation location of the reader 3 or has passed through the vicinity of the installation location.

  The server 4 functions as an authentication device and is managed by a provider that provides the authentication system. The server 4 exchanges various information with the door locking devices 1, 1,... And the reading devices 3, 3,. 5 is extracted and various information is extracted or registered. Further, the server 4 receives various settings from the mobile phone 6 via the telephone line network and executes processing according to the settings.

  The mobile phone 6 is carried by a person to be authenticated, receives a destination where the person to be authenticated stops on a daily basis, or identification information stored in the IC tag 2, and transmits it to the server 4 via the telephone line network. To do. Thereby, the person to be authenticated can register and update in advance the identification information and the like stored in the IC tag 2 possessed by the destination or the self necessary for the authentication.

  Here, the configuration of the door locking device 1 will be described. FIG. 2 is a block diagram showing the configuration of the door locking device, and FIG. 3 is a conceptual diagram showing an example of registered contents of the time table. The door locking device 1 includes a card key reading unit 11, an RFID (Radio Frequency Identification) reading / writing unit 12, a RAM 13, a ROM 14, a locking execution unit 15, a clock unit 16, a timer 17, a communication unit 18, The CPU 19 controls these via the bus 10.

  The card key reading unit 11 has a slot into which a card key can be inserted, and is configured to read lock information of the card key inserted into the slot, and gives the read lock information to the CPU 19.

  The RFID read / write unit 12 includes an antenna 12a for communicating with the IC tag 2 carried by the person to be authenticated via radio waves or electromagnetic waves, and stores the information in the IC tag 2 existing in the RF field of the antenna via the antenna 12a. The identification information is read, and the read identification information is given to the RAM 13.

  The RAM 13 is configured by SRAM, DRAM, or the like, and stores temporary information generated when various programs are executed, or a time table 13a.

  The time table 13a is a table for managing time, and is composed of records in which information is registered in a plurality of items. Each item is associated with identification information, start time, end time, and elapsed time, respectively. It is registered.

  The identification information is stored in the IC tag 2 carried by the person to be authenticated, and is read and registered by the RFID read / write unit 12.

  The start time is a time at which the timer 17 starts timing in response to the identification information being read and registered by the RFID read / write unit 12, and the end time is the time at which the registered identification information is again read by the RFID read / write unit 12. This is the time when the timer 17 finishes timing in response to the reading. The time is measured by the clock unit 16, and the end time column is indicated as Null while the timer 17 is measuring.

  The elapsed time is the time from the start time to the end time, and is counted by the timer 17. While the timer 17 is measuring time, the elapsed time column indicates that the time is being measured.

  The ROM 14 stores the door locking devices 1, 1,..., A unique door ID, a timing start notification, a timing end notification, and various programs for controlling the door locking device 1, and is read as necessary. It is given to the RAM 13.

  The lock execution unit 15 includes a lock that locks or unlocks the door, and locks or unlocks the lock according to an instruction from the CPU 19.

  The clock unit 16 keeps time, and gives the start time and end time of the timer 17 to the time table 13a according to an instruction from the CPU 19.

  The timer 17 measures the elapsed time according to an instruction from the CPU 19, and gives the elapsed time to the time table 13a.

  The communication unit 18 is an interface for connecting to a network, and transmits identification information, door ID, timing start notification, timing end notification, and the like stored in the RAM 13 to the server 4 via the connected network. The authentication result received from 4 is given to the RAM 13.

  The CPU 19 controls the entire door locking device 1 and executes processing related to authentication according to various programs read from the ROM 14.

  Next, the IC tag 2 will be described. FIG. 4 is a schematic diagram showing the configuration of the IC tag. The IC tag 2 includes a storage unit 21 for storing identification information and an antenna 22 for communicating with the outside via radio waves or electromagnetic waves. The storage unit 21 stores identification information, but can be rewritten with arbitrary identification information via the RFID read / write unit 12. The IC tag 2 is very small and is carried by the person to be authenticated, for example, by attaching it to clothes or shoes.

  Next, the configuration of the reading device 3 will be described. FIG. 5 is a block diagram showing the configuration of the reading apparatus. The reading device 3 includes an RFID read / write unit 31, a RAM 32, a ROM 33, a clock unit 34, a communication unit 35, and a CPU 36 that controls these units via a bus 30.

  The RFID read / write unit 31 includes an antenna 31a for communicating with the IC tag 2 carried by the person to be authenticated via radio waves or electromagnetic waves, and is stored in the IC tag 2 existing in the RF field of the antenna via the antenna 31a. The identification information is read and the read identification information is given to the RAM 32.

  The RAM 32 is configured by SRAM, DRAM, or the like, and includes temporary information generated when various programs are executed, identification information received from the RFID read / write unit 31, installation location information received from the ROM 33, and read received from the clock unit 34. Time and the like are stored.

  The ROM 33 stores installation location information of the reading device 3 and various programs for controlling the reading device 3, and is read as needed and given to the RAM 32.

  The clock unit 34 keeps time, and gives the reading time when the RFID read / write unit 31 reads the identification information to the RAM 32 in accordance with an instruction from the CPU 36.

  The communication unit 35 is an interface for connecting to a network, and transmits identification information, installation location information, and reading time stored in the RAM 32 to the server 4 via the connected network.

  The CPU 36 controls the entire reading device 3 and executes processing related to reading according to various programs read from the ROM 33.

  Next, the configuration of the server 4 will be described. FIG. 6 is a block diagram showing the configuration of the server. The server 4 includes an external storage device 41, a first communication unit 42, a second communication unit 43, a RAM 44, a hard disk 45, a database interface 46, a clock unit 47, a timer 48, and these via a bus 40. And a CPU 49 for controlling.

  The external storage device 41 reads and reads information from a portable recording medium 41a such as a CD-ROM that stores information such as various programs and data for causing the server 4 to function as an authentication device according to the present invention. Information is given to the RAM 44 or the hard disk 45.

  The first communication unit 42 is an interface for connecting to the network. The identification information received from the door locking device 1 via the connected network, the door ID, the timing start notification and the timing end notification, and the reading device 3 The received identification information, installation location information, and reading time are received and given to the RAM 44, and on the other hand, an authentication result regarding the validity of the person to be authenticated is transmitted to the door locking device 1.

  The second communication unit 43 is an interface for connecting to the telephone line network, and is stored in the moving destination or the IC tag 2 where the person to be authenticated routinely stops from the mobile phone 6 via the connected telephone line network. Is received and given to the RAM 44.

  The RAM 44 is configured by SRAM, DRAM, or the like, and includes temporary information generated when various programs are executed, identification information received from the first communication unit 42, timing start notification, timing end notification, installation location information, and reading time. In addition, information extracted from the database 5 is stored.

  The hard disk 45 stores the above-described various programs and the like, and is read out as needed and given to the RAM 44.

  The database interface 46 is an interface for connecting to the database 5, and the server 4 accesses and registers the movement destination table 5 a and the management table 5 b stored in the database 5 through the database interface 46. Information is extracted and given to the RAM 44, and identification information, installation location information, reading time, etc. received from the RAM 44 are given to the database 5.

  The clock unit 47 keeps time, and gives the start time and end time of the timer 48 to the management table 5b in accordance with an instruction from the CPU 49.

  The timer 48 counts the elapsed time in accordance with an instruction from the CPU 49, and gives the measured elapsed time to the management table 5b.

  The CPU 49 controls the entire server 4 and executes processing related to authentication according to various programs read from the hard disk 45.

  Next, the movement destination table 5a and the management table 5b stored in the database 5 will be described. FIG. 7 is a conceptual diagram showing an example of registered contents in the destination table, and FIG. 8 is a conceptual diagram showing an example of registered contents in the management table.

  The destination table 5a is composed of records in which the destination to which the person to be authenticated moves and the identification information stored in the IC tag 2 carried by the person to be authenticated are associated with each other and information is registered in a plurality of items. In each item, identification information, a destination, and an arrival flag are associated and registered.

  The identification information is stored in the IC tag 2 carried by the person to be authenticated, and is registered in advance by the person to be authenticated via the mobile phone 6.

  The destination indicates the destination where the person to be authenticated stops or passes on a daily basis, and the CPU 49 determines that the destination and the installation location information received from the reader 3 via the first communication unit 42 match. The destination of the collation is given to the collation result column of the management table 5b. The destination is registered in advance by the person to be authenticated via the mobile phone 6.

  The initial value of the arrival flag is “not yet”, and the value is “arrival” when the CPU 49 determines that the installation location information received from the reading device 3 via the first communication unit 42 matches the destination. And the updated value is given to the collation result of the management table 5b.

  Next, the management table 5b is a table for managing the person to be authenticated, and is composed of records in which information is registered in a plurality of items. Each item includes identification information, door ID, start time, end time, The elapsed time and the collation result are registered in association with each other.

  The identification information is stored in the IC tag 2 carried by the person to be authenticated, and the door ID is unique information for identifying each of the door locking devices 1, 1,... Sent with start notification and registered in new record.

  The start time is a time at which the timer 48 starts timing in response to the timing start notification transmitted from the door locking device 1, and the end time is a timer in response to the timing end notification transmitted from the door locking device 1. 48 is the time at which the timing ends. The time is counted by the clock unit 47, and the end time column is indicated as Null while the timer 48 is counting.

  The elapsed time is the time from the start time to the end time, and is counted by the timer 48. While the timer 48 is measuring time, the elapsed time column indicates that the timer is counting.

  The collation result indicates whether the destination location information received by the CPU 49 from the reading device 3 via the destination and the first communication unit 42 matches, and indicates the number of destinations determined to match. , From the destination table 5a. Specifically, the collation result is the number of destinations that have registered the denominator, and the numerator is indicated by a fraction consisting of the number of destinations that are flagged as 'arriving', and the fraction is set to '1'. The closer it is, the higher the legitimacy of the person to be authenticated.

  Next, an authentication procedure in the authentication system according to the present invention will be described. First, the procedure of the timing process by the door locking device 1 and the server 4 will be described. FIG. 9 is a flowchart for explaining the procedure of the time measuring process of the server.

  When a person to be authenticated inserts a card key into the slot of the card key reading unit 11 in order to lock the door by the door locking device 1, the CPU 19 causes the card key reading unit 11 to read the lock information of the card key and executes the locking. The door is locked in response to the lock information read by the unit 15, and the identification information stored in the IC tag 2 carried by the person to be authenticated is read by the RFID read / write unit 12 and stored in the ROM 14. The door ID and the timing start notification are transmitted to the server 4 via the communication unit 18.

  The CPU 49 of the server 4 determines whether or not the identification information, the door ID, and the timing start notification transmitted from the door locking device 1 have been received (S101). If it is determined that they have not been received (NO in S101), stand by. On the other hand, if the CPU 49 determines that it has been received (YES in S101), it creates a new record in the management table 5b of the database 5, registers the received identification information and door ID (S102), and starts the timekeeping received. In response to the notification, the timer 48 starts counting elapsed time (S103), and registers the time measured by the clock unit 47 as the start time (S104).

  Further, when the person to be authenticated visits the destination where he / she visits on a daily basis and then inserts the card key into the slot of the card key reading unit 11 in order to unlock the door locked by the door locking device 1, the CPU 19 Causes the card key reading unit 11 to read the lock information of the card key again, enters the unlocking preparation state in response to the lock information read by the locking execution unit 15, and is carried by the person to be authenticated by the RFID read / write unit 12. The identification information stored in the IC tag 2 is read again, and the identification information, the door ID stored in the ROM 14 and the timing end notification are transmitted to the server 4 via the communication unit 18.

  The CPU 49 of the server 4 determines whether or not the identification information, the door ID and the timing end notification transmitted from the door locking device 1 have been received (S105), and if it has not been received (NO in S105), Continue timing. On the other hand, if the CPU 49 determines that it has been received (YES in S105), it ends the elapsed time measurement by the timer 48 in response to the received timing end notification (S106), and sets the time counted by the clock unit 47 as the end time. Is registered (S107), and a time measurement end signal is generated (S108).

  Next, a procedure of authentication processing by the reading device 3 and the server 4 will be described. FIG. 10 is a flowchart for explaining the server authentication processing procedure.

  When the person to be authenticated locks the door with the door locking device 1 and goes around the moving destination, the CPU 36 of the reading device 3 installed at the moving destination has the IC tag 2 carried by the person to be authenticated connected to the antenna 31a. When entering the RF field, the RFID read / write unit 31 reads the identification information stored in the IC tag 2 and communicates the identification information, the installation location information stored in the ROM 33, and the reading time counted by the clock unit 34. It transmits to the server 4 via the unit 35.

  When the CPU 49 of the server 4 is executing the above-described timing process (S201), the CPU 4 determines whether or not a timing end signal has been generated (S202), and determines that it has not been generated (NO in S202). Further, it is determined whether or not the identification information, the installation location information, and the reading time are received from the reading device 3 (S203). If it is determined that they are not received (NO in S203), the process returns to step S201. On the other hand, if the CPU 49 determines that it has been received (YES in S203), it accesses the destination table 5a and extracts the destination from the record corresponding to the received identification information (S204). It is determined whether or not the installation location information received in S203 matches (S205). If it is determined that they match (YES in S205), the arrival flag of the corresponding record is updated to “arrival” (S206). Then, 1 is added to the numerator of the matching result of the record of the corresponding management table 5b (S207), and the process returns to step S201. On the other hand, if the CPU 49 determines that they do not match (NO in S205), the arrival flag of the corresponding record is left as “not yet” and the process returns to step 201.

  If the CPU 49 determines in step S202 that an end signal has been generated (YES in S202), the CPU 49 determines whether the value of the matching result of the corresponding record has reached 1 (S208) and has reached 1. If it is determined (YES in S208), a result indicating that the person to be authenticated is valid is generated (S209). If it is determined that the number has not reached 1 (NO in S208), the person to be authenticated is invalid. The result is generated (S210), and the result is transmitted to the door locking device 1 indicated by the door ID of the corresponding record via the first communication unit 42 (S211).

  Then, when the CPU 19 of the door locking device 1 in the unlocking preparation state receives a result indicating that it is valid, the CPU 19 unlocks the door via the locking execution unit 15 and ends the process. On the other hand, if the CPU 19 receives a result indicating that it is unfair, the CPU 19 does not execute the unlocking of the door by the locking execution unit 15 and, for example, indicates that it is unfair to the user via a notification means (not shown). Is notified.

  In the embodiment described above, the database 5 is an apparatus independent of the server 4, but is not limited thereto, and may be stored in the hard disk 45 of the server 4.

  In the above-described embodiment, the door locking device 1 with an authentication function has been described as an example of the authentication device. However, the present invention is not limited to this, and is an entrance / exit room management device that authenticates the validity of the entrance / exit person. May be.

  Further, in the above-described embodiment, an example in which the person to be authenticated who locked the door unlocks the door after visiting the destination to stop on a daily basis is not limited to this, for example, The door may be unlocked by inputting an emergency password so that the door can be unlocked even in an emergency such as when a forgotten item is noticed immediately after the door is locked.

  Furthermore, in the above-described embodiment, the example in which the person to be authenticated is determined to be valid when the collation result of the management table 5b reaches 1 has been described. In this case, the person to be authenticated may be determined to be valid. As a result, the user can permit the door to be unlocked even when, for example, he / she comes home due to an emergency that he / she cannot stop at a single destination.

It is explanatory drawing which shows the whole structure of the authentication system which concerns on this invention. It is a block diagram which shows the structure of a door locking apparatus. It is a conceptual diagram which shows an example of the registration content of a time table. It is a schematic diagram which shows the structure of an IC tag. It is a block diagram which shows the structure of a reader. It is a block diagram which shows the structure of a server. It is a conceptual diagram which shows an example of the registration content of a movement destination table. It is a conceptual diagram which shows an example of the registration content of a management table. It is a flowchart explaining the procedure of the time measuring process of a server. It is a flowchart explaining the procedure of the authentication process of a server.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Door locking apparatus 2 IC tag 3 Reading apparatus 31a Antenna 4 Server 5 Database 5a Moving destination table 5b Management table

Claims (5)

The authentication subject is authenticated using a storage medium carried by the authentication subject, one or more reading devices that read identification information stored in the storage medium, and an authentication device that can communicate with the reading device. In the authentication method to be performed,
Using a database in which the authentication target person moves and the identification information is registered in association with each other,
In the reading device,
When the identification information stored in the storage medium is read, the identification information read and the installation location information stored therein are transmitted to the authentication device,
In the authentication device,
When the identification information and the installation location information transmitted from the reader are received, the database is accessed, the destination corresponding to the received identification information is extracted from the accessed database, the extracted destination and the received installation An authentication method characterized in that it is determined whether or not the location information matches, and if it is determined that the location information matches, a result indicating that the person to be authenticated is valid is output. A storage medium for the person to be authenticated is portable, said and one or more reader for reading identification information stored in the storage medium, and a communicable authentication device with said read device, the authentication subject of authentication In the authentication system that performs
A database in which the authentication target person moves and the identification information are registered in association with each other;
The reader is
Means for storing its own location information;
Means for reading identification information stored in the storage medium;
Means for transmitting the read identification information and the installation location information to the authentication device;
The authentication device
Means for accessing the database;
Means for receiving identification information and installation location information transmitted from the reader;
Means for extracting a destination corresponding to the received identification information from the accessed database;
Means for determining whether or not the extracted destination and received installation location information match;
An authentication system comprising: means for outputting a result indicating that the person to be authenticated is valid when it is determined that they match. In an information processing device that can communicate with an external device,
Means for accessing a database registered in association with a destination to which the person to be authenticated moves and identification information stored in a storage medium carried by the person to be authenticated;
Means for receiving identification information transmitted from an external device and installation location information of the external device;
Means for extracting a destination corresponding to the received identification information from the accessed database;
Means for determining whether or not the extracted destination and received installation location information match;
An information processing apparatus comprising: means for outputting a result to the effect that the person to be authenticated is valid when it is determined that they match. In a computer program that enables communication with an external device,
Causing the computer to access a database that is registered in association with a destination to which the person to be authenticated moves and identification information stored in a storage medium carried by the person to be authenticated;
Causing the computer to receive identification information transmitted from the external device and installation location information of the external device;
Causing the computer to extract a destination corresponding to the received identification information from the accessed database;
Causing the computer to determine whether the extracted destination and the received installation location information match; and
And causing the computer to output a result indicating that the person to be authenticated is valid when it is determined that they match. In a computer-readable recording medium in which a computer program that enables communication with an external device is recorded,
Causing the computer to access a database that is registered in association with a destination to which the person to be authenticated moves and identification information stored in a storage medium carried by the person to be authenticated;
Causing the computer to receive identification information transmitted from the external device and installation location information of the external device;
Causing the computer to extract a destination corresponding to the received identification information from the accessed database;
Causing the computer to determine whether the extracted destination and the received installation location information match; and
A computer-readable recording medium on which is recorded a computer program for executing a step of outputting a result indicating that the person to be authenticated is valid when the computer determines that they match. .

Images