JP2008141555A - Device authentication control system and program therefor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To avoid functional restriction by battery exhaustion, etc. in a device authentication control system. <P>SOLUTION: The device authentication control system is constituted of: a device 1 equipped with a functional realization means 1 for realizing functions including transmitting/receiving functions, a first communication means 14, a notification means 13, a radio IC tag reading means 16 and a first control means 12 for controlling the respective means and portable authentication keys 2B, 2C equipped with second communication means 20B, 20C, second control means 21B, 21C for controlling the second communication means 20B, 20C and radio IC tags 22B, 22C in which unique information is written, wherein the radio IC tags 22B, 22C are read by the radio IC tag reading means 16 and when the read information corresponds to information registered in the device 1, the functional restriction of the functional realization means 10 is canceled. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention performs wireless communication between a device and a mobile authentication key, and device authentication control that restricts the function of the device (mobile phone) when the distance between the device (mobile phone) and the mobile authentication key is more than a certain distance. It relates to the system and its programs.

  In recent years, the functions of devices such as mobile phones or personal computers have become more sophisticated. For example, mobile phones have become related to money transfer such as electronic payments in addition to the basic functions of original calls. On the other hand, it has remarkable convenience for the user, but the degree of danger at the time of theft or loss is also very high.

  Therefore, as a method of preventing the theft of the mobile phone, the user of the mobile phone holds the mobile authentication key, and communicates a predetermined authentication code between the mobile phone and the mobile authentication key, There has also been proposed a mobile phone that can be used when both sides can confirm the authentication code (see, for example, Patent Document 1).

In Patent Document 1, it is shown that a mobile phone detects an authentication signal with a certain electric field strength from a mobile authentication key, and restricts the use of the mobile phone when the distance between them is more than a certain distance. ing.
Japanese Patent Laid-Open No. 11-88499

  However, in Patent Document 1, the battery of the mobile authentication key is consumed even under the condition that the distance between the device (mobile phone) and the mobile authentication key is within a certain distance and the function restriction of the device can be removed. Sometimes device restrictions cannot be lifted.

  In general, there is a method for canceling the solution by entering the password registered in the device in advance, but it is necessary to memorize the password, especially in an emergency. There are things that you can forget.

  Also, as a usage method, especially when multiple devices are shared by multiple members for business use, the same PIN number is often set and used for multiple devices, and methods that rely on the PIN number cannot maintain confidentiality. It had the problem that.

  The present invention solves the above-described conventional problems, and provides a device authentication control system and a program for the device authentication control system that can release the function restriction of the device even when the battery of the portable authentication key is consumed or a failure occurs. For the purpose.

In order to solve the above-described conventional problems, the present invention provides a function realizing unit having a function including a call origination / incoming function, a first communication unit, a wireless IC tag reading unit, and a first unit for controlling each of the above units. Mobile authentication comprising a device comprising a first control means, a second communication means, a second control means for controlling the second communication means, and a wireless IC tag in which unique information is written And the communication is performed between the device and the mobile authentication key via the first communication means and the second communication means, and the mobile authentication key is authenticated on the device side. When it is not possible, the first control means restricts the function of the function realizing means, and when the communication between the first communication means and the second communication means is performed and authentication is obtained, the function realizing means In the device authentication control system that removes the function restriction of When the wireless IC tag of the portable authentication key is read by the wireless IC tag reading means of the device and collated with the information registered in the device by the first control means, the unique information matches. Then, the function restriction of the function realizing means is released.

  As a result, for example, even if the battery of the mobile authentication key is exhausted and communication between the device and the mobile authentication key becomes impossible and the function implementation means is restricted, the wireless IC tag reading means of the device wirelessly uses the mobile authentication key. Verification with an IC tag (a passive tag that can communicate even without a battery) is performed, and the function restriction of the function realization means can be released.

  The present invention can cancel the function restriction of the device even when the battery of the mobile authentication key for canceling the function restriction of the device or the failure occurs, and it cannot be canceled by forgetting it like a personal identification number. In addition, it is possible to maintain confidentiality when a plurality of devices are shared by a plurality of members for business use. In addition, although it is a frequently used application, it is a non-contact wireless IC tag, which has no mechanical damage and can ensure security.

  According to a first aspect of the present invention, there is provided a function realization unit having a function including an outgoing / incoming function, a first communication unit, a wireless IC tag reading unit, and a first control unit for controlling the respective units. A mobile authentication key comprising a device, a second communication means, a second control means for controlling the second communication means, and a wireless IC tag in which unique information is written, When communication is performed between the device and the portable authentication key via the first communication unit and the second communication unit, and the portable authentication key cannot be authenticated on the device side, the first Device authentication for restricting the function of the function realization means and canceling the function restriction of the function realization means when the first communication means and the second communication means communicate and authenticate In the control system, a wireless IC tag for the portable authentication key Is read by the wireless IC tag reading means of the device, and when the unique information matches as a result of checking with the information registered in the device by the first control means, the function restriction of the function realizing means Was released.

  As a result, when the battery of the mobile authentication key is exhausted with the device (mobile phone), the device cannot communicate with the mobile authentication key, and the wireless IC tag reading means of the device (mobile phone) even if the device performs function restriction The function restriction can be released by reading the wireless IC tag (passive tag that can communicate without a battery) attached to the mobile authentication key via, and forgotten like a PIN There is also an improvement in terms of confidentiality when sharing among multiple members.

  According to a second aspect of the invention, in particular, in the first aspect of the invention, the device includes a timer unit, the wireless IC tag of the portable authentication key is read by the wireless IC tag reading unit of the device, and the first control unit If the information matched with the information registered in the device is matched, the function restriction of the function realization means is released, then measured by the timer means, and the function of the function realization means is restricted after a predetermined time has elapsed. I did it.

  As a result, even if the device (mobile phone) is stolen or lost after the authentication by the wireless IC tag, the function restriction is applied when the predetermined time has passed. It can be expected that the abuse by a person will be prohibited.

In a third aspect of the invention, particularly in the first or second aspect of the invention, the first control means does not limit the function when the user uses the function of the function realization means, The function restriction was applied when the use of the function of the function realization means was finished.

  As a result, even if a legitimate user is unlucky during a call, for example, if the battery of the mobile authentication key is exhausted, the call being made at that time will not be interrupted, and the function will be restricted after the call ends (for example, the call Therefore, convenience is improved without sacrificing safety.

  A fourth invention is a program for causing a computer to execute at least one operation, particularly in the device authentication control systems of the first to third inventions, and includes a CPU, a RAM, a ROM, a storage device, an I / O, and the like. A part or all of the present invention can be easily realized as a program by cooperating hardware resources such as electrical information devices and computers.

  Also, by distributing the program on a recording medium or using a communication line, program distribution can be realized very easily compared to other means.

  Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings. Note that the present invention is not limited to the embodiments.

(Embodiment 1)
FIG. 1 is a diagram showing an example of the configuration of a device authentication control system according to the present invention.

  In FIG. 1, the mobile phone (device) 1 includes a function realization unit 10, a first control unit 12, a notification unit 13, and a first communication unit 14.

  Further, the function realization means 10 includes a settlement function 10A that performs important functions such as electronic settlement related to money granting, and a call origination / reception function 10B that is a normal outgoing / incoming function that a mobile phone originally has. . The details of the settlement function 10A and the call origination / reception function 10B are the same as those of the conventional patent, and thus the description thereof is omitted.

  The function limitation to the payment function 10A or the call origination / reception function 10B is the simplest and easy-to-understand implementation method of stopping the power supply to the circuit block (function realization means), but the execution of the software for realizing the function is stopped. Such a logical method may be used.

  The settlement function 10A is assumed to be a function of performing cash exchange such as access to a bank account or transfer to an account, and includes the exchange of money such as ticket gate processing in public transportation.

  The first communication means 14 includes a medium distance communication means 14B capable of communicating at a medium distance up to several meters, for example, and a short distance communication means 14C capable of communicating only at a distance of several tens of centimeters, for example.

  The mobile authentication keys 2B and 2C include second communication means 20B and 20C and second control means 21B and 21C, and the second control means 21B and 21C hold a unique ID code (unique information). is doing.

  The first control means 12 transmits the unique ID code at the time of communication with the cellular phone (device) 1, and the first control means 12 compares the unique ID code held by itself with the portable authentication keys 2B and 2C. It is determined whether or not (apparatus) 1 is an official authentication key.

The mobile authentication keys 2B and 2C have exactly the same configuration and the same ID code, and are written in two parts for the sake of explanation. Only the positional relationship (communication possible distance) with the mobile phone (device) 1 is different.

  The internal configurations of the medium-range communication unit 14B and the short-range communication unit 14C included in the first communication unit 14 will be described in detail later, and are omitted here.

  The medium distance communication described here is assumed to have a distance of, for example, about several meters, that is, a mobile phone (device) 1 as a belonging, and that the mobile authentication key 2B is worn. Short-distance communication assumes a state in which the mobile phone (device) 1 is close to the mobile authentication key 2C at a distance close to, for example, several tens of centimeters or less.

  When the distance between the mobile phone (device) 1 and the mobile authentication key 2B is about several meters, the mobile authentication key 2B cannot communicate with the short-range communication means 14C, but communicates with the medium-range communication means 14B. Therefore, it can be determined that the distance between the mobile phone (device) 1 and the mobile authentication key 2B is about several meters.

  In this case, the first control unit 12 restricts the settlement function 10A of the function realization unit 10 to be unusable and causes only the outgoing / incoming function 10B to function. Thereby, only a telephone call which is a basic function of the mobile phone (device) 1 can be performed.

  If the mobile phone (device) 1 moves away from the owner's mobile authentication key 2B due to theft or misplacement, the mobile phone (device) 1 communicates with the mobile authentication key 2B. Since the mobile authentication key 2B no longer exists, the notification means 13 notifies the user and warns the user.

  At the same time, the first control means 12 restricts all the functions of the function realization means 10 (here, the settlement function 10A and the outgoing / incoming function 10B) so that it cannot be used completely. Prevent abuse. Of course, it is also conceivable that the mobile authentication keys 2B and 2C are also provided with notification means for notification.

  In the case where the user makes a payment, when the user brings the mobile phone (device) 1 close to the mobile authentication key 2C in a pocket or the like, for example, several tens of centimeters or less, the short distance communication means 14C and Communication is possible, and the mobile phone (device) 1 can determine that the distance from the mobile authentication key 2C is several tens of centimeters or less.

  In this case, the first control unit 12 releases all restrictions including the restriction of the settlement function 10A of the function realizing unit 10, and the user can perform settlement.

  Next, the communication distance change mechanism performed by the first communication means 14, that is, the medium distance communication means 14 </ b> A (for example, communication is possible up to several meters) and the short distance communication means 14 </ b> B (can be communicated at several tens of centimeters or less). The mechanism for changing the communication distance is realized by changing the transmission / reception strength of radio waves. This mechanism will be described with reference to FIG.

  FIG. 2 is a diagram illustrating an example of the internal configuration of the first communication unit 14 and the second communication unit 20 of the mobile phone 1.

  Attenuating means 140 for attenuating the antenna signal, first transmitting means 141, first receiving means 142, and first communication control means 143 are provided.

The attenuation unit 140 is controlled by the first communication control unit 143 and can change the attenuation rate in at least the following two stages.

  The first communication distance is strong attenuation (for example, attenuated by about 50 to 60 dB) and short-distance communication (for example, communication distance of several centimeters or less).

  The second communication distance is medium distance communication (for example, a communication distance of several meters) without attenuation.

  By switching these communication distances, it is possible to detect the distance from the mobile authentication keys 2B and 2C and to perform an operation according to the distance.

  That is, if communication is not possible at the second communication distance (medium distance) but communication is possible at the first communication distance (short distance), it can be understood that the communication distance is short, and communication can be performed at the second communication distance (medium distance). If it is, it can be easily determined that the distance is medium.

  Further, if communication cannot be performed at the second communication distance (medium distance), it can be understood that the distance from the mobile authentication keys 2B and 2C is at least the second communication distance (for example, several meters or more).

  Of course, as described here, the method of changing the communicable distance using the attenuation means is merely an example, and it is possible to reduce the sensitivity by separating the transmitting / receiving antenna only in the case of short-range communication. Also, a method of estimating the distance between each other by simultaneously monitoring the received electric field strength is possible.

  Next, the operation when the wireless IC tags 22B and 22C are attached to the mobile authentication keys 20B and 20C will be described with reference to FIGS.

  The wireless IC tag used in the description here is a passive tag that is excited by electromagnetic waves from the reading means and can communicate without a battery on the tag side, and is a contact type with a communication distance of about several centimeters. Assumes that.

  FIG. 3 is a diagram showing an example of use of the device authentication control system of the present invention.

  Normally, the function realizing unit 10 is controlled depending on whether the first communication unit and the second communication unit as described above are communicable. For example, the mobile authentication keys 20B and 20C are broken. Alternatively, when the built-in battery runs out and the second communication means 20B and 20C cannot operate, it may be inconvenient for the user due to unexpected function restrictions.

  Therefore, as shown in FIG. 3, the mobile phone 1 is brought close to the wireless IC tag 22, and the wireless IC tag 22 is read through the wireless IC tag reading means 16 included in the mobile phone 1, and the information is first controlled. When the means 12 analyzes and matches with the information stored in the inside, the function realizing means 10 is controlled regardless of whether or not the first communication means 14 can communicate as described above. Then, release the function restriction.

  However, when the function restriction is released using such wireless IC tags 22B and 22C, it is not preferable in terms of security to continue the function restriction release for a long time. It is preferable to use a method of setting a limit (for example, about 3 minutes) for the duration of canceling the restriction and applying a side function restriction when a certain time has elapsed.

  Further, even if a legitimate user is unlucky during a call, for example, if the battery of the portable authentication key is exhausted, the first control means realizes the function so that the call being made at that time is not interrupted. When the means uses the function, it is possible to apply the function restriction when the use of the outgoing / incoming function is finished without applying the function restriction.

  In addition, it is desirable in terms of security that the wireless IC tag described so far has a longer unique ID length, for example, 128 bits than 64 bits.

  Of course, in order to cancel the function by the method using such a wireless IC tag, a certain degree of function restriction is provided, for example, the payment function 10A which is a function related to money awarding is prohibited, and only the outgoing / incoming function 10B It is also conceivable to use such as permitting only a specific call destination even in the case of only the outgoing / incoming function 10B.

  As described above, in this embodiment, a wireless IC tag is provided on a portable key, the wireless IC tag is read by the wireless IC tag reading means of the device, and the device function is restricted or released by comparing with the device information. Therefore, even when the battery of the portable key is exhausted or broken, the device function restriction can be released.

  In the explanation so far, it has been explained that the device is a mobile phone. However, the present invention is not limited to this, and it can be applied to household devices, in-vehicle devices, etc., and the same effect can be expected. is there.

  In addition, in order to increase security when making payments, in addition to authentication by short-distance communication of several tens of centimeters, double combination authentication in which the payment function is enabled only when wireless IC tag reading verification is established is also possible. It is very effective in terms of security.

  Note that the function realization means and control means described in the present embodiment include a CPU (or microcomputer), a RAM, a ROM, a storage / recording device, an electrical / information device equipped with an I / O, a computer, a server, etc. You may implement in the form of the program which cooperates a hard resource.

  In the form of a program, new functions can be easily distributed / updated and installed by recording them on a recording medium such as magnetic media or optical media, or distributing them using a communication line such as the Internet.

  As described above, the present invention avoids inconveniences caused by unexpected function restrictions such as failure or battery exhaustion in a device authentication control system that restricts functions of a terminal (mobile phone) depending on whether or not wireless communication is possible. Since security can be expected, a safer device (for example, a mobile phone with a payment function) can be provided.

The figure which shows an example of a structure of the apparatus authentication control system of Embodiment 1 of this invention. The figure which shows an example of the internal structure of the 1st communication means of Embodiment 1 of this invention, and a 2nd communication means. The figure which shows an example of use of the apparatus authentication control system of Embodiment 1 of this invention

Explanation of symbols

1 Mobile phone (equipment)
2B Mobile authentication key located several meters from the mobile phone 2C Mobile authentication key located several tens of centimeters from the mobile phone 10 Function realization means 10B Calling / incoming function 12 First control means (unique ID of communication partner side) Keep code)
14 First communication means 15 Timer means 16 Wireless IC tag reading means 20 Second communication means 20B Second communication means of the mobile authentication key 2B 20C Second communication means of the mobile authentication key 2C 21B First of the mobile authentication key 2B 2 control means (holds unique ID code)
21C Second control means for the mobile authentication key 2C (holds a unique ID code)
22B, 22C wireless IC tag

Claims (4)

A device comprising a function realization means having a function including an outgoing / incoming function, a first communication means, a wireless IC tag reading means, and a first control means for controlling the means;
A mobile communication key comprising a second communication means, a second control means for controlling the second communication means, and a wireless IC tag in which unique information is written;
Communicate between the device and the portable authentication key via the first communication means and the second communication means,
When the mobile authentication key cannot be authenticated on the device side, the first control unit limits the function of the function realizing unit,
In the device authentication control system for releasing the function restriction of the function realization means when the communication between the first communication means and the second communication means is performed and authentication is obtained,
When the wireless IC tag of the portable authentication key is read by the wireless IC tag reading unit of the device, and the unique information matches as a result of checking with the information registered in the device by the first control unit. A device authentication control system for releasing the function restriction of the function realizing means. The device comprises a timer means,
When the wireless IC tag of the portable authentication key is read by the wireless IC tag reading unit of the device and matched with the information registered in the device by the first control unit,
2. The device authentication control system according to claim 1, wherein after the function restriction of the function realization means is released, measurement is performed by the timer means, and the function realization means is restricted after a predetermined time has elapsed. The first control means, when a user is using the function of the function realization means, does not place a function restriction, but places a function restriction when the use of the outgoing / incoming function ends. 3. The device authentication control system according to 1 or 2. The program for making a computer perform at least one in the apparatus authentication control system in any one of Claims 1-3.

Images