JP2021184568A - Authentication system, wireless authentication device, and authentication method - Google Patents

Abstract

To provide an authentication system, a wireless authentication device, and an authentication method that enable user convenience to be ensured.SOLUTION: A wireless authentication device 27 authenticates key information Dk with a terminal 3 by short-range wireless communication, and compares a usage time of a vehicle 2 with a time of a timer 30. The wireless authentication device 27 uses the terminal 3 as the key of the vehicle 2 when the authentication of the key information Dk and the determination of the usage time are established. A determination unit 33 determines whether it is necessary to adjust the time of the timer 30 when the determination of the usage time is not established. An adjusting unit 35 resets the time of the timer 30 when the determination unit 33 determines that the time of the timer 30 is to be adjusted.SELECTED DRAWING: Figure 1

Description

The present invention relates to an authentication system, a wireless authentication device, and an authentication method that authenticate a terminal and operate it as a key.

Conventionally, an authentication system for operating a vehicle by using a terminal such as a high-performance mobile phone as a vehicle key is well known (see Patent Document 1 and the like). In this type of authentication system, a wireless authentication device capable of authenticating the terminal is provided in the vehicle, and the terminal is authenticated by short-range wireless communication between the wireless authentication device and the terminal. Then, if the authentication of the terminal shifts to the establishment, for example, the locking / unlocking of the vehicle door and the starting operation of the engine are permitted, and the vehicle can be driven.

Japanese Unexamined Patent Publication No. 2012-22591

It is considered that this kind of authentication system is used, for example, for a car sharing service in which one vehicle is shared by a plurality of people. In this service, for example, a user's terminal is connected to the service via the Internet, various necessary items are input to the terminal, and a vehicle usage reservation is made. At the time of this usage reservation procedure, the key information is given to the terminal from the server. Then, when using the vehicle, the terminal and the wireless authentication device are made to perform short-range wireless communication to authenticate the key information, and when the authentication of the key information is established, the vehicle can be used.

By the way, in order to realize this service, it is necessary to confirm whether or not the current time has passed the reservation usage start time at the time of key information authentication. In this time confirmation, for example, a timer or the like is provided in the wireless authentication device, and the usage start time acquired at the time of key information authentication is confirmed by the timer of the wireless authentication device. Then, if the current time has passed the reservation usage start time, the vehicle can be used.

However, the timer of the wireless authentication device may not set the correct time due to a temporary error, processing delay, or the like. Therefore, the user may not be able to use the reserved vehicle, and the convenience may be significantly reduced.

An object of the present invention is to provide an authentication system, a wireless authentication device, and an authentication method that enable user convenience to be ensured.

The authentication system that solves the above-mentioned problems uses the operation target while authenticating the key information by short-range wireless communication between the wireless authentication device provided in the operation target and the terminal in which the key information is registered. The time is compared with the time of the timer of the wireless authentication device, and the establishment of the authentication of the key information and the establishment of the determination of the usage time are the conditions for using the terminal as the key to be operated. When the determination of the usage time is unsuccessful, the determination unit determines whether or not the time of the timer needs to be adjusted, and the determination unit determines that the time of the timer should be adjusted. In some cases, it is provided with an adjusting unit for resetting the time of the timer.

The wireless authentication device that solves the above-mentioned problem compares the usage time of the operation target with the time of the timer while authenticating the key information with the terminal in which the key information is registered by short-range wireless communication. The configuration is such that the establishment of the authentication of the key information and the establishment of the determination of the usage time are the conditions for using the terminal as the key of the operation target, and the determination of the usage time is not established. A determination unit that determines whether or not the timer time needs to be adjusted, and an adjustment unit that resets the timer time when the determination unit determines that the timer time should be adjusted. Prepared.

The authentication method for solving the above problem is to use the operation target while authenticating the key information by short-range wireless communication between the wireless authentication device provided in the operation target and the terminal in which the key information is registered. It is a method in which the time is compared with the time of the timer of the wireless authentication device, and the establishment of the authentication of the key information and the establishment of the determination of the usage time are the conditions for using the terminal as the key to be operated. Therefore, when the determination of the usage time is unsuccessful, the determination unit determines whether or not it is necessary to adjust the time of the timer, and the time of the timer should be adjusted. When the determination is made by the determination unit, the adjustment unit is provided with resetting the time of the timer.

According to the present invention, the convenience of the user can be ensured.

The block diagram of the authentication system of one Embodiment. Procedure diagram of vehicle usage procedure. Procedure diagram for authentication of key information. Key information authentication sequence diagram. Time determination processing flow diagram.

Hereinafter, an embodiment of an authentication system, a wireless authentication device, and an authentication method will be described.
As shown in FIG. 1, the vehicle 2 as the operation target 1 includes an authentication system 5 that executes authentication by short-range wireless communication with a terminal 3 owned by the user to operate the device 4. The authentication system 5 of this example downloads the key information Dk required for authentication from the server 6 to the terminal 3, and enables the terminal 3 to operate the vehicle 2. The terminal 3 is preferably, for example, a high-performance mobile phone. The key information Dk is a kind of key for which authentication is imposed by short-range wireless communication between the vehicle 2 and the terminal 3 when the vehicle 2 is operated by the terminal 3. The key information Dk is preferably a one-time key (one-time password) that is permitted to be used only once or for a certain period of time, for example.

The server 6 includes a function providing unit 7 that enables the terminal 3 to be operated as a key of the vehicle 2. The function providing unit 7 of this example distributes the key information Dk required for obtaining permission to operate the vehicle 2 to the terminal 3 via the network communication unit 8 provided in the server 6. It is preferable that the key information Dk is distributed to the terminal 3 when the key information request is received from the user's terminal 3 through network communication. The network communication is preferably, for example, Internet communication.

The terminal 3 includes a terminal control unit 10 that controls the operation of the terminal 3, an input unit 11 that is used when performing an input operation on the terminal 3, a display unit 12 including a display, and a memory 13 that can store data. It includes a network communication unit 14 that communicates with the outside through network communication, and a short-range wireless module 15 that performs short-range wireless communication. The terminal 3 communicates with the server 6 via the network communication unit 14. The terminal 3 executes short-range wireless communication with the vehicle 2 via the short-range wireless module 15. The display unit 12 is preferably a touch panel, for example.

An application 16 required for operating the terminal 3 as a key of the vehicle 2 is registered in the memory 13 of the terminal 3. The application 16 of this example is an application of a car sharing service that enables a plurality of people to share one vehicle 2 as a sharing car 17. By registering the application 16 in the terminal 3, it is possible to register the key information Dk in the terminal 3 and operate the vehicle 2 in the terminal 3. The application 16 is acquired from, for example, the server 6 through network communication, and is written and stored in the memory 13. The terminal 3 writes and saves the key information Dk received from the server 6 in the memory 13 through the application 16.

The short-range wireless communication may be either PAN (Personal Area Network) communication or short-range wireless communication. Personal area network communication includes, for example, Bluetooth (Bluetooth: registered trademark) communication, UWB (Ultra Wide Band) communication, Wi-Fi (registered trademark) communication, and the like. Further, the Bluetooth communication is preferably BLE (Bluetooth Low Energy). Short-range wireless communication includes, for example, NFC (Near Field Communication) and immobilizer communication.

The vehicle 2 includes a controller 18 that controls the operation of the authentication system 5. The controller 18 has a smart entry (registered trademark) function that does not require the operation of the terminal 3 when getting on and off the vehicle 2, a smart engine start function that does not require the operation of the terminal 3 when starting the engine of the vehicle 2, and the like. Controls the operation of. The controller 18 is connected to the device 4 via a communication line 19 in the vehicle. The communication line 19 is, for example, CAN (Controller Area Network) or LIN (Local Interconnect Network). The device 4 includes, for example, a door locking / unlocking device for switching the locking / unlocking of a vehicle door, an engine of the vehicle 2, and the like.

The outside door handle 21 of the vehicle 2 is provided with a lock button 22 that is operated when the vehicle door is locked from outside the vehicle. The vehicle exterior door handle 21 is provided with a touch sensor 23 that detects a touch operation on the vehicle exterior door handle 21, which is a trigger operation when unlocking the vehicle door. The lock button 22 and the touch sensor 23 are connected to the controller 18. The driver's seat of the vehicle 2 is provided with an engine switch 24 that is operated when the vehicle power supply is changed, and the engine switch 24 is connected to the controller 18. The controller 18 controls the operation of the device 4 based on the authentication result of the user authentication by the authentication system 5.

The vehicle 2 includes a wireless authentication device 27 that executes authentication through short-range wireless communication with the terminal 3. The wireless authentication device 27 is set with an authentication unit 28 that wirelessly authenticates the correctness of the terminal 3, a short-range wireless antenna that executes short-range wireless communication in the vehicle 2 (hereinafter, simply referred to as an antenna 29), and a current time. The timer 30 is provided. When the terminal 3 operates the vehicle 2, the authentication unit 28 authenticates the key information Dk through short-range wireless communication with the terminal 3. The authentication of the key information Dk is preferably, for example, the authentication of whether or not the key information Dk can be correctly decrypted. The timer 30 is, for example, a soft timer, and operates from the battery of the vehicle 2 as a power source.

FIG. 2 illustrates the procedure of the reservation procedure (use procedure) of the vehicle 2 (sharing car 17). In step 101, when a user who wants to use the vehicle 2 executes an operation to start the application 16 of the car sharing service on his / her own terminal 3, this terminal 3 starts the application 16 registered in his / her own memory 13. ..

In step 102, the terminal 3 and the server 6 execute a reservation process for using the car sharing service. As the reservation process, for example, necessary items such as the vehicle 2 that the user wants to use and the usage time (use start time / use end time) of the vehicle 2 are input to the terminal 3. When the reservation input is completed, the terminal 3 transmits various items input in this reservation operation to the server 6 as reservation information through network communication. When the server 6 receives the reservation information from the terminal 3, the server 6 accepts the reservation for using the parking lot from the user.

In step 103, after the reservation process, the terminal 3 transmits a key information request requesting distribution of the key information Dk, which is the key of the vehicle 2, to the server 6 via network communication. It is preferable that the key information request includes a command for requesting key information issuance, a unique ID (terminal ID) possessed by the terminal 3, and the like.

In step 104, when the function providing unit 7 of the server 6 receives the key information request from the terminal 3, the key information Dk is generated based on the key information request, and the key information Dk is transmitted to the terminal 3 through network communication. Send. The key information Dk includes a usage time (use start time / usage end time) of the key information Dk, a unique terminal ID possessed by the terminal 3, a predetermined session key used for short-range wireless communication communication, and the like. Is preferable.

In step 105, when the terminal 3 receives the key information Dk from the server 6, the terminal 3 stores the key information Dk in the memory 13. As a result, the key information Dk necessary for using the vehicle 2 is registered in the terminal 3.

FIG. 3 illustrates an example of an authentication procedure for the key information Dk registered in the terminal 3. In step 201 of the figure, the authentication unit 28 of the wireless authentication device 27 periodically and repeatedly transmits advertisements for notifying information related to communication of the own device. The advertisement is a signal for notifying the terminal 3 of information related to the communication of the own machine from the authentication unit 28.

In step 202, when the terminal 3 receives the advertisement transmitted from the wireless authentication device 27, the terminal 3 executes the scan process if the received signal strength at the time of receiving the advertisement is equal to or higher than the connection threshold value. The scan process is a process in which the terminal 3 requests and acquires the wireless authentication device 27 by requesting the wireless authentication device 27 to provide details related to the details of the short-range wireless communication.

In step 203, after the scan process, the terminal 3 transmits a connection request for connecting the short-range wireless communication to the wireless authentication device 27 through the short-range wireless communication in order to perform pairing with the wireless authentication device 27.

In step 204, when the authentication unit 28 of the wireless authentication device 27 receives the connection request from the terminal 3, the response notification to the connection request is transmitted to the terminal 3 via short-range wireless communication.

In step 205, when the above pairing is correctly executed, the authentication unit 28 of the wireless authentication device 27 and the terminal 3 are in a state of communication connection to which Bluetooth communication is connected.
In step 206, when the Bluetooth is in the communication connection state, the terminal 3 transmits the key information Dk registered in the memory 13 to the wireless authentication device 27 through short-range wireless communication.

In step 207, the authentication unit 28 of the wireless authentication device 27 executes the authentication of the key information Dk received from the terminal 3. In the case of this example, when the authentication of the key information Dk is established because the authentication unit 28 can correctly decrypt the key information Dk, for example, the usage time (use start time / use end time) of the reserved vehicle or It is possible to acquire the session key used in the subsequent short-range wireless communication and the terminal ID which is a unique ID of the terminal 3. On the other hand, if the authentication of the key information Dk is unsuccessful, the authentication unit 28 waits as it is and does not allow the vehicle operation by the terminal 3.

Further, when the authentication unit 28 obtains the reserved usage time by decrypting the key information Dk, the authentication unit 28 compares the time of the timer 30 with the usage start time of the vehicle 2 to obtain the usage time of the vehicle 2 (key information Dk). Judgment is executed. If the current time of the timer 30 has elapsed the usage start time of the vehicle 2, the authentication unit 28 processes the determination of the usage time as established. Further, the authentication unit 28 executes terminal ID verification by comparing the terminal ID acquired by decrypting the key information Dk with the terminal ID of the terminal 3 currently in the communication state. In this way, the authentication unit 28 confirms whether or not the key information Dk can be normally decrypted, whether or not the determination of the usage time is established, and whether or not the terminal ID verification is established as the authentication of the key information Dk. do.

In step 208, when the authentication unit 28 of the wireless authentication device 27 confirms that the authentication of the key information Dk is established, the key information authentication establishment notification notifying that fact is transmitted to the terminal 3 via short-range wireless communication.

In step 209, when the terminal 3 receives the key information authentication establishment notification transmitted from the wireless authentication device 27, both the terminal 3 and the wireless authentication device 27 are in the authentication completion state recognizing the authentication establishment. The authentication completion state means a state in which both the terminal 3 and the wireless authentication device 27 know the session key and the terminal ID common to each other. This enables vehicle operation (door lock / unlock operation and engine start operation) using the terminal 3.

When locking / unlocking the vehicle door, the terminal 3 and the wireless authentication device 27 are moved to the authentication completed state, and then the vehicle door is locked / unlocked. For example, when the short-range wireless communication is reconnected after the authentication of the key information Dk has already been completed, the terminal 3 and the wireless authentication device 27 are authenticated by the session key acquired at the time of decrypting the key information Dk. Is preferable. Then, if the authentication by the session key is established, the terminal 3 and the wireless authentication device 27 shift to the authentication completed state.

In the case of smart entry, the unlocking is started, for example, by a touch operation of the outside door handle 21 of the vehicle door as a trigger. Further, the lock is started by the operation of the lock button 22 of the door handle 21 outside the vehicle.

When the controller 18 detects, for example, the touch operation of the vehicle door handle 21 of the vehicle door by the touch sensor 23 or the operation of the lock button 22 of the vehicle door handle 21, the wireless authentication device 27 shifts to the authentication completed state. Check if it is done. The controller 18 permits the locking and unlocking of the vehicle door when the wireless authentication device 27 is in the authentication completed state. Therefore, if the vehicle door is in the locked state, unlocking of the vehicle door by touch operation of the outside door handle 21 is permitted, and if the vehicle door is in the unlocked state, the vehicle is operated by operating the lock button 22 of the outside door handle 21. Doors are allowed to be locked. On the other hand, the controller 18 disallows the operation of locking / unlocking the vehicle door unless the wireless authentication device 27 is in the authentication completed state.

Here, if the vehicle door is in the locked state, the vehicle door is switched to unlock by the touch operation of the outside door handle 21. As a result, the user can open the vehicle door and get on the vehicle 2. Further, when the vehicle door is in the released state, the vehicle door is switched to lock by operating the lock button 22 of the outside door handle 21. This allows the user to keep the vehicle door locked.

When starting the engine, the terminal 3 and the wireless authentication device 27 are moved to the authentication completed state, and then the engine switch 24 is pushed while the brake pedal is depressed. In this way, even when the engine is started, the terminal 3 and the wireless authentication device 27 are first moved to the authentication completed state in the same manner as when the vehicle door is locked and unlocked.

When the controller 18 detects that, for example, the engine switch 24 has been operated, the controller 18 confirms whether or not the wireless authentication device 27 has transitioned to the authentication completion state. If the wireless authentication device 27 is in the authentication completed state, the controller 18 permits the transition of the vehicle power supply by the operation of the engine switch 24. This makes it possible to drive and drive the vehicle 2 by starting the engine of the vehicle 2. On the other hand, the controller 18 disallows the transition of the vehicle power supply by the operation of the engine switch 24 unless the wireless authentication device 27 is in the authentication completed state.

As shown in FIG. 1, the authentication system 5 adjusts the time of the timer 30 of the wireless authentication device 27 when the determination of the usage time (use start time of the vehicle 2) of the vehicle 2 (key information Dk) is unsuccessful. A determination unit 33 for determining whether or not it is necessary is provided. The determination unit 33 is provided in the wireless authentication device 27. The determination unit 33 determines that the time of the timer 30 should be reset when the number of times Nx for which the authentication of the key information Dk is established but the determination of the usage time is not established is equal to or greater than the specified number of times Nk. In particular, the determination unit 33 of this example determines that the time of the timer 30 should be reset when the failure of the determination of the usage time becomes Nk or more a specified number of times in different usage times. The determination unit 33 counts the number of times Nx of the usage time error by the counter 34 provided in the wireless authentication device 27.

The authentication system 5 includes an adjusting unit 35 that resets the time of the timer 30 when the determination unit 33 determines that the time of the timer 30 should be adjusted. The adjusting unit 35 includes a first adjusting unit 35a provided on the wireless authentication device 27 side and a second adjusting unit 35b provided on the server 6 side. The adjusting unit 35 of this example acquires the time data Dt from the external server 6 by network communication, and resets the time of the timer 30 based on the time data Dt.

Next, the operation of the authentication system 5 of the present embodiment will be described.
FIG. 4 illustrates a specific example of the authentication sequence of the key information Dk. As shown in the figure, when the key information request is transmitted from the terminal 3 to the server 6 via the network in step 301, the terminal 3 and the server 6 execute the generation and acquisition of the key information Dk (first key information). Generation of Dk). This is, for example, the processing of the above-mentioned steps 103 to 105 (note that steps 101 and 102 may be included).

In step 302, when the terminal 3 enters the communication area of the short-range wireless communication of the wireless authentication device 27, the terminal 3 and the wireless authentication device 27 shift to the state of the short-range wireless communication of the communication connection.

In step 303, the terminal 3 and the wireless authentication device 27 execute the authentication of the key information Dk registered in the terminal 3. In the case of this example, the key information Dk is wirelessly transmitted from the terminal 3 to the wireless authentication device 27, and it is confirmed whether or not the key information Dk can be correctly decoded by the wireless authentication device 27.

In step 304, when the key information Dk is authenticated, the determination unit 33 increments, for example, the counter 34 provided in the wireless authentication device 27. In the case of this example, the determination unit 33 advances the counter value of the counter 34 by "1" when the key information Dk is authenticated.

In step 305, when it is determined in the authentication of the key information Dk that the current time of the timer 30 is not within the reserved usage time, the wireless authentication device 27 notifies the terminal 3 of an error outside the usage time by short-range wireless communication. Send to. That is, in the wireless authentication device 27, when the current time of the timer 30 does not elapse the reservation usage time (reservation start time / reservation end time) obtained by the authentication of the key information Dk, the key information Dk is out of the usage time. The error notification outside the usage time is transmitted to the terminal 3 by short-range radio.

In step 306, when the terminal 3 receives the error notification outside the usage time from the wireless authentication device 27, the terminal 3 and the server 6 again execute the generation and acquisition of the key information Dk (the generation of the second key information Dk). ). At this time, the function providing unit 7 of the server 6 changes the usage time of the reservation to generate the key information Dk. In this way, the same key information Dk is set so that it cannot be reissued. This is to prevent unauthorized use of the key information Dk.

In step 307, when the terminal 3 enters the communication area of the short-range wireless communication of the wireless authentication device 27, the terminal 3 and the wireless authentication device 27 shift to the state of the short-range wireless communication of the communication connection.

In step 308, the terminal 3 and the wireless authentication device 27 execute the authentication of the key information Dk registered in the terminal 3. The authentication of the key information Dk at this time is the same authentication of the first key information Dk.

In step 309, the adjusting unit 35 executes a process of resetting the time of the timer 30 when the wireless authentication device 27 receives the key information Dk having different usage times from the same terminal 3 for a specified number of times Nk or more. In the case of this example, when the adjusting unit 35 confirms that when the key information Dk is decoded, the key information Dk having the same terminal ID but different usage time is received for a specified number of times Nk or more, the time of the timer 30 is set. Judge that it should be reset. In the case of this example, the adjusting unit 35 cooperates with the terminal 3, the server 6, and the wireless authentication device 27 to readjust the time of the timer 30. The communication executed for adjusting the timer time is preferably encrypted communication.

At this time, the first adjustment unit 35a of the wireless authentication device 27 transmits a time reset request requesting notification of the time to be reset to the server 6 via the terminal 3. The time reset request is encrypted and transmitted by the session key obtained by decrypting the key information Dk in the terminal 3 and the wireless authentication device 27, and both of them are transmitted between the server 6 and the wireless authentication device 27. It is preferable that the message is encrypted by a predetermined encryption key set in between and transmitted.

When the second adjusting unit 35b of the server 6 receives the time reset request from the wireless authentication device 27 via the terminal 3, the second adjusting unit 35b receives the time data Dt as the current time data to be set in the timer 30 and the wireless authentication device via the terminal 3. Send to 27. The time data Dt is preferably data including a command for designating the destination terminal 3 and current time information. The time data Dt is encrypted and transmitted between the server 6 and the wireless authentication device 27 by a predetermined encryption key set between them, and the key information Dk is transmitted between the terminal 3 and the wireless authentication device 27. It is preferable that the data is encrypted and transmitted by the session key obtained by decrypting the data.

When the first adjusting unit 35a receives the time data Dt transmitted from the server 6, the first adjusting unit 35a resets the time of the timer 30 based on the time data Dt. After resetting the timer 30, the authentication unit 28 compares the time reset in the timer 30 with the reserved usage time obtained by decoding the second key information Dk, and the time of the timer 30 is set. Check again whether the usage time has passed. Here, since the timer 30 has been adjusted to the correct time, it is determined that the current time of the timer 30 has elapsed the usage time of the reservation. Therefore, the authentication unit 28 recognizes that the time of the timer 30 has elapsed the reserved usage time as well as the authentication of the key information Dk. Therefore, the authentication unit 28 recognizes that the key information Dk is valid, and permits the transition to the authentication completion state.

In step 310, the determination unit 33 resets the counter 34 when it is determined that the key information Dk is valid. That is, the determination unit 33 returns the counter value of the counter 34 to “0”.

When the terminal 3 and the wireless authentication device 27 recognize in step 311 that the current time of the timer 30 has elapsed the reserved usage time, the terminal 3 and the wireless authentication device 27 shift to the authentication completion state. As a result, the terminal 3 can operate the vehicle 2.

FIG. 5 illustrates the time determination processing flow. As shown in the figure, in step 401, when the authentication unit 28 in the wireless authentication device 27 receives the key information Dk from the terminal 3 by short-range wireless communication, the authentication unit 28 authenticates the key information Dk. Here, for example, it is determined whether or not the key information Dk can be normally decoded.

In step 402, the authentication unit 28 determines whether or not the time is stored in the timer 30 of the wireless authentication device 27. That is, the authentication unit 28 determines the presence / absence of time information in the timer 30 of the wireless authentication device 27. This is to ensure the convenience of the user by permitting the vehicle operation on the terminal 3 when the time information unexpectedly blanks from the timer 30 of the wireless authentication device 27. In the same step, if the timer 30 of the wireless authentication device 27 does not store the time, the process proceeds to step 403, and if the timer 30 of the wireless authentication device 27 stores the time, the process proceeds to step 404.

In step 403, the authentication unit 28 determines that the key information Dk for which authentication has been established is valid. As a result, the terminal 3 shifts to the authentication completed state, and the vehicle 2 can be operated by the terminal 3.

In step 404, the authentication unit 28 determines whether or not the current time of the timer 30 is within the reserved usage time. That is, the authentication unit 28 determines whether or not the current time of the timer 30 has elapsed the reservation usage time (reservation start time / reservation end time) acquired by decrypting the key information Dk. If the current time of the timer 30 is within the reserved usage time, the process proceeds to step 403 and it is determined that the key information Dk is valid. On the other hand, if the current time of the timer 30 is not within the reserved usage time, the process proceeds to step 405.

In step 405, if the current time of the timer 30 is not within the reserved usage time, the determination unit 33 determines whether or not the usage time is the same as the previous reception time. That is, in order to monitor the unauthorized use of the key information Dk, it is determined whether or not the key information Dk received this time is not the same as the key information Dk at the time of the previous reception. If the usage time is different from the previously received key information Dk, the process proceeds to step 406, and if the usage time is the same as the previously received key information Dk, the process proceeds to step 411.

In step 406, the determination unit 33 increments the counter 34 when the key information Dk is authenticated. In the case of this example, the determination unit 33 advances the counter value of the counter 34 by "1" when the key information Dk is authenticated.

In step 407, the determination unit 33 determines whether or not the value of the counter 34 is equal to or greater than the specified number of times Nk set as the threshold value for the number of out-of-hours errors. That is, the determination unit 33 determines whether or not the number of errors Nx outside the usage time has reached the specified number of times Nk or more. At this time, if the value of the counter 34 is the specified number of times Nk or more, the process proceeds to step 408, and if the value of the counter 34 is less than the specified number of times Nk, the process proceeds to step 411.

In step 408, the adjusting unit 35 resets the time of the timer 30. In the case of this example, the adjusting unit 35 acquires the time data Dt from the server 6 and adjusts the time of the timer 30 based on the time data Dt to reset the current time of the timer 30.

In step 409, the determination unit 33 resets the counter 34 when it is determined that the key information Dk is valid. That is, the determination unit 33 returns the counter value of the counter 34 to “0”.

In step 410, the authentication unit 28 determines whether or not the current time of the timer 30 is within the reserved usage time. That is, the authentication unit 28 determines whether or not the current time of the timer 30 has elapsed the reservation usage time (reservation start time / reservation end time) acquired by decrypting the key information Dk. If the current time of the timer 30 is within the reserved usage time, the process proceeds to step 403 and it is determined that the key information Dk is valid. On the other hand, if the current time of the timer 30 is not within the reserved usage time, the process proceeds to step 411.

In step 411, if the current time of the timer 30 is not within the reserved usage time, the authentication unit 28 determines that the error is outside the usage time. In the case of this example, if the authentication unit 28 determines that the error is outside the usage time, the authentication unit 28 transmits an error notification outside the usage time to the terminal 3 by short-range wireless communication. As a result, the terminal 3 reacquires the key information Dk from the server 6, and repeats the above-mentioned authentication of the key information Dk and determination of the usage time again.

According to the authentication system 5 of the above embodiment, the following effects can be obtained.
(1) The authentication system 5 authenticates the key information Dk between the terminal 3 and the wireless authentication device 27 by short-range wireless communication, and sets the usage time of the vehicle 2 (key information Dk) to the timer of the wireless authentication device 27. Compared with the time of 30, the establishment of the authentication of the key information Dk and the establishment of the determination of the usage time are the conditions for using the terminal 3 as the key of the vehicle 2. The determination unit 33 determines whether or not it is necessary to adjust the time of the timer 30 when the determination of the usage time is unsuccessful. The adjusting unit 35 resets the time of the timer 30 when the determination unit 33 determines that the time of the timer 30 should be adjusted.

According to the configuration of this example, when the determination of the usage time of the vehicle 2 is unsuccessful, when the determination unit 33 determines that the time of the timer 30 of the wireless authentication device 27 should be adjusted, the time of the timer 30 is set. It is reset by the adjusting unit 35. Therefore, since the time of the timer 30 of the wireless authentication device 27 is set to the correct time, the determination of the usage time is not treated as unsuccessful even though the determination of the usage time is normally established. Therefore, the convenience of the user can be ensured.

(2) The determination unit 33 determines that the time of the timer 30 should be reset when the number of times Nx for which the authentication of the key information Dk is established but the determination of the usage time is not established becomes Nk or more the specified number of times. .. In this case, it is possible to determine whether or not the time of the timer 30 should be reset by a simple method of confirming the number of times that the determination is not established (overtime error) in the determination of the usage time.

(3) The determination unit 33 determines that the time of the timer 30 should be reset when the failure of the determination of the usage time becomes Nk or more a specified number of times in different usage times. By the way, when the determination of the usage time of the vehicle 2 fails (overtime error), the key information Dk including the usage time whose time has been changed is generated again, and the authentication of the key information Dk is retried. Therefore, the key information Dk for which the determination of the usage time is unsuccessful even once is invalidated and cannot be used thereafter, so that the security against the unauthorized establishment of the authentication of the key information Dk can be ensured. Further, by utilizing the feature of the key information Dk that takes such a generation logic, it is possible to accurately determine whether or not the time of the timer 30 should be reset.

(4) The adjusting unit 35 acquires the time data Dt from the external server 6 by network communication, and resets the time of the timer 30 based on the time data Dt. In this case, since the time data Dt is obtained from the server 6 and the time of the timer 30 is adjusted, it is advantageous to reset the time correctly.

(5) The operation target 1 is a sharing car 17 shared among a plurality of users. The key information Dk is given to the terminal 3 when the terminal 3 makes a reservation for using the sharing car 17. According to this configuration, even if the time of the timer 30 of the wireless authentication device 27 is deviated when the sharing car 17 is used, the time can be reset, so that the timer 30 is corrected to the correct time. Therefore, the sharing car 17 can be used as intended.

In addition, this embodiment can be changed and carried out as follows. The present embodiment and the following modified examples can be implemented in combination with each other within a technically consistent range.
[Key information Dk and key information Dk authentication]
-The key information Dk is not limited to the one-time key (one-time password), and various keys can be applied.

The key information Dk is not limited to being distributed from the server 6 to the terminal 3, and may be distributed to the terminal 3 from a place other than the server 6, for example, being given from another terminal 3.
-Authentication of the key information Dk is not limited to decryption of the key information Dk, and may be any authentication that can confirm the correctness of the key information Dk.

[Conditions for using terminal 3 as a key]
-The conditions under which the terminal 3 can be used as a key may include at least the authentication of the key information Dk and the determination of the usage time of the vehicle 2.

-The conditions under which the terminal 3 can be used as a key may include various authentications and determinations such as authentication using a rolling code.
[About the key function of terminal 3]
The key function is not limited to the authentication system 5, and any system may be used as long as the terminal 3 can be used as the key of the vehicle 2.

-The key function is not limited to the key authentication required for locking / unlocking the vehicle door and permitting the start of the engine, and includes various operations related to the vehicle 2 such as opening / closing the sliding door and opening the trunk.
[About the judgment unit 33 and the adjustment unit 35]
-The number of times Nx in which the determination of the usage time is not established is not limited to the number of consecutive failures, and may be discontinuous.

The determination unit 33 and the adjustment unit 35 may be provided at locations other than those shown in the examples.
[others]
-The vehicle 2 is not limited to the sharing car 17 shared by a plurality of people, and may be a vehicle determined by the vehicle user.

-The function providing unit 7 is not limited to being provided in the server 6, but may be provided in another terminal or the like.
-The operation target 1 is not limited to the vehicle 2, and may be any device or device that can be operated using the terminal 3 as a key.

1 ... Operation target, 2 ... Vehicle, 3 ... Terminal, 5 ... Authentication system, 17 ... Sharing car, 27 ... Wireless authentication device, 30 ... Timer, 33 ... Judgment unit, 35 ... Adjustment unit, 35a ... First adjustment unit , 35b ... 2nd adjustment unit, Dk ... key information, Nx ... number of times, Nk ... specified number of times, Dt ... time data.

Claims (7)

While authenticating the key information by short-range wireless communication between the wireless authentication device provided in the operation target and the terminal in which the key information is registered, the usage time of the operation target is set to the time of the timer of the wireless authentication device. This is an authentication system in which the establishment of the authentication of the key information and the establishment of the determination of the usage time are the conditions for using the terminal as the key to be operated.
A determination unit that determines whether or not it is necessary to adjust the time of the timer when the determination of the usage time is unsuccessful.
An authentication system including an adjusting unit that resets the time of the timer when the determination unit determines that the time of the timer should be adjusted. According to claim 1, the determination unit determines that the time of the timer should be reset when the number of times the key information authentication is established but the usage time determination is not established exceeds the specified number of times. The authentication system described. The authentication system according to claim 2, wherein the determination unit determines that the time of the timer should be reset when the failure to determine the usage time is equal to or greater than the specified number of times in different usage times. The authentication system according to any one of claims 1 to 3, wherein the adjusting unit acquires time data from an external server by network communication and resets the time of the timer based on the time data. The operation target is a sharing car shared among a plurality of users.
The authentication system according to any one of claims 1 to 4, wherein the key information is given to the terminal when a reservation for use of the sharing car is made at the terminal. While authenticating the key information with the terminal in which the key information is registered by short-range wireless communication, the usage time of the operation target is compared with the time of the timer, and the authentication of the key information is established and the usage time is determined. It is a wireless authentication device that is a condition that the establishment of the determination is used as the key of the operation target.
A determination unit that determines whether or not it is necessary to adjust the time of the timer when the determination of the usage time is unsuccessful.
A wireless authentication device including an adjusting unit for resetting the time of the timer when the determination unit determines that the time of the timer should be adjusted. While authenticating the key information by short-range wireless communication between the wireless authentication device provided in the operation target and the terminal in which the key information is registered, the usage time of the operation target is set to the time of the timer of the wireless authentication device. This is an authentication method in which the establishment of the authentication of the key information and the establishment of the determination of the usage time are the conditions for using the terminal as the key to be operated.
When the determination of the usage time is unsuccessful, the determination unit determines whether or not it is necessary to adjust the time of the timer.
An authentication method comprising resetting the timer time when the determination unit determines that the timer time should be adjusted.

Images