JP2010267198A - Authentication device, method, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an authentication device for controlling a control object according the position. <P>SOLUTION: A position information detection means 11 obtains position information for specifying a place. An authentication information DB 14 stores position information in association with a control content of control to be performed to a control object 20 in the place shown by the position information. A position information determination means 12 obtains the control content stored in association with the position information obtained by the detection means 11 from the authentication information database. A control means 13 controls the control object 20 according to the control content obtained by the determination means 12. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to an authentication apparatus, method, and program, and more particularly, to an authentication apparatus, method, and program for performing authentication using position information.

  There is an authentication technique using location information. Patent Document 1 is a document in which an authentication technique using position information is described. FIG. 16 shows a personal authentication system described in Patent Document 1. The personal authentication system includes a personal authentication device 100 and a position information transmission device 200. The personal authentication device 100 is a portable device such as a notebook personal computer or a mobile phone. The personal authentication device 100 includes an operation determination unit 101, an area information acquisition unit 102, an authentication method selection unit 103, a user authentication unit 104, a transmission / reception unit 111, and a storage unit 120.

  The storage unit 120 stores a determination index table 121 and an area index table 122. The determination index table 121 stores an index representing the degree of authentication required for each type of operation that requires authentication for operations performed by the user on the personal authentication device 100. The area index table 122 stores an area index, which is information indicating the safety of the area, for each area representing a place where the personal authentication device 100 is used.

  The transmission / reception unit 111 communicates with the position information transmission device 200 and acquires an area specifying code for specifying the area where the personal authentication device 100 is located. The operation determination unit 101 detects an operation performed by the user. Specifically, the operation determination unit 101 detects the execution and termination of a file or application. The area information acquisition unit 102 requests the area information transmission device 200 for an area identification code. When the area information acquisition unit 102 acquires the area identification code, the area information acquisition unit 102 acquires an area index corresponding to the acquired area identification code from the area index table 122.

  The authentication method selection unit 103 selects a user authentication method from the determination index corresponding to the operation target of the operation detected by the operation determination unit 101 and the area index acquired by the area information acquisition unit 102. For example, when the area index is larger than the determination index, the authentication method selection unit 103 determines that the user is not authenticated as a safe area. On the other hand, if the area index is smaller than the determination index, the authentication method selection unit 103 determines that user authentication is necessary. When the authentication method selection unit 103 determines that user authentication is necessary, the user authentication unit 104 authenticates the user. The user operates the same operation without authentication in a certain area, and performs the operation after performing authentication in another area.

JP 2007-220075 A

  Recent information leakage cases are often caused by misuse of identity authentication. For this reason, it is difficult to prevent fraud only with generally used personal authentication (ID / password, ID card, etc.). Therefore, an authentication method is required to limit the place where confidential information such as trade secrets and product information before the announcement is used to conference rooms and server rooms.

  In Patent Literature 1, when a user performs an operation, the operation is permitted without performing user authentication, or the operation is permitted after additionally performing user authentication, depending on the area. In Patent Document 1, it is configured to determine whether or not to permit a specific operation, and the determination of permission is limited to a portion related to a portion operated by the user. Therefore, in Patent Document 1, when a device is used in a specific area (position), the security setting in the device cannot be changed to a setting corresponding to the area.

  An object of the present invention is to provide an authentication device, a method, and a program capable of controlling a control target according to a position.

  The present invention associates and stores position information detection means for acquiring position information for specifying a location, the position information, and control contents of control to be performed on a control target at the location indicated by the position information. The control information is acquired in accordance with the control information acquired by the position information determination means, the position information determination means for acquiring the control contents stored in association with the position information acquired by the position information detection means from the authentication information database. There is provided an authentication device comprising a control means for controlling.

  The present invention includes a step in which a computer acquires position information for specifying a location, the position information, and a control content of control to be performed on a control target at a location indicated by the position information. Referring to the authentication information database stored in association with each other, acquiring the control content stored in association with the location information acquired in the step of acquiring the location information, and the computer according to the acquired control content, An authentication method comprising the step of controlling the controlled object.

  The present invention stores, in a computer, the processing for acquiring location information for specifying a location, the location information, and the control content of the control to be performed on the control target at the location indicated by the location information. The control object is controlled according to the process of acquiring the control content stored in association with the position information acquired in the process of acquiring the position information with reference to the authentication information database to be acquired, and the acquired control content A program for executing processing is provided.

  The authentication apparatus, method, and program of the present invention can control a control object according to a position.

The block diagram which shows the authentication system containing the authentication apparatus of 1st Embodiment of this invention. The figure which shows the example of data of authentication information DB. The flowchart which shows an operation | movement procedure. The flowchart which shows the procedure of control content acquisition. The block diagram which shows the specific operation example. The block diagram which shows the authentication system containing the authentication apparatus of 2nd Embodiment of this invention. The figure which shows the example of data of authentication user information. The flowchart which shows the operation | movement procedure in 2nd Embodiment. The flowchart which shows the procedure of control content acquisition. The block diagram which shows the authentication system containing the authentication apparatus of 3rd Embodiment of this invention. The figure which shows the example of data of authentication information DB. The flowchart which shows the operation | movement procedure in 3rd Embodiment. The block diagram which shows the authentication system containing the authentication apparatus of 4th Embodiment of this invention. The figure which shows the example of data of authentication information DB. The flowchart which shows the operation | movement procedure in 4th Embodiment. The block diagram which shows the personal authentication system of patent document 1. FIG.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. FIG. 1 shows an authentication system including an authentication apparatus according to the first embodiment of the present invention. The authentication system includes an authentication device 10, a control object 20, and a position information measurement device 30. The position information measuring device 30 is a device that transmits position information (position identification information) to the authentication device 10. The authentication device 10 includes a position information detection unit 11, a position information determination unit 12, a control unit 13, and an authentication information DB (database) 14. The functions of each means in the authentication device 10 can be realized by executing a predetermined program on a computer system having a CPU, a memory, a storage unit such as a hard disk, a network connection interface, and the like.

  The control target 20 is a device that is controlled in response to the authentication result of the authentication device 10. The control target 20 is, for example, a notebook personal computer or a bag for storing confidential documents. The controlled object 20 includes a controlled mechanism 21 that is controlled by a command (signal) from the authentication device 10. Specifically, if the control target 20 is a bag, the bag has a controlled mechanism 21 that locks / unlocks a key in accordance with a signal (current) from the authentication device 10. The authentication device 10 is formed integrally with the control target 20, for example, and can be carried along with the control target 20. The authentication device 10 and the control target 20 do not need to correspond one-to-one, and there may be one authentication device 10 for a plurality of control targets 20.

  The position information measuring device 30 transmits position information for specifying a place. The position information measuring device 30 is installed in, for example, a conference room or a server room. The position information measuring device 30 transmits position information to the authentication device 10 existing in a specific narrow area. For example, the location information measuring device 30 installed in the conference room transmits the location information to the authentication device 10 existing in the conference room. The position information measuring device 30 includes, for example, a position management system that centrally manages position information and a transmitter installed at each location.

  The position information detection unit 11 acquires position information from the position information measurement device 30. The authentication information DB 14 stores the position information and the control content to be performed on the control target 20 at the location in association with each other. The position information determination unit 12 acquires the control content stored in association with the position information acquired by the position information detection unit 11 from the authentication information DB 14. The control means 13 controls the control object 20 according to the control content acquired by the position information determination means 12. Communication between the authentication device 10 and the control target 20 may be wired communication or wireless communication.

  FIG. 2 shows an example of data in the authentication information DB 14. The authentication information DB 14 includes data items of ID information, name, authentication position information, security level, and control contents. The ID information is used for identifying information in the authentication information DB 14. For example, a uniquely determined number is used as the ID information. The authentication position information is position information of a place where the use of the control target 20 is permitted. The name is a name of a place corresponding to the position information indicated by the authentication position information.

  The security level is a security level at a location indicated by the authentication position information. The security level is set, for example, in five stages from level 5 (High) to level 1 (Low). The control content represents the content of control to be performed on the control target 20 at the location indicated by the authentication position information. In the control content, it is possible to store the control content for the plurality of control objects 20.

  The user (administrator) registers information in the authentication information DB 14 in advance. At the time of registration, the user directly inputs information to be registered to the authentication device 10 using a user interface (input interface) of the authentication device 10. Or the information which should be registered into the authentication server which is not illustrated may be prepared, and the authentication apparatus 10 may acquire information from an authentication server via a communication interface.

  FIG. 3 shows an operation procedure. The user moves with the authentication device 10. The position information detecting means 11 acquires position information from the position information measuring device 30 installed at the movement destination (step A1). For example, the position information detection unit 11 requests the position information measurement device 30 to acquire position information. The position information measuring device 30 transmits the position information to the position information detecting unit 11 in response to the request. The specific operation procedure for acquiring position information depends on the specifications of the position information measuring device 30 to be used.

  When the position information detection unit 11 acquires the position information, the position information detection unit 11 passes the acquired position information to the position information determination unit 12. The position information determination unit 12 acquires the control content stored in association with the position information acquired by the position information detection unit 11 from the authentication information DB 14 (step A2). FIG. 4 shows a detailed procedure for acquiring the control contents. The position information determination unit 12 initializes the ID information (step B1). In step B1, for example, the position information determination unit 12 sets the ID information to the smallest number (000001).

  The position information determination unit 12 refers to the authentication information DB 14 and determines whether or not the authentication position information in the ID information entry set to the initial value matches the position information acquired by the position information detection unit 11 in step A1. (Step B2). When the position information matches, the position information determination unit 12 copies the control content of the entry to the temporary storage area (step B3).

  The position information determination unit 12 determines whether or not unprocessed ID information exists in the authentication information DB 14 (step B4). When there is unprocessed ID information, the position information determination unit 12 changes the ID information and returns to Step B2, and the authentication position information is acquired by the position information detection unit 11 for the next ID information entry. It is determined whether or not the information matches.

  If the position information determination unit 12 determines that there is no unprocessed ID information in step B4, the position information determination unit 12 determines whether there is any contradiction in the control contents copied in step B2 (step B5). Normally, it is unlikely that there are multiple entries of the same authentication location information in the authentication information DB 14. However, different security levels and a plurality of control contents may be registered for the same position information. In addition, if registration should be performed with different authentication location information, registration with different authentication location information may be possible. In that case, there are a plurality of control contents copied in step B3. Therefore, it is checked whether or not there is a contradiction in the control contents copied in step B3.

  For example, when there is a control for opening the key and a control for closing the key for the same control target, the position information determination unit 12 determines that the control content is inconsistent. If there is no contradiction in the control content, the position information determination unit 12 ends the process. When there is a contradiction in the control content, the position information determination unit 12 presents a contradiction point to the user to correct the control content, or determines a response based on a policy such as nothing to do (step B6). When the contradiction is resolved, the position information determination unit 12 may compare the security levels of the contradictory control contents and select the control contents of the entry with the higher security level.

  Returning to FIG. 3, the position information determination unit 12 passes the acquired control content to the control unit 13. The control means 13 controls the control object 20 according to the control content received from the position information determination means 12 (step A3). For example, when the authentication device 10 is integrated with the control target 20, the control unit 13 sends a control signal or a control command to the controlled mechanism of the control target 20 to control the control target 20. When the authentication device 10 is separated from the control target 20, the control unit 13 transmits a control signal and a control command to the controlled mechanism 21 of the control target 20 using a unit such as wireless communication.

  Hereinafter, a specific example will be described. FIG. 5 shows a specific operation example. As keys to be controlled, a key 22 and a notebook personal computer (notebook PC) 23 are considered. The place where the user is located is the executive room, and the key 22 is a key for the entrance and exit of the executive room. The authentication device 10 is built in the notebook PC 23. In the notebook PC 23, confidential information such as information on a product under development is stored.

  The notebook PC 23 has a security policy selection mechanism 24 as a controlled mechanism. The notebook PC 23 has a plurality of security policies that restrict the accessible range of storage devices in the computer. As a security policy, a policy that enables access to all information including confidential information and a policy that prohibits access to confidential information are considered. The use of the notebook PC 23 is prohibited when the authentication from the authentication device 10 is not obtained.

  The position information measuring device 30 includes a position management system 31 and a transmitter 32. The position management system 31 centrally manages position information. The transmitter 32 is attached to the ceiling of the executive room. The transmitter 32 communicates with the authentication device 10 in the officer room. The transmitter 32 transmits position information (0001000001) indicating the officer room to the authentication device 10. Infrared communication can be used for communication between the transmitter 32 and the authentication device 10.

  The user registers, in advance, location information (0001000001) indicating an officer's room as authentication location information in the authentication information DB 14. In addition, the user registers the contents of control to be performed on the control target in the executive room in the authentication information DB 14. The control content includes control for applying a security policy that permits access to all information including confidential information to the notebook PC 23 and control for locking the key 22.

  The user activates the notebook PC 23 in the executive room. The location information detecting means 11 (FIG. 1) of the authentication device 10 requests location information from the location information measuring device 30 when the notebook PC 23 is activated. The transmitter 32 of the position information measuring device 30 transmits the position information (0001000001) assigned to the officer room to the authentication device 10. The position information detection unit 11 receives position information indicating the officer's room, and passes the received position information to the position information determination unit 12.

  The position information determination unit 12 checks whether the authentication position information in the authentication information DB 14 includes position information (0001000001). Since the position information (0001000001) is registered in the authentication information DB 14 in advance, the position information determination unit 12 determines that the use of the notebook PC 23 is permitted. If there is no position information corresponding to the officer's room in the authentication information DB 14, the use of the notebook PC 23 is not permitted in the officer's room, so the position information determination unit 12 does not allow activation of the notebook PC 23.

  The position information determination unit 12 acquires the control content from the entry in which 0001000001 is stored in the authentication position information of the authentication information DB 14 and passes it to the control unit 13. The control means 13 instructs the security policy selection mechanism 24 to select a security policy that permits access to all information. The security policy selection mechanism 24 selects a security policy according to the instruction. Further, the control means 13 transmits a control signal that instructs the key 22 to lock. The key 22 locks the entrance / exit key of the boardroom according to the instruction.

  The user logs into the notebook PC 23. The boardroom is a safe place where only certain persons can enter and exit, and the risk of information leakage is low. In addition, since the entrance / exit key 22 is locked when the notebook PC 23 is used, it is possible to further enhance safety without an outsider entering the boardroom while using the notebook PC 23. If the place where the user is is a place such as a reception room where an unspecified number of people come and go, store the control content that applies a security policy that prohibits access to confidential information. That's fine. Alternatively, the use of the notebook PC 23 may be prohibited in the reception room.

  In the present embodiment, the position information determination unit 12 acquires the control content corresponding to the position information from the authentication information DB 14, and the control unit 13 controls the control target 20 according to the control content acquired by the position information determination unit 12. To do. By enabling use of the control object 20 only in a location where position information matching the authentication position information in the authentication information DB 14 exists, authentication of the control object 20 according to the position can be realized. At that time, by controlling the control object 20 according to the control content, the control object 20 can be controlled with the control content corresponding to the place.

  For example, it is assumed that a usage condition is provided when the control target 20 is used in a certain place. The usage conditions include a condition related to the control target 20 itself to be authenticated and a condition related to a control target other than itself. The control content of the authentication information DB 14 stores the control to be performed to control the control target 20 to satisfy the usage condition. When the control object 20 is authenticated, the control object 20 and another control object in the vicinity are controlled according to the control contents, so that the control object 20 can be used in a state where the use conditions are satisfied.

  By controlling the control target according to the position, for example, a notebook PC can be used with a security policy that enables access to all information in a safe place in the company. In addition, in a low-safe place where a large number of unspecified persons come and go, it becomes possible to use a notebook PC with a security policy that restricts information to be accessed, thereby reducing the risk of information leakage. it can.

  Subsequently, a second embodiment of the present invention will be described. FIG. 6 shows an authentication system including the authentication device of the second embodiment. The authentication apparatus 10a in the present embodiment includes an authentication information detection unit 15 in addition to the configuration of the authentication apparatus 10 in the first embodiment shown in FIG. The authentication information detection unit 15 acquires authentication information other than the position information. For example, ID / password or biometric authentication can be used as authentication information other than the position information.

  The authentication information DB 14 stores information for user authentication in addition to the information (authentication position information) shown in FIG. FIG. 7 shows a data example of the authentication user information stored in the authentication information DB 14. Here, a combination of an ID and a password is used as the authentication information. The user ID is an ID for uniquely identifying the user. The user name is the name of the user. The ID is a user ID used for authentication. The password is a password used for authentication. The security level is a security level set for the user. The authentication information related to the position and the authentication user information may be associated by defining the same item (security level), or may be independent information having no relationship. The authentication user information is registered in the authentication information DB 14 in advance.

  FIG. 8 shows an operation procedure. The authentication information detection means 15 acquires authentication information (step C1). For example, the authentication information detection unit 15 requests the user to input authentication information. For example, the user inputs authentication information using an input interface of the authentication device 10a. The authentication information detection unit 15 passes the acquired authentication information to the position information determination unit 12. The position information detecting means 11 acquires position information from the position information measuring device 30 (step C2). The acquisition of the position information is the same as step A1 in the operation procedure of the first embodiment shown in FIG. Either authentication information acquisition or position information acquisition may be performed first.

  The position information determination unit 12 acquires the control content stored in association with the position information acquired by the position information detection unit 11 from the authentication information DB 14 (step C3). FIG. 9 shows a control content acquisition procedure. The position information determination unit 12 initializes the ID information (step D1). The location information determination unit 12 refers to the authentication information DB 14 and determines whether or not the authentication location information in the ID information entry set to the initial value matches the location information acquired by the location information detection unit 11 in step C2 of FIG. Is determined (step D2). When the position information matches, the position information determination unit 12 copies the control content of the entry to the temporary storage area (step D3).

  The position information determination unit 12 determines whether or not unprocessed ID information exists in the authentication information DB 14 (step D4). When there is unprocessed ID information, the position information determination unit 12 changes the ID information and returns to Step D2, and the authentication position information is acquired by the position information detection unit 11 for the next ID information entry. It is determined whether or not the information matches. The procedure so far is the same as steps B1 to B4 in FIG.

  The position information determination unit 12 determines authentication information other than the position based on the authentication information acquired by the authentication information detection unit 15 and the authentication user information stored in the authentication information DB 14 (step D5). For example, when a combination of an ID and a password is used as authentication information, the position information determination unit 12 matches the ID and password acquired by the authentication information detection unit 15 with the ID and password registered in the authentication information DB 14. It is determined whether or not. The position information determination means 12 determines that the authentication is OK if they match, and determines authentication NG if they do not match. In the case of authentication NG, the process is terminated as it is.

  When the authentication other than the position information is authentication OK, the position information determination unit 12 determines whether or not there is a contradiction in the control contents (step D6). D7). The confirmation of the contradiction and the determination of the correspondence are the same as steps B5 and B6 in FIG.

  Returning to FIG. 8, the position information determination unit 12 passes the acquired control content to the control unit 13. The control means 13 controls the control object 20 according to the control content received from the position information determination means 12 (step C4). The control of the control target 20 is the same as step A3 in FIG.

  In this embodiment, in addition to authentication using position information, authentication using authentication information other than position information is performed. In the authentication device 10a, the position information acquired by the position information detection unit 11 is registered as authentication position information in the authentication information DB 14, and the authentication information acquired by the authentication information detection unit 15 is registered in the authentication information DB 14. When permitted, the use of the controlled object 20 is permitted. In this way, authentication can be performed under stronger conditions. Other effects are the same as those of the first embodiment.

  A third embodiment of the present invention will be described. FIG. 10 shows an authentication system including the authentication device according to the third embodiment of the present invention. The authentication device 10b in the present embodiment includes a geographic information detection unit 16 in addition to the configuration of the authentication device 10 in the first embodiment shown in FIG. The geographic information detection means 16 acquires geographic information. For example, GPS (Global Positioning System) information can be used as the geographic information.

  The location information determination unit 12 handles a combination of the location information acquired by the location information detection unit 11 and the geographic information acquired by the geographic information detection unit 16 as the location information. In the authentication position information of the authentication information DB 14, position information that combines position information and geographic information is registered. FIG. 11 shows an example of data in the authentication information database. For example, 1111223.33: 0001000001, which is a combination of position information 0001000001 indicating an officer's room and GPS geographic information 1111223.33 corresponding to the position of the officer's room, is registered in the authentication position information.

  FIG. 12 shows an operation procedure. The geographic information detection means 16 acquires geographic information (step E1). The geographic information detection unit 16 passes the acquired geographic information to the location information determination unit 12. The position information detecting means 11 acquires position information from the position information measuring device 30 (step E2). The acquisition of the position information is the same as step A1 in the operation procedure of the first embodiment shown in FIG. Either the acquisition of geographic information or the acquisition of position information may be performed first.

  The position information determination unit 12 acquires the control content stored in association with the position information acquired by the position information detection unit 11 from the authentication information DB 14 (step E3). The procedure for acquiring the control content is the same as the procedure shown in FIG. 4 except that the position information acquired by the position information detecting unit 11 and the geographical information acquired by the geographic information detecting unit 16 are used in combination as the position information. It is. If geographic information cannot be acquired, location information may be used as in the first embodiment.

  The position information determination unit 12 passes the acquired control content to the control unit 13. The control means 13 controls the control object 20 according to the control content received from the position information determination means 12 (step E4). The control of the control target 20 is the same as step A3 in FIG.

  In this embodiment, the geographic information detection means 16 acquires geographic information from GPS etc. The position information determination unit 12 handles a combination of the position information detected by the position information detection unit 11 and geographic information as the position information. By using a plurality of pieces of information related to the position in combination, it is possible to strictly authenticate a specific place. Other effects are the same as those of the first embodiment.

  A fourth embodiment of the present invention will be described. FIG. 13 shows an authentication system including the authentication device according to the fourth embodiment of the present invention. The configuration of the authentication device 10c of the present embodiment is a configuration in which the geographic information detection means 16 of the authentication device 10 in the third embodiment shown in FIG. A global unicast address of IPv6 (Internet Protocol Version 6) is set in the transmitter of the position information measuring device 30. The position information measuring system address detecting means 17 acquires the IP address set for the transmitter from the transmitter of the position information measuring apparatus 30.

  FIG. 14 shows a data example of the authentication information DB 14. As the authentication position information, a combination of the IPv6 address held by the transmitter of the position information measuring device 30 and the transmitter ID is used. Specifically, for the A branch office meeting room, IPv6 address information (global unicast address 2001: 2002 :: 3ffe: 3: 1) and position information (transmitter ID0000011111) are combined (2001: 2002 :: 3ffe: 3: 1: 0000011111 is registered in the authentication location information, or the authentication location information may be only an IPv6 address.

  FIG. 15 shows an operation procedure. The location information measurement system address detection means 17 acquires an IPv6 address from the transmitter of the location information measurement device 30 (step F1). The location information measurement system address detection unit 17 passes the acquired IPv6 address to the location information determination unit 12. The position information detecting means 11 acquires position information from the position information measuring device 30 (step F2). The acquisition of the position information is the same as step A1 in the operation procedure of the first embodiment shown in FIG. Either IPv6 address acquisition or location information acquisition may be performed first. Further, acquisition of position information may be omitted.

  The position information determination unit 12 acquires the control content stored in association with the position information from the authentication information DB 14 (step F3). The control content acquisition procedure is shown in FIG. 4 except that the position information acquired by the position information detection unit 11 and the IPv6 address acquired by the position information measurement system address detection unit 17 are used in combination as position information. The procedure is the same. Note that when the position information detection unit 11 cannot acquire the position information or when the position information acquisition is omitted, only the IPv6 address may be used as the position information.

  The position information determination unit 12 passes the acquired control content to the control unit 13. The control means 13 controls the control object 20 according to the control content received from the position information determination means 12 (step F4). The control of the control target 20 is the same as step A3 in FIG.

  In the present embodiment, the position information measurement system address detection unit 17 acquires an IPv6 address from the position information measurement device 30. The position information determination unit 12 handles a combination of the position information detected by the position information detection unit 11 and the IPv6 address as the position information. Also in this case, as in the third embodiment, it is possible to strictly authenticate a specific place. In addition, since the location can be uniquely specified from the IPv6 global unicast address, authentication without using information such as the ID number of the transmitter of the position information measuring device 30 is also possible. Other effects are the same as those of the first embodiment.

  As mentioned above, although this invention was demonstrated based on the suitable embodiment, the authentication apparatus of this invention, a method, and a program are not limited only to the said embodiment, Various things from the structure of the said embodiment. Modifications and changes are also included in the scope of the present invention.

  Finally, the minimum configuration of the present invention will be described. The authentication apparatus according to the present invention includes, as a minimum configuration, position information detection means, position information determination means, and control means. The position information detection means acquires position information for specifying the location. In the authentication information database, the position information and the control content of the control to be performed on the control target at the location indicated by the position information are stored in association with each other. The position information determination unit acquires the control content stored in association with the position information acquired by the position information detection unit from the authentication information database. The control means controls the control object according to the control content acquired by the position information determination means.

  The minimum configuration of the authentication method of the present invention is a configuration having a step of acquiring position information, a step of acquiring control contents, and a step of controlling a control target. In the step of acquiring position information, position information for specifying a location is acquired. In the step of acquiring the control content, in the step of acquiring the position information with reference to the authentication information database that stores the position information and the control content of the control to be performed on the control target at the location indicated by the position information in association with each other. The control content stored in association with the acquired position information is acquired. In the step of controlling the controlled object, the controlled object is controlled according to the acquired control content.

  The minimum configuration of the program of the present invention is a configuration that causes a computer to execute a process of acquiring position information, a process of acquiring control contents, and a process of controlling a control target. In the process of acquiring position information, position information for specifying a location is acquired. In the process of acquiring the control contents, the position information is acquired by referring to an authentication information database that stores the position information and the control contents of the control to be performed on the control target at the location indicated by the position information in association with each other. The control content stored in association with the acquired position information is acquired. In the process of controlling the control target, the control target is controlled according to the acquired control content.

  In the present invention, the control content corresponding to the place is registered in the authentication information database, and the control content corresponding to the acquired position information is acquired from the authentication information database. Thereafter, the control target is controlled according to the acquired control content. By doing in this way, control of the controlled object according to the position of the controlled object can be realized.

10: Authentication device 11: Position information detection means 12: Position information determination means 13: Control means 14: Authentication information database 15: Authentication information detection means 16: Geographic information detection means 17: Position information measurement system address detection means 20: Control target 21: Controlled mechanism 22: Key 23: Notebook PC
24: Security policy selection mechanism 30: Location information measuring device 31: Location management system 32: Transmitter

Claims (24)

Position information detecting means for acquiring position information for specifying a place;
The position information is stored in association with the position information acquired by the position information detection unit from the authentication information database that stores the position information and the control content of the control to be performed on the control target at the location indicated by the position information. Position information determination means for acquiring the controlled content,
An authentication apparatus comprising: control means for controlling the control object according to the control content acquired by the position information determination means.   The authentication apparatus according to claim 1, wherein the control content includes control content for a plurality of control objects.   If the plurality of control contents are stored in the authentication information database corresponding to the position information acquired by the position information detection means, the position information determination means may cause a contradiction between the plurality of control contents. The authentication device according to claim 1, wherein it is determined whether or not.   The authentication information database further stores a security level indicating a level of security at the location indicated by the position information, and the position information determination means, when the plurality of control contents contradict each other, The authentication apparatus according to claim 3, wherein control content with the highest security level is acquired.   The authentication apparatus according to any one of claims 1 to 4, wherein the position information includes geographic information and information unique to a place.   The authentication apparatus according to any one of claims 1 to 5, wherein the location information includes IP address information of IPv6 (Internet Protocol Version 6).   7. The position information determination unit according to claim 1, wherein the position information determination unit determines that use of the control target is not permitted when the position information acquired by the position information detection unit is not stored in the authentication information database. The authentication device according to one. Further comprising authentication information detecting means for acquiring authentication information other than the position information;
The authentication information database further stores the authentication information, and the position information determination means stores the position information acquired by the position information detection means in the authentication information database, and the authentication information detection means acquires the position information. The authentication apparatus according to claim 7, wherein when it is determined that the authentication information is stored in the authentication information database, it is determined that use of the control target is permitted. A computer obtaining location information for identifying a location;
Acquired in the step of acquiring the position information by referring to an authentication information database in which the computer stores the position information in association with the control content of the control to be performed on the control target at the location indicated by the position information. Acquiring the control content stored in association with the position information,
A method in which the computer controls the control target according to the acquired control content.   The authentication method according to claim 9, wherein the control content includes control content for a plurality of control objects.   When a plurality of control contents corresponding to the acquired position information are stored in the authentication information database, the computer further includes a step of determining whether or not a contradiction occurs between the plurality of control contents. The authentication method according to claim 9 or 10.   The authentication information database further stores a security level indicating a security level at the location indicated by the position information, and the computer, when the plurality of control contents are inconsistent, The authentication method according to claim 11, wherein the control content having the highest level is acquired.   The authentication method according to claim 9, wherein the position information includes geographic information and information unique to a place.   The authentication method according to claim 9, wherein the location information includes IP address information of IPv6 (Internet Protocol Version 6).   15. The computer according to claim 9, wherein the computer determines that the use of the control target is not permitted when the location information acquired by the location information detection unit is not stored in the authentication information database. Authentication method. The authentication information database further stores authentication information other than the location information;
The computer obtaining the authentication information;
The computer further comprising the step of determining whether or not the acquired authentication information is stored in the authentication information database;
When the computer determines that the acquired location information is stored in the authentication information database and the acquired authentication information is stored in the authentication information database, use of the control target is permitted. The authentication method according to claim 15, wherein the determination is made. On the computer,
A process of acquiring location information for specifying a location;
Position information acquired in the process of acquiring the position information with reference to an authentication information database that stores the position information and the control content of the control to be performed on the control target at the location indicated by the position information in association with each other Processing for acquiring the control content stored in association with
The program which performs the process which controls the said control object according to the said acquired control content.   The program according to claim 17, wherein the control content includes control content for a plurality of control objects.   When a plurality of control contents corresponding to the acquired position information are stored in the authentication information database, the computer further includes a process of determining whether or not a contradiction occurs between the plurality of control contents. The program according to claim 17 or 18, which is executed.   The authentication information database further stores a security level indicating a level of security at the location indicated by the position information, and it is determined that inconsistency occurs in the plurality of control contents in the process of determining whether or not the inconsistency occurs The program according to claim 19, wherein when the control content is acquired, the control content having the highest security level is acquired from the contradictory control content in the process of acquiring the control content.   The program according to any one of claims 17 to 20, wherein the position information includes geographical information and information unique to a place.   The program according to any one of claims 17 to 21, wherein the location information includes IP address information of IPv6 (Internet Protocol Version 6).   23. The process according to any one of claims 17 to 22, wherein in the process of acquiring the control content, when it is determined that the acquired location information is not stored in the authentication information database, it is determined that the use of the control target is not permitted. The program described in. The authentication information database further stores authentication information other than the location information;
Causing the computer to further execute a process of acquiring the authentication information and a process of determining whether or not the acquired authentication information is stored in the authentication information database;
When it is determined that the acquired location information is stored in the authentication information database in the process of acquiring the control content and the acquired authentication information is stored in the authentication information database, the control target 24. The program according to claim 23, wherein it is determined that the use of is permitted.

Images