JP2012118848A - Authentication system for sharing vehicle - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a high-security authentication system for sharing vehicle.SOLUTION: The authentication system for sharing vehicle comprises: a user terminal which is used by a sharing vehicle user; a vehicle operation managing section 2 which is installed in a sharing vehicle 5 and for which an in-vehicle ID is set; and a managing server 3 in which a user authentication ID for authenticating the sharing vehicle user is stored. The vehicle operation managing section 2 includes means for obtaining the user authentication ID entered by the sharing vehicle user and transmitting it together with the in-vehicle ID to the managing server 3. The managing server 3 includes: means for registering a use reservation requested by the user terminal and accepted, together with the in-vehicle ID, on a reservation table; means for enabling the vehicle operation managing section 2 to obtain the user authentication ID at predetermined time before reservation time; and means for shifting a reserved vehicle state to a driving-available state when the user authentication ID and the in-vehicle ID transmitted from the vehicle operation managing section 2 correspond to those of the user having a reservation in the reservation table.

Description

  The present invention relates to a sharing vehicle authentication system.

  As an authentication system employed for preventing unauthorized use of a vehicle prepared for car sharing, a system described in Patent Document 1 as a conventional example is known. In this example, when using a share car, a member uses a terminal device such as a personal computer or a mobile phone to connect to the host computer of the management center and make a use reservation for the share car.

  The host computer of the management center transmits authentication data for authenticating whether or not it is a member to the on-board unit of the share car via the communication network based on the reservation information, and the reserved member uses the share car Then, the information stored in the IC card as the membership card is read by the vehicle-mounted device of the share car.

  The vehicle-mounted device of the share car performs identity authentication based on the authentication data received from the host computer and the information stored in the IC card, and when the identity authentication is successful, the share car door lock is released.

JP 2007-183749 A

  However, in the above-described conventional example, there is a security problem because authentication data is sent to the vehicle-mounted device at the time of user authentication.

  The present invention has been made to solve the above-described drawbacks, and an object thereof is to provide an authentication system for a sharing vehicle with high security. Another object of the present invention is to provide a sharing vehicle that can be used in the above system.

According to the present invention, the object is
A user terminal 1 used by a sharing car user;
A vehicle operation management unit 2 mounted on the sharing vehicle 5 and set with an in-vehicle ID;
A management server 3 storing a user authentication ID for authenticating the sharing car user;
The vehicle operation management unit 2 includes means for acquiring a user authentication ID input by a sharing car user and transmitting it to the management server 3 together with the vehicle ID.
The management server 3 is requested by the user terminal 1 and means for registering the received use reservation together with the vehicle-mounted ID in the reservation table 4;
Means for making a transition to a user authentication ID obtainable state in the vehicle operation management unit 2 at a predetermined time before the reservation time;
A sharing vehicle authentication system comprising means for transitioning a reserved vehicle to a drivable state when the user authentication ID and the in-vehicle ID transmitted from the vehicle operation management unit 2 match those of the reservation person in the reservation table 4 Achieved by providing.

  The authentication system includes a user terminal 1 assigned with a unique user authentication ID, a vehicle operation management unit 2 mounted on a sharing vehicle and assigned with a unique vehicle-mounted ID, and a management server 3. The user of the sharing vehicle is configured to access the management server 3 through the user terminal 1 and make a reservation for use. When the reservation is established, the management server 3 stores the reservation contents such as the user authentication ID for specifying the reservation person in the reservation table 4, the in-vehicle ID for specifying the reservation vehicle, and the reservation time in the management server 3. Register in the reservation table 4.

  The vehicle operation management unit 2 has means for acquiring a user authentication ID for confirming the user, and the management server 3 obtains the ID acquisition unit of the vehicle operation management unit 2 when a predetermined time before the reservation time comes. When the user authentication ID is input, the user authentication ID is transmitted to the management server 3 together with the in-vehicle ID.

  The management server 3 that has received the user authentication ID compares the received user authentication ID and the in-vehicle ID with those registered in the reservation table 4, and if they match, enables the vehicle operation management unit 2 to drive the vehicle. Output a signal.

  Accordingly, in the present invention, the authentication of the user authentication ID is performed in the management server 3, and furthermore, the acquisition time of the user authentication ID is limited by the management server 3, so that the security is improved.

  That is, since the authentication of the user authentication ID is performed in the management server 3, it is not necessary to output the user authentication ID stored in the management server 3 to the vehicle side, resulting in outflow from the management server 3. It is possible to eliminate an illegal capturing opportunity of the user authentication ID. In addition, since the user authentication ID acquired on the vehicle side is immediately transmitted to the management server 3 and does not stay in the vehicle operation management unit 2, it is possible to prevent leakage of the user authentication ID due to unauthorized access to the vehicle operation management unit 2. . Further, the authentication in the management server 3 is performed by comparing the user authentication ID output from the vehicle operation management unit 2 and the vehicle-mounted ID with the user authentication ID in the time table, and is registered in the time table. If there is no authentication, there is no room for authentication, so the acquisition timing of the user authentication ID and the like is also subject to authentication, and resistance to unauthorized access such as impersonation is improved.

  In addition, since the acquisition time of the user authentication ID in the vehicle operation management unit 2 is limited by the management server 3, unauthorized access to the ID acquisition unit 6 can be completely blocked.

More specifically, the authentication system is, for example,
A vehicle operation management unit 2 which is provided with the vehicle-mounted ID and mounted on the sharing vehicle 5;
A management server 3 capable of communicating with the vehicle operation management unit 2;
A user terminal 1 used by a sharing car user,
The vehicle operation management unit 2 obtains a user authentication ID input by a sharing car user and outputs it to the management server 3;
A door lock control means 8 for locking and unlocking the door lock 7 of the vehicle is provided,
The management server 3
A reservation table 4 for storing a vehicle use reservation from the user terminal 1 so that the user authentication ID and the vehicle-mounted ID can be referred to;
An activation management unit 9 for activating the ID acquisition unit 6 of the vehicle operation management unit 2 at a predetermined time before the reservation time;
When the user authentication ID and the vehicle-mounted ID transmitted from the vehicle operation management unit 2 coincide with those of the reservation person in the reservation table 4, the door lock control means 8 of the vehicle operation management unit 2 is operated to activate the door lock 7. The authentication means 10 for unlocking can be provided.

  Further, the user authentication ID acquisition device of the vehicle operation management unit 2 can be formed by a non-contact ID tag reader such as Felica (registered trademark), and the management server 3 can be selected by the user. The unique ID of the contactless ID tag that can be read by the reading device is registered as the user authentication ID.

Non-contact ID tags can be provided to users by a car sharing operating organization, etc.
When the authentication unit registration request including the in-vehicle ID from the user terminal 1 is received, the unique ID output from the ID acquisition unit 6 of the vehicle operation management unit 2 is registered as the user authentication ID. For example, a portable communication terminal such as a smartphone with a built-in Felica chip, a prepaid card, or the like can be used as a non-contact ID tag in addition to those issued by a car sharing operating organization.

in this case,
As the user terminal 1, a portable communication terminal incorporating an imaging unit 11 and a code analysis unit 12 is used,
A two-dimensional code 13 including a management server URL and an in-vehicle ID is arranged on the vehicle,
An authentication system for a sharing vehicle that transmits a captured image of the two-dimensional code 13 in the imaging unit 11 to the management server 3 and registers the authentication unit 10 can be configured.

The above authentication system includes
A vehicle 5 for sharing provided with a vehicle operation management unit 2 operated by control from the management server 3,
ID acquisition means 6 for acquiring a user authentication ID possessed by the sharing car user and outputting it to the management server 3;
Door lock control means 8 for unlocking the door lock 7 of the vehicle on condition that the operation permission signal is received from the management server 3;
Reader control means 14 for activating the ID acquisition means 6 upon receipt of an activation signal from the management server 3;
A vehicle 5 for sharing can be used.

  In this case, if the vehicle is provided with the display unit 15 indicating the activation of the ID acquisition means 6, it is easy to find a reserved vehicle when a large number of sharing vehicles 5 are parked in the same parking lot. Become.

  According to the present invention, the authentication ID is not held on the vehicle side, and moreover, it is necessary to meet a plurality of conditions for driving the vehicle. Therefore, security can be improved.

It is a system configuration figure of a car sharing franchise management system. It is a functional block diagram of a management server. It is a functional block diagram of a share car. It is a flowchart which shows operation | movement of a system.

  An embodiment of the present invention applied to a car sharing franchise management system is shown below in FIG.

  As shown in FIG. 1, the management system provides a management server 3 used by a franchisor who operates a franchise system by providing know-how related to car sharing, and a car connected to the management server 3 via a network 16. It is composed of an owner client 1A, a member terminal 1B, and a sharing vehicle 5 (hereinafter “share car”).

  The car owner client 1A is a personal computer or the like used by the franchisee, and each franchisee provides an appropriate number of share cars 5 and participates in the franchise system (the broken line in FIG. 1 simply indicates the vehicle ownership relationship). The franchise shown on the left side has two share cars 5, and the franchisee shown on the right side shows that one share car 5 is provided to the fly-chase system.) You can receive a reward from the franchisor according to the use of 5.

  In this embodiment, the network 16 uses the Internet 16A. In this embodiment, however, the share car 5 takes the Internet 16A via the mobile phone network 16B in consideration of connection reliability. Connected.

  The member terminal 1B is a portable communication terminal device such as a personal computer or a smartphone used by a sharing car user (hereinafter referred to as “member”), and is connected to the Internet via the mobile phone network 16B. . A member is a vehicle user who promises to pay a usage fee according to the usage time, and a membership registration is performed in advance with the headquarters in consideration of settlement.

  As shown in FIG. 2, the management server 3 includes a storage unit 17, a communication unit 3b, a billing settlement unit 3c, a reward settlement unit 3d, and a vehicle search unit 3e that are controlled and operated by the control unit 3a. The storage unit 17 includes a member information storage unit 17a that stores information about members, an owner information storage unit 17b that stores a user ID used when the franchisee uses the share car 5 in addition to information about the franchisee, Vehicle information storage means 17c for storing information relating to 5, and a reservation table 4. The member information storage means 17a includes the user ID stored in the ID holder 18 possessed by the member in addition to general information such as name and address, and the vehicle information storage means 17c includes the vehicle type and the vehicle type grade. A charge rank, a garage position, an owner ID of a member to be owned, and the like are stored.

  The reservation table 4 stores reservation information, reservation vehicle, reservation time, and the like when a reservation is established by a reservation operation described later.

  These storage means 17 are stored in an external storage device or the like of a general-purpose computer system, and other means are developed and formed on a CPU and a memory that are operated by a program (not shown), via the communication means 3b. Connected to the network 16.

  The billing settlement means 3c calculates the usage fee according to the billing standard such as the usage time for the use of the share car 5, and totals the usage fee within the settlement period. The distribution of fees generated by use to the owner is calculated, and the remuneration amount during the checkout period is aggregated.

  The vehicle search means 3e operates in response to a reservation request from the member terminal 1B or the car owner client 1A (hereinafter collectively referred to as “user terminal 1”), and the user terminal 1 is a member. In the case of the terminal 1B, the share car 5 that can be reserved according to the member's request such as the charge rank, the garage position, etc. is searched from the vehicle information storage means 17c and outputted to the user terminal 1 to prompt the member to select, If there is a response within a predetermined time, the reservation vehicle, the reservation time, etc. are registered in the reservation table 4.

  On the other hand, when the user terminal 1 is the car owner client 1A, that is, in the case of private use of the share car 5 by the franchisee, the vehicle search means is owned by the franchisee from the vehicle information storage means 17c, and The share car 5 that can be reserved is searched and output to the car owner client 1A, and the reservation for the share car 5 selected in the car owner client 1A is registered in the reservation table 4.

  The authentication system is used to determine whether or not a member or the like (hereinafter referred to as “user”) has a genuine use authority before the member or the franchisee uses the share car 5. The reservation table 4 to be incorporated, the activation management means 9 and the authentication means 10 and the vehicle operation management unit 2 incorporated in the share car 5 and assigned with a unique in-vehicle ID are configured.

  The activation management means 9 of the management server 3 outputs an activation signal to the vehicle operation management unit 2 and responds from the vehicle operation management unit 2 for a predetermined time when about 15 minutes before the time reserved in the reservation table 4. That is, as will be described later, input of a user ID by the user is awaited.

  When the communication unit 3b receives the user ID from the share car 5 within a predetermined time, the control unit 3a activates the authentication unit 10 to start an authentication operation.

  The authentication operation in the authentication means 10 is the same as the in-vehicle ID stored in advance as the transmission destination of the activation signal by the activation management means 9 and the in-vehicle ID indicating the transmission source received together with the user ID, and the user who has been sent This is performed by confirming a match between the ID and the user ID used by the reservation person stored in the reservation table 4.

  When the authentication unit 10 confirms the coincidence and the authentication is established, the authentication unit 10 outputs a driving permission signal to the vehicle operation management unit 2.

  On the other hand, the share car 5 includes a door lock 7 for preventing unauthorized entry into the vehicle and the vehicle operation management unit 2. The vehicle operation management unit 2 may be configured in a vehicle-mounted computer mounted on a vehicle or may be separately mounted as a vehicle-mounted device, and includes a control unit 2a, an ID acquisition unit 6, and a control unit 2a. The communication means 2b, the door lock control means 8, and the reader control means 14 that operate under the control of the above are connected to the management server 3 via the communication means 2b through the network 16.

  In this embodiment, the ID acquisition means 6 is a non-contact ID tag reader using an RFID, FeliCa (registered trademark) or the like as an ID holder 8. Upon receiving an activation signal from the management server 3, the control unit 2 a The reader control unit 14 is activated to activate the ID acquisition unit 6 and wait for a response from the ID acquisition unit 6.

  As described above, a contactless ID tag (ID holding body 18) in which a user ID is stored in advance is distributed to users of the share car 5, and the user contacts the ID acquisition means 6 with the contactless ID tag 18. , The ID acquisition means 6 reads the user ID. The read user ID is output to the management server 3 and the authentication operation in the authentication means 10 is executed.

  When authentication is established in the management server 3 and an operation permission signal is output from the management server 3, the control unit 2 a operates the door lock control means 8 to unlock the door lock 7 and uses it for the management server 3. A start signal is output, and thereafter, measurement of usage time by the management server 3 is started.

  Further, this system can use a medium selected by the user as the ID holder 18 other than the ID holder 18 previously supplied from the franchisor, and the management server for selecting and registering the ID holder 18. 3, ID registration means 19 is provided.

  The ID holder 18 set by the user is a medium that can be read by the ID acquisition means 6, for example, when a FeliCa reader is used as the ID acquisition means 6, a prepaid card with a fixed FeliCa chip, or FeliCa A portable communication terminal such as a cellular phone with a built-in chip can be used.

  The ID registration means 19 is activated by an instruction from a user who has accessed the management server 3 using a portable communication terminal or the like. As shown in FIG. 3, the access to the management server 3 is affixed to the window of the share car 5 when a portable communication terminal such as a mobile phone provided with the imaging unit 11 and the code analysis unit 12 is possessed. The two-dimensional code 13 can be easily obtained by photographing with the imaging unit 11.

  In the two-dimensional code 13 such as a QR code, the URL of the management server 3 and the unique vehicle-mounted ID assigned to the vehicle operation management unit 2 are described. The two-dimensional code 13 photographed by the imaging unit 11 is analyzed by code analysis. The code analysis is performed by the unit 12, and the URL indicated by the two-dimensional code 13 is accessed from a transmission / reception unit (not shown).

  When the ID registration unit 19 is activated, first, an activation signal is output to the vehicle operation management unit 2 to activate the ID acquisition unit 6 and wait for a response for a predetermined time. When the ID acquisition unit 6 is activated, the display unit 15 formed by an LED or the like blinks to prompt the ID acquisition unit 6 to hold the ID holder 18 to be newly registered. In this state, if the user, for example, a prepaid card with a fixed FeliCa chip or a portable communication terminal used for communication to the management server 3 has a built-in FeliCa chip, the portable communication terminal is identified as an ID. When given to the acquisition means 6, the unique IDs attached thereto are read by the ID acquisition means 6 and output to the management server 3.

  The ID registration unit 19 of the management server 3 that has received the ID registers the received ID as a user ID in the member information storage unit 17a or the owner information storage unit 17b as a user ID, and thereafter as reference data for authentication. used.

  FIG. 4 shows a procedure for using the share car 5. First, when the management server 3 receives a reservation request from the user terminal 1 (step S1), the management server 3 searches the vehicle information storage means and the reservation table 4, and extracts a share car 5 that can be reserved (step S1). S2) Transmit to the user terminal 1 (step S3).

  When the response from the user terminal 1 receiving the search result is within a predetermined time (step S4), the management server 3 registers the reservation content in the reservation table 4 (step S5), and then the reservation content is transmitted to the user terminal 1 (Step S6), and the reservation operation is completed.

  When the reservation is established, the management server 3 starts monitoring the reservation time. When the management server 3 detects that the reservation time is about 15 minutes before (step S7), it outputs an authentication data request signal to the share car 5 (step S7). S8) The share car 5 activates the ID acquisition means 6 and shifts to an authentication ID standby state (step S9).

  If the ID holder 18 is trapped by the ID acquisition means 6 within a predetermined time from this state (step S10), the share car 5 transmits the acquired user ID to the management server 3 (step S11), and the management server 3 Wait for authentication at.

  The management server 3 performs an authentication operation based on whether or not the user ID sent from the share car 5 matches the reservation person in the reservation table 4, and when authentication is established (step S12), an operation permission signal is sent to the share car 5 (Step S13).

  The share car 5 that has received the operation permission signal operates the door lock control means 8 to unlock the door lock 7 (step S14), and becomes ready for operation.

  When the operation permission signal is output, the management server 3 performs the charging operation only when the user is a member, and the charging state is continued until the locking operation by the ID holder 18 is performed.

DESCRIPTION OF SYMBOLS 1 User terminal 2 Vehicle operation management part 3 Management server 4 Reservation table 5 Sharing vehicle 6 ID acquisition means 7 Door lock 8 Door lock control means 9 Start-up management means 10 Authentication means 11 Imaging part 12 Code analysis part 13 Two-dimensional code 14 Reader control means 15 Display unit

Claims (7)

User terminals used by sharing car users,
A vehicle operation management unit mounted on a vehicle for sharing and set with an in-vehicle ID;
A management server storing a user authentication ID for authenticating the sharing car user;
The vehicle operation management unit includes means for acquiring a user authentication ID input by a sharing car user and transmitting it to the management server together with the in-vehicle ID,
The management server is requested by the user terminal, means for registering the accepted use reservation together with the in-vehicle ID in the reservation table;
Means for transitioning to a user authentication ID obtainable state in the vehicle operation management unit at a predetermined time before the reservation time;
A sharing vehicle authentication system comprising means for transitioning a reserved vehicle to a drivable state when the user authentication ID and the vehicle-mounted ID transmitted from the vehicle operation management unit coincide with those of the reservation person in the reservation table. An in-vehicle ID assigned to the vehicle operation management unit mounted on the vehicle for sharing;
A management server capable of communicating with the vehicle operation management unit;
A user terminal used by a sharing car user,
The vehicle operation management unit obtains a user authentication ID input by a sharing car user and outputs it to the management server;
With door lock control means for locking and unlocking the door lock of the vehicle,
The management server
A reservation table that stores vehicle use reservations from user terminals so that the user authentication ID and the vehicle-mounted ID can be referred to;
Activation management means for activating the ID acquisition means of the vehicle operation management unit at a predetermined time before the reservation time;
Authentication means for operating the door lock control means of the vehicle operation management section to unlock the door lock when the user authentication ID and the vehicle-mounted ID transmitted from the vehicle operation management section match those of the reservation person in the reservation table When,
An authentication system for sharing vehicles. The ID acquisition means of the vehicle operation management unit is formed by a non-contact ID tag reader,
3. The sharing vehicle authentication system according to claim 1, wherein the management server can register a unique ID of a non-contact ID tag selected by a user and readable by the reader as a user authentication ID.   The sharing vehicle according to claim 3, wherein when receiving an authentication means registration request including an in-vehicle ID from a user terminal, the unique ID output from the ID acquisition means of the vehicle operation management unit is registered as a user authentication ID. Authentication system. As the user terminal, a portable communication terminal incorporating an imaging unit and a code analysis unit is used,
In the vehicle, a two-dimensional code including a management server URL and an in-vehicle ID is arranged,
The sharing vehicle authentication system according to claim 4, wherein a user authentication ID is registered by transmitting a captured image in an imaging unit of a two-dimensional code to a management server. A vehicle for sharing with a vehicle operation management unit that operates by control from a management server,
ID acquisition means for acquiring a user authentication ID possessed by the sharing car user and outputting it to the management server;
Door lock control means for unlocking the door lock of the vehicle on condition that a driving permission signal is received from the management server;
Reader control means for activating the ID acquisition means upon receipt of an activation signal from the management server;
A vehicle for sharing.   The sharing vehicle according to claim 6, further comprising a display unit that indicates activation of the ID acquisition unit.

Images