JP2009230416A - Authentication system using position information and authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an authentication system, etc., using position information which can enhance the security of an information terminal only by a user wearing a cellular phone normally used by the user as usual. <P>SOLUTION: This authentication system includes a means for acquiring position information of a portable terminal, a means for acquiring a position information system of an information terminal, a means for evaluating two pieces of position information, and a means for changing an authenticating means to the terminals on the basis of an evaluation result. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a personal authentication technique having both security and convenience.

  There are many authentication means for identity verification, but there is a problem that the security and the procedure and operability are complicated and the user is burdened.

  As a related authentication method, there is a method in which a mobile terminal itself is used for authentication of the mobile terminal itself, and if it is an access from within the range, it is evaluated as the person himself / herself. Referring to FIG. 4, the location information of the mobile terminal 410 is stored in the location information DB 430 from the usual time. When the user uses the portable terminal 410, the authentication server 420 is the user himself / herself if the position information of the portable terminal 410 at that time is within the range of past position information records stored in the position information DB 430. Assuming a simple authentication means. In this method, the location information can be used only for the authentication means of the mobile terminal.

  As a related technique, a technique has been proposed in which unauthorized authentication due to so-called impersonation is eliminated and authentication safety is further increased. The configuration is such that the personal authentication device has an authentication means, an authentication device position detection means for detecting its own position, an authentication target registration area, an authentication method setting means, a position determination means, an unauthorized use notification means, and a communication means. is there. Using the position detection device and the personal authentication device of the authentication target, the authentication target is determined from the positional information of the personal authentication device detected by the authentication device position detection means and the positional relationship of the authentication target detected by the position detection device of the authentication target. It is determined by the position determination means whether it is a regular authentication target, and the authentication is complemented by its own authentication means (see, for example, Patent Document 1).

As a related technique, a technique has been proposed in which when a card payment or a mobile terminal is used for payment, the user is more reliably authenticated and the unauthorized use is prevented. The configuration is such that when a user performs a card payment or a payment with a mobile terminal, the use card is associated with the mobile terminal in advance, and the authentication server verifies that the registered mobile terminal position matches the location used. To do. As a method for knowing the position of the portable terminal, information from a wireless LAN or a UWB wireless system that performs a small zone service is used if it is outdoors and GPS is used indoors. Further, when both cannot be used, the position information valid time and the position information error range are provided (for example, refer to Patent Document 2).
JP 2002-117377 A JP-A-2005-216210

  However, the related technology described above is an authentication system having a function of improving the accuracy of identity verification without imposing a burden on the user by using location information of a mobile terminal such as a mobile phone that the user himself or herself usually wears. It was difficult to realize.

  The present invention has been made in order to solve the above-described problems. Location information that can enhance the security of an information terminal by simply wearing a mobile phone that a user normally uses as usual. It is an object of the present invention to provide an authentication system and an authentication method using the.

  An authentication system using position information according to the present invention includes a means for acquiring position information of a portable terminal, a means for acquiring a position information system of an information terminal, a means for evaluating two position information, and a terminal based on an evaluation result. And means for changing the authentication means.

  The authentication method using position information of the present invention includes a step of acquiring position information of a portable terminal, a step of acquiring a position information system of the information terminal, a step of evaluating two position information, and an evaluation result And changing the authentication means for the terminal.

  According to the present invention, the security of the information terminal can be increased only by wearing the mobile phone that the user normally uses as usual.

  Hereinafter, a first embodiment of the present invention will be described in detail with reference to the drawings. The authentication system using position information in the present embodiment shown in FIG. 1 includes an information terminal 110 used by a user, a portable terminal 111 used for authentication, a position information server 150, a position information evaluation server 160, an authentication The server 170 is composed of a network 180 connecting them.

  The information terminal 110 is a PC or the like operated by a user. The portable information terminal 111 is a terminal such as a cellular phone that a user can expect to carry around.

  The position information server 150 holds position information of the information terminal 110 and the mobile terminal 111. When the information terminal 110 is connected to a wired network such as ADSL, the address information is stored in the customer database of the communication carrier. When connected to a wireless network, the position information is acquired from the GPS function of the terminal or the connected base station.

  Assuming that the mobile terminal 111 is connected to a wireless network, the mobile terminal 111 is location information acquired from the GPS function of the terminal or a connected base station.

  The location information evaluation server 160 has a function of comparing the location information of the information terminal 110 and the portable terminal 111 when the user intends to use the information terminal 110 and evaluating whether the location is the same or away. The authentication server 170 has a function of determining the authentication procedure of the information terminal 110 based on the evaluation result of the position information evaluation server 160.

  The authentication server 170 provides a simple authentication procedure to the information terminal 110 if the position information evaluation result is the same point, and provides a complicated authentication procedure if it is far away.

The operation of the present embodiment will be described with reference to the flowcharts of FIGS.
First, the position information of the information terminal 110 is acquired (S301 in FIG. 2).

  Next, the position information of the portable terminal 111 is acquired (S302).

  Next, both pieces of position information are evaluated (S303).

  Next, the evaluation result is judged (S304). If the evaluation result exceeds a preset threshold value, it is determined that the user is operating, and simple authentication means is provided (S305). That is, when the location information of the two terminals is compared and overlapped, the authentication means is simplified assuming that the user is operating.

  If it cannot be determined that the user is operating, a complicated authentication means is provided (S306).

  In this embodiment, since an authentication means using location information is provided regardless of whether it is a mobile terminal or a fixed terminal, it is applied when (1) opening a building door or (2) starting an automobile engine. Is possible.

  Each of the above-described embodiments is a preferred embodiment of the present invention, and various modifications can be made without departing from the scope of the present invention. For example, the function of each device is realized by causing each device to read and execute a program for realizing the functions of the information terminal 110, the portable terminal 111, the location information server 150, the location information evaluation server 160, and the authentication server 170. Processing may be performed. Further, the program is transmitted to another computer system by a transmission wave via a computer-readable recording medium such as a CD-ROM or a magneto-optical disk, or via a transmission medium such as the Internet or a telephone line. Also good. In addition, it is also within the scope of the present invention that the functions of each device are realized by other devices collectively or the functions are distributed by additional devices.

It is a figure which shows the system configuration | structure which concerns on embodiment of this invention. It is a flowchart which shows the operation | movement of the whole system which concerns on embodiment of this invention. It is a figure which shows the positional information which concerns on embodiment of this invention. It is a figure which shows the structure of a related system.

Explanation of symbols

110 Information terminal 111 Mobile terminal 150 Location information server 160 Location information evaluation server 170 Authentication server 180 Network

Claims (6)

  Means for acquiring position information of the portable terminal, means for acquiring the position information system of the information terminal, means for evaluating the two pieces of position information, and means for changing the authentication means for the terminal according to the evaluation result. An authentication system that uses characteristic location information.   2. The authentication system using position information according to claim 1, wherein when two pieces of position information are compared and overlapped, the authentication means is simplified on the assumption that the person is operating. The information terminal when the information terminal, the portable terminal capable of acquiring position information using a GPS function, the position information of the information terminal, and the position information of the portable terminal are included in a predetermined range. In an authentication system using location information, comprising: a management terminal for unlocking
The management terminal provides simple authentication means when the location information is included within a predetermined range, and provides complex authentication means when the position information is not included within the predetermined range. And an authentication system using position information, wherein the lock is released when the authentication is successful.   Having a step of acquiring position information of the portable terminal, a step of acquiring a position information system of the information terminal, a step of evaluating two pieces of position information, and a step of changing authentication means for the terminal according to the evaluation result. An authentication method using characteristic location information.   5. The authentication method using position information according to claim 4, wherein when two pieces of position information are compared and overlapped, the authentication means is simplified on the assumption that the person is operating. The information terminal when the information terminal, the portable terminal capable of acquiring position information using a GPS function, the position information of the information terminal, and the position information of the portable terminal are included in a predetermined range. In the authentication method using the management terminal that unlocks
The management terminal provides simple authentication means when the location information is included within a predetermined range, and provides complex authentication means when the position information is not included within the predetermined range. And releasing the lock when the authentication is successful.

Images