JP2010092498A - Device operation right management system and electronic device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To surely manage a device operator by recognizing that a person who uses a license for operating a device is identical to the owner of the license. <P>SOLUTION: In the system, an IC card with a memory chip or the like is used as a license, a terminal to which the IC card or a license having the equal function is inserted, and a biometric authentication information detection means for detecting biometric authentication information such as the fingerprint or iris of a driver who gets on an automobile are provided on the automobile, and information showing the biometric authentication information of the owner of the license is described in the memory of the IC card or the license having the equal function. The drive of the automobile is disabled when the collation of the biometric authentication information of the driver to the biometric authentication information described in the license is not successful, and the content of the license is not matched to the automobile to be driven. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a technology related to a device operation right management system that manages / controls whether or not to operate a device, and in particular, a device having a function of expressing a device operation right in the form of a license card typified by an automobile license. The present invention relates to a technology related to a device operation right management system having a function of collating with the same device using biometric authentication information to identify the device operator.

  Equipment operation right management methods that issue certificates proving that you have the right to operate equipment, and that only those who have the certificate can operate the equipment, are used in various places. Yes. For example, in the case of a driver's license, only those who have a driver's license have the right to drive a car, and when a police officer gives instructions to present a driver's license, follow it promptly, and if not, penalties will be imposed It is actually used as a system.

  However, a car driver's license will not be effective except when instructed by a police officer, and even if you do not have a driver's license, you can actually drive a car. Management rights have not been reliably managed.

  In order to solve this problem, in the technique disclosed in Japanese Patent Laid-Open No. 6-87285 (Patent Document 1), an IC card is used as a driver's license. Enter the information described as electronic information, and provide a terminal to read this information on the car so that it can not be operated unless it is a valid license, and record the operation record in the IC card Then, a method of counting the operating status of each driver is described later.

JP-A-6-87285

  In the technology disclosed in Patent Document 1 described above, the vehicle always distinguishes the license that has no effect other than when it is presented to the police officer, so that it can be used as a license indicating the right to drive the vehicle. In addition, it is possible to take advantage of the features of the memory function of the IC card and to log the operation status and reflect it in the optimum operation plan.

  However, the technique disclosed in Patent Document 1 has the following problems, and no consideration is given to these points.

  (1) First, in Patent Document 1, no consideration is given to confirming whether or not the person who inserted the IC card license into the automobile is really the owner of the license. Therefore, even if the person who received the license and the driver are not the same person, that is, the person who is not actually granted a license, it is possible to drive as long as you have a license. .

  (2) Also, in the above-mentioned patent document 1, regarding the response when the license is revoked due to traffic violation, etc., write the accident or violation data into the license using a data management device at the time of traffic accident or traffic violation Although there are descriptions about issuing an introductory order or foul payment, or preventing the engine from starting even if the license is inserted into the car terminal, while the license is suspended or expired, These are based on the current method of operating a license, and no consideration has been given to applying the merits obtained only by using an IC card to penal regulations.

  (3) Moreover, in the said patent document 1, it has described that the driver | operator's ID list | wrist which can drive this motor vehicle is provided in the IC card terminal of a motor vehicle, and only the driver | operator who corresponds to this ID can drive. However, no consideration has been given to the linkage between the types of licenses, the types of cars that can be driven, and the types of driving modes.

  (4) Further, in Patent Document 1, no consideration is given to protection against illegal changes in the contents of the IC card.

  The present invention has been made in view of the above points, and an object of the present invention is to reliably authenticate that the license for operating the device is the same as the owner. In addition, an object of the present invention is to enable a finer and more practical treatment with respect to operation restrictions when an operation is violated. In addition, an object of the present invention is to make it possible to finely set device operation restrictions according to the level of the license, thereby making it possible to reliably manage device operators and prevent erroneous operations. is there. Another object of the present invention is to prevent the destruction of the card by software other than physical destruction by using the CPU card.

  In order to achieve the above object, the present invention uses, for example, the following means.

  (1) A terminal for inserting an IC card or a license having an equivalent function into a car is provided, and a biometric information detecting means for detecting biometric information such as a fingerprint or an iris of a rider is provided. Information representing the biometric authentication information of the license owner is written in the memory of the card or the license having an equivalent function.

  (2) Especially in the case of a car, if the vehicle is violated and is subjected to the processing described in the prior application gazette, driving the vehicle becomes impossible at the place where the violation occurred, It becomes impossible. Therefore, by setting finely the driving permission pattern of the car at the time of violation in the IC card along the time axis, for example, the issuance of the actual suspension of the license is set two days later, and the terminal of the car is also instructed to do so Work along.

  (3) The operation mode of the vehicle to be driven is defined according to the license level. For example, in a dedicated course such as a driving school or a parking lot, a license is set so that the vehicle can run only at a speed of less than 10 km / h, and the terminal of the car operates according to the instruction.

  (4) By using a CPU card, it is possible to easily read data that does not require cryptographic processing while preventing destruction of the card by software other than physical destruction. Specifically, the issuance date and license level for the suspension of license described in (2) and (3) above can be read without using a special cryptographic processing chip outside, and the destruction or alteration of the information can be prevented. .

  According to the present invention, the device operator can be reliably managed by authenticating that the license for operating the device is the same as the owner. In addition, the operation restriction when the operation is violated can also be performed with fine processing along the time axis, and can be processed more substantially. Further, device operation restrictions can be finely set according to the license level, and it is possible to reliably manage device operators and prevent erroneous operations. Furthermore, by using a CPU card, it is possible to easily read data that does not require cryptographic processing while preventing destruction of the card by software other than physical destruction.

It is a block diagram which shows the structural example of the apparatus operation right management system which concerns on 1st Embodiment of this invention. It is explanatory drawing which shows one example of the system arrangement | positioning in the vicinity of the cockpit of a motor vehicle in the equipment operation right management system which concerns on 1st Embodiment of this invention. It is explanatory drawing which shows an example of the internal structure of an IC card used in the apparatus operation right management system which concerns on 1st Embodiment of this invention. It is explanatory drawing which shows an example of the penalty process pattern at the time of violation in the apparatus operation right management system which concerns on 1st Embodiment of this invention with a table | surface. It is explanatory drawing which showed one example of prescription | regulation of the operation mode by the license type in the apparatus operation right management system which concerns on 2nd Embodiment of this invention with the table | surface. It is a flowchart figure which shows the 1st example of the operation procedure at the time of drive | operating an apparatus in the apparatus operation right management system by this invention. It is a flowchart figure which shows the 2nd example and the 3rd example of the operation procedure at the time of drive | operating an apparatus in the apparatus operation right management system by this invention. It is explanatory drawing which showed the example of embodiment of the remote control for starting an apparatus which comprises an IC card reader and a biometric information reader applicable in the apparatus operation right management system by this invention. It is explanatory drawing which showed the example of the method of giving use permission to the person who has not issued use permission of the apparatus in the apparatus operating right management system by this invention. It is explanatory drawing which showed the example of the pattern changed with the apparatus which steers the authentication precision of biometrics information in the apparatus operation right management system by this invention. It is explanatory drawing which showed the example which records a traffic route using the memory function of IC card in the apparatus operation right management system by this invention. It is explanatory drawing which shows the example of embodiment which can be applied in the apparatus operation right management system by this invention, and contained the function of IC card in the key of the motor vehicle. It is explanatory drawing which showed the pattern which performs the limitation of the vehicle model driven according to the kind of license in the apparatus operation right management system by this invention. It is explanatory drawing which showed the example of embodiment of an IC card for preventing electrostatic breakdown of an IC chip at the time of IC card insertion to a terminal device applicable in the apparatus operation right management system by this invention. It is explanatory drawing which showed the example of embodiment which performs the secrecy of the information between a terminal (terminal device) and an IC card applicable in the apparatus operation right management system by this invention.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a block diagram showing a configuration of a device operation right management system according to the first embodiment of the present invention, and this embodiment is an application example to a device operation right management system in an automobile. This system has a device control function that controls whether or not the device (in this case, an automobile) can be operated, and the right to handle the device (here, a driver's license, for example, in a limited area such as a driving school). It includes at least an IC card as a permission display means having information indicating that the driving is permitted.

  An automobile has an IC card reader 10010, and a driver inserts his IC card into the IC card reader 10010 when driving the automobile. The biometric information reader 10020 reads biometric information indicating the human ID such as the fingerprint of the driver sitting in the driver's seat or the iris / retinal. The license management apparatus 10040 reads the information on the owner of the corresponding license read from the IC card by the IC card reader 10010 and the biometric authentication of the driver sitting in the driver's seat read by the biometric information reader 10020. Compare with the information and determine whether they are the same.

  The storage device 10030 stores the driver ID when, for example, a driver who can drive the vehicle is limited. When the driver ID of the inserted IC card does not match the driver ID stored in the storage device 10030, the vehicle control device 10060 described later suppresses engine start.

  When the license management device 10040 determines that the driver sitting in the driver's seat is indeed qualified to drive the vehicle based on the information from the inserted IC card and the information from the biometric information reader 10020, The management device 10040 sends a message indicating operation permission to the vehicle control device 10060.

  In accordance with this permission message, the vehicle control device 10060 includes an engine control device 10070 that controls the engine including whether or not the engine can be started, a speed control device 10080 that controls the limiter of the traveling speed of the automobile, an ABS (Antilock Brake System). An operation permission instruction is sent to each brake control device 10090 that sets the operation and level. This makes it possible to start the engine, set the maximum speed according to the driver's qualification level, and perform ABS ON / OFF control in accordance with the skill of the driver that does not exist in the current license system .

  FIG. 2 is an explanatory diagram showing an example of the system layout in the vicinity of the cockpit of an automobile in the device operation right management system of the present embodiment.

  20000 is the cockpit. There is an IC card insertion slot 20020 on the right side of the driver's seat, and a driver who drives this car inserts an IC card, which is his / her license, into the insertion slot 20020. Next, by pressing a fingerprint reading unit / engine start button 20030, the driver's fingerprint is read, and authentication with the biometric information of the driver written on the previous IC card is performed. The engine can be started only after the person who presses the crest reading unit / engine start button 20030 is surely identified by the IC card.

  At this time, the storage device 20055 has an ID list of drivers who may control this vehicle, and collates with the ID of the inserted IC card. As in the description of FIG. Then, it is possible to ensure the security such as theft prevention by preventing the operation including the engine start of the automobile.

  As a method for confirming biometric authentication information, there is a method of providing a retina / iris sensor 20010 at a speedometer position. In this case, unless the driver is seated in the driver's seat, it cannot be detected using this sensor. For example, the fingerprint reader / engine start button 20030 is used for the person who has been issued an IC card (license). It is impossible for someone without a license to push from the passenger seat and drive in the driver's seat. Here, the speedometer is where the driver's line of sight always goes, and the driver seat is almost fixed at the head position, so it is suitable for installing the retina / iris sensor 20010.

  The device used as the license here is an IC card, which is a multi-application compatible IC card used for electronic money or the like. This allows applications such as electronic money and electronic credit to coexist in the same IC card. By accessing the automatic fee payment system 200040 from a car, automatic highway fee payment, drive-through, gas station, etc. It is also possible to support a system for shopping under the condition that the vehicle is always in a car.

  Furthermore, even if the license used here does not use an IC card, but uses a conventional license by printed matter, by inserting the license into the card insertion slot and reading the ID number etc. with an image scanner, It is possible to determine whether the driver's license has been granted permission to operate the car. Furthermore, by storing the driver's biometric information in the storage device 10030, it is possible to perform verification with the driver himself / herself based on the driver's license and biometric information without using an IC card. The function of the present invention can be realized even if a conventional license system is used as it is instead of an IC card.

  FIG. 3 is an explanatory diagram showing an example of an internal configuration of an IC card (internal configuration of an IC chip mounted on the IC card) used in the device operation right management system of the present embodiment.

  The IC chip 30005 mounted on the IC card 30000 has MF30010 (Master File) as a root and has a plurality of DFs (Dedicated Files) below it, DF1 (30020) is a license, and DF2 (30060) is electronic money, for example. It is used for. Under DF1 (30020), there are a plurality of EFs (Elementary Files), which describe information related to the electronic license. EF1 (30030) includes a license ID number and fingerprint information or iris information indicating biometric authentication information. In this case, there may be a plurality of types of biometric authentication information. If the biometric authentication information reader 10020 attached to the automobile terminal is a fingerprint scanner, for example, it uses fingerprint information. Information may be used. EF2 (30040) describes the license type and level of this license, and EF3 (30050) describes the violation history. The CPU card is a program of DF or EF, and can read biometric authentication information or rewrite the violation history only when a specific command is input from the outside. This specific command is executed only by dedicated software or a dedicated chip, which will be described later, thereby keeping the internal information of the card confidential and preventing modification.

  In addition, here, a clock 30070 is provided in the card, and like the biometric authentication information and violation history, the date / time of this clock cannot be altered unless it is through dedicated software or a chip. When the penalties issued at the time of violation, which will be described later in Section 4, are enforced according to the date, it is possible to completely prevent the act of deliberately upsetting the clock and avoiding the penalties. Naturally, it will be confused because it is a stand-alone clock on the card, but this is the correct time when the dedicated software or chip is confirmed by a reliable clock such as GPS when the card is inserted into the in-vehicle terminal. Use to correct the clock madness in the card. The correction of the time is not limited to the terminal mounted on the automobile, but may be performed in the communication at the time of automatic fee payment shown in FIG. 2, and regardless of the automobile, the electronic money or electronic money is linked with the electronic money terminal. When shopping with credit, the clock may be corrected from the terminal as needed. Further, the timepiece installed in the IC card needs to operate even if the driving power of the IC card is not given from the outside, and a thin battery is built in the IC card. The life of the battery is basically longer than the license permission deadline, but in some cases, the battery may have a life substantially the same as the license permission deadline. Since the battery is not used at all other than driving the timepiece, the phenomenon that the life is shortened depending on the use conditions does not occur, and the life can be set accurately.

  FIG. 4 is a table showing an example of a penalty processing pattern at the time of violation in the present embodiment.

  As a pattern of penalty processing, in this embodiment, the operation mode when driving a car is classified into three modes: (1) engine start only, (2) traveling less than 10 km / h, and (3) normal driving possible. . For example, when there is no violation, it is possible to use all three operation modes.

  First, the speed violation corresponding to the conventional suspension of license is shown. With a conventional driver's license, a penalty for speeding, that is, a suspension of the driver's license, will be issued immediately. For example, if you violate the speed while traveling, you will get back on the road. Even in reality it will be possible. Therefore, for example, if the violation information is described as electronic information using an IC card or the like, a terminal corresponding to the information is provided on the automobile, and a license suspension is issued immediately, the automobile can be moved on the spot for, for example, half a year. The phenomenon of leaving the car in the middle of the road disappears. In this embodiment, after the speed violation, the penalty is issued, for example, two days after the violation, and the car is taken home or returned to the lending source during that time. On top of that, actual penalties are issued, and this license allows you to handle the situation where you cannot drive.

  Also, if you make an unusual speeding violation that requires an immediate suspension of driving, you can only drive at 10 km / h or less so that you can move from at least the roadside on the highway service area to the parking area. It will be possible for a certain period of two days, and the prohibition of normal driving on ordinary roads will be issued immediately.

  Further, in the case of issuing a license suspension due to drunk driving, it is necessary to immediately stop the driving of the car at least at the time of detection, so that it is impossible to start the engine of the car as well as driving at 10 km / h or less. This is the period until the detected driver is awakened from drunkness, for example, for 6 hours, and after the car is brought home at home, it is allowed to run normally for 2 days just like the speeding violation mentioned above. The suspension of license is issued for the first time. This period can be determined by the person in charge of the detection according to the distance to the driver's home and the amount of emotion.

  It should be noted that the restriction items due to penalties written to the IC card can be set to allow use, prohibit use, use function restrictions, etc. a plurality of times along the time axis.

  The timing and time of issuing penalties in this embodiment is enforced according to a standard clock. For example, when using a clock mounted on a normal car, the driver changes the clock without permission. If you proceed for half a year, the disposal period has already passed, so you can drive without permission. In order to prevent this, as shown in FIG. 3, there is a clock in the IC card that cannot change the time without permission from the outside, or the time is set by a similar function, that is, a reliable clock such as GPS. A vehicle-mounted terminal may be provided with a clock that does not allow any time setting except for correction.

  FIG. 5 is a table describing an example of the operation mode prescription according to the license type in the device operation right management system according to the second embodiment of the present invention. This embodiment is an example on the assumption of helicopter maneuvering, and shows the licenses of the licensed pilot, the trainee, and the mechanic, and the operation mode for each.

  Naturally licensed pilots can, of course, perform engine start-up, hovering, low speed flight, and high speed flight. In the case of trainees, from engine start to low speed flight can be performed, there is a limit to high speed flight. Specifically, for example, control is performed such that the angle of the main rotor rotation surface cannot be tilted beyond a certain level by the pilot's will. Of course, automatic attitude control by a gyro or the like can be tilted to the full angle without being restricted by this restriction. In addition, a mechanic class 1 qualified for a simple levitation test will enable engine starting and hovering. Specifically, control is performed such that, for example, it is impossible to change the angle of the main rotor rotation surface to such an extent that extremely low-speed back-and-forth and left-right movement is possible. In the case of Mechanic 2nd class with only maintenance qualification, only engine start.

  The specific restriction method of such control differs depending on the device to be operated, but the license level is described in the IC card license, and the device that is actually operated can set how far the license can be operated. For example, when driving a car, even with the same temporary license, it is possible to control to change the operation mode on a general road and a dedicated course.

  FIG. 6 is a first example of a flowchart showing an operation procedure when operating a device in the device operation right management system according to the present invention.

  First, an ID card is inserted into the device to be operated (step 60010), and then a fingerprint is input (step 60020). Next, in step 60030, it is determined whether or not the fingerprint information written on the inserted ID card matches the input fingerprint information, and it is determined whether or not the person who input the fingerprint is the owner of the ID card. If the determination is x, the ID card is ejected while displaying the display indicating that driving is not possible (step 60040). If the check result is ○, the engine is started (step 60050), and if the device to be operated is an automobile, the vehicle is driven (step 60060).

  Here, for example, as described above, the ID card is not only composed of an IC chip having a memory, but also reads the license number of the license of the printed matter currently used by an image scanner, and FIG. The fingerprint information corresponding to the corresponding license number may be read from the storage device installed in the device shown in Fig. 8, and it may be determined that the fingerprint matches the fingerprint entered by the driver. Equivalent functions can be achieved even with proof.

  FIGS. 7A and 7B are a second example and a third example of a flowchart showing an operation procedure when the device is operated in the device operation right management system according to the present invention.

  (A) of FIG. 7 is a flowchart in the case of collating the type of the device to be operated with the ID card. First, the operator inserts an ID card into the device (step 70010), and the device to be operated reads the license ID from the inserted ID card. Then, it is determined whether or not the license ID is a license that allows the device to be operated (step 70020). If the license cannot be operated, the operation disabled display is performed and the ID card is ejected (step 70030). If the collation result is ○, the engine is started (step 70040), and if the device to be operated is an automobile, the vehicle is driven (step 70050).

  Here, for example, as described above, the ID card is not only composed of an IC chip having a memory, but also an image of the license number of the currently used license of the printed matter and the type of steerable device described. It may be determined whether or not the license can be read by a scanner and the device can be operated. In this case, an equivalent function can be achieved even with an existing printed license.

  FIG. 7B is a flowchart showing an example in which the functions of both FIG. 6 and FIG. That is, the operator inserts an ID card into the device (step 70010), and then inputs a fingerprint (step 70060). Next, in step 70070, it is determined whether or not the fingerprint information described in the inserted ID card matches the input fingerprint information, and it is determined whether or not the person who has input the fingerprint is the owner of the ID card. If the judgment is x, the ID card is ejected while displaying the display indicating that driving is not possible (step 70031). If the verification result is ◯, it is determined whether the license ID read from the inserted ID card is a license that allows the device to be operated (step 70021). Eject the ID card (step 70032). If the collation result is ○, the engine is started (step 70041), and if the device to be operated is an automobile, the vehicle is driven (step 70051).

  Here, the fingerprint collation and the license ID collation order may be either. For example, in a car, when the car always receives a license ID of a wanted person or the like via a network or the like, Recognizing that the driver on board is a criminal or the like and notifying that driving is not possible, it is also possible to realize a mechanism for notifying the police and the like of the criminal using communication means (not shown). By performing this procedure first, it is possible to reliably detect criminals.

  In addition, authentication (verification) of biometric information such as fingerprint verification is performed simultaneously with the door opening / closing operation when boarding the vehicle, such as by providing a fingerprint reading sensor on a predetermined door handle of a vehicle such as an automobile. You may make it perform.

  Furthermore, authentication (verification) of biometric authentication information such as fingerprints and irises is performed not only every time before starting a device such as an automobile, but also after every start of device start permission, It may be performed every time the operation of the device ends. By doing so, it is possible to monitor whether or not a person different from the person who has been authenticated first has changed the operation or operation of the apparatus during the operation after starting up the operation of the apparatus. And when driving or maneuvering is changed on the way, a device such as an automobile warns of this, or gradually stops the operation of the device after the warning depending on time and circumstances, or an IC card or device In the storage device, information on the illegal change and the biometric information of the person after the change are recorded together, or the information on the illegal change and the biometric information of the person after the change are automatically externally recorded. It is also possible to use a mechanism for informing. Therefore, in a taxi or the like, it is highly effective when a malicious passenger takes over a car and drives it.

  FIG. 8 is an explanatory diagram showing an example of an embodiment of a remote controller for activating a device, to which an IC card reader and a biometric information reader are attached, which can be applied in the device operation right management system according to the present invention. is there.

  The remote controller shown in FIG. 8A includes an in-vehicle device (terminal) having a device control function in the first embodiment described above, by providing the remote controller with an IC card reader and a fingerprint scanner as a biometric information reader. It has the same function as the device.

  The remote control body has a fingerprint scanner / starter button 80020. The user inserts the IC card 80030 and puts a finger on the button 80020 to scan the fingerprint, and scans the fingerprint information written in the IC card 80030. Only after collation with the user's fingerprint information is the collation established, the infrared / radio wave emission port 80010 emits a signal such as a car engine start or door lock release by infrared ray or radio wave.

  FIG. 8B shows an example in which the function of the IC card is built in the remote controller. In this example, the usage pattern is different from that of a general-purpose automobile license, but when you try to move a device, it stores the fingerprint information of the person who is eligible to move that device. Even if a person tries to move the device, he cannot start. In addition, since there is no IC card inserted, it is possible to avoid losing the card by carrying it.

  FIG. 9 is an explanatory diagram showing an example of a method for giving a use permission to a person who has not given a use permission of a device in the device operation right management system according to the present invention. As a specific example, an operation flow for an automobile owner to give another person the right to drive the automobile will be described based on the operation screen.

  First, as shown in the operation screen of FIG. 9A, in order to determine whether or not the person who gives driving permission to another person is the owner of the car, insert the ID card to the owner. Prompt. Here, the identity of the owner is confirmed by checking biometric authentication information such as a fingerprint (not shown).

  Next, a driving permission mode to be given to another person is selected on the operation screen shown in FIG. That is, the user designates a designated date only by selecting “1” and selecting “2”. Then, by selecting “3”, for example, a permanent license for a family or the like is given. After this selection, on the same operation screen as in FIG. 9A, the driver is prompted to insert an ID card for granting driving permission, and driving permission is registered.

  The screen shown in FIG. 9C shows a list of drivable drivers that are currently registered in this car. By selecting by number here, the operation permission mode can be changed as shown in the operation screen of FIG.

FIG. 10 is an explanatory diagram showing an example of a pattern that is changed by a device that controls the authentication accuracy of biometric authentication information in the device operation right management system according to the present invention. The authentication (verification) of biometric authentication information, for example, in the fingerprint collation method, there are currently three typical methods.
(1). A Manny Char method that matches the position and direction of the branching and end points of the fingerprint ridgeline.
(2). In addition to (1), a Manny shearing method using a relative positional relationship. Although the amount of data and processing load is large, the National Police Agency uses it to determine the criminal.
(3). An image chip system that collates using image pieces (chips) including feature points.

  The authentication accuracy as a method is in the order of (2) → (3) → (1). In addition, for each of them, the collation accuracy changes depending on how much sampling is performed, and if the sampling number is increased, processing time is required. As a method for obtaining the collation accuracy, for example, about 15 feature points are selected, which are sequentially collated. In this way, the accuracy of collation is determined by the number of feature points and how far the collation is stopped. For example, if all the collations are collated, it takes time, and conversely the personal collation rate may decrease.

  Basically, it is the goal and ideal that the devices that can be operated are definitely limited depending on the type of license, but if the accuracy of authentication is increased due to the above problems, processing time may be increased, and conversely, the person himself / herself is authenticated. The phenomenon that it does not come up occurs. Depending on the type of equipment to be operated, the level of personal authentication may be lowered, and it becomes possible to cope with improvement in processing speed and cost reduction.

  The table in FIG. 10 shows the types of vehicles to be operated, their importance levels, and license qualification levels. As for importance, C is the lowest and A is the highest. Also, those who have the lowest qualification level E, the highest A, and a high-level license also have a driving qualification for a low-level license. For example, if the ordinary license is D and the license of the motorbike is E, the person with the license of D can drive the motorbike.

  In the table of FIG. 10, the motorbike with the importance level C is a device that can be operated by almost anyone who has a license because the driving qualification level is the lowest E. Therefore, it is not necessary to perform authentication of biometric authentication information precisely, and the biometric authentication level is set to the lowest level “1”.

  Since ordinary vehicles, taxis, and large vehicles are expensive and have a great influence on theft, the importance is set to B. Among them, ordinary vehicles are general personal vehicles, so the qualification level is D, and taxis are business vehicles, so the qualification level is C. Since these two vehicles have the same size and difficulty in maneuvering, the biometric authentication level is the same and is set to a level “2” higher than that of the motorbike.

  Large vehicles are larger than the two vehicles and are more difficult to drive, so a more reliable qualification is required (qualification level B), so the biometric authentication level is set to a higher level “3”. To do.

  Finally, the emergency car has the highest importance level A, and only a specific qualified person controls it. Since the influence when the theft occurs is the largest, the biometric authentication level is set to the highest “4” in order to confirm the driver more reliably. In this case, since the emergency vehicle needs emergency dispatch, it is necessary to authenticate in a short time without mistaken qualified personnel at the same time as reliable authentication. For this reason, the biometric authentication algorithm is also suitable.

  FIG. 11 is an explanatory diagram showing an example of recording a travel route using the memory function of the IC card in the device operation right management system according to the present invention. That is, FIG. 2 is an explanatory diagram showing a method in which a person driving a car using the device operation management system of the first embodiment shown in FIG. 1 stores the travel route as his / her own record in an IC card.

  FIG. 11A shows a route that the driver follows. From the starting point 11040, after passing through the road 11030 and turning left at the intersection 11020, turn left at the Y-branch 11010 and arrive at the destination 11000. This traffic route is set in advance by the car navigation system, but during the traffic, the state of the intersection 11020 is photographed with an electronic camera (11060 shows this photographed image). The arrow 11070 superimposed on the image is the direction in which the car is actually bent.

  FIG. 11B shows an example of a format for recording the driver's passage on the driver's IC card. The route is separated into several check points mainly by intersections, the start point coordinates and end point coordinates are expressed in latitude and longitude, the date and time that passed the start point, and the time required to pass this route Is described. Further, the file name of the image photographed in FIG. 11A is attached so as to be an intersection mark. This recording may be temporarily recorded in a vehicle-mounted storage device during traveling and finally downloaded to the IC card.

  By performing such recording, the confidentiality of the IC card (especially the CPU card) makes it possible to place an accurate traveling record that is not modified under the control of the individual who has traveled. This record also proves that it is unrelated to the crime when a car of the same car type and appearance causes a crime.

  FIG. 12 is an explanatory diagram showing an example of an embodiment in which the function of the IC card can be applied to the device operation right management system according to the present invention and built in the key of the automobile.

  FIG. 12A shows an example in which an IC chip 120020 is built in a key 120010 and the key 120010 is connected to a terminal of an automobile into which the key is inserted by an interface terminal 120030. In this case, although the form is different from the driver's license, the driver ID number and biometric authentication information are put in the key itself as described above, and the same key is used as in the current situation, and the same as the use of the IC card. It can have an effect.

  FIG. 12B shows an example in which a fingerprint sensor 120040 is further incorporated in the key 120011 in addition to the function of the key 120010 in FIG. In FIG. 12B, 120021 is an IC chip, and 120031 is an interface terminal.

  In the case of the example of FIG. 12B, the same effect as that of the above-described embodiment can be obtained by the same operation as the current operation in which the key 120011 is inserted into the keyhole of the automobile and the engine is started by twisting. Can do. Here, as a biometric authentication information sensor that replaces the fingerprint sensor 120040, a sensor that detects, as information, a load distribution of a finger slightly different depending on an individual may be used. Further, the load distribution is not limited to the surface direction, but a load change on the time axis when the key is twisted may be used as the biometric authentication information. By using the operation of holding and twisting a key, it is possible to authenticate biometric authentication information without using an advanced sensor such as a fingerprint sensor.

  FIG. 13 is an explanatory diagram showing a pattern for limiting the type of vehicle to be driven according to the type of license in the device operation right management system according to the present invention. The format of the table in FIG. 13 is the same as that in FIGS. 4 and 5 and will not be described here.

  The type of license indicates trainee, temporary license, full license, and AT (automatic car) only. For example, all trainees who drive only in the driving school, including the engine start, are Δ. This indicates that operation is possible, but driving is possible under the condition that a passenger having this license is in the passenger seat. The proof that there is a driver's license in the front passenger seat is the method of installing an IC card reader similar to the driver's seat in the front passenger seat with a dedicated car for training, and the driving permission shown in Fig. 9 Similarly, there is a method of giving driving permission to the trainee after inserting the driver's license into the terminal of the driver's seat and performing authentication in advance. The same is true for driving permission with a temporary license.

  Of course, this license allows all automobiles to be operated, but depending on the type of license, an AT-limited license can run AT cars, but cannot run MT cars. Specifically, the mechanism is set so that the throttle does not open when the gear is engaged or the engine is stalled. However, it may be possible to perform control so as to enable traveling by a starter motor for emergency escape or only traveling at a speed of less than 10 km / h within 5 minutes.

  FIG. 14 is an explanatory diagram showing an example of an embodiment of an IC card for preventing electrostatic breakdown of an IC chip when an IC card is inserted into a terminal device, which can be applied in the device operation right management system according to the present invention. It is.

  Reference numeral 140060 denotes an IC card insertion slot on the terminal (terminal device) side, which is connected to an electrode on the IC card side with a connector 140061 when inserted. The IC card 140000 has a core made of an insulator, encloses an IC chip 140010, and only the electrode portion is exposed on the surface. The IC card 140000 is covered with a conductor 140030, and a constant interval is provided between the conductor and the IC chip so that no spark or the like is generated. The shape of the insulator 140020 is set so that there is no space between which the sparks fly and the insulator is surely interrupted.

  When the user holds the IC card 140000, the conductor 140030 is grounded through the human body (140040). When an IC card is inserted into a terminal, especially in the case of an automobile or the like, since the road surface corresponding to the ground is insulated by a rubber tire, a spark is formed between the charged automobile and the inserted IC card (140070). Occurs. In order to prevent this spark from flowing into the IC chip 140010, grounding via the human body through the conductor 140030 makes the terminal and the IC card have the same potential. In addition, a conductive brush 140050 is provided in the IC card slot in the terminal, and in particular, neutralization of the terminal surface of the IC card, cleaning of dust, and the like are performed. Thereby, it is possible to prevent damage to the IC card (IC chip) due to high-voltage static electricity specific to automobiles.

  FIG. 15 is an explanatory view showing an example of an embodiment for performing confidentiality of information between a terminal (terminal device) and an IC card, which can be applied in the device operation right management system according to the present invention.

  Information between the terminal 150000 (terminal device) and the IC card 150100 can be intercepted, for example, by monitoring the contacts shown in FIG. Further, by analyzing the intercepted signal, a pseudo signal can be input from this contact point, and the items described in the IC card can be modified.

  Therefore, in this example shown in FIG. 15, a chip with a built-in CPU is used as the IC chip of the IC card 150100, and signals are exchanged with the terminal 150000 using encrypted signals. On the terminal 150,000 side, there is a CPU built-in chip 150010 having a function equivalent to a chip built in the IC card or a dedicated application 150020, and communication with the IC card is performed via these chips or applications. The IC chip built in the IC card 150100 and the IC chip or application on the terminal 150,000 side have the same encryption / decryption function, and the command and information interception of information reading and rewriting of the IC card 150100, and The modification and forgery based on these are surely prevented. Information that is equivalent to the description of a normal license, such as a license number and name, and does not need to be kept secret can be read out through the through path 150030. In this case, information can be displayed on a terminal having a very simple structure, for example, in the same manner as a balance display device for electronic money. Further, it is possible to use a specific command for write access to the IC card by using the CPU chip without performing encryption processing, and it is possible to easily prevent erroneous operation and destruction.

  Although the present invention has been mainly described with reference to the illustrated embodiment, it goes without saying that various modifications can be made to those skilled in the art without departing from the spirit of the present invention. In addition to those that send and receive, it is also possible to use an IC card that has a function capable of wireless transmission and reception within a short distance and that exchanges information without contact. In this case, the function of the IC chip of the present invention can be incorporated in a portable device such as a mobile phone or a wristwatch.

10010 IC card reader
10020 Biometric information reader
10030 storage device
10040 License management device
10060 Vehicle control device
10070 Engine control unit
10080 Speed control device
10090 Brake control device
20000 cockpit
20010 Retina / iris sensor
20020 IC card slot
20030 Fingerprint reader / engine start button
20040 Automatic fee payment system
20050 Storage device
30000 IC card
30005 IC chip

Claims (45)

In a device operation right management system comprising permission display means for displaying a right to handle a device and device control means for controlling whether the device can be operated.
A device operation right management system, wherein a match between a right holder described in the permission display means and an operator who operates the device is confirmed using biometric authentication information of the operator. In the device operation right management system according to claim 1,
The permission display means is equipped with a memory or an IC chip having a CPU. In the equipment operation right management system according to claim 1 or 2,
The device operation right management system, wherein the biometric authentication information is fingerprint information. In the device operation right management system according to claim 3,
A device operation right management system, wherein a sensor for detecting the biometric authentication information is provided on a switch that first activates the device. In the equipment operation right management system according to claim 1 or 2,
The device operation right management system, wherein the biometric authentication information is information indicating a retina or iris shape. In the device operation right management system according to claim 5,
A device operation right management system, wherein a sensor that detects the biometric authentication information is installed on a panel that displays device status information. In the equipment operation right management system according to claim 1 or 2,
A device operation right management system comprising a reading device for the permission display means and a sensor for detecting the biometric authentication information in an operation device. In the equipment operation right management system according to claim 1 or 2,
A device operation right management system, wherein a reading device for the permission display means and a sensor for detecting the biometric authentication information are installed in a portable terminal device separate from the operation device. In the equipment operation right management system according to claim 1 or 2,
A device operation right management system comprising a storage device for storing the biometric authentication information in an operation device. In the device operation right management system according to claim 2,
The device operation right management system, wherein the biometric authentication information is stored in an IC chip mounted on the permission display means. In the equipment operation right management system according to claim 10,
There are a plurality of types of stored biometric authentication information, and the device operating right management system, wherein the operating device can freely select the biometric information used for verification. In the equipment operation right management system according to claim 1 or 2,
A device operation right management system, wherein the authentication accuracy of the biometric authentication information is changed according to the type of device to be operated. In the equipment operation right management system according to claim 1 or 2,
A device operation right management system that performs authentication of the biometric authentication information every time the device is activated. In the equipment operation right management system according to claim 1 or 2,
A device operation right management system characterized in that authentication of the biometric authentication information is performed at regular time intervals after the device is activated. In the equipment operation right management system according to claim 1 or 2,
A device operation right management system, wherein the biometric authentication information is authenticated every time the door on the device is opened or closed. In the equipment operation right management system according to claim 1 or 2,
A device operation right management system, wherein authentication of the biometric authentication information is performed every time an operation of the device is completed. In a device operation right management system comprising permission display means for displaying a right to handle a device and device control means for controlling whether the device can be operated.
A device operation right management system comprising a storage device for storing at least one ID number described in the permission display means issued to a person who has obtained a device operation permission. The device operation right management system according to claim 17,
The permission display means is composed of non-electronic means such as paper, and the ID number is described in an optically readable form on the permission display means, and the device control means is described in the permission display means. A device operation right management system comprising reading means for reading the ID number assigned. The device operation right management system according to claim 17 or 18,
A device operation right management system that makes it impossible to operate the device unless the ID number described in the permission display unit matches the ID number stored in the storage device in the device control unit. . The device operation right management system according to any one of claims 17 to 19,
A person having the permission display means having an ID number that matches the ID number stored in the storage device in the device control means is permitted to operate the procedure for adding, changing, or deleting a new ID number in the storage device. Equipment operation right management system characterized by giving. In a device operation right management system comprising permission display means for displaying a right to handle a device and device control means for controlling whether the device can be operated.
It has a reading means which reads the operable device information described in the permission display means, and the device control means confirms whether the operable device information described in the permission display means matches its own device. A device operation right management system that makes it possible to operate the device if the two match. In the equipment operation right management system according to claim 21,
The permission display means is constituted by non-electronic means such as paper, and the operable device information is described in an optically readable form on the permission display means, and the device control means is the permission display means. A device operation right management system comprising optical reading means for reading operable device information described in 1. In the equipment operation right management system according to claim 21,
A device operation right management system that changes a device operable range in accordance with the operable device information. In the device operation right management system according to claim 2,
An IC operation right management system, wherein the IC chip mounted on the permission display means is a CPU card capable of executing a plurality of applications. The device operation right management system according to claim 24,
The apparatus operation right management system, wherein the CPU card is a card including an electronic money function. In the equipment operation right management system according to claim 2 or 24,
When the device is a device that can be boarded and moved, the IC chip mounted on the permission display means can record information such as the position accompanying the movement of the device and the time when the device arrived. Equipment operation rights management system characterized by In the equipment operation right management system according to claim 2 or 24,
A device operation right management system that restricts the use of devices as a punishment for violation of rules in the use of devices. The device operation right management system according to claim 27,
The penalties include prohibition of device operation for a certain period of time, and it is possible to set device use permission and use prohibition multiple times along a time axis. In the equipment operation right management system according to claim 27 or 28,
The penalties include functional restrictions in equipment operation, and equipment usage function restrictions can be set multiple times along the time axis, including permission and prohibition of equipment use. Operation right management system. The device operation right management system according to any one of claims 27 to 29,
A device operation right management system, wherein the clock for managing the enforcement time of the penalties makes it impossible for a user of the device to modify the information by using information other than guaranteed time information. An IC chip having device operation permission information,
The IC chip is characterized in that the ID number of the owner of the IC card having the device operation permission and the operable device information are described. The IC chip according to claim 31, wherein
The IC chip is characterized in that biometric authentication information such as a fingerprint or retina / iris of the owner of the IC card having device operation permission is described in the IC chip. The IC chip according to claim 31, wherein
The IC chip further includes an electronic money function. The IC chip according to claim 31, wherein
In the IC chip, when the device is a device that can be boarded and moved, information such as a position accompanying the movement of the device and a time when the device arrives is recorded. The IC chip according to claim 31, wherein
The IC chip includes the prohibition of device operation for a certain period as a penalty for violation of rules in the use of the device, and it is possible to set the device use permission and use prohibition multiple times along the time axis IC chip characterized by including various information. The IC chip according to claim 31, wherein
The IC chip may include function restrictions as penalties for violation of rules in the use of equipment, etc., and the use function restrictions of the equipment may be set multiple times, including permission and prohibition of use of the equipment along the time axis. An IC chip characterized by containing possible information. The IC chip according to any one of claims 31 to 36,
The IC chip is an IC chip in an IC card. The IC chip according to any one of claims 31 to 36,
The IC chip is built in a key for starting a device. The IC chip according to any one of claims 31 to 36,
The IC chip has a built-in clock for managing the enforcement time of the penalty, and this clock makes it impossible for the user of the device to change it by information other than the guaranteed time information. Chip. The IC chip according to claim 39,
The IC chip according to claim 1, wherein the battery driving the timepiece has a life substantially equal to a time limit for permitting operation of the device. In a device operation right management terminal comprising a reading unit that reads information described in a permission display unit that displays a right to handle a device, and a device control unit that controls whether the device can operate.
A device operation right management terminal comprising a storage device for storing at least one ID number described in the permission display means issued to a person who has obtained a device operation permission. In the equipment operation right management terminal according to claim 41,
A procedure for adding, changing, or deleting a new ID number in the storage device to a person having the permission display means having an ID number that matches the ID number stored in the storage device in the device operation right management terminal A device operation right management terminal characterized by giving operation permission. An IC chip case containing an IC chip composed of a semiconductor memory or CPU,
The IC chip in the IC card is sealed with an insulator except for an electrical contact portion, and the entire outer surface of the insulator is electrically conductive so as to exclude only the exposed portion of the electrical contact of the IC chip. An IC chip case comprising a shape covered with a body. The IC chip case according to claim 43,
An IC chip case, wherein the insulator always exists between an exposed portion of an electrical contact of the IC chip and a straight line connecting the conductors. A permission display means for displaying a right to handle a device, which incorporates an IC chip composed of a semiconductor memory or a CPU, and a device control means for controlling the operation of the device, having an interface connectable to the display permission means. In the equipment operation right management system
The IC chip has a function of encrypting / decrypting information, and an IC chip or application software having a function equivalent to that of the IC chip is mounted on the interface, and an IC built in the permission display means A device operation right management system characterized in that communication between a chip and the interface is performed by an encrypted signal.

Images