JP2016162365A - Authentication support system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To use short-range wireless communication to use device specific information on a radio wave transmitter and a mobile terminal device, to extract a sharing system which a user of the mobile terminal device can use at the site within the reception range of a radio wave from the radio wave transmitter, and to set up a sharing operation terminal device for a usable state.SOLUTION: In an authentication support system, an owner having a registered mobile terminal device transmits positional information on a radio wave received from a transmitter to an authentication management server, and the authentication management server authenticates a sharing system usable at the position using authentication information (ID, password, etc.) managed in a lump, and can provide a sharing operation terminal device after customizing it in a state in which a user can use it immediately.SELECTED DRAWING: Figure 1

Description

  The present invention uses a radio transmitter capable of short-range wireless communication and device-specific information of a mobile terminal to receive the radio wave emitted by the radio transmitter to authenticate the owner of the mobile terminal. The present invention relates to an authentication support system in which an authenticated owner extracts a system that can be used in a place where the radio wave transmitter is installed and sets up a use environment of the system.

  Conventionally, an authentication system using a portable terminal capable of short-range wireless communication has been used.

  In Patent Document 1, a security system receives authentication information by performing short-range wireless communication with a terminal device, and the security system performs authentication processing based on the authentication information received from the terminal device, and outputs an authentication result. An invention for performing control related to security in response is disclosed.

  The short-range wireless communication unit of the terminal device reads the authentication information from the authentication information storage unit, and the short-range wireless communication unit transmits the read authentication information to the security system. Next, the short-range wireless communication unit of the security system receives the authentication information transmitted from the terminal device, and the authentication unit performs an authentication process on the received authentication information. When authentication is performed, that is, when it is determined that the user of the terminal device is a regular user, the security management unit cancels the security state.

  In the first embodiment described in Patent Document 1, in the shared terminal, the user can release the security of the shared terminal and log in to the shared terminal with a simple operation by carrying the terminal device. It becomes. Further, an invention is disclosed in which a user can easily set an environment for a shared terminal by carrying a terminal device.

JP2014-191438

  In Patent Literature 1, a terminal device carried by a user includes an authentication information storage unit and a short-range wireless communication unit, and the authentication information storage unit is “authentication information” for indicating that the user is a “regular user”. As a combination of a user ID and a password.

  However, storing the user ID and password in the terminal device carried by the user causes a security problem if the terminal device is lost or stolen. In addition, when a password is changed due to system maintenance or the like, there arises a problem that each user terminal device needs to be maintained.

  Therefore, the present invention transmits to the authentication management server that the owner having a mobile terminal registered in advance has received a radio wave from a radio wave transmitter installed in a specific location in advance. To extract a shared system that can be used by the owner of the mobile terminal, and authenticate the shared system using authentication information (ID, password, etc.) collectively managed by the authentication management server. Provided is an authentication support system that can provide a use environment according to the owner.

  In order to achieve the above object, an authentication support system according to the present invention is an authentication support system that supports authentication in a specific place, and is installed in the specific place and transmits radio waves including device-specific information of the device itself. A radio terminal, a mobile terminal capable of short-range wireless communication with the radio transmitter, and transmitting authentication request information including the device specific information of the own device and the device specific information of the radio transmitter, An authentication management server that receives the authentication request information from the mobile terminal and authenticates the owner of the mobile terminal in the specific place based on the device-specific information included in the authentication request It is characterized by being.

  In the authentication support system according to the present invention, the portable terminal transmits the authentication request information when receiving a radio wave from the radio wave transmitter within a range where the radio wave from the radio wave transmitter can reach. It is characterized by that.

  In the authentication support system according to the present invention, the authentication management server includes a combination of device specific information from the radio wave transmitter and device specific information from the mobile terminal included in the authentication request information in the specific place. It is characterized by authenticating the owner of the portable terminal.

  The authentication support system according to the present invention has an authentication information database that is connected to the authentication management server and stores authentication information, and the authentication management server searches the authentication information database based on the authentication request information, Obtaining authentication information necessary for authentication of the shared system available to the owner, authenticating the shared system with the authentication information, and enabling the owner to use the shared system It is characterized by.

  The authentication support system according to the present invention is characterized in that, in the specific place, an owner of the portable terminal has a shared operation terminal for using the shared system.

  The authentication support method according to the present invention is an authentication support method for supporting user authentication in a specific place, which transmits radio waves including device-specific information of a radio wave transmitter installed in the specific place, and Transmitting authentication request information including device specific information of a portable terminal capable of short-range wireless communication with the device and the device specific information of the radio wave transmitter, and receiving the authentication request information from the portable terminal The authentication management server authenticates the owner of the portable terminal in the specific place based on the device specific information included in the authentication request.

  According to the authentication support system of the present invention, when the owner of the portable terminal possesses the portable terminal and enters a specific place (within the radio wave range (radio area) transmitted by the radio wave transmitter), the short distance The mobile terminal detects the radio wave of the radio transmitter by wireless communication, and transmits authentication request information including the device specific information of the radio wave transmitter and the device specific information of the mobile terminal included in the radio wave to the authentication management server, Since the authentication management server authenticates the owner of the mobile terminal in the specific place, the owner of the mobile terminal in the specific place is not required for the owner of the mobile terminal to perform any operation. It can be authenticated.

  Furthermore, when a shared system is installed in the specific place, the owner of the mobile terminal can enter the specific place without performing any operation, and can be used in the specific place. Can be used.

  Also, since the ID, password, etc. necessary for authentication to the shared system are not stored in the mobile terminal used for authentication, the ID, password, etc. will not be leaked from the mobile terminal side due to the owner's inconvenience, High security can be ensured.

In addition, installing a radio wave transmitter in a common area such as a meeting room in the office to enable authentication and use of the shared system eliminates the need for users to carry notebook PCs etc. in the office. It becomes possible to use the necessary shared system at the place.
Also, by using short-range wireless communication for communication between the radio wave transmitter and the mobile terminal, only the mobile terminal that the owner always carries without misrecognizing the mobile terminal outside the common area It is possible to use the shared system without performing any authentication operation simply by holding the password and entering the shared area.

  In addition, the authentication information database of the authentication management server collectively manages authentication information (ID, password, etc.) of each shared system, so if the number of shared systems to be used increases or decreases, or the owner of the mobile terminal When the number of servers increases or decreases, or when there is a change in the authentication method of the existing shared system, batch management can be handled on the authentication management server side, which is excellent in maintainability.

It is a figure which shows the structure concept based on the authentication assistance system of this invention. It is a block diagram concerning the authentication assistance system of this invention. It is a figure which shows the example of a display of the terminal for shared operation based on the authentication assistance system of this invention. It is a figure which shows the example of the various tables of the authentication information database based on the authentication assistance system of this invention. It is a processing sequence figure based on the authentication assistance system of this invention.

  Hereinafter, an embodiment for implementing an authentication support system according to the present invention will be described with reference to the drawings.

  An authentication support system according to the present invention is a radio transmitter disposed indoors and / or outdoors capable of short-range wireless communication, a portable terminal owned by the owner, and a shared operation in which the owner uses the shared system. A terminal and an authentication management server that manages location information of the radio wave transmitter and authentication information for each owner, and the device-specific information of the radio wave transmitter and the radio wave included in the radio wave emitted by the radio wave transmitter. The device-specific information of the detected portable terminal is used to authenticate the shared system that can be used by the owner, and can be used by the shared operation terminal.

[Configuration of authentication support system]
The configuration of the authentication support system according to the present invention will be described with reference to FIGS. FIG. 1 is a diagram showing a configuration concept of an authentication support system according to an embodiment of the present invention, FIG. 2 is a block diagram of the authentication support system, FIG. 3 is a diagram showing a display example of a shared operation terminal, and FIG. It is a figure which shows the example table of an authentication information database.

  As shown in FIGS. 1 and 2, an authentication support system 1 according to the present invention transmits a mobile terminal 10 possessed by the owner of the system, radio waves including device-specific information of radio wave transmitters installed in various places. A radio transmitter 20, an authentication management server 3 that authenticates 5 to the shared system by the mobile terminal 10, and a shared operation terminal 7 for using the shared system 5. The machine 20 is capable of short-range wireless communication, and the mobile terminal 10, the authentication management server 3, the shared system 5, and the shared operation terminal 7 are connected to the communication network 2.

  The authentication management server 3 includes an authentication processing unit 31 and an authentication information database 40. The authentication management server 3 is unique to the radio wave transmitter in which the mobile terminal 10 detects the radio wave included in the authentication request information transmitted from the mobile terminal 10. The authentication information database 40 is searched using the information and the device-specific information of the portable terminal, and the above-mentioned necessary for the selection of the shared system that can be used by the owner of the portable terminal 10 and the authentication for using the shared system. It has a function of acquiring authentication information of the owner and performing an authentication process for the owner of the portable terminal 10 to use the shared system.

  The communication network 2 includes a LAN (Local Area Network), an intranet, the Internet, and the like. The communication network 2 may be either a wired or wireless environment, or an environment in which both are mixed. The communication method between the radio wave transmitter 20 and the portable terminal 10 uses short-range wireless communication. Specifically, Bluetooth (registered trademark), Bluetooth Low Energy, NFC (Near Field Communication), ZigBee, and the like are preferable, and a configuration that does not require the radio wave transmitter 20 and the mobile terminal 10 to be in contact with each other is preferable.

  The shared system 5 is activated in response to a request from the authentication processing unit 31 of the authentication management server 3 and is provided in a state where the owner can use it in the shared operation terminal 7 or other terminals. The shared system is, for example, a system that can be used by the portable terminal device 10 such as an in-house conference system and an in-house groupware that can be used by a plurality of people at the same time, and software that can be used by individuals such as a word processor. Any of them may be used.

  The shared operation terminal 7 displays a screen and functions as a selection device (selection of a location shown in FIG. 3 (A). Selection of a name shown in FIG. 3 (B). As shown in FIG. 3 (C). A function to select a shared system), and exchanges information with the authentication management server 3 and the shared system 5 via the communication network 2. Further, in addition to the function as the selection device described above, the owner may use it as a terminal for executing the shared system.

  The mobile terminal 10 is owned by the owner, receives radio waves (device-specific information) transmitted from the radio wave transmitter 20, and adds device-specific information (for example, UUID: Universally Unique Identifier) of the mobile terminal 10 A process of transmitting authentication request information to the authentication management server 3 via the communication network 2 is performed. As shown in the shared system authentication table 42 of the authentication information database 40 shown in FIG. 4, the personal information (the authentication ID 42e for the shared system, the authentication password 42d, etc.) required by the owner when using the shared system is previously authenticated. If registered in the information database 40, there is no need to store personal information inside the portable terminal 10. Therefore, it is effective in terms of security. In the present invention, by directly authenticating the mobile terminal 10, the owner who owns it is indirectly authenticated.

  Specifically, the portable terminal 10 may be of any type such as a notebook computer, a tablet, a smartphone, and a mobile phone as long as the owner has a portable shape. It may be a glasses type or a watch type that the owner wears on the body. The OS (Operation system) is not particularly limited, and it is used for personal computers such as MS-Windows (registered trademark) and Mac OS (registered trademark), and for mobile terminals (iOS (registered trademark), Android (registered trademark)). OS) may be used. Moreover, if it has the communication processing part (information output part) 11 mentioned later, it is not necessary to have a display apparatus and an operation apparatus, and what is necessary is just a portable shape, such as a card | curd shape and a key holder, and a magnitude | size.

  As shown in FIG. 2, the mobile terminal 10 includes a communication processing unit (information output unit) 11 including a receiving unit 12 and a transmitting unit 13. The general mobile terminal 10 includes a control unit (not shown), a display unit (not shown), an internal storage (not shown), an internal memory (not shown), and the like.

  The receiving unit 12 receives device-specific information included in the radio wave transmitted from the radio wave output unit 21 of the radio wave transmitter 20.

  The transmission unit 13 transmits authentication request information including the device specific information of the radio wave transmitter 20 and the device specific information of the mobile terminal 10 received by the reception unit 12 to the authentication processing unit 31 of the authentication management server 3.

  The radio wave transmitter 20 has a radio wave output unit 21 and periodically emits radio waves from the radio wave output unit 21. The radio wave is automatically transmitted by adding a unique ID (for example, UUID, major number, minor number, etc.) of the device as device-specific information for identifying the individual radio wave transmitter 20. The radio wave transmitter 20 is installed near the shared operation terminal 7 operated by the owner, indoors on the ceiling, wall surface, desk, etc., outdoors, on the pillar, wall surface, etc. It is desirable to install it in a position where there is little blocking.

  In this embodiment, the radio wave may be a thing that transmits a weak radio wave that reaches the mobile terminal 10 existing in the range of several meters to 20 m. By limiting the reception range such as the vicinity of the shared operation terminal 7 with weak radio waves, it is possible to limit the areas that are authenticated by receiving radio waves. Further, the radio wave transmission interval may be any interval.

  Further, as shown in FIG. 1, even if there are a plurality of effective radio wave ranges (wireless areas) centering on the radio wave transmitters 20a and 20b, by analyzing the device-specific information, Can be specified.

  The authentication information database 40 is installed inside or outside the authentication management server 3 as shown in FIGS. 1 and 2, and as shown in FIG. 4, a management number regarding the radio wave transmitter 20 installed indoors and outdoors, Information such as the installation location, etc., registered mobile terminal information, owner's personal information, authentication ID to the shared system necessary for using the permitted shared system, authentication password, and the like are stored.

  The shared system management table 41 includes information on a shared system ID 41a, a shared system name 41b, a shared system location 41c, and a shared system type 41d. The shared system location 41c is not a physical location, but information necessary for starting the shared system 5 from the authentication processing unit 31 of the authentication support system 1 (for example, the URL of the shared system or the file path of the execution file). ). The shared system type 41d is the type of the shared system 5 (Web system, executable file format, etc.). The authentication processing unit 31 of the authentication support system 1 activates the shared system by an appropriate method based on the location and type of the shared system 5.

  The shared system authentication table 42 is a table of the authentication information database 40 related to authentication information for the shared system that can be used by the owner, and is shared by the place (radio wave transmitter ID) and the owner (mobile terminal ID). This is for deriving a system (shared system ID), and has personal information such as a shared system ID 42a, a portable terminal ID 42b, a radio wave transmitter ID 42c, an authentication password 42d, and an authentication ID 42e.

  The mobile terminal management table 43 is a table of the authentication information database 40 related to information on mobile terminals (mobile, tablet, etc.), manages which owner owns which mobile terminal 10, and the mobile terminal It has information on ID 43a, terminal name 43b, and owner name 43c.

  The radio wave transmitter management table 44 is a table of the authentication information database 40 related to radio wave transmitter information, manages which radio wave transmitter is installed at which location, and includes a radio wave transmitter ID 44a, a radio wave transmitter name 44b, It has information regarding the area ID 44c.

  The radio wave transmitter log table 45 is a table of the authentication information database 40 related to the authentication request information. When the mobile terminal 10 receives the radio wave of the radio wave transmitter 20, the authentication request information transmitted to the authentication management server 3 is stored. Write. The radio wave transmitter log table 45 includes information on the radio wave transmitter ID 45a, the portable terminal ID 45b, and the radio wave intensity 45c.

  The area management table 46 is a table of the authentication information database 40 related to the installation location of the radio wave transmitter 20, and has information regarding the area ID 46a and the installation location name 46b.

  The shared system IDs 41a and 42a are the same information and are IDs for specifying the shared system.

  The portable terminal IDs 42b, 43a, and 45b are the same information and correspond to the device specific information of the portable terminal 10. The radio wave transmitter IDs 42c, 44a, and 45a are the same information and correspond to the device unique information of the radio wave transmitter 20.

  The area IDs 44c and 46a are the same information.

  The personal information such as the authentication password 42d and the authentication ID 42e is obtained by registering authentication information necessary for the owner of the portable terminal 10 to use the shared system. Personal information such as an authentication password 42d and an authentication ID 42e that are different for each owner of the portable terminal 10 is registered for each shared system, and is used for collective management.

  The radio wave intensity 45c is obtained by measuring the radio wave intensity when the mobile terminal 10 that has received the radio wave (device-specific information) of the radio wave transmitter 20 receives the radio wave intensity 45c.

[Outline of authentication support processing]
In the present invention, a shared system that can be used in a specific place by the owner of the mobile terminal 10 is provided in a usable state without going through a complicated authentication procedure.

  That is, when the mobile terminal 10 receives the radio wave (device-specific information) transmitted by the radio wave transmitter 20 when the owner of the mobile terminal 10 moves to a specific place, the mobile terminal 10 receives the radio wave (device-specific information). Authentication request information obtained by adding the device specific information of the radio wave transmitter 20 included in the radio wave and the device specific information of the mobile terminal 10 to the intensity of the received radio wave is transmitted to the authentication management server 3 via the communication network 2 and authenticated. The management server 3 searches the authentication information database 40 based on the device specific information of the radio wave transmitter 20 and the device specific information of the mobile terminal 10 included in the received authentication request information, and The owner of the mobile terminal 10 that has moved to the reception range (wireless area) is specified. Then, in the wireless area of the radio wave transmitter 20, the shared system that the owner of the portable terminal 10 is permitted to use is used in the shared operation terminal 7 in a state where the owner is authenticated and usable. An authentication support system 1 is provided for the purpose of permitting authentication.

The operation of the authentication support system 1 of the present invention will be described below.
As a characteristic of the radio wave, the electric field strength is strong in the vicinity of the radio wave transmitter 20 and attenuates as the distance increases. For example, as shown in FIG. 1, the radio wave emitted from the radio wave output unit 21 of the radio wave transmitter 20a has the maximum electric field strength at the center of the wireless area A, and the electric field strength becomes weaker as it moves away from the center of the wireless area A. The electric field strength is zero at the outer edge of the wireless area, and does not reach the outside of the wireless area A. Similarly, the reach of radio waves emitted by the radio wave output unit 21 of the radio wave transmitter 20b is indicated as a wireless area B.

  The radio wave intensity of the radio wave transmitters 20a and 20b may be adjusted individually so that the range of the wireless area A and the range of the wireless area B do not overlap. By narrowing the wireless area, the location where the mobile terminal 10 receives the radio wave from the radio wave transmitter 20 can be restricted, so that the authentication of the owner of the mobile terminal 10 to be authenticated can be restricted to a specific place. it can.

  The radio wave transmitter 20 continues to transmit radio waves (device-specific information) from the radio wave output unit 21 at regular intervals. The transmission interval of radio waves in the present invention is 500 milliseconds to 1.0 seconds, but it goes without saying that it may be set arbitrarily.

  Since the portable terminal 10a shown in FIG. 1 exists within the range of the wireless area A, it is possible to acquire radio waves (device-specific information) from the radio wave transmitter 20a. Further, when the mobile terminal 10a acquires the device specific information from the radio wave transmitter 20a by the receiving unit 12 of the communication processing unit (information output unit) 11, the communication processing unit (information output unit) 11 receives the received radio wave. Determine strength. The closer the distance between the portable terminal 10a and the radio wave transmitter 20a is, the stronger the radio wave intensity is.

  Next, the mobile terminal 10a transmits authentication request information including device-specific information to the authentication management server 3 via the communication network 2 when receiving the radio wave from the radio wave transmitter 20a. Specifically, the device unique information of the mobile terminal 10a as the device unique information and the device unique information of the radio wave transmitter 20a included in the received radio wave are sent from the transmission unit 13 to the authentication management server 3 as authentication request information. Send. The authentication request information is preferably transmitted as soon as the mobile terminal 10a receives the radio wave from the radio wave transmitter 20a. However, as with the transmission interval of the device-specific information, 500 ms to 1.0 seconds. Of course, it may be set to an arbitrary interval such as an interval.

  For example, since the mobile terminal 10b belongs to both the wireless area A and the wireless area B, the mobile terminal 10b can receive the radio waves of the radio wave transmitter 20a and the radio wave transmitter 20b. Therefore, the transmission unit 13 of the communication processing unit (information output unit) 11 of the portable terminal 10b performs authentication request information “device unique information of the portable terminal 10b, device unique information of the radio wave transmitter 20b” and authentication request information “mobile”. Two pieces of authentication request information “device unique information of the terminal 10 b and device unique information of the radio wave transmitter 20 a” are transmitted to the authentication management server 3. In this case, since the portable terminal 10b is closer to the radio wave transmitter 20b than the radio wave transmitter 20a, the relationship of the radio wave intensity is “radio wave transmitter 20b> radio wave transmitter 20a”.

  The mobile terminal 10c is out of the range of both the wireless area A and the wireless area B, and does not receive any radio wave, and therefore does not transmit authentication request information to the authentication management server 3.

  Next, the authentication management server 3 receives each authentication request information transmitted from the portable terminal 10 by the authentication processing unit 31. The authentication processing unit 31 stores the received authentication request information in the radio wave transmitter log table 45 of the authentication information database 40.

  The authentication processing unit 31 stores the received authentication request information in the radio wave transmitter log table 45 of the authentication information database 40, and at the same time, uses the shared system authentication table 42 and can use the shared system that can be used by the owner of the portable terminal 10 Search whether is registered.

  Extract device specific information of mobile terminal 10a (unique number set for each mobile terminal) from “device specific information of mobile terminal 10a” included in authentication request information, and extract registered owner To do. Further, the device-specific information of the radio wave transmitter 20b is extracted from the “device-specific information of the radio wave transmitter 20b”, and the installation location of the radio wave transmitter 20b is determined.

  Next, the authentication processing unit 31 extracts from the shared system authentication table 42 a shared system that can be used where the mobile terminal 10 receives the radio wave from the radio wave transmitter 20. Further, the authentication processing unit 31 narrows down the shared systems that the owner is permitted to use among the extracted shared systems. At this time, a plurality of shared systems may be extracted.

  Then, the authentication processing unit 31 searches the shared system management table from the extracted shared system, and acquires information (shared system location, shared system type) necessary for starting the shared system 5. The authentication processing unit 31 starts the shared system 5 using information necessary for starting the shared system 5, and at this time, the shared system authentication table such as the authentication ID 42e of the owner of the portable terminal 10 and the authentication password 42d for authentication. Use personal information registered in.

  The shared operation terminal 7 may display the activated shared system 5 so that the owner can use the shared system with the shared operation terminal 7 as it is. In addition, a screen for selecting the installation location of the shared operation terminal 7 is displayed (shown in FIG. 3A). When there are a plurality of owners in one wireless area, a screen for selecting the owner's name is displayed. Displayed (shown in FIG. 3B), if there are multiple shared systems that the owner is permitted to use in one wireless area, displays a shared system selection screen (shown in FIG. 3C) )

  In this way, when the owner of the portable terminal 10 has the portable terminal 10 and enters the radio wave range (radio area) transmitted by the radio wave transmitter 20, the authentication request information is sent to the authentication management server 3. The authentication management server 3 searches the other system authentication information including the authentication password, authentication ID, etc. registered in the authentication information database 40 in advance and uses it for authentication. It is possible for the owner to automatically authenticate to a shared system that can be used in the wireless area without having to perform any authentication operation.

[Processing sequence]
Next, a processing sequence diagram of the authentication support system 1 according to the present invention will be described with reference to FIG.

  First, the radio wave output unit 21 of the radio wave transmitter 20 continuously transmits radio waves (device-specific information) at intervals of 500 milliseconds to 1.0 seconds (step S1). The device specific information includes unique individual information (for example, UUID) of the radio wave transmitter 20. When the mobile terminal 10 accompanied by the owner enters the radio wave area of the radio wave transmitter 20 and the receiving unit 12 of the communication processing unit (information output unit) 11 receives the device specific information from the radio wave transmitter 20, Authentication request information (“device unique information (electric), device unique information (mobile)”) is transmitted to the authentication processing unit 31 of the authentication management server 3 (step S2). When the mobile terminal 10 has not received the radio wave including the device specific information from the radio wave transmitter 20, the mobile terminal 10 does not transmit the authentication request information to the authentication management server 3.

  The authentication processing unit 31 of the authentication management server 3 sequentially stores the received authentication request information in the radio wave transmitter log table 45 (radio wave transmitter ID 45a, portable terminal ID 45b, radio wave intensity 45c) of the authentication information database 40 (step S3). ). The storage interval in the authentication information database 40 may be the same as or different from the reception interval of the authentication request information.

  Next, a shared operation terminal 7 is installed in the radio area of the radio wave transmitter 20, and a place selection screen is displayed as shown in FIG. 3A (step S4). The displayed location refers to the area ID 44c of the radio wave transmitter management table 44, and the installation location name 46b corresponding to the area ID 46a is extracted from the area management table 46 and displayed. The owner operates the shared operation terminal 7 to select an installation location (step S5). The shared operation terminal 7 transmits device-specific information (electricity) -2 as information on the selected location to the authentication management server 3 (step S6).

  Note that the location selection (steps S4 and S5) may be performed once at the time of initial setting, and information on the selected location is retained thereafter.

  The authentication processing unit 31 of the authentication management server 3 uses the device-specific information (mobile) for identifying the mobile terminal 10 to the shared operation terminal 7 with respect to the received location information of the device-specific information (electricity) -2. -2 is made (step S7).

  The authentication management server 3 searches the owner name 43c using the portable terminal ID 43a of the portable terminal management table 43 as a key, and as shown in FIG. 3B, the wireless area of the device specific information (electricity) -2 A selection screen (owner selection screen) of the owner of the mobile terminal 10 existing in the screen is displayed (step S8). The owner selects one corresponding name from the displayed owner selection screen, whereby the authentication management server 3 identifies one of the plurality of portable terminals 10 (step S9). An authentication screen is displayed on the screen of the specified mobile terminal 10 (step S10). The owner performs authentication manually (or automatically) on the authentication screen (step S11), and the device-specific information (mobile) -2 of the mobile terminal 10 is transmitted from the transmission unit 13 to the authentication management server 3 authentication process. It transmits to the part 31 (step S12).

  The authentication processing unit 31 of the authentication management server 3 searches for the owner's information from the portable terminal ID 42b of the shared system authentication table 42 of the authentication information database 40 based on the received device specific information (mobile) -2 (step) S13). Based on the search result of step S <b> 11, the mobile terminal 10 extracts a shared system ID that is permitted to be used in the radio area of the radio wave transmitter 20. When there is one shared system, the authentication management server 3 proceeds to authentication processing for the shared system in step S18 (Yes in step S14).

  When there are a plurality of shared system IDs permitted to be used (No in step S14), the authentication processing unit 31 of the authentication management server 3 identifies one of the plurality of shared systems to the shared operation terminal 7. Make a request to do. Using the shared system ID 41a of the shared system management table 41 as a key, the shared system name 41b is searched, and as shown in FIG. 3 (C), the operating terminal existing in the wireless area of the device specific information (electricity) -2 The shared system selection screen (system selection screen) is displayed on the display unit 37 (step S15). The owner selects a shared system to be used (step S16), and transmits the ID of the shared system to the authentication processing unit 31 of the authentication management server 3 (step S17).

  The authentication processing unit 31 of the authentication management server 3 extracts the shared system location 41c and the shared system type 41d using the shared system ID 41a of the shared system management table 41 as a key, and further extracts the shared system ID 42a and the portable terminal 10 portable. The shared system authentication table 42 is searched using the terminal ID 42b as a search key, the authentication password 42d and the authentication ID 42e as the authentication password for the shared system are extracted, and other registered personal information is extracted (step S18). ), The authentication information is transmitted to the shared system 5 simultaneously with the activation of the shared system 5 (step S19). Note that the authentication information is not limited to the authentication ID 42e and the authentication password 42d, but may be a combination of one or more pieces of information among the personal information registered in the shared system authentication table.

  The activated shared system 5 performs authentication based on personal information such as an authentication ID and an authentication password (step S20). At this time, the environment setting of the shared system is performed according to the authenticated authentication ID. When the authentication is completed, the shared system 5 is displayed in a usable state on the screen of the shared operation terminal 7 (step S21).

  As described above, the owner can use the shared system by himself / herself without performing an authentication operation only by making a simple selection by carrying the mobile terminal 10 and entering the radio area of the radio wave transmitter 20. It becomes like this.

[Other Embodiments]
The authentication support of the shared system has been described above. However, as an embodiment of the present invention, the device-specific information of the mobile terminal 10 owned by the owner is transmitted, the authentication management server stores the ID, password, etc. If it does, it can be implemented. The authentication support system of the shared system can be applied to, for example, entrance management. In addition, since the wireless area can be narrowed and the position range that can be received by the mobile terminal 10 can be specified, for example, it can be applied to explanations of art museums, museum exhibits (sounds, videos, etc.) and sightseeing spots. it can.

  As described above, according to the authentication support system of the present invention, when the owner of the portable terminal has the portable terminal and enters the radio wave range (radio area) transmitted by the radio wave transmitter, the portable terminal By transmitting the authentication request information to the authentication management server, the owner can automatically authenticate to the shared system that can be used in the wireless area without having to perform any authentication operation.

  In addition, since personal information and passwords for shared systems are not stored in the mobile terminal owned by the owner, even if the mobile terminal is lost or damaged, there is no leakage of passwords, etc. Can be secured.

  Since the portable terminal is managed only by the owner, the shared system must be used without any authentication operation by the owner as long as the owner owns the portable terminal. Can do.

  In addition, the authentication information database of the authentication management server manages authentication information such as authentication information (ID, password, etc.) for each shared system and system collectively, and as a result, the number of shared systems and systems subject to authentication increases or decreases. If the authentication method of the existing system is changed or if the authentication method of the existing system is changed, the authentication management server side can cope with the collective management, and the maintenance is excellent.

  In addition, installing a radio wave transmitter in a common area such as a meeting room in the office to enable authentication and use of the shared system eliminates the need for users to carry notebook PCs etc. in the office. It becomes possible to use the necessary shared system at the place.

  Also, by using short-range wireless communication for communication between the radio wave transmitter and the mobile terminal, only the mobile terminal that the owner always carries without misrecognizing the mobile terminal outside the common area It is possible to use the shared system without performing any authentication operation simply by holding the password and entering the shared area.

  The present invention can be embodied in many forms without departing from its essential characteristics. Therefore, it is needless to say that the above-described embodiment is exclusively for description and does not limit the present invention.

DESCRIPTION OF SYMBOLS 1 Authentication support system 2 Communication network 3 Authentication management server 5 Shared system 7 Shared operation terminal 10 Portable terminal 11 Communication processing part (information output part)
DESCRIPTION OF SYMBOLS 12 Reception part 13 Transmission part 20 Radio wave transmitter 21 Radio wave output part 31 Authentication process part 37 Display part 38 Operation part 40 Authentication information database

Claims (6)

In an authentication support system that supports authentication in specific places,
A radio wave transmitter that is installed in the specific place and transmits radio waves including device-specific information of its own device;
A portable terminal that is capable of short-range wireless communication with the radio wave transmitter and transmits authentication request information including the device specific information of the own device and the device specific information of the radio wave transmitter;
An authentication management server that receives the authentication request information from the mobile terminal and authenticates the owner of the mobile terminal in the specific place based on the device-specific information included in the authentication request information; An authentication support system characterized by comprising The said portable terminal is a thing which transmits the said authentication request information with the reception of the electromagnetic wave from the said radio wave transmitter within the range which the radio wave from the said radio wave transmitter reaches | attains. Authentication support system. The authentication management server authenticates the owner of the mobile terminal in the specific place from a combination of the device specific information from the radio wave transmitter and the device specific information from the mobile terminal included in the authentication request information The authentication support system according to claim 1 or 2, wherein An authentication information database connected to the authentication management server and storing authentication information;
The authentication management server searches the authentication information database based on the authentication request information, acquires authentication information necessary for authentication of the shared system available to the owner, and uses the authentication information to send the shared system to the shared system. The authentication support system according to claim 1 or 3, wherein authentication is performed to enable the owner to use the shared system. The authentication support according to any one of claims 1 to 4, wherein an owner of the portable terminal has a shared operation terminal for using the shared system in the specific place. system. In an authentication support method that supports authentication in a specific place,
Sending radio waves including device-specific information of radio transmitters installed in the specific place,
Transmitting authentication request information including device-specific information of a portable terminal capable of short-range wireless communication with the radio wave transmitter and the device specific information of the radio wave transmitter,
An authentication management server that receives the authentication request information from the mobile terminal and authenticates the owner of the mobile terminal in the specific place based on the device-specific information included in the authentication request information; An authentication support method characterized by comprising:

Images