JP2015162235A - authentication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To achieve an authentication system that enables robustness of security to be ensured, not through an operation by a user in the authentication.SOLUTION: An authentication system comprises a relay server 2 that relays communication between a communication terminal 1 and an operated apparatus 3 and implements authentication of the communication terminal 1. The communication terminal 1 comprises a GPS 10 capable of acquiring location information i of an own terminal, and is configured to transmit the location information i to the relay server 2 when communicating with the operated apparatus 3 via the relay server 2. The relay server 2 comprises: relay location information acquisition means 20 that acquires the location information i; permission range storage means 21 that stores permission range information iA; and relay authentication means 22 that authenticates the communication terminal 1 when the acquired location information i is included in the permission range information iA, and does not authenticate the communication terminal 1 when the acquired location information i is not included in the permission range information iA.

Description

  The present invention comprises an operated device operated by a communication terminal via an external network, and authentication comprising basic authentication means for authenticating the communication terminal when the operated device is operated by the communication terminal About the system.

  In recent years, systems such as home automation (HA) and ECHONET Lite (registered trademark) have been proposed as systems capable of operating home electric appliances at home from outside. Such a system is generally provided with security for preventing unintended access from a third party by providing communication encryption and password authentication. For example, Patent Document 1 discloses a configuration for securing security by performing password authentication when accessing a home PC using a mobile phone from a remote location such as an outside location.

JP 2003-179699 A

  However, in the configuration in which security for communication is ensured by a password, safety may not be ensured due to carelessness such as a password that is easy to decipher by a user. That is, in the conventional configuration, since the operation by the user is involved at the time of authentication, the robustness cannot always be ensured. Therefore, an object of the present invention is to realize an authentication system that can ensure the robustness of security without intervention of a user operation at the time of authentication.

In order to achieve the above object, an operated device is provided that is operated via an external network by a communication terminal according to the present invention, and the operated device authenticates the communication terminal when operated by the communication terminal. The characteristic configuration of the authentication system including basic authentication means includes a relay server that relays communication between the communication terminal and the operated device and authenticates the communication terminal,
The communication terminal is
Provided with location information acquisition means capable of acquiring own location information,
When communicating with the operated device via the relay server, the relay server is configured to transmit the position information acquired by the position information acquisition unit to the relay server,
The relay server is
Relay position information acquisition means for acquiring position information transmitted from the communication terminal;
Permission range storage means for storing permission range information that is position range information for permitting relaying of communication;
A relay authentication unit that authenticates the communication terminal when the position information acquired by the relay position information acquisition unit is included in the permission range information and does not authenticate when the position information is not included.

  With the above characteristic configuration, in the relay authentication means in the relay server, the position information of the communication terminal is included in the permission range information using the stored permission range information and the position information acquired by the communication terminal at the time of authentication. Authentication is performed depending on whether or not Since the communication terminal acquires position information by the position information acquisition means, and authentication is performed by the relay authentication means based on the position information, no user operation is involved at the time of authentication. For example, it is possible to prevent a situation where security robustness cannot be ensured. In other words, it is possible to realize an authentication system that can ensure the robustness of security without intervention of a user operation at the time of authentication.

  In the authentication system according to the present invention, in addition to the above characteristic configuration, when the relay authentication unit authenticates the communication terminal, the communication from the communication terminal to the operated device is relayed and not authenticated. It is preferable that the communication is configured not to be relayed.

  According to the above characteristic configuration, it is determined whether the communication to the operated device is relayed or blocked without being relayed according to the authentication result in the relay server. Therefore, when authentication at the relay server fails, communication from the communication terminal to the operated device is not performed, so that an authentication system that can ensure security robustness can be suitably realized.

Further, as another characteristic configuration, the relay server includes a re-authentication unit that performs re-authentication of the communication terminal by authentication different from the basic authentication unit,
When the relay authentication unit authenticates the communication terminal, it is preferable to relay the communication from the communication terminal to the operated device and when the authentication is not performed, the re-authentication unit performs re-authentication. .

  According to the above characteristic configuration, even when authentication fails in the relay server, it is possible to relay communication to the operated device by performing authentication again by the re-authentication unit. As a result, for example, when the user of the operated device tries to operate the operated device using a communication terminal from a place that is not included in the permission range information, communication can be performed. Therefore, it is possible to realize a more convenient authentication system while ensuring security robustness.

  Further, when the relay authentication unit authenticates the communication terminal, it relays communication from the communication terminal to the operated device, and when not authenticating, relays the communication and uses the operated device. It is preferable to notify the user that the communication has been relayed.

  According to the above characteristic configuration, when authentication fails in the relay server, it is possible to notify the user of the operated device to that effect. As a result, the user can take necessary measures such as disabling remote operation of the operated device, for example, when viewing the notification content and admitting unauthorized access. In addition, even if the authentication fails in the relay server, the operated device can be remotely operated as usual when the user of the operated device attempts communication. As a result, for example, when a legitimate user tries to operate the operated device using a communication terminal from a place that is not included in the permission range information, communication can be performed. Therefore, it is possible to realize a more convenient authentication system while ensuring security robustness.

  In addition, it is preferable that the permitted range information is stored in advance in the permitted range storage unit by a user of the operated device.

  According to the above characteristic configuration, the user can determine the permission range information in advance, and the authentication system according to the present application can be suitably realized.

Further, the relay server is
Position information storage means for storing position information acquired by the relay position information acquisition means;
Permission range determination means for determining the permission range information based on a plurality of position information stored in the position information storage means,
The permission range information determined by the permission range determination unit may be stored in the permission range storage unit.

  According to the above characteristic configuration, every time the communication terminal performs communication via the relay server, the position information is stored in the position information storage unit. In addition, permission range information is determined from a plurality of pieces of position information stored in the position information storage unit. For this reason, appropriate permission range information is determined without the user of the operated device himself / herself determining the permission range. Therefore, when using the authentication system, it is possible to realize a more convenient authentication system while ensuring the robustness of security without intervention by the user.

In addition, the relay server
An operation setting means for setting the relay authentication means to an operating state or a non-operating state;
The operation setting means is
In an initial state, the relay authentication unit is in an inoperative state, and the location information storage unit stores the location information of the communication terminal,
After the permission range information is determined by the permission range determination means from the plurality of position information stored in the position information storage means, and the permission range information is stored in the permission range storage means, the relay authentication means is operated. A configuration that switches to a state is preferable.

  According to the above characteristic configuration, in the initial stage when the authentication system is started to operate, the relay server only accumulates the location information of the communication terminal in the location information storage means, and a plurality of locations stored in the location information storage means. After permission range information is determined by the permission range determination means from the information, an authentication operation by the relay authentication means is performed. Therefore, the user of the operated device can use the operated device without worrying about the existence of the relay server, and can automatically activate the authentication by the relay authentication means automatically. That is, when using the authentication system, it is possible to realize a more convenient authentication system while ensuring robustness of security without any user operation.

Schematic diagram of authentication system Block diagram of an authentication system according to the first embodiment Diagram showing an example of authentication system operation Example of permission range information Block diagram of an authentication system according to the second embodiment Block diagram of an authentication system according to the third embodiment

  Hereinafter, an authentication system S according to an embodiment of the present invention will be described with reference to the drawings. As shown in FIG. 1, the authentication system S roughly includes three elements: a mobile terminal 1, a relay server 2, and an operated device 3. The mobile terminal 1 is a terminal used by a user of the operated device 3. Specifically, for example, a smartphone can be used as shown in FIG. In the example of the figure, a case where the user of the operated device 3 operates the mobile terminal 1 from outside the house B via an external network. That is, the operated device 3 is a device operated by the mobile terminal 1 via the external network. Specifically, as the operated device 3, for example, as shown in FIG. Here, the portable terminal 1 corresponds to a “communication terminal” according to the present invention.

  As shown in FIG. 1, the authentication system S is used when a user of the operated device 3 remotely operates the operated device 3 installed in the house B from outside the house B using the mobile terminal 1. . Specifically, as a usage scene of the authentication system S, for example, there may be a scene where the user turns on / off the power of the air conditioner as the operated device 3 from the portable terminal 1. In the present embodiment, when remotely operating the operated device 3 from the mobile terminal 1, communication data sent from the mobile terminal 1 to the operated device 3 relays communication from the mobile terminal 1 to the operated device 3. It is configured to pass through the relay server 2. The relay server 2 is configured to transparently authenticate that the portable terminal 1 that remotely operates the operated device 3 belongs to an authorized user.

[First Embodiment]
[Configuration of authentication system S]
The configuration of the authentication system S according to the present embodiment will be described with reference to FIG. As shown in FIG. 2, the mobile terminal 1 includes a control device 18, a communication unit 19, and a GPS function as the position information acquisition unit 10. In the present embodiment, a so-called smartphone is used as the mobile terminal 1. The control device 18 includes an arithmetic processing device and a storage device, and is configured to execute various processes via software. As the communication means 19, it is only necessary to be able to connect to an external network, and either wired or wireless means may be used. In the present embodiment, wireless communication means such as wireless LAN, short-range wireless communication, and wide area communication is used as the communication means 19.

  The portable terminal 1 is configured to be able to acquire its own position information i by the position information acquisition means 10. In the present embodiment, the mobile terminal 1 is configured to transmit its own location information i acquired by the location information acquisition means 10 to the relay server 2 when communicating with the operated device 3 via the relay server 2. . Specifically, for example, latitude and longitude are used as the position information i.

  The operated device 3 includes a control device 38 and a communication unit 39. In the present embodiment, a water heater is used as the operated device 3. About the control apparatus 38 and the communication means 39, since it is the same as that of the control apparatus 18 and the communication means 19 of the portable terminal 1, description is abbreviate | omitted. In the present embodiment, a wireless communication means such as a wireless LAN or a short-range wireless communication is used as the communication means 39 so that the communication means 39 can be connected to the wireless LAN constructed in the house B. With such a configuration, the operated device 3 is connected to an external network via a router in the house B, for example, and can be remotely operated by communication from the mobile terminal 1.

  In the present embodiment, the control device 38 of the operated device 3 is provided with basic authentication means 30 and configured to authenticate the mobile terminal 1 when operated by the mobile terminal 1. As the basic authentication means 30, an authentication method different from the relay authentication means 22 of the relay server 2 described later is adopted. In the present embodiment, the basic authentication unit 30 is configured to perform password authentication using a password predetermined by the user of the operated device 3.

  The relay server 2 is configured to relay communication between the mobile terminal 1 and the operated device 3 and to authenticate the mobile terminal 1. The relay server 2 is roughly composed of a control device 28, communication means 29, and position information storage means 23. About the control apparatus 28 and the communication means 29, since it is the same as that of the control apparatus 18 and the communication means 19 of the portable terminal 1, description is abbreviate | omitted. The communication unit 29 is configured to be able to communicate with the mobile terminal 1 and the operated device 3 via an external network. The location information storage means 23 is a database for storing location information i acquired from the mobile terminal 1.

  In the present embodiment, as shown in FIG. 2, the relay server 2 control device 28 includes relay position information acquisition means 20, relay authentication means 22, operation setting means 25, permission range storage means 21, and permission range determination means. 24 is provided. These means are implemented as a program that operates on the control device 28.

  The relay position information acquisition unit 20 is configured to acquire the position information i transmitted from the mobile terminal 1 when the relay server 2 relays communication between the mobile terminal 1 and the operated device 3. More specifically, the position information i transmitted from the portable terminal 1 is acquired via the communication unit 29 when communication of the operated device 3 is started from the portable terminal 1. In the present embodiment, the position information i acquired by the relay position information acquisition unit 20 is stored in the position information storage unit 23.

  The permission range storage unit 21 stores permission range information iA that is position range information that permits relaying communication from the portable terminal 1 to the operated device 3. The permitted range information iA indicates a position where the user of the operated device 3 often remotely operates the operated device 3. Specifically, the permitted range information iA is based on position information ix described later, for example, a predetermined range (for example, It is set in the form of a range of 100 m around. The “certain range” here is preferably set according to the acquisition accuracy when the position information acquisition unit 10 of the mobile terminal 1 acquires the position information i.

  In the present embodiment, the permission range information iA stored in the permission range storage unit 21 is automatically determined by the permission range determination unit 24 without an operation by the user of the operated device 3. More specifically, the permission range determination unit 24 determines the permission range information iA based on the plurality of pieces of position information i stored in the position information storage unit 23.

  An example of a method for determining the permission range information iA by the permission range determination means 24 is shown in FIG. In FIG. 4, a plurality of pieces of position information i stored in the position information storage means 23 are indicated by gray and hatched circles. First, the permission range determination unit 24 acquires a plurality of pieces of position information i from the position information storage unit 23. Next, the user of the operated device 3 best selects the operated device 3 by a method of taking an average of a plurality of pieces of positional information i or by making a histogram and making the most frequently occurring positional information i positive. The position information ix considered to be remotely controlled is determined. In the present embodiment, the permitted range determination unit 24 is configured to obtain an average value of coordinate values of the acquired plurality of pieces of position information i, and the position information i that is the obtained average value is set as the position information ix. Finally, as shown by a thick broken line in FIG. 4, a certain range centered on the position information ix is determined as the permitted range information iA. In the example in the figure, the range of the radius r centered on the position information ix is iA. The permission range information iA determined by the permission range determination unit 24 is stored in the permission range storage unit 21.

  The relay authentication unit 22 authenticates the portable terminal 1 when the position information i acquired by the relay position information acquisition unit 20 is included in the permission range information iA, and does not authenticate when the position information i is not included in the permission range information iA. Configured. More specifically, in the present embodiment, when the relay authentication unit 22 authenticates the mobile terminal 1, the communication from the mobile terminal 1 to the operated device 3 is relayed, and when the authentication is not performed, the communication is performed. Configured not to relay. That is, in the present embodiment, whether or not communication from the portable terminal 1 to the operated device 3 is determined depending on whether or not the authentication is successful.

  In the present embodiment, the operation setting unit 25 is configured to set the relay authentication unit 22 to an operating state or a non-operating state. More specifically, when the relay authentication unit 22 is set to the operation state by the operation setting unit 25, based on the position information i transmitted from the portable terminal 1 at the start of communication from the portable terminal 1 to the operated device 3. Thus, authentication by the relay authentication means 22 is performed. On the other hand, when the relay authentication unit 22 is in a non-operating state, at the start of communication from the portable terminal 1 to the operated device 3, the authentication by the relay authentication unit 22 is not performed and the operated device is operated from the portable terminal 1. 3 is communicated.

[Operation of authentication system S]
In the present embodiment, the operation setting unit 25 puts the relay authentication unit 22 into the non-operational state in the initial state, and sets the relay authentication unit 22 to the operational state after the permission range information iA is determined by the permission range determination unit 24. Configured to switch. Here, the “initial state” means a state in which the relay server 2 starts relaying communication from the portable terminal 1 to the operated device 3.

  In the present embodiment, as the timing when the operation setting unit 25 switches the relay authentication unit 22 to the operation state, the position information i of the portable terminal 1 is accumulated in the position information accumulation unit 23 and accumulated in the position information accumulation unit 23. The permitted range information iA is determined by the permitted range determination unit 24 from the plurality of position information i, and the permitted range information iA is stored in the permitted range storage unit 21. More specifically, the time point at which a sufficient amount of the position information i of the portable terminal 1 is stored in the position information storage unit 23 to determine the permission range information iA with sufficient accuracy by the permission range determination unit 24 is used. More specifically, for example, every time the position information i is accumulated in the position information accumulating means 23, the position information ix is obtained by the permission range determining means 24, and the difference in position from the position information ix obtained immediately before is calculated as follows: The time can be set within a predetermined distance (for example, 10 m).

  As described above, in the present embodiment, in the initial state, the relay server 2 transparently relays communication from the mobile terminal 1 to the operated device 3 and receives the position information i transmitted from the mobile terminal 1. It only accumulates in the position information accumulating means 23. In the following, the operation of the authentication system S after the permitted range information iA is determined from the position information i stored in the position information storage means 23 and the relay authentication means 22 is switched to the operating state will be described with reference to FIG. explain.

STEP. 1
A message for remotely operating the operated device 3 is transmitted from the portable terminal 1 to the operated device 3. Here, in the present embodiment, the message is directly transmitted to the relay server 2. At this time, the message includes the operated device 3 to be operated, the operation content, the position information i of the mobile terminal 1, the ID of the mobile terminal 1, and the like.

.
STEP. 2
The relay server 2 inquires the permission range information iA stored in the permission range storage means 21 and the position information i of the mobile terminal 1 included in the received message, and the position information i is included in the permission range information iA. If so, a message supporting remote operation is transmitted to the operated device 3.

STEP. 2 '
STEP. 2, if the location information i of the mobile terminal 1 is not included in the permitted range information iA, the mobile terminal 1 is notified that communication is rejected.

STEP. 3
The operated device 3 that has received communication from the relay server 2 returns an operation result to the relay server 2.

STEP. 4
The reply from the operated device 3 received by the relay server 2 is transmitted to the mobile terminal 1.

  As described above, the relay server 2 relays communication between the mobile terminal 1 and the operated device 3 and performs authentication based on the location information i of the mobile terminal 1, thereby allowing a legitimate user of the operated device 3. Access to the operated device 3 from the other mobile terminal 1 can be prevented.

[Second Embodiment]
This embodiment is shown in FIG. In the present embodiment, the processing when the mobile terminal 1 is not authenticated by the relay authentication unit 22 in the relay server 2 is different. In the present embodiment, the permitted range information iA stored in the permitted range storage unit 21 is configured to be stored in the permitted range storage unit 21 by the user of the operated device 3 in advance. Since points other than the above are the same as those in the first embodiment, detailed description thereof is omitted.

  When the communication from the mobile terminal 1 to the operated device 3 is relayed to the control device 28 of the relay server 2, if the mobile terminal 1 is not authenticated by the relay authentication unit 22, a re-authentication for re-authentication is performed. Authentication means 26 is provided. The re-authentication unit 26 re-authenticates the portable terminal 1 by authentication different from the basic authentication unit 30. As an authentication method of the re-authentication unit 26, any authentication method may be used as long as it is different from the relay authentication unit 22. In the present embodiment, password authentication using a password different from the preset basic authentication means 30 is performed.

  With the above configuration, in the present embodiment, when the relay authentication unit 22 authenticates the mobile terminal 1, the communication from the mobile terminal 1 to the operated device 3 is relayed as in the first embodiment. When the authentication is not performed by the relay authentication unit 22, the re-authentication unit 26 performs re-authentication. When the re-authentication unit 26 succeeds in re-authentication, communication from the portable terminal 1 to the operated device 3 is relayed. When re-authentication fails, communication from the portable terminal 1 to the operated device 3 is relayed. Is rejected.

  With such a configuration, for example, even when a legitimate user of the operated device 3 tries to operate the operated device 3 using the mobile terminal 1 from a place not included in the permitted range information iA. Remote control can be performed.

[Third Embodiment]
This embodiment is shown in FIG. In the present embodiment, processing when the mobile terminal 1 is not authenticated by the relay authentication means 22 in the relay server 2 is different from the first and second embodiments. Since points other than the above are the same as those in the first embodiment, detailed description thereof is omitted.

  The control device 28 of the relay server 2 is provided with relay status notification means 27. The relay status notification unit 27 is configured to notify the user of the operated device 3 that the communication from the portable terminal 1 to the operated device 3 has been relayed. More specifically, it is configured to store a notification destination for an authorized user of the operated device 3 and transmit a notification to the effect that the relay is performed using the communication unit 29 to the notification destination. Here, as the “notification destination”, for example, a mail address of a regular user set in advance can be set. In this case, the relay status notification unit 27 transmits a mail indicating that the relay has been performed to the set mail address.

  With the above configuration, when the relay authentication unit 22 authenticates the mobile terminal 1 in communication from the mobile terminal 1 to the operated device 3, the communication from the mobile terminal 1 to the operated device 3 is relayed. On the other hand, when the mobile terminal 1 is not authenticated, the communication from the mobile terminal 1 to the operated device 3 is relayed, and the relay state notification means 27 is operated so that the authorized user of the operated device 3 can carry the mobile device. The terminal 1 is configured to notify that the communication to the operated device 3 has been relayed. At this time, by including the ID of the portable terminal 1 included in the message from the portable terminal 1 relayed by the relay server 2 to the operated device 3, the authorized user of the operated device 3 can perform relay authentication. It is possible to confirm whether or not the portable terminal 1 that has not been authenticated by the means 22 is an unauthorized terminal.

  With such a configuration, a legitimate user may take measures such as disallowing remote operation of the operated device 3 if, for example, unauthorized access is permitted from the notification content. It becomes possible.

[Another embodiment]
(1) In the above embodiment, an example in which the relay server 2 is provided outside the house B has been described. However, the relay server 2 may be provided in the house B. Further, it may be implemented as a program in the control device 38 of the operated device 3. In this case, communication between the relay server 2 and the operated device 3 may be performed directly and electrically without wireless communication.

  More specifically, the relay server 2 in the present application performs, as a basic function, information exchange (communication) between the mobile terminal 1 and the operated device 3 with authentication of the mobile terminal 1 that performs the communication. If it is a thing, it does not ask the installation position. Therefore, it may be provided at the communication input location of the operated device 3.

(2) In the said embodiment, although the example in the case of using a smart phone as the portable terminal 1 was shown, as long as the location information acquisition means 10 is provided, what kind of electronic device may be used. For example, a notebook PC or a mobile phone may be used. Further, the position information acquisition unit 10 is not limited to the GPS, and a position information positioning technique using Wi-Fi may be used.

(3) In the said 1st Embodiment, an example when the permission range information iA is determined by the permission range determination means 24 is shown, and in the said 2nd and 3rd embodiment, the permission range information iA is preset. An example was given. However, in the first embodiment, the location information accumulating unit 23 and the permitted range determining unit 24 may not be provided, and the storage of the permitted range information iA in the permitted range storage unit 21 may be set in advance. . In the second and third embodiments, the position information accumulating unit 23 and the permitted range determining unit 24 may be provided, and the permitted range storage unit 21 may be determined by the permitted range determining unit 24.

(4) Although the operation setting unit 25 is provided in the first embodiment, the relay authentication unit 22 may always be in an operating state without the operation setting unit 25. In this case, in the initial state, it is preferable to store the position information i in advance so that the appropriate permission range information iA is set in the position information storage unit 23.

(5) In the above embodiment, the permission range storage unit 21 has shown an example of a configuration in which a single permission range information iA is stored. However, a plurality of permission range information iA may be stored.

  It can be used as an authentication system that includes an operated device that is operated by a communication terminal via an external network, and that includes a basic authentication unit that authenticates the communication terminal when the operated device is operated by the communication terminal. It is.

1: Mobile terminal (communication terminal)
2: Relay server 3: Operated device 10: Position information acquisition means 20: Relay position information acquisition means 21: Permit range storage means 22: Relay authentication means 23: Position information storage means 24: Permit range determination means 25: Operation setting means 26: Re-authentication means 30: Basic authentication means S: Authentication system i: Position information iA: Permitted range information ix: Position information

Claims (7)

An authentication system comprising an operated device that is operated via an external network by a communication terminal, and comprising a basic authentication unit that authenticates the communication terminal when the operated device is operated by the communication terminal. ,
A relay server that relays communication between the communication terminal and the operated device and authenticates the communication terminal is provided.
The communication terminal is
Provided with location information acquisition means capable of acquiring own location information,
When communicating with the operated device via the relay server, the relay server is configured to transmit the position information acquired by the position information acquisition unit to the relay server,
The relay server is
Relay position information acquisition means for acquiring position information transmitted from the communication terminal;
Permission range storage means for storing permission range information that is position range information for permitting relaying of communication;
An authentication system comprising: a relay authentication unit that authenticates the communication terminal when the position information acquired by the relay position information acquisition unit is included in the permission range information and does not authenticate when the position information is not included.   The relay authentication unit according to claim 1, wherein the relay authentication unit relays communication from the communication terminal to the operated device when the communication terminal is authenticated, and does not relay the communication when the communication terminal is not authenticated. Authentication system. The relay server comprises re-authentication means for re-authentication of the communication terminal by authentication different from the basic authentication means;
The relay authentication unit is configured to relay communication from the communication terminal to the operated device when authenticating the communication terminal, and to perform re-authentication by the re-authentication unit when not authenticating. Item 4. The authentication system according to Item 1.   When the relay authentication unit authenticates the communication terminal, it relays communication from the communication terminal to the operated device, and when it does not authenticate, relays the communication and informs the user of the operated device. The authentication system according to claim 1, configured to notify that the communication has been relayed.   The authentication system according to any one of claims 1 to 4, wherein a user of the operated device stores the permission range information in the permission range storage unit in advance. The relay server is
Position information storage means for storing position information acquired by the relay position information acquisition means;
Permission range determination means for determining the permission range information based on a plurality of position information stored in the position information storage means,
The authentication system according to claim 1, wherein the permission range information determined by the permission range determination unit is stored in the permission range storage unit. The relay server is
An operation setting means for setting the relay authentication means to an operating state or a non-operating state;
The operation setting means is
In an initial state, the relay authentication unit is in an inoperative state, and the location information storage unit stores the location information of the communication terminal,
After the permission range information is determined by the permission range determination means from the plurality of position information stored in the position information storage means, and the permission range information is stored in the permission range storage means, the relay authentication means is operated. The authentication system of claim 6, configured to switch to a state.

Images