JP2023063833A - Authentication system, processing apparatus, computer program, and update method - Google Patents

Abstract

To provide an authentication system which permits the use of a mobile body by authenticating a mobile device which can be carried by a user, the authentication system being configured to improve convenience in renewing the mobile device.SOLUTION: After succeeding in authentication processing of a first mobile device 41 using first authentication information AU1 for obtaining permission of operation control of a controlled device mounted on a mobile body, the first mobile device 41 transmits a change request signal CR for changing a target to be subjected to the authentication processing from the first mobile device 41 to a second mobile device 42. The second mobile device 42 receives, from a processing apparatus 12 which permits the operation control of the controlled device based on the authentication processing, confirmation information VR transmitted as a response to the change request signal CR. The second mobile device 42 transmits the confirmation information VR to the processing apparatus 12 to permit the processing apparatus 12 to update the first authentication information AU1 stored in a server device 13 to second authentication information AU2. The second mobile device 42 receives the second authentication information AU2 from the server device 13.SELECTED DRAWING: Figure 3

Description

The present invention relates to authentication systems using mobile devices that can be carried by users. The present invention also relates to a processing device that may form part of the authentication system and a computer program executable by a processing unit installed in the processing device. The present invention also relates to a method of updating authentication information performed by a first mobile device and a second mobile device portable by a user.

Patent Literature 1 discloses a control device mounted on a vehicle as an example of a moving body for performing authentication processing of a mobile device carried by a user. When the authentication process is established, the control device permits the user to use various controlled devices mounted on the vehicle.

JP 2015-085899 A

SUMMARY OF THE INVENTION It is an object of the present invention to improve convenience when changing the model of a mobile device in an authentication system that permits the use of a mobile device by authenticating a portable mobile device.

One aspect for achieving the above object is an authentication system,
a server device storing first authentication information identifying a first mobile device capable of being carried by a user;
The device is mounted on a moving body and has a storage unit that stores the first authentication information, and is mounted on the moving body based on authentication processing for authenticating the first mobile device using the first authentication information. a processing device that permits operation control of a controlled device that is
and
The processing device is
when receiving a change request for changing the target of the authentication process from the first mobile device to the second mobile device after the authentication process is established, transmitting confirmation information to the second mobile device;
permitting update of the first authentication information stored in the server device to second authentication information when the confirmation information is received from the second mobile device;
Updating the first authentication information stored in the storage unit to the second authentication information enables an authentication process for authenticating the second mobile device using the second authentication information.

One aspect for achieving the above object is an authentication system,
a server device storing first authentication information identifying a first mobile device capable of being carried by a user;
The device is mounted on a moving body and has a storage unit that stores the first authentication information, and is mounted on the moving body based on authentication processing for authenticating the first mobile device using the first authentication information. a processing device that permits operation control of a controlled device that is
and
The processing device is
When a change request for changing the target of the authentication process from the first mobile device to the second mobile device is accepted after the authentication process is established, a notification permitting the issuance of confirmation information is transmitted to the first mobile device. death,
permitting update of the first authentication information stored in the server device to second authentication information when the confirmation information is received from the second mobile device;
Updating the first authentication information stored in the storage unit to the second authentication information enables an authentication process for authenticating the second mobile device using the second authentication information.

One aspect for achieving the above object is a processing device mounted on a moving object,
a storage unit for storing first authentication information identifying a first mobile device capable of being carried by a user;
a processing unit that permits operation control of the controlled device mounted on the mobile object based on authentication processing for authenticating the first mobile device using the first authentication information;
a reception department;
and
The processing unit is
if the reception unit receives a change request for changing the target of the authentication process from the first mobile device to the second mobile device after the authentication process is established, sending confirmation information to the second mobile device;
permitting update of the first authentication information stored in the server device to the second authentication information when the reception unit receives the confirmation information from the second mobile device;
Updating the first authentication information stored in the storage unit to the second authentication information enables an authentication process for authenticating the second mobile device using the second authentication information.

One aspect for achieving the above object is a processing device mounted on a moving object,
a storage unit for storing first authentication information identifying a first mobile device capable of being carried by a user;
a processing unit that permits operation control of the controlled device mounted on the mobile object based on authentication processing for authenticating the first mobile device using the first authentication information;
a reception department;
and
The processing unit is
If the reception unit receives a change request for changing the target of the authentication process from the first mobile device to the second mobile device after the authentication process is established, the notification permitting the issuance of confirmation information is sent to the first mobile device. to the mobile device,
permitting update of the first authentication information stored in the server device to the second authentication information when the reception unit receives the confirmation information from the second mobile device;
Updating the first authentication information stored in the storage unit to the second authentication information enables an authentication process for authenticating the second mobile device using the second authentication information.

One aspect for achieving the above object is a computer program that includes a storage unit and is executable by a processing unit of a processing device mounted on a mobile body,
By being executed, the processing device
Execution of authentication processing for authenticating the first mobile device using the first authentication information in a state in which the storage unit stores the first authentication information specifying the first mobile device that can be carried by the user. death,
when receiving a change request for changing the target of the authentication process from the first mobile device to the second mobile device after the authentication process is established, transmitting confirmation information to the second mobile device;
permitting update of the first authentication information stored in the server device to the second authentication information when the confirmation information is received from the second mobile device;
Updating the first authentication information stored in the storage unit to the second authentication information enables an authentication process for authenticating the second mobile device using the second authentication information.

One aspect for achieving the above object is a computer program that includes a storage unit and is executable by a processing unit of a processing device mounted on a mobile body,
By being executed, the processing device
Execution of authentication processing for authenticating the first mobile device using the first authentication information in a state in which the storage unit stores the first authentication information specifying the first mobile device that can be carried by the user. death,
if a change request for changing the target of the authentication process from the first mobile device to the second mobile device is received, sending a notification permitting the issuance of confirmation information to the first mobile device;
permitting update of the first authentication information stored in the server device to the second authentication information when the confirmation information is received from the second mobile device;
Updating the first authentication information stored in the storage unit to the second authentication information enables an authentication process for authenticating the second mobile device using the second authentication information.

One aspect of achieving the above object is a method of updating authentication information performed by a first mobile device and a second mobile device portable by a user, comprising:
After the authentication process of the first mobile device is established using the first authentication information to obtain permission to control the operation of the controlled device mounted on the mobile body, the target of the authentication process is the first mobile device. sending by said first mobile device a change request to change from to said second mobile device;
A response to the change request from a processing device that is mounted on the moving object and has a storage unit that stores the first authentication information and that permits operation control of the controlled device based on the authentication process. receiving by the second mobile device confirmation information transmitted as
causing the processing device to allow the first authentication information stored on a server device to update to the second authentication information by transmitting the confirmation information by the second mobile device to the processing device;
The second authentication information is received by the second mobile device from the server device.

One aspect of achieving the above object is a method of updating authentication information performed by a first mobile device and a second mobile device portable by a user, comprising:
After the authentication process of the first mobile device is established using the first authentication information to obtain permission to control the operation of the controlled device mounted on the mobile body, the target of the authentication process is the first mobile device. sending by said first mobile device a change request to change from to said second mobile device;
A response to the change request from a processing device that is mounted on the moving object and has a storage unit that stores the first authentication information and that permits operation control of the controlled device based on the authentication process. receiving by the first mobile device a signal of permission to issue confirmation information transmitted as
transmitting confirmation information based on the authorization to issue signal to the second mobile device by the first mobile device;
causing the processing device to allow the first authentication information stored on a server device to update the second authentication information by transmitting the confirmation information by the second mobile device to the processing device;
The second authentication information is received by the second mobile device from the server device.

According to the configuration according to each of the above aspects, when updating the authentication information accompanying the model change from the first mobile device to the second mobile device, it is issued on the condition that the authentication processing of the first mobile device is established. Security based on two-factor authentication can be ensured because the confirmation information to be authenticated must be sent from the second mobile device.

On the other hand, the operations required of the user to share the second authentication information between the processing device, the server device, and the second mobile device are at least transmission of a modification request signal from the first mobile device, is the transmission of confirmation information from to the processor. Since the operation input can be minimized, the burden on the user involved in the update work can be greatly reduced.

Therefore, in an authentication system that permits the use of a mobile device by authenticating a user's portable mobile device, it is possible to improve convenience when changing the model of the mobile device.

1 illustrates the configuration of an authentication system according to one embodiment; 2 shows an example of the functional configuration of the authentication system of FIG. 1; 3 illustrates the flow of processing performed by the authentication system of FIG. 2; 2 shows another example of the functional configuration of the authentication system of FIG. 1; 5 illustrates the flow of processing performed by the authentication system of FIG. 4; 2 shows another example of the functional configuration of the authentication system of FIG. 1; 7 illustrates the flow of processing performed by the authentication system of FIG. 6; 2 shows another example of the functional configuration of the authentication system of FIG. 1; 9 illustrates the flow of processing performed by the authentication system of FIG. 8;

Exemplary embodiments are described in detail below with reference to the accompanying drawings. In each drawing, the scale is changed as appropriate to make each illustrated element recognizable.

FIG. 1 illustrates the configuration of an authentication system 10 according to one embodiment. The authentication system 10 may be used to authorize the use of the vehicle 20 by the user carrying the mobile device by authenticating the mobile device that the user is capable of carrying. The shape of vehicle 20 is exemplary only. Vehicle 20 is an example of a mobile object.

Authentication system 10 includes a first communication device 111 . In this example, the first communication device 111 is mounted at an appropriate position on the vehicle 20 . The first communication device 111 comprises an antenna capable of performing short-range wireless communication with the first mobile device 41 carried by the user 30 .

As used herein, the term "short-range wireless communication" refers to wireless communication conducted in accordance with standards IEEE 802.15 or IEEE 802.11. Technologies capable of such wireless communication include Bluetooth (registered trademark), Bluetooth Low Energy (registered trademark), Ultra Wide Band (UWB), ZigBee (registered trademark), and Wi-Fi (registered trademark). trademark), etc. "Short-range wireless communication" in this specification is distinguished from "proximity wireless communication" that uses contactless communication technology in which a mobile device transmits information by obtaining minute power from radio waves transmitted from a reader. . RF-ID, NFC, and the like are examples of technologies capable of implementing close proximity wireless communication.

Authentication system 10 includes processing device 12 . The processing device 12 is mounted on the vehicle 20 . The processing device 12 is configured to permit operation control of the locking/unlocking device 21 mounted on the vehicle 20 based on authentication processing for authenticating the first mobile device 41 . The locking/unlocking device 21 is a device for locking/unlocking a door that opens and closes the passenger compartment. The locking/unlocking device 21 is an example of a controlled device.

The user 30 requesting permission to control the operation of the locking/unlocking device 21 causes the first mobile device 41 to communicate with the first communication device 111 . At this time, the first authentication information AU1 is transmitted from the first mobile device 41 to the first communication device 111 . The first authentication information AU1 is information that identifies at least one of the user 30 and the first mobile device 41 .

The first authentication information AU1 may be in the form of analog data or in the form of digital data. This description is applicable to all signals or information transmitted from the first mobile device 41 described below.

As illustrated in FIG. 2 , the processing device 12 includes a storage section 120 . The first authentication information AU1 is stored in the storage unit 120 through a pre-registration procedure. Storage unit 120 can be realized by a semiconductor memory, a hard disk device, or the like.

The processing device 12 has a reception unit 121 . The accepting unit 121 is configured as an interface capable of accepting the first authentication information AU1 from the first mobile device 41 through the first communication device 111 .

If the first authentication information AU1 received by the first communication device 111 is in the form of analog data, the reception unit 121 has an appropriate conversion circuit including an A/D converter. This description is applicable to all signals or information transmitted from the first mobile device 41 described below.

The processing device 12 includes a processing section 122 . The processing unit 122 is configured to collate the first authentication information AU1 received by the receiving unit 121 with the first authentication information AU1 stored in the storage unit 120 . If the two match, the processing unit 122 determines that the authentication processing of the first mobile device 41 has been established.

The processing device 12 has an output unit 123 . The processing unit 122 is configured to output the permission signal EN from the output unit 123 when determining that the authentication processing of the first mobile device 41 is successful. The permission signal EN is a signal that permits the locking/unlocking operation of the door by the locking/unlocking device 21 .

The enable signal EN may be an analog signal or a digital signal. This description is applicable to all signals or information output from the output unit 123 described below.

That is, the output section 123 is configured as an interface capable of outputting the enable signal EN to the locking/unlocking device 21 . If the enable signal EN is an analog signal, the output section 123 has an appropriate conversion circuit including a D/A converter. This description is applicable to all signals or information output from the output unit 123 described below.

For example, the locking/unlocking device 21 can be configured to perform a locking/unlocking operation when a touch sensor built into the doorknob detects that the user 30 has touched the doorknob while the enable signal EN is being input. . Alternatively, the locking/unlocking device 21 may directly execute the locking/unlocking operation upon receiving the enable signal EN.

As illustrated in FIG. 1, authentication system 10 includes server device 13 . The server device 13 is installed at a position remote from the vehicle 20 . The first mobile device 41 is configured to be able to communicate with the server device 13 through communication technology using the mobile phone communication network 50 . Examples of such communication technologies include technologies conforming to standards such as LTE (Long Term Evolution), 4G, and 5G. Communication between the first mobile device 41 and the server device 13 may be performed via an access point for short-range wireless communication.

FIG. 1 illustrates a situation where a user 30 is changing the mobile device to be authenticated from a first mobile device 41 to a second mobile device 42 . The second mobile device 42 is also configured to be able to perform short-range wireless communication with the first communication device 111 and wireless communication with the server device 13 .

In order to use the second mobile device 42 to obtain permission to control the operation of the locking/unlocking device 21 of the vehicle 20, the second authentication information AU2 is shared among the second mobile device 42, the processing device 12, and the server device 13. There is a need to. The second authentication information AU2 is information that identifies at least one of the user 30 and the second mobile device 42 . Specifically, the first authentication information AU1 stored in the server device 13 is updated to the second authentication information AU2, the second authentication information AU2 is acquired by the second mobile device 42, and the storage unit of the processing device 12 The first authentication information AU1 stored in 120 is updated to the second authentication information AU2.

An example of the flow of authentication information update processing executed by the authentication system 10 will be described with reference to FIGS. 2 and 3. FIG.

First, the first authentication information AU1 transmitted from the first mobile device 41 and the first authentication information AU1 stored in the storage unit 120 of the processing device 12 are collated to execute authentication processing of the first mobile device 41 .

After the authentication process is established, the user 30 transmits a change request signal CR from the first mobile device 41 to the first communication device 111 for changing the target of the authentication processing from the first mobile device 41 to the second mobile device 42. do.

The reception unit 121 of the processing device 12 receives the change request signal CR through the first communication device 111 . The processing unit 122 is configured to output the confirmation information VR from the output unit 123 when the reception unit 121 receives the change request signal CR from the first mobile device 41 after the authentication process of the first mobile device 41 is established. there is Verification information VR may be, for example, a one-time passcode. On the other hand, the processing unit 122 stores the confirmation information VR in the storage unit 120. FIG.

The confirmation information VR is sent to the second mobile device 42 through the first communication device 111 . The confirmation information VR is displayed, for example, on a display provided by the second mobile device 42 .

Subsequently, the user 30 performs an operation on the second mobile device 42 to transmit the confirmation information VR to the processing device 12 . The confirmation information VR transmitted from the second mobile device 42 may be in the form of analog data or in the form of digital data. This discussion is applicable to all signals and information transmitted from the second mobile device 42 described below.

The receiving unit 121 of the processing device 12 is configured as an interface capable of receiving the confirmation information VR through the first communication device 111 . If the confirmation information VR received by the first communication device 111 is in the form of analog data, the reception unit 121 is equipped with an appropriate conversion circuit including an A/D converter. This discussion is applicable to all signals and information transmitted from the second mobile device 42 described below.

The processing unit 122 of the processing device 12 collates the confirmation information VR received by the reception unit 121 with the confirmation information VR stored in the storage unit 120 . If the two match, the processing unit 122 outputs from the output unit 123 an update permission signal UP that permits updating of the first authentication information AU1 stored in the server device 13 . The update permission signal UP is sent to the second mobile device 42 through the first communication device 111 .

The second mobile device 42 is configured to transmit an update request signal RQ requesting update of the first authentication information AU1 to the server device 13 upon receiving the update permission signal UP.

The server device 13 is configured to update the first authentication information AU1 to the second authentication information AU2 upon receiving the update request signal RQ from the second mobile device 42 .

The server device 13 is arranged to send the second authentication information AU2 to the second mobile device 42 in response to the update request signal RQ.

The second mobile device 42 is configured to store the received second authentication information AU2 in its own storage unit (not shown) and to transmit it to the processing device 12 .

The processing unit 122 of the processing device 12 is configured to update the first authentication information AU1 stored in the storage unit 120 with the second authentication information AU2 received by the receiving unit 121 through the first communication device 111. . This enables authentication processing to authenticate the second mobile device 42 using the second authentication information AU2.

According to the configuration as described above, when updating the authentication information accompanying the model change from the first mobile device 41 to the second mobile device 42, the condition is that the authentication processing of the first mobile device 41 has been established. Since the verification information VR to be issued needs to be transmitted from the second mobile device 42, security based on two-factor authentication can be ensured.

On the other hand, the operation required of the user 30 to share the second authentication information AU2 among the processing device 12, the server device 13 and the second mobile device 42 is at least the modification request signal CR from the first mobile device 41. and transmission of the confirmation information VR from the second mobile device 42 to the processing device 12 . Since the operation input can be minimized, the burden on the user 30 involved in the update work can be greatly reduced.

Therefore, in the authentication system 10 that permits the use of the vehicle 20 by authenticating the mobile device that the user 30 can carry, it is possible to improve convenience when changing the model of the mobile device.

Next, another example of the flow of authentication information update processing executed by the authentication system 10 will be described with reference to FIGS. 4 and 5. FIG. The same reference numerals are used for the contents common to the processing described with reference to FIGS. 2 and 3, and repeated descriptions are omitted.

In this example, the processing unit 122 of the processing device 12 outputs the confirmation information issuance permission signal GP. The publication authorization signal GP is transmitted to the first mobile device 41 through the first communication device 111 .

The first mobile device 41 is arranged to send confirmation information VR to the second mobile device 42 upon receiving the authorization signal GP. Verification information VR may be, for example, a one-time passcode. The confirmation information VR is displayed, for example, on a display provided by the second mobile device 42 .

On the other hand, the first mobile device 41 also sends the confirmation information VR to the processing device 12 . The processing device 12 is configured to store the confirmation information VR received by the receiving unit 121 through the first communication device 111 in the storage unit 120 .

Subsequently, the user 30 performs an operation on the second mobile device 42 to transmit the confirmation information VR to the processing device 12 . Subsequent processing is the same as the example described with reference to FIGS.

As illustrated in FIG. 1, authentication system 10 may include second communication device 112 . The second communication device 112 can be mounted at any suitable position on the vehicle 20 . The second communication device 112 has an antenna capable of communicating with the server device 13 through communication technology using the mobile phone communication network 50 .

Another example of the flow of authentication information update processing executed by the authentication system 10 configured as described above will be described with reference to FIGS. 6 and 7. FIG. The same reference numerals are used for the contents common to the processing described with reference to FIGS. 2 and 3, and repeated descriptions are omitted.

In this example, the authentication process of the first mobile device 41 that is the starting point of the update process is performed with the server device 13 . The server device 13 compares the first authentication information AU1 transmitted from the first mobile device 41 with the first authentication information AU1 stored in a storage unit (not shown), and performs authentication processing when both match. establish.

After the authentication process is established, the user 30 transmits a change request signal CR from the first mobile device 41 to the server device 13 to change the target of the authentication processing from the first mobile device 41 to the second mobile device 42 .

The server device 13 is arranged to forward the modification request signal CR to the processing device 12 upon receipt of the modification request signal CR from the first mobile device 41 .

The processing unit 122 of the processing device 12 is configured to determine that the authentication processing of the first mobile device 41 has been established based on the fact that the reception unit 121 has received the change request signal CR through the second communication device 112. there is The processing unit 122 is configured to output the confirmation information VR from the output unit 123 when receiving the change request signal CR from the server device 13 . Verification information VR may be, for example, a one-time passcode. On the other hand, the processing unit 122 stores the confirmation information VR in the storage unit 120. FIG.

The confirmation information VR is sent to the second mobile device 42 through the first communication device 111 . The confirmation information VR is displayed, for example, on a display provided by the second mobile device 42 .

Subsequently, the user 30 performs an operation on the second mobile device 42 to transmit the confirmation information VR to the processing device 12 .

The processing unit 122 of the processing device 12 collates the confirmation information VR received by the reception unit 121 through the first communication device 111 with the confirmation information VR stored in the storage unit 120 . If the two match, the processing unit 122 outputs from the output unit 123 an update permission signal UP that permits updating of the first authentication information AU1 stored in the server device 13 . The update permission signal UP is transmitted to the server device 13 through the second communication device 112 .

The server device 13 is configured to update the first authentication information AU1 to the second authentication information AU2 upon receiving the update permission signal UP from the processing device 12 .

The server device 13 is configured to transmit the updated second authentication information AU2 to the second mobile device 42 . The second mobile device 42 stores the received second authentication information AU2 in its own storage unit (not shown).

On the other hand, the server device 13 is configured to transmit the updated second authentication information AU2 to the processing device 12 . The processing unit 122 of the processing device 12 is configured to update the first authentication information AU1 stored in the storage unit 120 with the second authentication information AU2 received by the receiving unit 121 through the second communication device 112. . This enables authentication processing to authenticate the second mobile device 42 using the second authentication information AU2.

According to the configuration as described above, short-range wireless communication between the first mobile device 41 and the processing device 12 can be eliminated. However, similar to the process described with reference to FIG. 3 (as exemplified by the dashed line in FIG. 7), the processing device 12 causes the authentication process of the first mobile device 41, which is the starting point of the update process, to A request signal CR may be sent from the first mobile device 41 to the processing device 12 .

Additionally, short-range wireless communication between the second mobile device 42 and the processing device 12 can be minimized. In particular, by adopting a configuration in which communication related to the confirmation information VR is performed via the server device 13, short-range wireless communication between the second mobile device 42 and the processing device 12 can be made unnecessary. However, similar to the process described with reference to FIG. 3 (as illustrated by the dashed lines in FIG. 7), the second authentication information AU2 received from the server device 13 is transferred from the second mobile device 42 to the processing device 12. You can send it.

Next, another example of the flow of authentication information update processing executed by the authentication system 10 will be described with reference to FIGS. 8 and 9. FIG. The same reference numerals are used for the contents common to the processing described with reference to FIGS. 6 and 7, and repeated descriptions are omitted.

In this example, the processing unit 122 of the processing device 12 is configured to output the confirmation information issue permission signal GP from the output unit 123 when receiving the change request signal CR from the server device 13 . The publication authorization signal GP is transmitted to the first mobile device 41 through the first communication device 111 .

The first mobile device 41 is arranged to send confirmation information VR to the second mobile device 42 upon receiving the authorization signal GP. Verification information VR may be, for example, a one-time passcode. The confirmation information VR is displayed, for example, on a display provided by the second mobile device 42 .

On the other hand, the first mobile device 41 also sends the confirmation information VR to the processing device 12 . The processing device 12 is configured to store the confirmation information VR received by the receiving unit 121 through the first communication device 111 in the storage unit 120 .

Subsequently, the user 30 performs an operation on the second mobile device 42 to transmit the confirmation information VR to the processing device 12 . Subsequent processing is the same as the example described with reference to FIGS.

The vehicle 20 can be shared by multiple users with different attributes. Examples of attributes include the owner of the vehicle 20, the owner's family, the owner's friends, the owner's car sharing partner (hereinafter abbreviated as share partner), the vehicle 20 dealer, and the like.

User attributes can be associated with authority related to operation control of controlled devices mounted on vehicle 20 . Rights may include temporal rights and control-type rights. Temporal authority corresponds to the length of time during which operation control of the controlled device is possible. The control-type authority corresponds to at least one type of the controlled device that is allowed to control the operation and the operation. Examples of controlled devices mounted on the vehicle 20 include, in addition to the locking/unlocking device 21, an ignition power source, an engine, an air conditioner, an audiovisual device, a lighting device, and a seat and steering wheel position adjustment mechanism.

That is, a user's attribute can include a first attribute and a second attribute. A second attribute is defined as being associated with a more restricted authority than the user with the first attribute. For example, if the owner of vehicle 20 has a first attribute, the owner's family may have a second attribute.

As exemplified in FIG. 1, the first authentication information AU1 may include attribute information AT specifying attributes of the user 30 . When the attribute of the user 30 specified by the attribute information AT included in the first authentication information AU1 corresponds to the first attribute, the first authentication information AU1 is the other mobile phone carried by another user having the second attribute. It can be associated with other authentication information for authenticating the device. The authentication system 10 is configured to maintain association with other authentication information when updating the first authentication information AU1 to the second authentication information AU2.

For example, if the user 30 is the owner of the vehicle 20, the first authentication information AU1 is stored in the processing device 12 and the server device in association with the authentication information for authenticating the mobile device carried by the owner's family or friends. 13 is stored. According to the above configuration, the second authentication information AU2 updated with the model change of the mobile device is stored in the processing device 12 and the server device 13 while being associated with other authentication information.

Therefore, it becomes unnecessary to re-register the authentication information for authenticating the mobile device carried by another user in the processing device 12 and the server device 13 when the model of the mobile device is changed.

The processing portion 122 of the processing device 12, having the various functions described so far, may be implemented by a general-purpose microprocessor operating in conjunction with a general-purpose memory. A CPU, MPU, and GPU can be exemplified as a general-purpose microprocessor. Examples of general-purpose memory include ROM and RAM. In this case, the ROM may store a computer program for executing the above-described process. ROM is an example of a non-transitory computer-readable medium that stores computer programs. A general-purpose memory may be used as storage unit 120 . The general-purpose microprocessor designates at least part of the computer program stored in the ROM, develops it on the RAM, and cooperates with the RAM to execute the above-described processing. The above computer program may be pre-installed in the general-purpose memory, or may be downloaded from the server device 13 and then installed in the general-purpose memory. In this case, server device 13 is an example of a non-transitory computer-readable medium storing a computer program.

The processing unit 122 may be implemented by a dedicated integrated circuit such as a microcontroller, ASIC, FPGA, etc., capable of executing the above computer programs. In this case, the computer program is pre-installed in a storage element included in the dedicated integrated circuit. The storage element is an example of a non-transitory computer-readable medium storing a computer program. Processing unit 122 may also be implemented by a combination of a general-purpose microprocessor and a dedicated integrated circuit.

Each of the above-described embodiments is merely an example for facilitating understanding of the present invention. The configuration according to each of the embodiments described above can be modified and improved as appropriate without departing from the scope of the present invention.

In FIG. 1 , the first communication device 111 , the second communication device 112 , and the processing device 12 are exemplified as a plurality of devices independently mounted at separate positions on the vehicle 20 . However, at least one of the first communication device 111 and the second communication device 112 may be provided as part of the processing device 12 .

The authentication system 10 can also be applied to mobile objects other than the vehicle 20 . Examples of other mobile objects include railroads, aircraft, ships, and the like. The mobile object may not require a driver.

10: authentication system, 12: processing device, 120: storage unit, 121: reception unit, 122: processing unit, 13: server device, 20: vehicle, 21: locking/unlocking device, 30: user, 41: first mobile device , 42: second mobile device, AT: attribute information, AU1: first authentication information, AU2: second authentication information, CR: change request signal, GP: issuance permission signal, VR: confirmation information

Claims (10)

a server device storing first authentication information identifying a first mobile device capable of being carried by a user;
The device is mounted on a moving body and has a storage unit that stores the first authentication information, and is mounted on the moving body based on authentication processing for authenticating the first mobile device using the first authentication information. a processing device that permits operation control of a controlled device that is
and
The processing device is
when receiving a change request for changing the target of the authentication process from the first mobile device to the second mobile device after the authentication process is established, transmitting confirmation information to the second mobile device;
permitting update of the first authentication information stored in the server device to second authentication information when the confirmation information is received from the second mobile device;
enabling an authentication process for authenticating the second mobile device using the second authentication information by updating the first authentication information stored in the storage unit to the second authentication information;
Authentication system. a server device storing first authentication information identifying a first mobile device capable of being carried by a user;
The device is mounted on a moving body and has a storage unit that stores the first authentication information, and is mounted on the moving body based on authentication processing for authenticating the first mobile device using the first authentication information. a processing device that permits operation control of a controlled device that is
and
The processing device is
When a change request for changing the target of the authentication process from the first mobile device to the second mobile device is accepted after the authentication process is established, a notification permitting the issuance of confirmation information is transmitted to the first mobile device. death,
permitting update of the first authentication information stored in the server device to second authentication information when the confirmation information is received from the second mobile device;
enabling an authentication process for authenticating the second mobile device using the second authentication information by updating the first authentication information stored in the storage unit to the second authentication information;
Authentication system. The first authentication information includes attribute information specifying attributes of the user,
The attributes of the user include a first attribute associated with a first authority and a second attribute associated with a second authority that is more restricted than the first authority, and
for authenticating another mobile device carried by another user whose attribute of said user specified by said attribute information corresponds to said first attribute and said first authentication information has said second attribute updates to the second credential are made to maintain the association with the other credential, if associated with the credential of
The authentication system according to claim 1 or 2. The processing device is capable of communicating with the server device,
An authentication system according to any one of claims 1 to 3. A processing device mounted on a mobile object,
a storage unit for storing first authentication information identifying a first mobile device capable of being carried by a user;
a processing unit that permits operation control of the controlled device mounted on the mobile object based on authentication processing for authenticating the first mobile device using the first authentication information;
a reception department;
and
The processing unit is
if the reception unit receives a change request for changing the target of the authentication process from the first mobile device to the second mobile device after the authentication process is established, sending confirmation information to the second mobile device;
permitting update of the first authentication information stored in the server device to the second authentication information when the reception unit receives the confirmation information from the second mobile device;
enabling an authentication process for authenticating the second mobile device using the second authentication information by updating the first authentication information stored in the storage unit to the second authentication information;
processing equipment. A processing device mounted on a mobile object,
a storage unit for storing first authentication information identifying a first mobile device capable of being carried by a user;
a processing unit that permits operation control of the controlled device mounted on the mobile object based on authentication processing for authenticating the first mobile device using the first authentication information;
a reception department;
and
The processing unit is
If the reception unit receives a change request for changing the target of the authentication process from the first mobile device to the second mobile device after the authentication process is established, the notification permitting the issuance of confirmation information is sent to the first mobile device. to the mobile device,
permitting update of the first authentication information stored in the server device to the second authentication information when the reception unit receives the confirmation information from the second mobile device;
enabling an authentication process for authenticating the second mobile device using the second authentication information by updating the first authentication information stored in the storage unit to the second authentication information;
processing equipment. A computer program comprising a storage unit and executable by a processing unit of a processing device mounted on a mobile object,
By being executed, the processing device
Execution of authentication processing for authenticating the first mobile device using the first authentication information in a state in which the storage unit stores the first authentication information specifying the first mobile device that can be carried by the user. death,
when receiving a change request for changing the target of the authentication process from the first mobile device to the second mobile device after the authentication process is established, transmitting confirmation information to the second mobile device;
permitting update of the first authentication information stored in the server device to the second authentication information when the confirmation information is received from the second mobile device;
enabling an authentication process for authenticating the second mobile device using the second authentication information by updating the first authentication information stored in the storage unit to the second authentication information;
computer program. A computer program comprising a storage unit and executable by a processing unit of a processing device mounted on a mobile object,
By being executed, the processing device
Execution of authentication processing for authenticating the first mobile device using the first authentication information in a state in which the storage unit stores the first authentication information specifying the first mobile device that can be carried by the user. death,
if a change request for changing the target of the authentication process from the first mobile device to the second mobile device is received, sending a notification permitting the issuance of confirmation information to the first mobile device;
permitting update of the first authentication information stored in the server device to the second authentication information when the confirmation information is received from the second mobile device;
enabling an authentication process for authenticating the second mobile device using the second authentication information by updating the first authentication information stored in the storage unit to the second authentication information;
computer program. A method of updating authentication information performed by a first mobile device and a second mobile device portable by a user, comprising:
After the authentication process of the first mobile device is established using the first authentication information to obtain permission to control the operation of the controlled device mounted on the mobile body, the target of the authentication process is the first mobile device. sending by said first mobile device a change request to change from to said second mobile device;
A response to the change request from a processing device that is mounted on the moving object and has a storage unit that stores the first authentication information and that permits operation control of the controlled device based on the authentication process. receiving by the second mobile device confirmation information transmitted as
causing the processing device to allow the first authentication information stored on a server device to update to the second authentication information by transmitting the confirmation information by the second mobile device to the processing device;
receiving the second authentication information by the second mobile device from the server device;
How to update. A method of updating authentication information performed by a first mobile device and a second mobile device portable by a user, comprising:
After the authentication process of the first mobile device is established using the first authentication information to obtain permission to control the operation of the controlled device mounted on the mobile body, the target of the authentication process is the first mobile device. sending by said first mobile device a change request to change from to said second mobile device;
A response to the change request from a processing device that is mounted on the moving object and has a storage unit that stores the first authentication information and that permits operation control of the controlled device based on the authentication process. receiving by the first mobile device a signal of permission to issue confirmation information transmitted as
transmitting confirmation information based on the authorization to issue signal to the second mobile device by the first mobile device;
causing the processing device to allow the first authentication information stored on a server device to update the second authentication information by transmitting the confirmation information by the second mobile device to the processing device;
receiving the second authentication information by the second mobile device from the server device;
How to update.

Images