JP2009251649A - Server system, electronic equipment, communication terminal, and authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a server system, electronic equipment, a communication terminal and an authentication method for simplifying a user authenticating operation. <P>SOLUTION: A server system 20 includes: a user information storage part 52 for storing the authentication information of the user of a communication terminal 100 as registration authentication information; and an authentication part 30 for collating the authentication information received from the communication terminal 100 with the registration authentication information stored in the user information storage part 52 to authenticate whether or not the user is a legal user. The communication terminal 100 transmits local identification information acquired by performing local communication with electronic equipment 200 to the server system 20 as the authentication information. The authentication part 30 collates the local identification information received as the authentication information from the communication terminal 100 with the registration local identification information stored in the user information storage part 52 as the registration authentication information to authenticate the user. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a server system, an electronic device, a communication terminal, and an authentication method.

  A so-called third-generation mobile phone has an interface of a removable IC card such as a UIM (User Identification Module) card. This contact IC card stores personal information such as a telephone number and a subscriber number, and is uniquely associated with the user. The mobile phone is also given a terminal ID (manufacturing number).

  Authentication in a mobile phone includes terminal level authentication and user authentication, which is user level authentication. In terminal-level authentication, a UIM number (SIM number) is generally used for third-generation mobile phones and the like, and a terminal ID (manufacturing number) is generally used for mobile phones that do not have a UIM interface or the like. On the other hand, when personal authentication such as electronic payment is required, the user is required to input a password and a login ID.

  However, such an input operation of a password or the like is complicated for the user, and there is a problem that the convenience of the user is impaired. The conventional technique of user authentication in electronic payment or the like is disclosed in Patent Document 1.

  By the way, in recent mobile phones, in addition to the above-mentioned UIM interface, an increasing number of models incorporate a non-contact type IC chip that performs non-contact short-range wireless communication with an external read / write (R / W) device. . This non-contact type IC chip is used in a modular form as an IC chip even in a non-contact type IC card used in an automatic ticket gate, etc. By incorporating such an IC chip into a mobile phone, Various applications are realized. For example, using a mobile phone incorporating a non-contact type IC chip, applications such as enabling the passage of an automatic ticket gate, payment of a train fare, and shopping by electronic payment are realized.

  However, although various applications using non-contact type IC chips have been proposed, a technique for using information acquired by local communication using non-contact type IC chips for user authentication or the like is proposed. It has not been.

JP 2003-36406 A

  The present invention has been made in consideration of the above-described problems, and according to some aspects of the present invention, a server system, an electronic device, a communication terminal, and an authentication method that can simplify user authentication work. Can provide.

  The present invention is a server system that is connected to a communication terminal of a user who performs local communication with an electronic device via a communication network, and the user who stores the authentication information of the user of the communication terminal as registered authentication information An information storage unit, an authentication unit that verifies whether or not the user is a valid user by collating the authentication information received from the communication terminal with the registration authentication information stored in the user information storage unit The communication terminal transmits local identification information acquired by performing local communication with the electronic device to the server system as the authentication information, and the authentication unit receives the authentication information from the communication terminal as the authentication information. It relates to a server system that performs user authentication by comparing the received local identification information with registered local identification information stored as the registration authentication information in the user information storage unit. .

  According to the present invention, the registered local identification information is stored as registration authentication information in the user information storage unit. Then, when the local identification information acquired by the communication terminal performing local communication with the electronic device is received from the communication terminal, the received local identification information and the registered local identification information stored in the user information storage unit are collated. Thus, user authentication is realized. In this way, user authentication can be simplified and user convenience can be improved. Further, by using local identification information obtained by local communication between the electronic device and the communication terminal, it is possible to ensure the probability of user authentication.

  Further, the present invention includes a user registration unit that performs user registration of the communication terminal, and the communication terminal inputs the local identification information acquired by performing local communication with the electronic device at the time of user registration and the user. The user registration authentication information is transmitted to the server system, and the user registration unit performs user registration when the user is authenticated as a valid user based on the user input authentication information received from the communication terminal. The local identification information received from the communication terminal sometimes may be registered in the user information storage unit as the registered local identification information.

  In this way, since the registered local identification information is registered in the user information storage unit using the user input authentication information input by the user, the probability of authentication can be increased.

  In the present invention, the communication terminal transmits encrypted local identification information as the local identification information acquired by performing local communication with the electronic device, and the user information storage unit includes the registered local identification information. Encrypted registered local identification information is stored as identification information, and the authentication unit receives the encrypted local identification information received from the communication terminal and the encrypted information stored in the user information storage unit. User authentication may be performed by collating with the registered local identification information.

  In this way, the registered local identification information is stored in the user information storage unit in an encrypted state, and user authentication is performed by comparing the encrypted information with each other. It is possible to prevent a situation where local identification information that becomes information is leaked, and to protect personal information.

  In the present invention, the communication terminal includes communication terminal side identification information that is identification information of a short-range wireless communication device provided on the communication terminal side, and electronic information that is identification information of a read / write device provided on the electronic device side. Device-side identification information is acquired as local identification information by local communication with the electronic device, and the authentication unit performs user authentication based on the communication terminal-side identification information and the electronic device-side identification information. Also good.

  In this way, the identification information of the short-range wireless communication device acquired for the first time by performing local communication between the short-range wireless communication device on the communication terminal side and the read / write device on the electronic device side and the read / write device User authentication can be performed using the identification information as local identification information. Thereby, the certainty of authentication can further be improved.

  The present invention further includes a data registration unit that registers registration data based on the received transmission data in a registration data storage unit when the transmission data from the electronic device is received via the communication terminal. The registration unit may register the registration data in the registration data storage unit when the authentication unit authenticates the user as a valid user.

  In this way, it is possible to prevent a situation where inappropriate data is registered as user registration data by an unauthorized third party.

  Further, the present invention includes a data browsing unit that performs browsing processing of the registered data stored in the registered data storage unit, and the data browsing unit is authenticated by the authentication unit that the user is a valid user. In this case, in response to the registration data browsing request from the communication terminal, browsing of the registration data may be permitted.

  In this way, it is possible to prevent a situation in which the registered data of the user is browsed by an unauthorized third party and a secret or the like is leaked.

  According to the present invention, when transmission data from the electronic device is received via the communication terminal, a registration data based on the received transmission data is registered in a registration data storage unit, and the user's A third-party user registration unit that performs third-party user registration for permitting third-party users to browse the registration data may be included.

  If it does in this way, it will become possible to permit browsing of registration data of a user to the appropriate third party user who a user permits.

  In the present invention, the third-party user registration unit includes first local identification information about the user and second local identification information about the third-party user acquired by local communication with the electronic device. Based on the above, third party user registration may be performed.

  In this way, when the electronic device and the communication terminal perform local communication, it is proved that the user and the third party user existed at the place, and the probability of the third party user registration can be increased. .

  Moreover, in this invention, the data browsing part which performs the browsing process of the said registration data memorize | stored in the said registration data storage part is included, The said data browsing part is the said registration by the said third party user by the said communication terminal of the said user. When permission is provided for browsing data, the third party user may be allowed to view the registered data of the user.

  In this way, when a third-party user requests permission to view the registered data of the user, the user can confirm the request.

  According to the present invention, when transmission data from the electronic device is received via the communication terminal, a registration data based on the received transmission data is registered in a registration data storage unit, and the user's You may include the data transmission part which transmits the said registration data of the said user with respect to the information processing apparatus or communication terminal of the specific person with whom browsing of the said registration data is approved.

  In this way, it is possible to permit browsing of registered data to a specific person who is authorized to view registered data.

  Moreover, in this invention, the display control part which acquires the attribute information of the said electronic device linked | related with the said local identification information, and performs the display control process of a display screen based on the said attribute information may be included.

  In this way, not only the local identification information is used for user authentication but also the display screen can be controlled using the attribute information of the electronic device associated with the local identification information.

  In addition, the present invention is an electronic device that performs local communication with a user's communication terminal, and an identification information acquisition unit that acquires communication terminal side identification information from the communication terminal by performing local communication with the communication terminal; The communication terminal side identification information and the electronic device side identification information are related to an electronic device including a notification unit that notifies the communication terminal by local communication as authentication information for authenticating the user.

  According to this invention, communication terminal side identification information is acquired by performing local communication with a communication terminal. Then, the acquired communication terminal side identification information and electronic device side identification information are notified to the communication terminal as user authentication information. In this way, user authentication using the communication terminal side identification information and the electronic device side identification information becomes possible, and the probability of authentication can be increased.

  In the present invention, the identification information acquisition unit acquires identification information of a short-range wireless communication device provided on the communication terminal side from the communication terminal by local communication as the communication terminal side identification information, and the notification unit The communication terminal side identification information, which is the acquired identification information of the short-range wireless communication device, and the electronic device side identification information, which is the identification information of a read / write device provided on the electronic device side, are You may notify to the said communication terminal by local communication as authentication information.

  In this way, the identification information of the short-range wireless communication device and the identification information of the read-write device acquired for the first time by performing local communication between the short-range wireless communication device and the read / write device are used as the user authentication information. It is possible to use the data as authentication, and the reliability of authentication can be further increased.

  In the present invention, the notification unit, when registering transmission data of an electronic device, transmits the transmission data, URL (Uniform Resource Locator) information for registration of the transmission data, the communication terminal side identification information, and the electronic data You may link with apparatus side identification information, and you may notify to the said communication terminal by local communication.

  In this way, at the time of registration of transmission data, it becomes possible to pass the transmission data, the communication terminal side identification information, and the electronic device side identification information to the access destination by the URL information, and the transmission data registration process is efficiently performed. Can be

  In the present invention, the notification unit associates URL (Uniform Resource Locator) information for browsing the registration data, the communication terminal side identification information, and the electronic device side identification information when browsing the registration data. The communication terminal may be notified by local communication.

  In this way, when browsing the registered data, it is possible to pass the communication terminal side identification information and the electronic device side identification information to the access destination by the URL information, and the registration data browsing process can be made efficient.

  In the present invention, the notification unit may encrypt at least the communication terminal side identification information and notify the communication terminal.

  In this way, it is possible to prevent the situation where the communication terminal side identification information that becomes the user's personal information is leaked, and to protect the personal information.

  In the present invention, the identification information acquisition unit performs local communication with the communication terminal of the user at the time of third-party user registration for permitting a third-party user to browse the registration data of the user, The first communication terminal side identification information is acquired from the user communication terminal, and the second communication terminal side identification information is obtained from the third party user communication terminal by performing local communication with the third party user communication terminal. The notification unit may notify the communication terminal of the acquired first and second communication terminal side identification information and the electronic device side identification information by local communication.

  In this way, by using the first and second communication terminal side identification information and the electronic device side identification information as authentication information, the user and the third party user when the electronic device and the communication terminal perform local communication. Is proved to exist at that location, and the probability of third-party user registration can be increased.

  In addition, the present invention is a communication terminal that performs local communication with an electronic device and is connected to a server system via a communication network, and performs local communication with the electronic device, whereby communication terminal side identification information is obtained. An identification information acquisition unit that acquires electronic device side identification information as local identification information, and a notification unit that notifies the server system as authentication information for authenticating a user of a communication terminal. Related to communication terminals including

  According to the present invention, the communication terminal side identification information and the electronic device side identification information are acquired by performing local communication with the electronic device. Then, the acquired communication terminal side identification information and electronic device side identification information are notified to the server system as user authentication information. If it does in this way, user authentication using communication terminal side identification information and electronic equipment side identification information can be realized, and user authentication can be simplified.

  In the present invention, the identification information acquisition unit includes communication terminal side identification information that is identification information of a short-range wireless communication device provided on the communication terminal side, and identification information of a read / write device provided on the electronic device side. A certain electronic device side identification information is acquired as the local identification information by local communication with the electronic device, and the notification unit obtains the identification information of the short-range wireless communication device and the identification information of the read / write device, The server system may be notified as the user authentication information.

  In this way, the identification information of the short-range wireless communication device and the identification information of the read / write device that are acquired for the first time by performing local communication can be used as user authentication information.

  Further, in the present invention, the identification information acquisition unit performs local communication with the electronic device at the time of third party user registration for permitting a third party user to view the registration data of the user. The first local identification information and second local identification information about the third-party user are acquired, and the notification unit sends the acquired first and second local identification information to the server system. You may be notified.

  In this way, by using the first and second local identification information as the authentication information, when the electronic device and the communication terminal perform local communication, the user and the third party user are present at the place. It is proved and the certainty of third party user registration can be improved.

  In addition, the present invention is a communication terminal that performs local communication with an electronic device, and by performing local communication with a user information storage unit that stores authentication information of a user of the communication terminal as registration authentication information, An identification information acquisition unit that acquires local identification information, and an authentication unit that authenticates whether or not the user of the communication terminal is a valid user, and the authentication unit performs local communication from the electronic device as the authentication information. It relates to a communication terminal that performs user authentication by comparing the received local identification information with registered local identification information stored as the registration authentication information in the user information storage unit.

  According to the present invention, the registered local identification information is stored as registration authentication information in the user information storage unit. Then, the local identification information acquired when the communication terminal performs local communication with the electronic device and the registered local identification information stored in the user information storage unit are collated, thereby realizing user authentication. In this way, user authentication can be simplified. Further, by using the local identification information acquired by local communication, it is possible to ensure the probability of user authentication.

  Further, in the present invention, the authentication unit collates the local identification information received from the electronic device with registered local identification information downloaded from a server system that is connected to communicate with a communication terminal via a communication network. User authentication may be performed.

  In this way, user authentication can be executed using the registered local identification information that has been authenticated and downloaded in the server system, so that the probability of authentication can be increased.

  In the present invention, the server system downloads registered local identification information registered as a user based on user input authentication information input by the user to a communication terminal, and the authentication unit receives the electronic device from the electronic device. User authentication may be performed by comparing local identification information with registered local identification information registered and downloaded based on the user input authentication information.

  In this way, the user authentication can be executed using the registered local identification information that is authenticated and registered based on the user input authentication information input by the user, so that the probability of authentication can be further increased.

  In the present invention, the electronic device transmits encrypted local identification information as the local identification information, and the server system transmits the encrypted registered local identification information as the registered local identification information to a communication terminal. The authentication unit compares the encrypted local identification information received from the electronic device with the encrypted registered local identification information downloaded from the server system to perform user authentication. You may go.

  In this way, the local identification information from the electronic device is encrypted and transmitted, the registered local identification information from the server system is also encrypted and downloaded, and user authentication is performed by comparing the encrypted information with each other Is executed, it is possible to prevent a situation in which the local identification information that becomes the personal information of the user is leaked, and to protect the personal information.

  Further, the present invention acquires local identification information by local communication between an electronic device and a user communication terminal at the time of user registration, and uses the acquired local identification information as user registration authentication information in a user information storage unit. The local identification acquired by the local communication between the electronic device and the communication terminal is acquired by local communication between the electronic device and the communication terminal after registration and the access from the electronic device. The present invention relates to an authentication method for verifying whether or not the user of the communication terminal is a valid user by comparing information with registered local identification information stored in the user information storage unit as the registration authentication information.

  Hereinafter, this embodiment will be described. In addition, this embodiment demonstrated below does not unduly limit the content of this invention described in the claim. In addition, all the configurations described in the present embodiment are not necessarily essential configuration requirements of the present invention.

1. System Configuration FIG. 1 shows a configuration example of an authentication system (data management system) and server system realized by this embodiment. This authentication system includes a communication terminal 100 (mobile terminal, portable communication terminal) such as a mobile phone owned by a user, and an information processing apparatus 300 such as a PC (personal computer) operated by a specific person such as a doctor or a system administrator. In addition, local communication such as near field communication is possible between the communication terminal 100 and the server system 20 (management server) connected to the communication terminal 100 and the information processing apparatus 300 via the communication network 10. An electronic device 200 is included. The authentication system is not limited to the configuration shown in FIG. 1, and various modifications such as omitting some of these components (for example, the information processing apparatus) and adding other components are possible.

  The communication network 10 can include a public network such as a mobile communication network and the Internet network, or a fixed telephone network. The mobile communication network for communication connection with the communication terminal 100 is a mobile telephone network such as a CDMA (Code Division Multiple Access) method or a PDC (Personal Digital Cellular) method, or mobile data such as a PDC-P (PDC-Packet) method. A communication network can be included.

  The server system 20 (management server) performs authentication management and information processing of the communication terminal 100 and the information processing apparatus 300, and is connected to the communication terminal 100 and the information processing apparatus 300 via the communication network 10. The function of the server system 20 can be realized by hardware such as one or a plurality of information processing apparatuses (rental server, shared server) and a program such as a CGI program.

  The communication terminal 100 is a terminal having a communication function, such as a mobile phone, and is connected to the server system 20 via the communication network 10. In addition, local communication using short-range wireless communication or the like with the electronic device 200 is possible. Specifically, local communication separated from the communication network 10 is performed by the non-contact IC chip on the communication terminal 100 side and the read / write device on the electronic device 200 side. Communication terminal 100 is not limited to a mobile phone, and may be a portable information processing device such as a portable game machine or a PDA.

  The electronic device 200 (terminal device) is, for example, a device that is not connected to the communication network 10 and is a vital device such as an electronic body composition monitor or an electrocardiograph, a game device such as a home game machine or a portable game machine, an electronic device Various devices such as portable electronic devices such as cameras (digital still cameras, video cameras), image viewers, and PDAs, home appliances such as rice cookers, refrigerators, and microwave ovens, POS terminals, and automatic ticket gates can be assumed.

  The server system 20 that is a Web server includes an authentication unit 30, a user registration unit 32, a data registration unit 34, a data browsing unit 36, a third party user registration unit 38, a data transmission unit 40, and a display control unit 42. Each of these units can be realized by a CGI program written in a language such as PHP (PHP: Hypertext Preprocessor) or Perl. The server system 20 includes a database 50 realized by a storage device such as a hard disk. The server system 20 is not limited to the configuration of FIG. 1, and various modifications such as omitting some of these components or adding other components are possible.

  The database 50 is a relational database realized by, for example, MySQL or the like, and includes a user information storage unit 52 and a registration data storage unit 54. The user information storage unit 52 (user information table) stores various information related to the user. Specifically, the authentication information of the user of the communication terminal 100 is stored as registered authentication information. As registration authentication information in this case, local identification information (for example, idIC, R / W number) acquired by local communication between the communication terminal 100 and the electronic device 200, a communication terminal ID, a password, and the like can be assumed.

  The registration data storage unit 54 (registration data table) stores registration data. Specifically, transmission data from the electronic device 200 (application data such as vital data and game data) is stored as registration data.

  The authentication unit 30 performs various authentication processes. For example, the authentication information (local identification information, communication terminal ID, etc.) received from the communication terminal 100 and the registered authentication information (registered local identification information, communication terminal ID, etc.) stored in the user information storage unit 52 are collated. Thus, it is authenticated whether or not the user of the communication terminal 100 is a valid user. That is, it is determined whether or not the received authentication information matches the registered authentication information. If they do not match, an authentication error occurs.

  Specifically, the communication terminal 100 uses the local identification information (for example, idIC, R / W number) acquired by performing local communication (short-range wireless communication) with the electronic device 200 as authentication information via the communication network 10. To the server system 20. The authentication unit 30 includes local identification information (identification information for specifying a device that has performed local communication) received as authentication information from the communication terminal 100, and registered local identification stored as registration authentication information in the user information storage unit 52. User authentication is performed by checking the information.

  In addition, when the local identification information received from the communication terminal 100 is encrypted, the user information storage unit 52 stores the registered local identification information in an encrypted state as the registered local identification information. Then, the authentication unit 30 performs user authentication by comparing the encrypted local identification information from the communication terminal 100 with the encrypted registered local identification information stored in the user information storage unit 52. That is, collation is performed between pieces of information that are still in the dark. By doing so, the personal information of the user can be protected. As an encryption method in this case, for example, a common key encryption method such as DES or AES, a public key encryption method, or the like may be adopted. The encryption is preferably irreversible encryption that cannot be decrypted. Collation for user authentication is performed between encrypted information, and there is no need to decrypt local identification information. By adopting an irreversible method, it is possible to thoroughly protect local identification information that is personal information. Because.

  The user registration unit 32 performs a user registration process. Specifically, the communication terminal 100 transmits user input authentication information such as a password input by the user to the communication network 10 in addition to the local identification information acquired by performing local communication with the electronic device 200 at the time of user registration. To the server system 20. The authentication unit 30 authenticates whether or not the user is a valid user based on user input authentication information such as a password received from the communication terminal 100 (performs personal authentication). When authenticated as a valid user, the user registration unit 32 registers the local identification information received from the communication terminal 100 in the user information storage unit 52 as registered local identification information. Thereafter, the local identification information received from the communication terminal 100 and the registered local identification information stored in the user information storage unit 52 are collated (matched) when there is an access such as data registration or data browsing from the electronic device 200 side. The user authentication is executed.

  The data registration unit 34 performs data registration processing. For example, when transmission data such as vital data from the electronic device 200 is received via the communication terminal 100, registration data based on the received transmission data is registered in the registration data storage unit 54. Specifically, when the authentication unit 30 authenticates that the user is a valid user, the transmission data from the electronic device 200 is registered in the registration data storage unit 54 as the valid user data. The registration data based on the transmission data may be the transmission data itself from the electronic device 200, or data obtained by processing or analyzing the transmission data (for example, game ranking data). Also good.

  The data browsing unit 36 performs a process for the user to browse the registration data stored in the registration data storage unit 54. Specifically, the data browsing unit 36 permits browsing of registered data in response to a registration data browsing request from the communication terminal 100 when the authentication unit 30 authenticates that the user is a valid user. .

  The third party user registration unit 38 performs a registration process for a third party user such as a guardian. Specifically, third-party user registration for permitting a third-party user (for example, a guardian such as a parent) to view registration data of the user (for example, a child) is performed. More specifically, the first local identification information about the user (for example, idIC1) acquired by local communication with the electronic device 200 and the second local identification information about the third-party user (for example, idIC2). Based on this, third-party user registration is performed. For example, the first local identification information is acquired when the communication terminal 100 of the user (child) and the electronic device 200 perform local communication, and the second local identification information is the communication terminal of the third-party user (guardian). (Not shown) and the electronic device 200 are acquired by performing local communication.

  And the data browsing part 36 is when permission is given with respect to the browsing of the registration data by the third party user (guardian) by the communication terminal 100 of the user (child) (when the permission flag is set). Permits browsing of user registration data by third party users.

  The data transmission unit 40 performs processing for transmitting user registration data to the information processing apparatus 300 (or communication terminal) of the specific person. Here, the specific person is a person who has been approved to view the registered data of the user, such as a doctor (user's attending physician) or an ambulance ambulance crew. These specific persons access the registration data storage unit 54 via the communication network 10 by the information processing apparatus 300 (or communication terminal) such as a PC, and, for example, do not pass user authentication etc. Can browse.

  The display control unit 42 performs display control processing for a screen (display image) displayed on the communication terminal 100 or the like. Specifically, attribute information of the electronic device 200 associated with local identification information (for example, electronic device side identification information such as an R / W number) is acquired, and a display screen of the communication terminal 100 or the like is acquired based on the attribute information. Display control. Here, as the attribute information, installation position information of the electronic device 200, information on a user who occupies the electronic device 200, and the like can be assumed. This attribute information is stored in the database 50 in association with, for example, electronic device side identification information (R / W number) of local identification information. The display control unit 42 performs display control (HTML creation) based on the attribute information associated with the electronic device side identification information in this way. For example, when the attribute information is the installation position information of the electronic device 200, a screen on which characters or images representing the installation position information are displayed and displayed on the communication terminal 100 or the like is performed.

2. Communication Terminal, Electronic Device FIG. 2A illustrates a configuration example of the communication terminal 100 and the electronic device 200. The communication terminal 100 includes a control unit 110, a storage unit 120, an operation unit 130, a display unit 140, a communication unit 150, and a short-range wireless communication device 170. It should be noted that various modifications such as omitting some of these components or adding other components (for example, UIM interface) are possible.

  The control unit 110 performs overall control of the communication terminal 100 and control of each unit, and the function can be realized by hardware such as a CPU and an ASIC and a program executed on the CPU. The storage unit 120 has a program storage area for storing various programs and a data storage area for storing various data, and the function can be realized by a memory such as a RAM, a ROM, or an EEPROM. In this program storage area, a program for browsing such as displaying a Web page described in HTML on the display unit 140 by accessing the server system 20, a program for sending and receiving e-mails, and the like. Remembered.

  The operation unit 130 includes operation buttons such as a numeric keypad (not shown), and the user uses the operation unit 130 to input a telephone number, mail text, or select various menu items. The display unit 140 is a display realized by a liquid crystal panel or an organic EL panel, and displays various display screens such as Web pages. The communication unit 150 performs communication processing for receiving various data via the antenna 160 and transmitting various data.

  The short-range wireless communication device 170 is a device that performs wireless communication with a short-range range of, for example, 0 to 10 cm as a communication range. The short-range wireless communication device 170 can include an antenna (closed loop coil), a tuning unit, a modem unit, a control unit, and a storage unit (not shown). The antenna is configured by a closed loop coil or the like, and transmits data by sending an electric current to the coil to transmit data, or detects data due to a change in magnetic flux passing through the coil and receives data. The tuning unit performs tuning, detection, and the like based on the current flowing through the antenna, and outputs the result to the modem unit. The modem unit demodulates the signal from the tuning unit and outputs the received data to the control unit or performs modulation for transmitting the data from the control unit via the antenna.

  The short-range wireless communication device 170 can be realized by, for example, a non-contact type IC chip. This non-contact type IC chip is modularized and used as an IC chip even in a non-contact type IC card used for an automatic ticket gate or the like. By incorporating such a non-contact IC chip in the communication terminal 100, the communication terminal 100 can have the same function as the non-contact IC card. That is, just by touching the communication terminal 100 to the read / write device 250 of the electronic device 200 like a non-contact type IC card, data of the communication terminal 100 can be transmitted to the electronic device 200, Data can be received. The communication protocol of the short-range wireless communication device 170 includes, for example, NFC (Near Field Communication), ISO / IEC 14443, ISO / IEC 15693, Bluetooth, UWB (Ultra Wide Band), IEEE 802.11b, etc. that regulate RF tag communication. Various communication protocols can be exemplified.

  The electronic device 200 includes a control unit 210, a storage unit 220, an operation unit 230, and a display unit 240. Various modifications such as omitting some of these components or adding other components are possible. The read / write device 250 may be built in the electronic device 200 or may be connected to the electronic device 200 via a USB or the like.

  The control unit 210 performs overall control of the electronic device 200 and control of each unit, and can be realized by hardware such as a CPU or ASIC, or a program. The storage unit 220 is realized by a memory such as a RAM, a ROM, or an EEPROM, and stores various data. The operation unit 230 is for the user to operate the electronic device 200 and can be realized by an operation button, a touch panel, or the like. The display unit 240 displays various types of information on the electronic device, and can be realized by, for example, a liquid crystal panel or an organic EL panel. The read / write device 250 is a device for reading data and writing data by local communication (short-range wireless communication) with the short-range wireless communication device 170 of the communication terminal 100.

  FIG. 2B shows an example of a mode selection screen (menu screen) displayed on the display unit 240 of the electronic device 200. The user selects the data transmission mode when transmitting data of the electronic device 200 to the server system 20 side, and selects the data browsing mode when browsing the registered data of the server system 20. Further, when performing registration processing of a guardian who is a third party user, the guardian registration mode is selected, and when changing the model of the communication terminal 100 or the like, the model change mode is selected.

  As shown in FIG. 2A, the control unit 210 of the electronic device 200 includes an identification information acquisition unit 212 and a notification unit 214. Each of these units can be realized by firmware, an application program, or the like that controls the electronic device 200.

  The identification information acquisition unit 212 performs identification information acquisition processing. Specifically, communication terminal side identification information is acquired from the communication terminal 100 by performing local communication with the communication terminal 100 using the read / write device 250 and the short-range wireless communication device 170. Here, the communication terminal side identification information is identification information for uniquely identifying a device on the communication terminal 100 side that has performed local communication. For example, the identification of the short-range wireless communication device 170 that is a device on the communication terminal 100 side. Information can be adopted. Specifically, the communication terminal side identification information is, for example, idIC that is identification information of a non-contact type IC chip constituting the short-range wireless communication device 170. The idIC is equivalent to a serial number unique to the IC chip, and for example, manufacturing number information called idm assigned at the time of manufacturing a non-contact type IC chip (module) may be used. Note that the communication terminal side identification information is not limited to idIC, and may be identification information for specifying a device on the communication terminal 100 side that has performed local communication.

  The notification unit 214 performs notification processing for the communication terminal 100. Specifically, the communication terminal side identification information (idIC) acquired from the communication terminal 100 and the electronic device side identification information are notified to the communication terminal 100 by local communication as authentication information for authenticating the user. Here, the electronic device side identification information is identification information for uniquely specifying the device on the electronic device 200 side that has performed local communication, and is, for example, the identification information of the read / write device 250 that is the device on the electronic device 200 side. is there. Specifically, the electronic device side identification information is, for example, an R / W number that is a manufacturing number of the read / write device 250. This R / W number is assigned when the read / write device 250 is manufactured, and is a serial number unique to the read / write device 250. The electronic device side identification information is not limited to the R / W number, and may be identification information for specifying the device on the electronic device 200 side that has performed local communication.

  For example, idIC (identification information on the communication terminal side in a broad sense) is information that the communication terminal 100 cannot know alone to protect the personal information of the user, and during local communication with the read / write device 250, It is transmitted to the read / write device 250. Therefore, the notification unit 214 returns the idIC received from the communication terminal 100 in this way to the communication terminal 100 and uses it for user authentication information. At this time, by encrypting the idIC and transmitting it to the communication terminal 100, protection of the user's personal information can also be realized. Here, the underline drawn to the idIC in FIG. 2A means that it is an encrypted idIC.

  Note that both the idIC and the R / W number may be encrypted and transmitted. In this case, it is desirable to individually encrypt the idIC and R / W number. The reason for this is that, assuming a usage scene in which the R / W number is used and associated with the location information where the electronic device 200 is installed, it is better to individually encrypt each of the idIC and the R / W number. This is because convenience is high. Therefore, it is desirable to handle the idIC and R / W number individually without combining the information. As a typical example, as described above, only the idIC is encrypted, and the R / W number is not encrypted. That is, since the idIC is identification information that is always added to the non-contact type IC, encryption is desirable from the viewpoint of personal information protection. In comparison, the R / W number is information on the electronic device 200 side, and encryption is not particularly essential. However, if idIC information leaks for some reason, the security level can be increased by encrypting the R / W number and authenticating with a combination of the idIC and the R / W number.

  Further, as the local identification information transferred by the local communication between the communication terminal 100 and the electronic device 200, it is possible to use only the idIC, and a modification without using the R / W number (electronic device side identification information in a broad sense) is possible. is there. Alternatively, it is possible to perform a modification such that the idIC and the R / W number are not transmitted to the communication terminal 100 at the same timing but are transmitted at a different timing.

  When the user selects the data transmission mode on the mode selection screen in FIG. 2B and registers the transmission data from the electronic device 200 in the server system 20, the notification unit 214 transmits the transmission data and the transmission data. URL (Uniform Resource Locator) information for registration, idIC, and R / W number are associated and notified to communication terminal 100. That is, idIC and R / W number are notified as parameters added to the URL information. By doing this, when the communication terminal 100 accesses the URL to the server system 20, the idIC and R / W number can be passed as parameters (arguments) to the CGI program of the server system 20, etc. Increase efficiency.

  When the user selects the data browsing mode and browses the data of the server system 20 on the mode selection screen of FIG. 2B, the notification unit 214 displays the URL information, idIC, and R / W number. The communication terminal 100 is notified in association.

  In addition, when the user selects the guardian registration mode (third-party user registration mode in a broad sense) on the mode selection screen in FIG. Registration that is permitted to a third party user is performed. In this case, the identification information acquisition unit 212 performs local communication with the communication terminal 100 to acquire idIC1 (first communication terminal side identification information in a broad sense) from the user communication terminal 100. Moreover, idIC2 (2nd communication terminal side identification information in a broad sense) is acquired from a guardian's communication terminal by performing local communication with a guardian's communication terminal (not shown). Then, the notification unit 214 notifies the communication terminal 100 of the acquired idIC1, idIC2, and R / W number.

  The identification information acquisition unit 112 on the communication terminal 100 side acquires the idIC and the R / W number as local identification information by performing local communication with the electronic device 200. Then, the notification unit 114 notifies the server system 20 of the idIC and R / W number, which are local identification information, as authentication information for authenticating the user of the communication terminal 100.

  2B, when the user selects the guardian registration mode, the identification information acquisition unit 112 displays the user's idIC1 (first local identification information) and the guardian's idIC2 (second local identification information). ) Is acquired by local communication with the electronic device 200. The notification unit 114 notifies the server system 20 of idIC1, idIC2, and R / W number as user authentication information.

3. Authentication Method Next, the authentication method of the present embodiment will be specifically described with reference to FIGS. In the following, the identification information on the communication terminal side is idIC, the identification information on the electronic device side is an R / W number, the communication terminal 100 is a mobile phone, and the electronic device 200 is a vital device such as an electronic body weight composition meter. An example will be described. As shown in FIG. 3A, a terminal manufacturing number (TID) or UIM number (SIM number) is used as the communication terminal ID. For example, when the communication terminal 100 does not include the UIM interface, the terminal manufacturing number is used as the communication terminal ID. When the communication terminal 100 includes the UIM interface, the UIM number is used as the communication terminal ID.

  In FIG. 3B, information such as a user ID, age, and sex used in advance is input to the electronic device 200 that is a vital device (biological information device), and vital data that is measurement data can be recorded. It is configured.

  Although this electronic device 200 is not connected to the communication network 10, according to the method of this embodiment, the measured vital data can be linked to the server system 20 by interposing the communication terminal 100.

  When such cooperation is performed, the user touches the communication terminal 100 on the read / write device 250 (interface unit) on the electronic device 200 side as indicated by A1 in FIG. Then, the idIC of the communication terminal 100 is transmitted to the electronic device 200 by local communication, and the encrypted idIC, R / W number, and URL information are returned to the communication terminal 100 as local identification information. Then, as shown at A2, the communication terminal 100 accesses the server system 20 via the communication network 10, and the data registration program and data browsing program specified by the URL are called. In this case, idIC and R / W number are passed to these programs as parameters. At this time, if the user is not registered, a user registration screen is displayed on the display unit 140 of the communication terminal 100, and the user performs user registration by inputting a password or the like.

  Next, as shown by A3 in FIG. 3B, the received idIC and R / W number (local identification information), and the idIC and R / W number registered in the user information storage unit 52 of the server system 20 (Registered local identification information) is compared and user authentication is performed. In this case, the received idIC is encrypted, and the registered idIC is also encrypted. Both are collated in the encrypted state, and user authentication is performed. Thereby, it is possible to thoroughly protect the personal information of the user. If the R / W number is also encrypted, the received R / W number may be collated with the registered R / W number in an encrypted state.

  And if it is authenticated by a user authentication that it is a legitimate user, as shown to A4, a user will register the registration data based on the vital data (transmission data) measured with the electronic device 200 of the server system 20. Registration in the registration data storage unit 54 and registration data (measured vital data itself, its processed data and analysis data) in the registration data storage unit 54 can be viewed on the communication terminal 100 or the like.

  As described above, according to the present embodiment, vital data (biological information) is transmitted to the server system 20 only by the user touching the electronic device 200 with the communication terminal 100 such as a mobile phone, and the server system 20 is registered. Data can be referenced. In the server system 20, the transmitted data can be used for user health management by analyzing the transmitted data in time series, and the vital data can be used effectively.

  In addition, according to the present embodiment, when performing personal authentication in the server system 20 that is a Web server, an idIC that cannot be known unless the user touches the electronic device 200 without entering the password, and is necessary. By authenticating by adding the R / W number, it is possible to realize the personal authentication more safely without the user's trouble. That is, identity authentication can be realized by combining a key that can be acquired on the Internet and a key that can be acquired on the electronic device 200 (real device).

  For example, authentication in a service using the communication terminal 100 includes terminal level authentication and personal authentication with a higher authentication level. Conventionally, in this personal authentication, the user is required to input a password or the like, which is complicated for the user.

  In this regard, according to the present embodiment, after inputting a password or the like and performing user registration, it is only necessary to collate the received idIC and R / W number with the registered idIC and R / W number. Since user authentication is performed, the user's trouble can be saved greatly. That is, when the user simply touches the communication terminal 100, the idIC and R / W number are automatically sent to the server system 20, and personal authentication is performed without entering a password. It can be easily registered in the server system 20. In this case, the idIC and R / W number are sent to the server system 20 together with the URL, and the data registration program and the like are automatically started by this URL, so that the convenience for the user can be further improved. The idIC is sent to the read / write device 250 for the first time by a touch operation on the communication terminal 100, and authentication using this idIC has a high security level. This high security level can be maintained by encrypting the idIC. In addition to using the idIC and R / W number, user authentication may be performed using a password and a login ID in addition to this.

  Next, a case where the user who is the user gives permission to view the registered data of the user on the Web to a third party such as a guardian will be described with reference to FIG.

  First, the guardian registration mode is selected on the mode selection screen in FIG. Then, as shown in B1 of FIG. 4, the person touches the electronic device 200 with the communication terminal 100. As a result, the identification number idIC1 of the non-contact IC chip built in the communication terminal 100 is sent from the communication terminal 100 to the electronic device 200.

  Next, as shown in B <b> 2 of FIG. 4, the guardian touches the electronic device 200 with the communication terminal 101. Thereby, in addition to idIC1, the identification number idIC2 of the non-contact type IC chip built in the communication terminal 101 is acquired. Then, the encrypted idIC1, idIC2, R / W number, and URL information are transmitted from the electronic device 200 side to the communication terminal 101, and the communication terminal 101 accesses the server system as indicated by B3, and the URL is transmitted. The designated third-party user registration program is called. In this case, idIC1, idIC2, and R / W number are passed to the program as parameters, and a guardian's browsing request is registered in the database 50 of the server system 20 as indicated by B4. Then, the user's communication terminal 100 is notified by e-mail or the like that a browsing request has been requested. If the guardian is not registered during the URL access shown in B3, a user registration screen is displayed on the display unit 140 of the communication terminal 100, and the guardian performs user registration by entering a password or the like. .

  Next, a list of guardians requesting browsing is displayed on the browsing screen of the person's communication terminal 100, and the person gives permission (confirmation) to the browsing request as shown in B5 of FIG. Can do. When browsing is permitted, the guardian can browse the registered data of the person as shown in B6.

  As described above, according to the method of FIG. 4, first, the person touches with the communication terminal 100, then the guardian touches with the communication terminal 101, and then the person confirms, so that the guardian You can view registered data. Therefore, since the guardian registration can be realized by a simple operation of continuous touch and confirmation, user convenience can be improved. In this case, in FIG. 4, the guardian registration is performed using the idIC1 of the person's communication terminal 100 and the idIC2 of the guardian's communication terminal 101. Such idIC1 and idIC2 prove that the person and the guardian (third-party user in a broad sense) exist in the place where the electronic device 200 is present, and the person gives the guardian permission to browse. On the other hand, it gives more certainty.

  FIG. 5 shows an example of user information stored in the user information storage unit 52. This user information includes a user table, a model change table, a vital data table, and a browsing request table.

  In the user table of FIG. 5, a user ID, a login ID issued to the user, and a password input by the user are associated with each other. In the model change table, the model change ID, the user ID, the encrypted idIC, the R / W number, the communication terminal ID, and the creation date and time are associated with each other. These idIC and R / W number correspond to registered local identification information. The communication terminal ID is a terminal manufacturing number or UIM number as shown in FIG. The model change table is updated when the model of the communication terminal 100 is changed.

  In the vital data table, the user ID, the measurement date and time of vital data, and vital data transmitted from the electronic device 200 and registered are associated with each other.

  In the browsing request table, the user ID of the person himself / herself, the user ID of the guardian, and the permission flag for viewing the guardian are associated with each other. For example, in B5 of FIG. 4, when the principal permits the guardian's browsing, the permission flag of the browsing request table is set to 1. Thereby, it is registered in the database 50 that the guardian is permitted to view the person's data.

  Next, the authentication method of this embodiment will be described in more detail using the data flows of FIGS.

  6 and 7 are data flows when the data transmission mode is selected on the mode selection screen of the electronic device 200 of FIG. 2B, and FIG. 6 is an example when the user is not registered. Is an example when the user has already been registered. Note that the underline drawn in the idIC indicates an encrypted idIC.

  In the data transmission mode, as shown by C1 in FIG. 6, when the user performs a touch operation, the idIC is transmitted from the communication terminal 100 to the electronic device 200, the encrypted idIC, the R / W number, and the transmission Data and a URL for data registration are returned to the communication terminal 100. Then, as shown in C2, the communication terminal 100 accesses by URL, and the idIC and R / W number are passed as parameters to the data registration program of the server system 20 specified by the URL. At this time, since the user is not registered, a user registration screen is displayed on the communication terminal 100 as shown in C3, and the user inputs a password or the like. Then, as shown in C4, a password, a communication terminal ID, and the like are transmitted to the server system 20, and user authentication and user registration using the password and the like are performed as shown in C5. Then, as shown at C6, the login ID is sent to the user by e-mail or the like. As shown in C7, the transmission data is registered in the registration data storage unit 54 (the vital data table in FIG. 5).

  In D1 and D2 in FIG. 7, transmission and reception of information similar to C1 and C2 in FIG. 6 is performed. However, in FIG. 7, since the user has already been registered, user authentication using idIC and R / W number is performed as shown in D3. That is, it is determined whether or not the idIC and R / W number received at D2 match the idIC and R / W number registered in the model change table of FIG. The transmission data is registered in the registered data storage unit 54 (vital data table). On the other hand, if they do not match, an authentication error occurs.

  FIG. 8 is a data flow when the data browsing mode is selected on the mode selection screen of FIG.

  When the user performs a touch operation on the communication terminal 100 in the data browsing mode, the encrypted idIC, the R / W number, and the data browsing URL are returned to the communication terminal 100 as indicated by E1 in FIG. . Then, as shown at E2, the communication terminal 100 accesses the server system 20 by the URL. If this URL is bookmarked, data can be browsed without touching the electronic device 200 with the communication terminal 100.

  Next, a login screen is displayed as indicated by E3, and when the user inputs a password, a password, a communication terminal ID, and the like are transmitted to the server system 20 as indicated by E4. Then, as shown in E5, user authentication is performed with the idIC, R / W number, password, communication terminal ID, etc., and when the authentication is established, data browsing processing is performed as shown in E6. And as shown to E7, registration data are transmitted to the communication terminal 100, and a browsing screen is displayed on the display part 140 of the communication terminal 100. FIG.

  Note that although E3 in FIG. 8 requests the user to input a password when browsing data, browsing of registered data may be permitted without requesting such password input. For example, for data that is strongly requested to protect personal information, such as vital data, a password input is requested, and for such data that is not so requested, a password input is not requested and idIC is required as in the case of data registration. User authentication may be performed using only the R / W number.

  FIG. 9 is a data flow when the guardian registration mode is selected on the mode selection screen of FIG.

  In the guardian registration mode, first, as shown at F1 in FIG. 9, the person performs a touch operation using the communication terminal 100, and then the guardian uses the communication terminal 101 as shown in F2. I do. Then, as shown in F3, the encrypted idIC1 and idIC2, the R / W number, and the URL for guardian registration are returned to the guardian's communication terminal 101. Then, as indicated by F4, idIC1, idIC2, and R / W number are passed as parameters to the program of the server system 20.

  At this time, if the guardian is not registered, a user registration screen is displayed on the communication terminal 101 as shown in F5, and the guardian inputs a password or the like, so that the guardian's password is displayed as shown in F6. User registration is performed. Then, as shown in F7, the guardian's browsing request is registered in the database. When the guardian has been registered as a user, the browsing request shown in F7 is registered after F4.

  Next, the user's communication terminal 100 is notified by e-mail or the like that a browsing request has been made, and the user performs a touch operation for confirmation as shown in F8. Then, as shown in F9, a list of guardians requesting browsing is displayed on the browsing screen of the person's communication terminal 100, and when the person permits the guardian to browse, the guardian's browsing as shown in F10. The permission flag is set. That is, the permission flag of the browsing request table in FIG. 5 is set.

4). First Modification Hereinafter, various modifications of the present embodiment will be described. FIG. 10 shows a first modification of the present embodiment. This first modification is an example in which browsing permission for data on the electronic device 200 or the server system 20 is given to a specific person such as a doctor who has been approved in advance on the system.

  In FIG. 10, an electrocardiograph 201 is assumed as an electronic device, and a person who wears and uses the electrocardiograph 201 and a specific person such as a doctor or an ambulance ambulance member obtain measurement data of the electrocardiograph 201. Authentication for use will be described. The communication terminal 100 of the principal person and the communication terminal 103 of the specific person incorporate a non-contact type IC for local communication. The electrocardiograph 201 includes a non-contact IC read / write device.

  FIG. 11 shows the data flow of the first modification. As shown in G1 of FIG. 11, when using the electrocardiograph 201, the user who is the person touches the communication terminal 100 such as a mobile phone on the interface unit (read / write device) of the electrocardiograph 201 to perform communication. The idIC1 recorded in the non-contact type IC of the terminal 100 is transmitted to the electrocardiograph 201 by local communication. Thereby, as indicated by G2, idIC1, R / W number, and URL of the program (functional module) corresponding to the server system 20 are returned to the communication terminal 100. Then, as shown in G3, URL access to the server system 20 is performed. Thereafter, a user registration screen is displayed on the communication terminal 100 as shown in G4, and by entering a password or the like, personal authentication is performed and user registration is executed as shown in G5. When the user registration is completed, the server system 20 sends back to the communication terminal 100 user registration information indicating that registration for authorizing the user is established.

  On the other hand, the user of a specific person such as a doctor accesses the server system 20 and pre-registers the idIC 3 having management authority in the server system 20 as indicated by G6 and G7. The specific person having the management authority can access the personal data of the electrocardiograph 201 or the server system 20 through his / her communication terminal 103 by pre-registering the information by the idIC 3 and the R / W number in the server system 20. It becomes possible.

  After such specific person registration is established, as shown in G8, when the specific person touches the interface unit of his / her electrocardiograph 201, authentication by the idIC3 and the R / W number is performed, and the communication terminal 103 The server system 20 can be accessed via the communication network 10. Then, operations such as browsing the measurement data of the electrocardiograph 201 on the server system 20 or transmitting the measurement data of the electrocardiograph 201 to the server system 20 using an application on the communication terminal 103 are possible. become.

  As described above, in this first modification, a specific person who has been given emergency authority such as a doctor or an ambulance crew registers in advance so that authentication by the idIC3 having management authority is possible, so that the user Even in an emergency situation where the user loses consciousness, the measurement data of the electrocardiograph 201 can be managed and used effectively.

  In the above description, the specific person is registered through access to the server system 20. However, this registration may be performed by touching the electrocardiograph 201. For example, when the doctor hands over the electrocardiograph 201 to the user who is the person himself / herself, the doctor's communication terminal is touched on the electrocardiograph 201 to register as a specific person having management authority. In addition, when a user of the electrocardiograph 201 or a third party different from the above-described specific person touches the electrocardiograph 201 with the communication terminal of the third party in the event of a user emergency, the electrocardiograph 201 Only the transmission of the measurement data of the user recorded in the above may be permitted. In this case, the idIC 4 of the third party communication terminal is sent to the server system 20 by touching. If there is no pre-registration and authentication as a specific person such as a person or a doctor is not made, the server system 20 only relays (intermediates) data transmission / reception and browses data on a third-party communication terminal having the idIC 4. , Operation is not allowed. Since the person's measurement data recorded in the server system 20 need only be viewed or operated by only the person or the doctor, the third party need only mediate data transmission / reception. Also at this time, the measurement data of the electrocardiograph 201 is transmitted to the server system 20 and stored / utilized, and an operation such as sensing an emergency such as a heart attack and sending out information for responding is performed. It becomes possible to do.

5. Second Modification FIG. 12A shows a second modification of the present embodiment. This second modification is an example in which authentication using an idIC or R / W number is performed on the communication terminal 100 instead of on the server system 20. 12A differs from FIG. 2A in that an authentication unit 116 and a user information storage unit 122 are provided on the communication terminal 100 side in FIG. 12A.

  The user information storage unit 122 of the communication terminal 100 stores user authentication information as registered authentication information. The identification information acquisition unit 112 acquires idIC (communication terminal side identification information) and R / W number (electronic device side identification information) as local identification information by performing local communication with the electronic device 200. And the authentication part 116 performs the process which authenticates whether the user of the communication terminal 100 is a valid user. Specifically, the authentication unit 116 receives the idIC and R / W number (local identification information) received as authentication information from the electronic device 200 by local communication, and the idIC and R stored as registration authentication information in the user information storage unit 122. / W number (registered local identification information) is collated and user authentication is performed.

  That is, in FIG. 3B, the management screen of the server system 20 is called by the URL from the electronic device 200. However, in FIG. 12A, a management application program is activated in the communication terminal 100, and authentication or Processing such as data transmission / reception is performed. As described above, in the second modified example, the server authentication performed in the server system 20 is simply executed in the application program on the communication terminal 100, and the measurement data of the electronic body composition monitor and the electrocardiograph are displayed. It can be applied to the case and realize simple authentication. However, when the electronic device 200 and the communication terminal 100 are stolen at the same time, the measurement data may be seen by a third party.

  In the case of server authentication, the measurement data can be seen in the above case, but since an access log remains, if a suspicious person other than the person is looking at the measurement data, a clue that can be found by the log data remains.

  On the other hand, when the program is executed by the application program of the communication terminal 100, it is assumed that no log remains if the program is deleted and downloaded again. In order to cope with such a case, when the measurement data is displayed by the simple authentication on the application program, the log data is periodically transmitted from the application program of the communication terminal 100 to the server system 20. If the application program download date and time is recorded, it is possible to cope with data browsing by a suspicious person by collating with the data on the server system 20.

  As shown in FIG. 12B, the registered local identification information used for user authentication may be downloaded from the server system 20 that is communicatively connected to the communication terminal 100 via the communication network 10. The local authentication information received from the electronic device 200 and the registered local identification information downloaded from the server system 20 are collated to perform user authentication.

  Specifically, the server system 20 stores registered local identification information registered as a user based on user input authentication information such as a password input by the user in the user information storage unit 52 of the server system 20. That is, when the user touches the electronic device 200 with the communication terminal 100, local identification information (idIC, R / W number) is transmitted to the server system 20 as indicated by E2 in FIG. When the user inputs a password or the like as indicated by E3, user registration is performed using the password or the like as user input authentication information as indicated by E5. As a result, as shown in FIG. 5, the registered local identification information (registered idIC, R / W number) registered by the user is stored in the user information storage unit 52 of the server system 20.

  Then, when the user downloads an application program for simply displaying the measurement data of the electronic device 200 on the communication terminal 100 or performing user authentication from the site of the server system 20, the registered local information stored in the user information storage unit 52 is stored. The identification information is embedded and downloaded in an application program, for example. Then, it is stored in the user information storage unit 122 of the communication terminal 100.

  Thereafter, when the user touches the electronic device 200 with the communication terminal 100, the local identification information acquired by local communication with the electronic device 200 and the registered local identification information downloaded from the server system 20 are collated, and the user Authentication is performed. Thus, by performing user authentication using the registered local identification information registered in the server system 20, it is possible to improve the probability of authentication.

  In this case, in FIG. 12B, the electronic device 200 transmits the encrypted local identification information as the local identification information. Then, the encrypted registration local identification information is stored in the user information storage unit 52 of the server system 20, and the encrypted registration local identification information is downloaded from the server system 20 to the communication terminal 100. . Then, the authentication unit 116 of the communication terminal 100 performs user authentication by comparing the encrypted local identification information received from the electronic device 200 with the encrypted registered local identification information downloaded from the server system 20. . That is, collation is performed between pieces of encrypted information. By doing so, it is possible to thoroughly protect the personal information of the user.

6). Third Modification Example FIGS. 13A and 13B show a third modification example of the present embodiment. This third modification is an example in which electronic device side identification information such as an R / W number acquired as local identification information is effectively used not only for user authentication but also for other purposes.

  That is, the R / W number serving as identification information unique to the electronic device can be effectively used in association with the attribute information of the electronic device. As the attribute information, information on a position where the electronic device is installed, information on a user who occupies the electronic device, and the like can be assumed. In the server system 20, various applications can be realized using the attribute information of the electronic device 200 associated with the R / W number in this way.

  For example, in FIG. 13A, it is assumed that the electronic devices are the automatic ticket gates 202 and 203, and the attribute information of the automatic ticket gates 202 and 203 is the installation position information. That is, in FIG. 13A, since the automatic ticket gates 202 and 203 are installed at Shinjuku Station and Komagome Station, respectively, the installation position information of the automatic ticket gates 202 and 203 is respectively Shinjuku Station and Komagome Station. It is set as information to show. The automatic ticket gates 202 and 203, which are such large electronic devices, are rarely changed once installed. Therefore, on the database 50 of the server system 20, the R / W numbers R / W1 and R / W2 of the read / write devices of the automatic ticket gates 202 and 203 are associated with Shinjuku station and Komagome station, respectively. By doing so, it is possible to specify the location of the information source using the R / W numbers R / W1 and R / W2 used as authentication information.

  Specifically, in FIG. 13A, the child user gets on the train at Shinjuku Station where the cram school is located, and gets off at Komagome Station where the house is located. At this time, in order to get on the train, the person touches the communication terminal 100, which is a mobile phone, on the automatic ticket gate 202 in Shinjuku Station. By this touch operation, boarding station registration for automatic settlement of train fares is executed. 3B and FIG. 4, the idIC1 of the communication terminal 100 and the R / W number R / W1 of the automatic ticket gate 202 are transmitted to the server system 20 as authentication information. Also, the user himself / herself touches the communication terminal 100 to the automatic ticket gate 203 at Komagome Station when getting off. By this touch operation, automatic settlement of the train fare is executed. Further, the idIC1 of the communication terminal 100 and the R / W number R / W2 of the automatic ticket gate 203 are transmitted to the server system 20 as authentication information.

  Further, the guardian of the person performs the guardian registration by the method described in FIG. Accordingly, it is possible to view the principal data transmitted from the automatic ticket gates 202 and 203. In other words, the automatic ticket gate 202 transmits boarding information that informs the user of the ride, and the automatic ticket gate 203 transmits the boarding information that informs the user of the boarding, and the guardian views the boarding information and the boarding information. can do.

  In the server system 20, Shinjuku station is associated with the R / W number R / W1, and Komagome station is associated with the R / W number R / W2. Accordingly, the display control process of the display control unit 42 in FIG. 1 makes it possible to display a notification screen as shown in FIG. 13B on the guardian's communication terminal 101. By viewing this notification screen, the guardian can confirm that the child has boarded at Shinjuku Station and got off at Komagome Station, and can provide a service that provides safety and security to the guardian. The server system 20 may send an email informing the guardian's communication terminal 101 in conjunction with the person's boarding at Shinjuku Station or getting off at Komagome Station.

  For example, if the automatic ticket gates 202 and 203 are directly connected to the public communication network 10, an unspecified number of boarding information and getting-off information may be leaked. Accordingly, such automatic ticket gates 202 and 203 are generally connected only to a dedicated communication network and not connected to the public communication network 10. Therefore, in this case, it is difficult to transfer the boarding information and the getting-off information at the automatic ticket gates 202 and 203 directly to the server system 20 via the communication network 10.

  In this regard, according to the method of the present embodiment, the local communication of the communication terminal 100 can be effectively used to transfer the boarding information and the getting-off information at the automatic ticket gates 202 and 203 to the server system 20 as transmission data. It becomes possible. Moreover, since the authentication process is performed based on idIC1, R / W1, and R / W2, it is possible to prevent a situation in which an unspecified number of boarding information and getting-off information are leaked. And it is possible to provide a safe and secure service for children by effectively utilizing the position information associated with R / W1 and R / W2 for the guardian.

  In addition, what is necessary is just to perform the 3rd party user registration which enables a guardian to browse child's data like FIG. 13 (A), for example in the ticket machine of a station, or a payment machine. That is, a system for realizing third-party user registration as described with reference to FIG. 4 is incorporated in a ticket issuing machine or a checkout machine. Then, like B1 and B2 in FIG. 4, after the child touches the interface unit of the ticket issuing machine or the checkout machine, the guardian touches and the idIC1 and idIC2 of the child and guardian are transferred to the server system 20 as in B3. Send and register the guardian's browsing request as shown in B4. Thereafter, as shown in B5, the child confirms and permits the parent to browse. In this way, parents and children can go to the station and perform simple registration work in front of the ticketing machine and the checkout machine. It can be improved.

7). Fourth Modified Example FIGS. 14A and 14B show a fourth modified example of the present embodiment. The fourth modified example is an application example in the case where the electronic devices are game devices 204 and 205.

  In FIG. 14A, the user plays a game with the game device 204 installed in the game center GA in Shinjuku, and touches the game device 204 with the communication terminal 100 after the game play ends. 3B and the like, the game result data such as the user's score, the idIC of the communication terminal 100, and the R / W number R / W1 of the read / write device of the game device 204 are stored in the server system. The game result data is registered as registration data. Thereafter, the user plays a game on the game device 205 installed in the game center GB in Sapporo, which is a business trip destination, and touches the communication device 100 on the game device 205 after the game play ends. Then, the game result data such as the user's score, the idIC of the communication terminal 100, and the R / W number R / W2 of the read / write device of the game device 205 are transferred to the server system 20, and the game result data is registered as registration data. be registered.

  In this case, similar to the method described in FIG. 13A, the R / W number R / W1 of the game device 204 is associated with the Shinjuku game center GA where it is installed on the database 50 of the server system 20. The R / W number R / W2 of the game machine 205 is associated with the Sapporo game center GB in which it is installed. Accordingly, when the score ranking screen as shown in FIG. 14B is displayed by the display control of the display control unit 42 in FIG. 1, the position and name of the game center played by the user are associated with the user's score. Can be displayed.

  For example, in order to connect the game devices 204 and 205 for business use to the communication network 10, infrastructure needs to be maintained, and the economic burden on the game center operator is great.

  In this regard, according to the fourth modified example of FIGS. 14A and 14B, a portable terminal can be obtained simply by providing a read / write device to the game device 204 or connecting the read / write device to the game device 204. The user's information regarding the game can be uploaded to the server system 20 by local communication with 100. Accordingly, it is possible to display rankings of player scores at game centers nationwide while reducing the economic burden on game center operators.

  Note that the game device that performs local communication with the communication terminal is not limited to a game device for business use as illustrated in FIG. 14A, and may be a game device for home use. The game information uploaded to the server system 20 by local communication is not limited to the game result data, and may be, for example, character data operated by the player. Further, if the third-party user's browsing permission registration as described in FIG. 4 is performed, a specific third party such as a friend can also refer to or operate the user's game information.

8). Fifth Modification FIG. 15 shows a fifth modification of the present embodiment. The fifth modification is an application example in the case where the electronic device is an electronic camera such as a digital still camera or a video camera.

  15, the user touches the electronic camera 206 with a communication terminal 100 such as a mobile phone after taking a picture with the electronic camera 206 at a travel destination or the like. Then, together with the idIC of the communication terminal 100 and the R / W number of the electronic camera 206, the data of the image photographed by the electronic camera 206 and the information on the photographing situation (such as photographing date and time) are described with reference to FIG. The data is uploaded to the server system 20 and registered by the method.

  Then, after returning from the travel destination, the user can browse the uploaded image data using, for example, the home PC 208 or the communication terminal 100.

  For example, if the electronic camera 206 is provided with a communication function for connecting to the communication network 10, hardware and software for that purpose are required, leading to problems such as an increase in cost of the electronic camera 206 and complication of development.

  In this regard, according to the fifth modification of FIG. 15, the communication function of the communication terminal 100 such as a mobile phone already owned by the user can be provided without providing the electronic camera 206 with a communication interface with the communication network 10. It is possible to upload the image data and the photographing situation information to the server system 20 by making effective use. As a result, the cost of the electronic camera 206 can be reduced. In this embodiment, since user authentication is performed using an idIC or R / W number, personal information such as uploaded image data can be protected.

  When a user owns a plurality of electronic cameras, image data registration processing and browsing processing may be performed using the R / W number of each electronic camera. For example, when registering or browsing image data, the registered data is organized or the image data is sorted and displayed according to the electronic camera used. Further, when the communication terminal 100 has a position information acquisition function such as a GPS function, the information on the shooting location acquired at the time of shooting may be associated with the idIC, R / W number, or image data. Good. In this way, when the image data is browsed, the location where the image data was taken can be displayed, and the convenience for the user can be improved.

  Although the present embodiment has been described in detail as described above, it will be easily understood by those skilled in the art that many modifications can be made without departing from the novel matters and effects of the present invention. Accordingly, all such modifications are intended to be included in the scope of the present invention. For example, in the specification or drawings, terms (idIC, R / W number, etc.) described at least once with different terms (communication terminal side identification information, electronic device side identification information, third party users, etc.) in a broader sense or the same meaning A parent or the like) can substitute the different terminology anywhere in the specification or drawings. Further, the configurations and operations of the server system, the electronic device, and the communication terminal are not limited to those described in the present embodiment, and various modifications can be made.

The structural example of the authentication system and server system which are implement | achieved by this embodiment. FIG. 2A is a configuration example of the electronic device and the communication terminal of this embodiment, and FIG. 2B is an example of a mode selection screen. 3A and 3B are explanatory diagrams of the authentication method of the present embodiment. Explanatory drawing of the authentication method of this embodiment relevant to guardian registration. The example of the user information memorize | stored in a user information storage part. The data flow for demonstrating the authentication method of this embodiment. The data flow for demonstrating the authentication method of this embodiment. The data flow for demonstrating the authentication method of this embodiment. The data flow for demonstrating the authentication method of this embodiment. Explanatory drawing of the 1st modification of this embodiment. The data flow for demonstrating the 1st modification of this embodiment. 12A and 12B are explanatory diagrams of a second modification of the present embodiment. FIGS. 13A and 13B are explanatory diagrams of a third modification of the present embodiment. FIGS. 14A and 14B are explanatory diagrams of a fourth modification of the present embodiment. Explanatory drawing of the 5th modification of this embodiment.

Explanation of symbols

10 communication network, 20 server system, 30 authentication unit, 32 user registration unit,
34 data registration unit, 36 data browsing unit, 38 third party user registration unit,
40 data transmission unit, 42 display control unit, 50 database,
52 user information storage unit, 54 registration data storage unit,
100, 101, 103 communication terminal, 110 control unit, 112 identification information acquisition unit,
114 notification units, 116 authentication units, 120 storage units, 122 user information storage units,
130 operation unit, 140 display unit, 150 communication unit, 160 antenna,
170 Short-range wireless communication device, 200 electronic device, 201 electrocardiograph,
202, 203 Automatic ticket gates, 204, 205 Game machines, 206 Electronic cameras,
208 PC, 210 control unit, 212 identification information acquisition unit, 214 notification unit,
220 storage unit, 230 operation unit, 240 display unit, 250 read / write device,
300 Information processing device

Claims (25)

A server system that is connected to a communication terminal of a user who performs local communication with an electronic device via a communication network,
A user information storage unit that stores authentication information of the user of the communication terminal as registered authentication information;
An authentication unit for verifying whether or not the user is a valid user by comparing the authentication information received from the communication terminal with the registered authentication information stored in the user information storage unit;
The communication terminal is
The local identification information acquired by performing local communication with the electronic device is transmitted to the server system as the authentication information,
The authentication unit
A server that performs user authentication by comparing the local identification information received as the authentication information from the communication terminal with the registered local identification information stored as the registration authentication information in the user information storage unit. system. In claim 1,
A user registration unit for performing user registration of the communication terminal;
The communication terminal is
At the time of user registration, local identification information acquired by performing local communication with the electronic device and user input authentication information input by the user are transmitted to the server system,
The user registration unit
When it is authenticated that the user is a valid user based on the user input authentication information received from the communication terminal, the local identification information received from the communication terminal at the time of user registration is used as the registered local identification information. A server system registered in the user information storage unit. In claim 1 or 2,
The communication terminal is
As the local identification information acquired by performing local communication with the electronic device, the encrypted local identification information is transmitted,
The user information storage unit
Storing the registered local identification information encrypted as the registered local identification information;
The authentication unit
A server for performing user authentication by comparing the encrypted local identification information received from the communication terminal with the encrypted registered local identification information stored in the user information storage unit system. In any one of Claims 1 thru | or 3,
The communication terminal is
The local identification includes communication terminal side identification information that is identification information of a short-range wireless communication device provided on the communication terminal side, and electronic device side identification information that is identification information of a read / write device provided on the electronic device side. As information, acquired by local communication with the electronic device, the authentication unit,
A server system that performs user authentication based on the communication terminal side identification information and the electronic device side identification information. In any one of Claims 1 thru | or 4,
A data registration unit for registering registration data based on the received transmission data in a registration data storage unit when transmission data from the electronic device is received via the communication terminal;
The data registration unit
The server system, wherein when the authentication unit authenticates that the user is a valid user, the registration data is registered in the registration data storage unit. In claim 5,
Including a data browsing unit that performs browsing processing of the registered data stored in the registered data storage unit,
The data browsing unit
A server system that permits browsing of the registration data in response to a browsing request for the registration data from the communication terminal when the authentication unit authenticates the user as a valid user. . In any one of Claims 1 thru | or 4,
A data registration unit that registers registration data based on the received transmission data in a registration data storage unit when transmission data from the electronic device is received via the communication terminal;
A server system, comprising: a third-party user registration unit that performs third-party user registration for permitting a third-party user to view the registration data of the user. In claim 7,
The third party user registration unit
Third-party user registration is performed based on first local identification information about the user and second local identification information about the third-party user acquired by local communication with the electronic device. Server system. In claim 7 or 8,
Including a data browsing unit that performs browsing processing of the registered data stored in the registered data storage unit,
The data browsing unit
When the permission of browsing of the registered data by the third party user is granted by the communication terminal of the user, the browsing of the registered data of the user by the third party user is permitted. Server system. In any one of Claims 1 thru | or 4,
A data registration unit that registers registration data based on the received transmission data in a registration data storage unit when transmission data from the electronic device is received via the communication terminal;
The server system characterized by including the data transmission part which transmits the said registration data of the said user with respect to the information processing apparatus or communication terminal of the specific person with whom browsing of the said registration data of the said user is approved. In any one of Claims 1 thru | or 10.
The server system characterized by including the display control part which acquires the attribute information of the said electronic device linked | related with the said local identification information, and performs the display control process of a display screen based on the said attribute information. An electronic device that performs local communication with a user communication terminal,
An identification information acquisition unit for acquiring communication terminal side identification information from the communication terminal by performing local communication with the communication terminal;
The notification unit for notifying the communication terminal by local communication, as the authentication information for authenticating the user, the acquired communication terminal side identification information and the electronic device side identification information;
An electronic device comprising: In claim 12,
The identification information acquisition unit
The identification information of the short-range wireless communication device provided on the communication terminal side is acquired from the communication terminal by local communication as the communication terminal side identification information,
The notification unit
The communication terminal side identification information that is the acquired identification information of the short-range wireless communication device and the electronic device side identification information that is the identification information of the read / write device provided on the electronic device side are authenticated by the user. An electronic device characterized by notifying the communication terminal by local communication as information. In claim 12 or 13,
The notification unit
At the time of registration of transmission data of the electronic device, the transmission data, URL (Uniform Resource Locator) information for registration of the transmission data, the communication terminal side identification information, and the electronic device side identification information are associated with each other. An electronic apparatus characterized by notifying the communication terminal by communication. In claim 14,
The notification unit
When browsing registered data, URL (Uniform Resource Locator) information for browsing the registered data, the communication terminal side identification information, and the electronic device side identification information are associated with each other and notified to the communication terminal by local communication. An electronic device characterized by that. In any of claims 12 to 15,
The notification unit
An electronic apparatus characterized by encrypting at least the communication terminal side identification information and notifying the communication terminal. In any of claims 12 to 16,
The identification information acquisition unit
The first communication terminal side identification from the user's communication terminal by performing local communication with the user's communication terminal at the time of third party user registration for permitting the third party user to browse the registered data of the user Information is acquired, and by performing local communication with the communication terminal of the third party user, second communication terminal side identification information is acquired from the communication terminal of the third party user,
The notification unit
An electronic apparatus characterized by notifying the acquired first and second communication terminal side identification information and the electronic apparatus side identification information to the communication terminal by local communication. A communication terminal that performs local communication with an electronic device and is connected to a server system via a communication network,
By performing local communication with the electronic device, the communication terminal side identification information, the identification information acquisition unit for acquiring the electronic device side identification information as local identification information,
A notification unit for notifying the local identification information to the server system as authentication information for authenticating a user of a communication terminal;
A communication terminal comprising: In claim 18,
The identification information acquisition unit
The local identification includes communication terminal side identification information that is identification information of a short-range wireless communication device provided on the communication terminal side, and electronic device side identification information that is identification information of a read / write device provided on the electronic device side. As information, acquired by local communication with the electronic device, the notification unit,
A communication terminal that notifies the server system of identification information of the short-range wireless communication device and identification information of the read / write device as authentication information of the user. In claim 18 or 19,
The identification information acquisition unit
When performing third-party user registration for permitting a third-party user to browse the registered data of the user, by performing local communication with the electronic device, first local identification information about the user, and the third Obtaining second local identification information about the user,
The notification unit
A communication terminal that notifies the server system of the acquired first and second local identification information. A communication terminal that performs local communication with an electronic device,
A user information storage unit for storing authentication information of a user of the communication terminal as registered authentication information;
An identification information acquisition unit that acquires local identification information by performing local communication with the electronic device;
An authentication unit that authenticates whether or not the user of the communication terminal is a valid user,
The authentication unit
User authentication is performed by comparing the local identification information received as the authentication information from the electronic device by local communication with the registered local identification information stored as the registration authentication information in the user information storage unit. Communication terminal. In claim 21,
The authentication unit
A communication characterized in that user authentication is performed by comparing the local identification information received from the electronic device with registered local identification information downloaded from a server system that is communicatively connected to a communication terminal via a communication network. Terminal. In claim 22,
The server system is
Downloading the registered local identification information registered by the user based on the user input authentication information input by the user to the communication terminal,
The authentication unit
A communication terminal that performs user authentication by comparing the local identification information received from the electronic device with registered local identification information registered and downloaded based on the user input authentication information. 24. Either of claims 22 or 23.
The electronic device is
Sending the encrypted local identification information as the local identification information,
The server system is
As the registration local identification information, download the encrypted registration local identification information to the communication terminal,
The authentication unit
A communication terminal that performs user authentication by comparing the encrypted local identification information received from the electronic device with the encrypted registered local identification information downloaded from the server system. At the time of user registration, local identification information is acquired by local communication between the electronic device and the user's communication terminal,
The acquired local identification information is registered in the user information storage unit as user registration authentication information,
Upon access from the electronic device after the user registration, local identification information is obtained by local communication between the electronic device and the communication terminal,
The local identification information acquired at the time of access from the electronic device is compared with the registered local identification information stored in the user information storage unit as the registration authentication information, and the user of the communication terminal is a valid user. An authentication method characterized by authenticating whether or not there is.

Images