JP2008257519A - Authentication device, authentication system, broadcasting device, authentication method, and broadcasting method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To surely prevent access by an unauthorized communication terminal. <P>SOLUTION: This authentication device 1 is provided with a first receipt part 11, a first authentication part 13, a second receipt part 15, and a second authentication part 16. The first receipt part 11 receives first authentication information. The first authentication part 13 carries out first authentication by using the first authentication information received by the first receipt part 11. The second receipt part 15 receives second authentication information. The second authentication part 16 carries out second authentication by using the second authentication information and previously stored registered authentication information when the first authentication by the first authentication part 13 succeeds and the second authentication information is received within a predetermined period by the second receipt part 15. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to an authentication apparatus, an authentication method, an authentication system, and a broadcasting apparatus and a broadcasting method for receiving broadcast information after performing authentication.

When accepting access from a communication terminal on a network, there is an authentication device that authenticates that a user of the communication terminal is registered in advance before accepting access. For example, in Patent Document 1 below, first key information transmitted from a communication terminal is authenticated, second key information is generated based on the first key information, and is transmitted to the communication terminal. Only describes an authentication device that permits a communication terminal to perform authentication based on the second key information.
JP 2004-30497 A

  However, in the technique described in Patent Document 1, when the user illegally acquires the first key information, even if the user is not a pre-registered user, authentication using the first key information is not possible. If the authentication is successful, the second key information is provided from the authentication device, so that the authentication based on the second key information can be successful. Thereby, there is a possibility of accepting access by an unauthorized communication terminal possessed by an unauthorized user.

  Accordingly, an object of the present invention is to provide an authentication device and an authentication method that can more reliably prevent access by an unauthorized communication terminal. It is another object of the present invention to provide a broadcasting apparatus and a broadcasting method for receiving broadcast information from a communication terminal that has more reliably authenticated.

  An authentication apparatus according to the present invention includes a first receiving unit that receives first authentication information, a first authentication unit that performs first authentication using the first authentication information received by the first receiving unit, and The first authentication by the second receiving means for receiving the second authentication information and the first authenticating means has been successful, and the second authentication information has been received within a predetermined period by the second receiving means. In this case, a second authentication unit that performs second authentication using the second authentication information and registered authentication information stored in advance is provided.

  The authentication method of the present invention includes a first receiving step in which the first receiving means receives the first authentication information, and the first authentication information received in the first receiving step by the first authenticating means. The first authentication step using the first authentication, the second receiving means receiving the second authentication information, the second receiving step, and the second authenticating means in the first authentication step. When the first authentication is successful and the second authentication information is received within the predetermined period in the second reception step, the second authentication is performed using the second authentication information and the previously stored registration authentication information. And a second authentication step.

  In the present invention, the first authentication is performed using the received first authentication information, and when the first authentication is successful, the second authentication information received within a predetermined period and the previously stored registration authentication information The second authentication is performed using. In order for the user to succeed in the second authentication, the first authentication information and the second authentication information are acquired, the first authentication information is transmitted, and the second authentication information is transmitted within a predetermined period. There must be. For example, even if the user successfully obtains the first authentication information by illegally acquiring the first authentication information, the second authentication information corresponding to the registered authentication information registered in advance is not acquired. The second authentication cannot be successful. Therefore, it is possible to more reliably prevent access by an unauthorized communication terminal.

  In the authentication apparatus of the present invention, preferably, the first authentication information includes at least position information of a communication terminal that has transmitted the first authentication information, and the first authentication means performs the first authentication using the position information. Do.

  In the authentication apparatus according to the present invention, preferably, the second authentication information includes at least position information of a communication terminal that has transmitted the second authentication information, and the second authentication means performs the second authentication using the position information. Do.

  Preferably, in the authentication method of the present invention, the first authentication information includes at least position information of a communication terminal that transmits the first authentication information, and the first authentication step performs the first authentication using the position information. Do.

  In this case, since authentication is performed using the position information of the communication terminal that transmitted the first or second authentication information, the authentication is not successful unless the authentication information is transmitted from the communication terminal at a valid position. Therefore, access by an unauthorized communication terminal can be prevented more reliably.

  The authentication system of the present invention includes a first communication terminal, a second communication terminal, and an authentication device. The first communication terminal transmits first authentication information to the authentication device, and the second communication terminal The second authentication information is transmitted to the authentication device, and the authentication device is received by the first receiving means and the first receiving means for receiving the first authentication information transmitted from the first communication terminal. First authentication means for performing first authentication using the first authentication information, second receiving means for receiving second authentication information transmitted from the second communication terminal, and first authentication means When the first authentication is successful and the second authentication information is received by the second receiving means within a predetermined period, the second authentication information and the registered authentication information stored in advance are used to And a second authentication means for performing authentication.

  In the authentication system of the present invention, the communication terminal that transmits the first authentication information is different from the communication terminal that transmits the second authentication information. Therefore, a communication terminal suitable for performing the first authentication and a communication terminal suitable for performing the second authentication can be selected. And even if it is a case where 1st authentication and 2nd authentication are performed by a different communication terminal, the access by an unauthorized communication terminal can be prevented more reliably.

  The broadcasting device of the present invention is a broadcasting device that broadcasts received broadcast information, and includes a first receiving unit that receives first authentication information, and first authentication information received by the first receiving unit. The first authenticating means for performing the first authentication, the second receiving means for receiving the second authentication information, the first authentication by the first authenticating means being successful, and the second receiving means Second authentication means for performing second authentication using the second authentication information and pre-stored registration authentication information when the second authentication information is received within a predetermined period; and second authentication means A second receiving means for receiving broadcast information from the communication terminal that has transmitted the second authentication information, and a broadcasting means for broadcasting the broadcast information received by the third receiving means when the second authentication is successful. It is characterized by providing.

  The broadcasting method of the present invention is a broadcasting method for broadcasting broadcast information received by a broadcasting device, wherein the first receiving means receives the first authentication information, and the first authentication means. The first authentication step for performing the first authentication using the first authentication information received in the first receiving step, and the second receiving step for the second receiving means to receive the second authentication information. When the second authentication means succeeds in the first authentication in the first authentication step and the second authentication information is received within the predetermined period in the second reception step, the second authentication means A second authentication step for performing the second authentication using the information and the pre-stored registered authentication information, and the third receiving means when the second authentication is successful in the second authentication step, the second authentication step Receive broadcast information from the communication terminal that sent the authentication information A third receiving step that, broadcasting means, characterized in that it comprises a broadcasting step of broadcasting the broadcast information received in the third receiving step.

  In the present invention, the first authentication is performed using the received first authentication information, and when the first authentication is successful, the second authentication information received within a predetermined period and the previously stored registration authentication information The second authentication is performed using. In order for the user to succeed in the second authentication, the first authentication information and the second authentication information are acquired, the first authentication information is transmitted, and the second authentication information is transmitted within a predetermined period. There must be. For example, even if the user successfully obtains the first authentication information by illegally acquiring the first authentication information, the second authentication information corresponding to the registered authentication information registered in advance is not acquired. The second authentication cannot be successful. Therefore, it is possible to more reliably prevent access by an unauthorized communication terminal. When the second authentication is successful, the broadcast information is received from the communication terminal that transmitted the second authentication information, and the broadcast information is broadcast, so that it is provided from the communication terminal that has been determined to be legitimate. Broadcast information can be broadcast.

  Preferably, the broadcast apparatus according to the present invention further includes storage means for storing the registered position information specifying the registered position and the broadcast area in association with each other, and the first authentication information is a communication in which the first authentication information is transmitted. Including at least terminal location information, the first authentication means performs first authentication using the location information and the registered location information stored in the storage means, and the broadcasting means is received by the third receiving means. Broadcast information is broadcast to the broadcast area stored in the storage means in association with the registered position information used for the first authentication.

  Preferably, in the broadcasting method of the present invention, the broadcasting device includes storage means for storing the registered position information specifying the registered position and the broadcasting area in association with each other, and the first authentication information is the first authentication information. Including at least the location information of the communication terminal that transmitted the first authentication step, using the first authentication information and the registered location information in the first authentication step, and receiving in the third reception step in the broadcasting step Broadcast information is broadcast to the broadcast area stored in the storage means in association with the registered position information used for the first authentication.

  In this case, since it is necessary to transmit the first authentication information from the communication terminal located at a position corresponding to the registered position information stored in advance, it is possible to further reliably prevent access by an unauthorized communication terminal. Since the broadcast information is broadcast to a broadcast area stored in advance in association with the registered position information used for the first authentication, the broadcast area is limited based on the area where the communication terminal providing the broadcast information is located. can do.

  ADVANTAGE OF THE INVENTION According to this invention, the access by an unauthorized communication terminal can be prevented more reliably. Moreover, broadcast information can be received from a communication terminal that has performed authentication more reliably.

  Exemplary embodiments of an authentication device, an authentication method, a broadcast device, and a broadcast method according to the present invention will be described with reference to the drawings.

  FIG. 1 is a configuration diagram of a broadcasting system according to the present embodiment. The broadcast system S of the present embodiment is a broadcast type information providing system that broadcasts via the communication network N by the broadcast device 1. The communication network N is a mobile communication network configured with a base station. In the broadcast system S, an information provider who provides broadcast information is registered in advance in association with the broadcast area A1 where the broadcast is performed. Information for broadcasting is provided to the broadcasting apparatus 1 via the communication network N by the information provider terminal 2 of the information provider registered in advance.

  The broadcast signal broadcast from the broadcast device 1 is received by the mobile terminal 3 located in the broadcast area A1 registered in association with the information provider. The broadcast system S, for example, sets the broadcast area A1 as a disaster area during a disaster and receives disaster information from the information provider terminal 2 of the information provider. The broadcast system S broadcasts the received disaster information to the disaster area (broadcast area A1).

  The broadcast device 1 includes an authentication device 4 for authenticating the validity of the information provider and the information providing terminal 2 so that broadcast information is not received from a communication terminal owned by an unauthorized information provider. Is done. Note that the “illegal information provider” is an information provider that is not registered in advance, and the “legitimate information provider” is an information provider that is registered in advance. The authentication device 4 performs authentication by transmitting and receiving information to and from the authentication terminal 5 and the information providing terminal 2 possessed by the information provider via the communication network N. The authentication terminal 5 is a mobile communication terminal such as a mobile phone, a PHS (Personal Handy-phone System), a PDA (Personal Digital Assistant), for example. The information providing terminal 2 is, for example, a desktop personal computer.

  The authentication device 4 performs the first authentication with the authentication terminal 5, and performs the second authentication with the information providing terminal 2 when the first authentication is successful, whereby the information provider and the information providing terminal Judge the validity of 2. In the authentication device 4, information is registered in advance in association with an ID and a password for identifying an information provider in order to perform the first authentication and the second authentication. The contents of the information to be registered are the mobile phone number of the authentication terminal 5, the identification information of the information providing terminal 2, the registered position information, and the broadcast area described above.

  As the registered position information, the position information of the information providing terminal 2 when transmitting broadcast information to the broadcast apparatus 1 is registered. The information provider carries the authentication terminal 5 and transmits information for broadcasting from the fixed information providing terminal 2. Therefore, when broadcast information is provided from a legitimate information provider, the position information of the authentication terminal 5, the position information of the information providing terminal 2, and the position of the information provider match or a deviation within a predetermined range occurs. It is. When an unauthorized information provider requests authentication, the position of the unauthorized information provider deviates from the registered position information. As the registered position information, latitude / longitude or identification information of a base station or a sector to which the authentication terminal 5 belongs can be used.

  The authentication device 4 uses the position information system 6 when performing the first authentication using the registered position information. The authentication device 4 is configured to be able to communicate with the position information system 6. The authentication device 4 transmits a position information acquisition request for requesting acquisition of position information of the authentication terminal 5 to the position information system 6. In response to the position information acquisition request, the position information system 6 acquires the position information of the authentication terminal 5 and transmits a position information acquisition response including the acquired position information to the authentication device 4.

  When receiving the position information acquisition request, the position information system 6 transmits an instruction signal instructing acquisition of position information to the authentication terminal 5 via the communication network N. Upon receiving the instruction signal, the authentication terminal 5 measures latitude and longitude by GPS positioning. Then, the authentication terminal 5 returns the position information obtained as a result of the measurement to the position information system 6. Alternatively, the location information system 6 may acquire the identification information of the base station or sector to which the authentication terminal 5 belongs from the authentication terminal 5 as location information. When the position information system 6 obtains the position information from the authentication terminal 5, the position information system 6 transmits the position information to the authentication device 4 together with the position information acquisition response.

  Hereinafter, the authentication device 4 according to the present embodiment will be described in detail, and the broadcasting device 1 including the authentication device 4 will be described in detail with reference to FIG. FIG. 2 is a functional block diagram of the authentication apparatus according to the present embodiment and a broadcasting apparatus including the authentication apparatus.

  The authentication device 4 includes a first reception unit 11, a position information acquisition unit 12, a first authentication unit 13, a first storage unit 14, a second reception unit 15, a second authentication unit 16, and a second A storage unit 17 is provided.

  The first receiving unit 11 receives first authentication information for performing first authentication from the authentication terminal 5. In the present embodiment, the first authentication information includes the mobile phone number of the authentication terminal 5 and position information indicating the position of the authentication terminal 5. First, the first receiving unit 11 receives a first authentication request for requesting the first authentication from the authentication terminal 5. The first authentication request is a broadcast transmission authentication request for requesting authentication of a registered valid information provider when providing broadcast information. The mobile phone number of the authentication terminal 5 is received by the first receiving unit 11 together with the first authentication request. The first receiving unit 11 outputs the received mobile phone number to the first authentication unit 13.

  In response to the output of the received mobile phone number, the first receiving unit 11 acquires the location information of the authentication terminal 5 when receiving a signal indicating that mobile phone number authentication, which will be described later, has succeeded from the first authentication unit 13 To do. The first reception unit 11 includes a position information acquisition unit 12 and acquires the position information of the authentication terminal 5 using the function of the position information acquisition unit 12. The location information acquisition unit 12 transmits a location information acquisition request for acquiring location information of the authentication terminal 5 to the location information system 6 together with the mobile phone number of the authentication terminal 5.

  The position information acquisition unit 12 receives the position information acquisition response returned from the position information system 6 in response to the transmission of the position information acquisition request, and acquires the position information of the authentication terminal 5. As a result, the first receiving unit 11 receives position information from the authentication terminal 5 via the position information system 6. The first reception unit 11 outputs the received position information to the first authentication unit 13.

  The first authentication unit 13 performs the first authentication using the first authentication information. As the first authentication, mobile phone number authentication and location information authentication are performed. First, the first authentication unit 13 outputs the mobile phone number of the authentication terminal 5 in the first authentication information from the first reception unit 11. The first authentication unit 13 performs mobile phone number authentication based on whether or not the output mobile phone number is stored in the first storage unit 14. The first storage unit 14 stores the registered information provider ID and the telephone number of the authentication terminal 5 of the information provider in association with each other. When the mobile phone number authentication is successful, the first authentication unit 13 outputs a signal to that effect to the first reception unit 11.

  Then, the 1st authentication part 13 inputs the positional information on the authentication terminal 5 among the 1st authentication information from the 1st receiving part 11, and performs positional information authentication. The first authentication unit 13 determines whether the input location information corresponds to the registered location information stored in the first storage unit 14 in association with the mobile phone number of the authentication terminal 5. Authenticate. The first storage unit 14 stores the telephone number of the registered information provider authentication terminal 5 and the registered registered location information in association with each other.

  When the location information authentication is successful, the first authentication unit 13 outputs a signal indicating that the first authentication is successful to the second reception unit 15. The signal indicating that the first authentication has been successful includes the ID of the information provider. Note that when the location information authentication is successful, the first authentication unit 13 outputs the registered location information used for the location information authentication to the area determination unit 20 described later.

  When the first authentication is successful, the second receiving unit 15 receives the second authentication information from the information providing terminal 2 together with the second authentication request within a predetermined period. When the second receiving unit 15 receives a signal indicating that the first authentication is successful from the first authenticating unit 13, the identification information of the information providing terminal 2 stored in association with the ID of the information provider who has succeeded in the authentication. To extract. Then, the second receiving unit 15 receives the access of the information providing terminal 2 that has requested access using the identification information of the information providing terminal 2 for a predetermined period, and receives information transmitted from the information providing terminal 2.

  Even if it is an access request from the information provider terminal 2 of the information provider who has succeeded in the first authentication, the second receiving unit 15 does not accept access unless it is outside the predetermined period. Further, the second receiving unit 15 does not accept access from a terminal of an information provider who has not succeeded in the first authentication even within the predetermined period.

  For example, the second receiving unit 15 holds an access list of accessible terminals, and the access list includes identification information of the information providing terminal 2 stored in association with the ID of the information provider who has been successfully authenticated. They are listed only within a predetermined period. Note that. For example, the predetermined period is counted after a signal indicating that the first authentication is successful in the second receiving unit 15. The length of the predetermined period can be arbitrarily set from several seconds to several minutes or several hours.

  The second receiving unit 15 receives the information provider ID and password as the second authentication information from the information providing terminal 2 that has been successfully accessed. The second reception unit 15 outputs the received ID and password to the second authentication unit 16.

  The second authentication unit 16 performs second authentication using the second authentication information. The second authentication unit 16 performs the second authentication based on whether the information provider ID and password are stored in association with the second storage unit 17. That is, the second authenticating unit 16 receives the second authentication information when the first authenticating unit 13 succeeds and the second receiving unit 15 receives the second authentication information within a predetermined period. The second authentication is performed using the authentication information 2 and the previously stored registration authentication information.

  The second storage unit 17 stores a registered information provider ID and password (registered authentication information) in association with each other. When the second authentication is successful, the second authentication unit 16 outputs a signal indicating that the second authentication is successful. The signal indicating that the second authentication is successful includes the ID of the information provider and the identification information of the information providing terminal 2. As a result, authentication between the information provider and the information providing terminal 2 is successful.

  The broadcasting device 1 includes a broadcast information receiving unit 18, a broadcasting unit 19, an area determining unit 20, and a position information storage unit 21 in addition to the authentication device 4 described above.

  The broadcast information receiving unit 18 receives a signal indicating that the second authentication has been successful from the authentication device 4 and receives broadcast information transmitted from the information providing terminal 2 in which the second authentication has been successful. Broadcast information is transmitted from the information providing terminal 2 together with a broadcast request signal for requesting broadcast.

  The broadcast unit 19 broadcasts the broadcast information received by the broadcast information receiving unit 18 to the broadcast area determined by the area determining unit 20.

  The area determination unit 20 extracts the broadcast area stored in the position information storage unit 21 in association with the registered position information used for the first authentication. As shown in FIG. 3, the registered information provider ID, the registered position information, and the broadcast area are stored in the position information storage unit 21 in association with each other. The registered position information stored in the position information storage unit 21 is the same as the registered position information stored in the first storage unit 14. For example, in association with the information provider A, latitude / longitude information (N35.13.16.29, E139.40.30.90) or sector 1 is stored as registered position information.

  Furthermore, as information on the broadcast area stored in association with the information provider A and its registered location information, latitude and longitude information indicating the location of the municipalities, exchanges, base stations and sectors used for broadcasting to the municipalities, and municipalities At least one of them is stored. For example, in association with the information provider A, Yokosuka City, exchanges A and B, base stations A to D, sectors 1 to 10, latitude and longitude (N35.13.16.29, E139.40.30.90) are stored. Has been.

  The area determination unit 20 accesses the first authentication unit 13 and acquires the registered location information used for the first authentication when the first authentication is successful. Then, the area determination unit 20 extracts the broadcast area associated with the acquired registered position information from the position information storage unit 21, and determines the broadcast area. The area determination unit 20 outputs information indicating the determined broadcast area to the broadcast unit 19.

  For example, when broadcasting the broadcast information provided by the information provider A in FIG. 3, the broadcasting unit 19 uses the exchanges A and B and the base stations A, B, C, and D to broadcast the broadcast areas of sectors 1 to 10. Broadcast broadcast information. Broadcast unit 19 does not broadcast to areas other than sectors 1 to 10.

  If the broadcast area is not stored in association with the registered position information, the area determination unit 20 determines that the broadcast area is not limited, and outputs that fact to the broadcast unit 19. In this case, the broadcast unit 19 broadcasts using the entire communication network N without limiting the broadcast area.

  The functions of the broadcasting apparatus 1 described above are executed by the hardware resources shown in FIG. FIG. 4 is a hardware configuration diagram of the broadcasting apparatus. As shown in FIG. 4, the broadcasting apparatus 1 physically includes a CPU 101, a RAM 102 and a ROM 103 which are main storage devices, an auxiliary storage device 105 such as a hard disk, an input device 106 such as a keyboard and a mouse which are input devices, and a display. The computer system includes an output device 107 such as a network module and a communication module 104 which is a data transmission / reception device such as a network card.

  Each function of the broadcasting apparatus 1 described with reference to FIG. 2 is obtained by reading predetermined computer software on hardware such as the CPU 101 and the RAM 102 illustrated in FIG. 4, thereby controlling the communication module 104 and the input device 106 under the control of the CPU 101. This is realized by operating the output device 107 and reading and writing data in the RAM 102 and the auxiliary storage device 105.

  Subsequently, the operation of the authentication device 4 and the broadcasting device 1 including the authentication device 4 will be described, and the authentication method and the broadcasting method according to the present embodiment will be described.

  First, the operation of the entire broadcasting system S will be described. FIG. 5 is a sequence diagram showing the operation of the broadcast system according to the present embodiment. First, a broadcast transmission authentication request (first authentication request) is transmitted from the authentication terminal 5 to the broadcast device 1 (authentication device 4) (step S1). The first authentication request includes the information provider ID and the mobile phone number of the authentication terminal 5. When the authentication device 4 receives the information provider ID and the mobile phone number of the authentication terminal 5, mobile phone number authentication is executed by the first authentication unit 13 of the authentication device 4 (step S2).

  When the mobile phone number authentication is successful, a location information acquisition request is transmitted to the location information system 6 by the location information acquisition unit 12 (step S3). When the position information acquisition request is received by the position information system 6, the position information of the authentication terminal 5 is acquired by the position information system 6 (step S4). A position information acquisition response including the acquired position information of the authentication terminal 5 is transmitted to the authentication device 4 by the position information system 6 (step S5).

  When the location information is received by the authentication device 4, location information authentication is executed by the first authentication unit 13 of the authentication device 4 (step S6). That is, the first authentication is executed by steps S2 and S6 (first authentication step). If the first authentication is successful, a broadcast transmission authentication response (first authentication response) indicating that the first authentication is successful is transmitted to the authentication terminal 5 by the authentication device 4 (step S7).

  When the first authentication response is transmitted, the broadcast area of the broadcast information provided from the information provider who has succeeded in the first authentication is determined by the area determination unit 20 of the broadcast device 1 (step S8). In addition, access from the information providing terminal 2 is accepted by the second receiving unit 15 for a predetermined period from the time when the signal indicating that the first authentication is successful is input in the second receiving unit 15, and the provision of information is permitted. (Step S9).

  The second authentication request is sent to the authentication device 4 by the information providing terminal 2 in response to the operation of the information provider within a predetermined period from the time when the signal indicating that the first authentication is successful is input in the second receiving unit 15. It is transmitted (step S10). The second authentication request includes second authentication information. When the second authentication information is received by the authentication device 4, the second authentication is executed by the second authentication unit 16 of the authentication device 4 (step S11; second authentication step).

  When the second authentication is successful, a second authentication response is transmitted to the information providing terminal 2 by the authentication device 4 (step S12). When the second authentication response is received by the information providing terminal 2, broadcast information together with the broadcast request signal is transmitted to the broadcasting apparatus 1 by the information providing terminal 2 (step S13). When the broadcast information is received by the broadcast device 1, a broadcast signal of the broadcast information is broadcast to the broadcast area by the broadcast unit 19 of the broadcast device 1 (step S14; broadcast step).

  Subsequently, an operation in the broadcasting device 1 will be described. FIG. 6 is a flowchart showing the operation of the authentication apparatus according to the present embodiment and the broadcasting apparatus including the authentication apparatus. First, the first authentication request transmitted from the authentication terminal 5 is received by the first receiving unit 11 (step S21). Using the mobile phone number included in the received first authentication request, mobile phone number authentication is executed by the first authentication unit 13 (step S22).

  When the mobile phone number authentication fails (NO in step S22), a first authentication response indicating that the first authentication has failed is transmitted to the authentication terminal 5 by the authentication device 4 (step S23), and the series of operations is completed. To do. If the mobile phone number authentication is successful (YES in step S22), the location information of the authentication terminal 5 is received by the first receiving unit 11 (step S24). Through step S21 and step S24, first authentication information including the ID of the information provider, the mobile phone number of the authentication terminal 5 and the location information is received by the first reception unit 11 (first reception step).

  When the position information is received, position information authentication is executed by the first authentication unit 13 (step S25). The first authentication is executed by executing the mobile phone number authentication in step S22 and the location information authentication in step S25 (first authentication step).

  If the location information authentication has failed (NO in step S25), a first authentication response indicating that the first authentication has failed is transmitted to the authentication terminal 5 by the authentication device 4 (step S23), and the series of operations ends. . If the location information authentication is successful (YES in step S25), the area determining unit 20 determines whether the broadcast area restriction method is used (step S26).

  If it is determined that the broadcast area restriction method is not used (NO in step S26), the process proceeds to step S28. If it is determined that the broadcast area restriction method is used (YES in step S26), the broadcast area is determined by the area determination unit 20 (step S27). Subsequently, a first authentication response indicating that the first authentication has been successful is transmitted to the authentication terminal 5 by the authentication device 4 (step S28).

  In addition, access from the information providing terminal 2 is accepted by the second receiving unit 15 for a predetermined period from the time when the signal indicating that the first authentication is successful is input in the second receiving unit 15, and information provision is permitted. (Step S29). Then, the second authentication request transmitted by the information providing terminal 2 is received by the second receiver 15 within a predetermined period from the time when the first authentication is successful (step S30; second reception step). . When the second authentication information is received, the second authentication is executed by the second authentication unit 16 (step S31; second authentication step).

  When the second authentication fails (NO in step S31), a second authentication response indicating that the second authentication has failed is transmitted to the information providing terminal 2 by the authentication device 4 (step S32), and the series of operations is completed. To do. If the second authentication is successful (YES in step S31), a second authentication response indicating that the second authentication is successful is transmitted to the information providing terminal 2 by the authentication device 4 (step S33).

  When the second authentication response is transmitted, the broadcast request signal and broadcast information transmitted from the information providing terminal 2 are received by the broadcast information receiving unit 18 (step S34; third receiving step). When the broadcast information is received, a broadcast signal of the broadcast information is broadcast to the broadcast area by the broadcast unit 19 (step S35; broadcast step).

  As described above, in the authentication device 4 of the present embodiment, the first authentication is performed using the received first authentication information, and the second authentication received within a predetermined period when the first authentication is successful. The second authentication is performed using the authentication information and the information provider ID and password stored in advance. In order to succeed in the second authentication, the first authentication information and the second authentication information are acquired, the first authentication information is transmitted, and the second authentication information is not transmitted within a predetermined period. Don't be. For example, even if the first authentication is successfully performed illegally by acquiring the first authentication information, the ID and password (second authentication information) of the information provider registered in advance must be acquired. Thus, the second authentication cannot be successful. Therefore, it is possible to more reliably prevent access by an unauthorized communication terminal.

  In the broadcasting device 1 of the present embodiment, when the second authentication is successful in the authentication device 4, the broadcast information is received from the information providing terminal 2 that has transmitted the second authentication information, and the broadcast information is broadcast. Broadcast information provided from a communication terminal determined to be valid can be broadcast.

  For example, when authentication is performed using a conventional technique and there is impersonation by an unauthorized information provider, the broadcasting device accepts erroneous information provided by the unauthorized information provider. Then, erroneous information will be broadcast over a wide range. On the other hand, in the broadcasting apparatus 1 of this embodiment, the authentication apparatus 4 authenticates the authentication terminal 5 and the information providing terminal 2 possessed by the information provider and the information provider, and distribution of erroneous information can be prevented.

  Further, in the authentication device 4 according to the present embodiment, the first authentication is performed using the position information of the authentication terminal 5 that has transmitted the first authentication information, so that communication at a valid position (position indicated by the registered position information) is performed. If authentication information is not sent from the terminal, authentication will not succeed. Therefore, access by an unauthorized communication terminal can be prevented more reliably.

  In the broadcast apparatus 1 of the present embodiment, the broadcast information is broadcast to a broadcast area stored in advance in association with the registered location information used for the first authentication, so that the information provider who provides the broadcast information is located The broadcast area can be limited based on the area to be played. Therefore, broadcast information suitable for the broadcast area can be provided.

  Further, the authentication device 4 of the present embodiment receives the second authentication information from the information providing terminal 2 different from the authentication terminal 5 that transmitted the first authentication information. Therefore, a communication terminal suitable for performing the first authentication and a communication terminal suitable for performing the second authentication can be selected. That is, the authentication terminal 5 that easily acquires the position information can be selected as the first authentication communication terminal, and the information providing terminal 2 that easily transmits large-capacity broadcast information can be selected as the second authentication communication terminal. In the authentication device 4 of the present embodiment, even when the first authentication and the second authentication are performed by different communication terminals, it is possible to more reliably prevent access by an unauthorized communication terminal.

  The present invention is not limited to the above embodiment, and various modifications can be made. In the above embodiment, the authentication device 4 is mounted on the broadcasting device 1 and authenticates the information provider and the information providing terminal 2 that provide information for broadcasting, but is not limited thereto. The authentication device 4 may not be mounted on the broadcasting device 1. The authentication device 4 can be used when authenticating a communication terminal that requests access.

  In the above embodiment, the broadcast area is limited. However, the broadcast area may not be limited.

  In the above embodiment, the location information is used for the first authentication, but the location information may be used for the second authentication. In that case, in the authentication apparatus, the second receiving unit receives the position information acquired in the information providing terminal 2, and the second authentication unit collates the registered position information registered in advance with the acquired position information. Second authentication is performed.

  Moreover, in the said embodiment, although the mobile telephone number and the positional information of the authentication terminal 5 were authenticated as 1st authentication, and ID and a password of an information provider were authenticated as 2nd authentication, it is not restricted to this. Various combinations of the first authentication and the second authentication can be set. For example, only the mobile phone number of the authentication terminal 5 may be used as the first authentication. As the first authentication, the information provider ID and password may be authenticated, and as the second authentication, the identification information and location information of the information providing terminal 2 may be authenticated.

  Further, in the above embodiment, the predetermined period during which the second receiving unit 15 accepts access from the information providing terminal 2 is defined as a predetermined period from the time when the second receiving unit 15 inputs a signal indicating that the first authentication has been successful. However, it is not limited to this. For example, the predetermined period for accepting access may be a predetermined period from the time when the authentication terminal 5 sends a specific telephone number. The predetermined period for accepting access may be a period during which a call is made from the authentication terminal 5 to a specific telephone number. The predetermined period for accepting access may be a predetermined period from the time when the authentication terminal 5 accesses a specific website.

  Moreover, in the said embodiment, although the authentication terminal 5 was a portable communication terminal and the information provision terminal 2 was a desktop communication terminal, it is not restricted to this. Both the authentication terminal and the information providing terminal may be a portable communication terminal or a desktop communication terminal. Further, the authentication terminal and the information providing terminal may be the same communication terminal.

  In the above embodiment, the information providing terminal 2 transmits the broadcast request signal after transmitting the second authentication request and receiving the second authentication response. However, the present invention is not limited to this. The information providing terminal 2 may superimpose the second authentication request and the broadcast request on the same signal and transmit them simultaneously.

It is a block diagram of the broadcast system concerning this embodiment. It is a functional block diagram of the authentication apparatus concerning this embodiment, and a broadcast apparatus provided with the same. It is a figure which shows the structure of the positional information storage part concerning this embodiment. It is a hardware block diagram of the broadcasting apparatus concerning this embodiment. It is a sequence diagram which shows operation | movement of the broadcast system which concerns on this embodiment. It is a flowchart which shows operation | movement of the broadcasting apparatus provided with the authentication apparatus which concerns on this embodiment, and an authentication apparatus.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Broadcast apparatus, 2 ... Information provision terminal, 4 ... Authentication apparatus, 5 ... Authentication terminal, 11 ... 1st receiving part (1st receiving means), 13 ... 1st authenticating part (1st authenticating means) , 15 ... second receiving unit (second receiving unit), 16 ... second authenticating unit (second authenticating unit), 18 ... broadcast information receiving unit (third receiving unit), 19 ... broadcasting unit ( Broadcasting means), 21... Position information storage section (storage means), A1.

Claims (10)

First receiving means for receiving first authentication information;
First authentication means for performing first authentication using the first authentication information received by the first receiving means;
Second receiving means for receiving second authentication information;
When the first authentication by the first authentication means is successful and the second authentication information is received within a predetermined period by the second receiving means, the second authentication information is stored in advance. Second authentication means for performing second authentication using the registered authentication information;
An authentication device comprising: The first authentication information includes at least position information of a communication terminal that has transmitted the first authentication information,
The authentication apparatus according to claim 1, wherein the first authentication unit performs the first authentication using the position information. The second authentication information includes at least position information of a communication terminal that has transmitted the second authentication information,
The authentication apparatus according to claim 1, wherein the second authentication unit performs the second authentication using the position information. A first communication terminal, a second communication terminal, and an authentication device;
The first communication terminal transmits first authentication information to the authentication device,
The second communication terminal transmits second authentication information to the authentication device,
The authentication device
First receiving means for receiving first authentication information transmitted from the first communication terminal;
First authentication means for performing first authentication using the first authentication information received by the first receiving means;
Second receiving means for receiving second authentication information transmitted from the second communication terminal;
When the first authentication by the first authentication means is successful and the second authentication information is received within a predetermined period by the second receiving means, the second authentication information is stored in advance. And a second authentication means for performing second authentication using the registered authentication information. A broadcast device that broadcasts received broadcast information,
First receiving means for receiving first authentication information;
First authentication means for performing first authentication using the first authentication information received by the first receiving means;
Second receiving means for receiving second authentication information;
When the first authentication by the first authentication means is successful and the second authentication information is received within a predetermined period by the second receiving means, the second authentication information is stored in advance. Second authentication means for performing second authentication using the registered authentication information;
Third receiving means for receiving the broadcast information from a communication terminal that has transmitted the second authentication information when the second authentication by the second authentication means is successful;
Broadcasting means for broadcasting the broadcast information received by the third receiving means;
A broadcasting apparatus comprising: A storage means for storing the registered position information specifying the registered position and the broadcast area in association with each other,
The first authentication information includes at least position information of a communication terminal that has transmitted the first authentication information,
The first authentication means performs first authentication using the position information and the registered position information stored in the storage means,
The broadcast means broadcasts broadcast information received by the third receiving means to the broadcast area stored in the storage means in association with the registered position information used for the first authentication. The broadcasting device according to claim 5. A first receiving step in which the first receiving means receives the first authentication information;
A first authentication step in which a first authentication means performs first authentication using the first authentication information received in the first reception step;
A second receiving step in which the second receiving means receives the second authentication information;
When the second authentication means succeeds in the first authentication in the first authentication step and the second authentication information is received within a predetermined period in the second reception step, the second authentication means A second authentication step for performing a second authentication using the authentication information and the previously stored registration authentication information;
An authentication method comprising: The first authentication information includes at least position information of a communication terminal that transmits the first authentication information,
The authentication method according to claim 7, wherein the first authentication step performs the first authentication using the position information. A broadcast method for broadcasting broadcast information received in a broadcast device,
A first receiving step in which the first receiving means receives the first authentication information;
A first authentication step in which a first authentication means performs first authentication using the first authentication information received in the first reception step;
A second receiving step in which the second receiving means receives the second authentication information;
When the second authentication means succeeds in the first authentication in the first authentication step and the second authentication information is received within a predetermined period in the second reception step, the second authentication means A second authentication step for performing a second authentication using the authentication information and the previously stored registration authentication information;
A third receiving step in which third receiving means receives the broadcast information from the communication terminal that has transmitted the second authentication information when the second authentication is successful in the second authentication step;
A broadcasting step in which broadcasting means broadcasts the broadcast information received in the third receiving step;
A broadcasting method comprising: The broadcast device includes storage means for storing the registered position information specifying the registered position and the broadcast area in association with each other,
The first authentication information includes at least position information of a communication terminal that has transmitted the first authentication information,
In the first authentication step, the first authentication is performed using the first authentication information and the registered location information,
In the broadcast step, the broadcast information received in the third reception step is broadcast to the broadcast area stored in the storage means in association with the registered position information used in the first authentication. The broadcasting method according to claim 9.

Images