JP2023082886A - Communication establishment method, mobile device, authentication device, and computer program - Google Patents

Abstract

To allow a plurality of mobile devices to simultaneously use an authentication device that permits operation control of a controlled device by authenticating the mobile devices.SOLUTION: An authentication system 10 establishes a first communication link between a first mobile device 31 and an authentication device 11 through sharing of a first encryption key. The first mobile device 31 establishes a second communication link with a second mobile device 32 through sharing of a second encryption key, and relays encrypted authentication information transmitted by the second mobile device 32 to the authentication device 11. The authentication device 11 authenticates the second mobile device 32 based on the encrypted authentication information. When the authentication of the second mobile device 32 is successful, the authentication device 11 transmits an encrypted third encryption key, which the first mobile device 31 relays to the second mobile device 32. Data communication is performed between the second mobile device 32 and the authentication device 11 via the first mobile device 31 using the third encryption key.SELECTED DRAWING: Figure 1

Description

The present invention relates to a communication establishment method when an authentication device that permits operation control of a controlled device based on an authentication process that authenticates a portable mobile device by a user is used simultaneously by a plurality of mobile devices. The invention also relates to the mobile device and the authentication device. The invention also relates to a computer program executable by a processing unit onboard each of the mobile device and the authentication device.

Patent Literature 1 discloses an authentication device mounted on a vehicle as an example of a moving body for performing authentication processing of a mobile device carried by a user. When the authentication process is established, the authentication device permits the user to use various controlled devices mounted on the vehicle. Such authentication devices typically cannot establish a communication link with another mobile device while the communication link is established with the mobile device.

JP 2015-085899 A

SUMMARY OF THE INVENTION It is an object of the present invention to enable simultaneous use by a plurality of mobile devices of an authentication device that authorizes the operation control of a controlled device by authenticating a portable mobile device by a user.

One aspect for achieving the above object is a communication establishment method, comprising:
a first communication link through the sharing of a first cryptographic key between a mobile device that can be carried by a user and an authentication device that authorizes control of the controlled device based on a first authentication process that authenticates the mobile device; to establish
causing the mobile device to establish a second communication link through sharing of a second encryption key with another mobile device that can be carried by another user;
causing the other mobile device to transmit encrypted authentication information identifying at least one of the other user and the other mobile device upon establishment of the second communication link;
causing the mobile device to relay the encrypted authentication information to the authentication device;
causing the authentication device to perform a second authentication process for authenticating the other mobile device based on the encrypted authentication information;
When the second authentication process is established, causing the encrypted third encryption key to be transmitted to the authentication device,
causing the mobile device to relay the encrypted third encryption key to the other mobile device;
Data communication via the mobile device is executed between the other mobile device and the authentication device using the third encryption key.

One aspect of achieving the above objectives is a mobile device capable of being carried by a user, comprising:
Establishing a first communication link through sharing of a first cryptographic key with an authentication device that permits operation control of a controlled device based on an authentication process that authenticates the mobile device or another mobile device that can be carried by another user. It has a processing unit that executes processing for
The processing unit is
when the first communication link is established with the authentication device,
performing a process to establish a second communication link through sharing a second cryptographic key with the other mobile device;
relaying encrypted authentication information sent from the other mobile device to the authentication device when the second communication link is established, and encrypting a third encryption key sent from the authentication device; to said other mobile device;
when the first communication link is established with the other mobile device;
encrypting authentication information identifying at least one of the user and the mobile device and transmitting the encrypted authentication information to the other mobile device; and receiving an encrypted third encryption key transmitted from the authentication device through the other mobile device death,
Encrypted data communication based on the third encryption key via the other mobile device is initiated with the authentication device.

One aspect for achieving the above object is an authentication device that permits operation control of a controlled device based on a first authentication process that authenticates a mobile device that can be carried by a user,
a processing unit that performs processing for establishing a first communication link through sharing a first encryption key with the mobile device;
The processing unit is
at least one of the other user and the other mobile device transmitted from another mobile device that is capable of being carried by the other user and has established a second communication link with the mobile device through the sharing of a second cryptographic key; If encrypted authentication information identifying one is received through the mobile device, performing a second authentication process to decrypt the encrypted authentication information and authenticate the other mobile device;
If the second authentication process is successful, an encrypted third encryption key is transmitted to the mobile device.

One aspect for achieving the above object is a computer program executable by a processing unit installed in a mobile device that can be carried by a user,
Executed to cause the mobile device to:
Establishing a first communication link through sharing of a first cryptographic key with an authentication device that permits operation control of a controlled device based on an authentication process that authenticates the mobile device or another mobile device that can be carried by another user. perform processing to
when the first communication link is established with the authentication device,
performing a process to establish a second communication link through sharing a second cryptographic key with the other mobile device;
relaying encrypted authentication information sent from the other mobile device to the authentication device when the second communication link is established, and encrypting a third encryption key sent from the authentication device; to said other mobile device;
when the first communication link is established with the other mobile device;
encrypting and transmitting authentication information identifying at least one of the user and the mobile device to the other mobile device;
receiving the encrypted third encryption key transmitted from the authentication device through the other mobile device;
Encrypted data communication based on the third encryption key via the other mobile device is initiated with the authentication device.

According to one aspect of achieving the above object, a processing unit installed in an authentication device permits operation control of a controlled device based on a first authentication process for authenticating a mobile device that can be carried by a user. A computer program capable of
By being executed, the authentication device
performing a process to establish a first communication link through sharing a first cryptographic key with the mobile device;
at least one of the other user and the other mobile device transmitted from another mobile device that is capable of being carried by the other user and has established a second communication link with the mobile device through the sharing of a second cryptographic key; If encrypted authentication information identifying one is received through the mobile device, performing a second authentication process to decrypt the encrypted authentication information and authenticate the other mobile device;
If the second authentication process is successful, an encrypted third encryption key is transmitted to the mobile device.

According to the configuration according to each of the above aspects, another mobile device interposed between the specific mobile device and the authentication device functions as a repeater, and the authentication device can establish a communication link only with a single mobile device. Even the specification allows simultaneous use of the authentication device by multiple mobile devices. Data sent and received between the specific mobile device and the authentication device is encrypted with an encryption key different from the encryption key used to encrypt data sent and received between other intervening mobile devices and the authentication device. Therefore, security for other intervening mobile devices is also ensured.

1 illustrates the configuration of an authentication system according to one embodiment; 2 illustrates a functional configuration of the authentication system of FIG. 1; 2 illustrates the flow of a communication establishment method in the authentication system of FIG. 1; 4 shows an example of a flow of processing executed by a processing unit of each mobile device; 4 illustrates another example of a process flow performed by a processing unit of each mobile device; 4 illustrates another example of a process flow performed by a processing unit of each mobile device; 1 shows an example of the flow of processing executed by an authentication device; 4 shows another example of the flow of processing performed by the authentication device; 4 shows another example of the flow of processing performed by the authentication device;

Exemplary embodiments are described in detail below with reference to the accompanying drawings. In each drawing, the scale is changed as appropriate to make each illustrated element recognizable.

FIG. 1 illustrates the configuration of an authentication system 10 according to one embodiment. The authentication system 10 may be used to authorize the use of the vehicle 20 by the user carrying the mobile device by authenticating the mobile device that the user is capable of carrying. The shape of vehicle 20 is exemplary only. Vehicle 20 is an example of a mobile object.

Authentication system 10 includes an authentication device 11 . The authentication device 11 is mounted at an appropriate position on the vehicle 20 . As illustrated in FIG. 2 , the authentication device 11 includes a communication section 111 . The communication unit 111 is configured as an interface with an antenna capable of short-range wireless communication with a mobile device.

As used herein, the term "short-range wireless communication" refers to wireless communication conducted in accordance with standards IEEE 802.15 or IEEE 802.11. Technologies capable of such wireless communication include Bluetooth (registered trademark), Bluetooth Low Energy (registered trademark), Ultra Wide Band (UWB), ZigBee (registered trademark), and Wi-Fi (registered trademark). trademark), etc. "Short-range wireless communication" in this specification is distinguished from "proximity wireless communication" that uses contactless communication technology in which a mobile device transmits information by obtaining minute power from radio waves transmitted from a reader. . RF-ID, NFC, and the like are examples of technologies capable of implementing close proximity wireless communication.

The authentication device 11 is configured to allow the user carrying the mobile device to control the operation of the locking/unlocking device 21 mounted on the vehicle 20 based on the authentication process for authenticating the mobile device. The locking/unlocking device 21 is a device for locking/unlocking a door that opens and closes the passenger compartment. The locking/unlocking device 21 is an example of a controlled device. Examples of other controlled devices include ignition power sources, engines, air conditioners, audiovisual equipment, lighting devices, seat and steering wheel position adjustment mechanisms, and the like.

The authentication system 10 can be shared by multiple users. In FIG. 1, a first user 41 carrying a first mobile device 31 and a second user 42 carrying a second mobile device 32 are illustrated. On the other hand, the authentication device 11 is configured to be able to establish a communication link only with a single mobile device.

As used herein, the expression "establish a communication link" means that a process is performed in which a specific cryptographic key is shared between two devices capable of communication based on a given short-range wireless communication standard. means that encrypted data can be communicated between the two devices. A process in which a specific cryptographic key is shared is performed according to the short-range wireless communication standard.

With reference to FIGS. 2 and 3, when a communication link is established between the first mobile device 31 carried by the first user 41 and the authentication device 11, the second user 42 decides to use the authentication device 11. A method of establishing communication when desired will be described.

As illustrated in FIG. 2 , the authentication device 11 includes a processing section 112 . The processing unit 112 is configured to cause the communication unit 111 to transmit the first trigger signal TR1. The first trigger signal TR1 may be an analog signal or a digital signal. If the first trigger signal TR1 is an analog signal, the communication section 111 has an appropriate conversion circuit including a D/A converter. This description is applicable to all signals or data transmitted from the communication unit 111 described below.

The first mobile device 31 comprises a communication unit 311 . The communication unit 311 is configured as an interface having an antenna capable of executing short-range wireless communication with other devices. That is, the communication section 311 is configured to be able to receive the first trigger signal TR1 transmitted from the authentication device 11 . If the first trigger signal TR1 is an analog signal, the communication section 311 has an appropriate conversion circuit including an A/D converter. This description is applicable to all signals or data received by the communication unit 311 described below.

The first mobile device 31 comprises a processing unit 312 and a storage unit 313 . The processing unit 312 is configured to read the first authentication information AT1 from the storage unit 313 and transmit it from the communication unit 311 to the authentication device 11 when the first trigger signal TR1 is received by the communication unit 311 . The first authentication information AT1 is information that identifies at least one of the first mobile device 31 and the first user 41 . The first authentication information AT1 may be information that is permanently stored, or information that is distributed from an external server device and temporarily stored.

The first authentication information AT1 transmitted from the communication unit 311 may be in the form of analog data or in the form of digital data. If the first authentication information AT1 is in the form of analog data, the communication section 311 has an appropriate conversion circuit including a D/A converter. This description is applicable to all signals or data transmitted from the communication unit 311 described below.

The first authentication information AT1 is received by the communication section 111 of the authentication device 11 . If the first authentication information AT1 is in the form of analog data, the communication section 111 is equipped with an appropriate conversion circuit including an A/D converter. This description is applicable to all signals or data received by the communication unit 111 described below.

The authentication device 11 has a storage unit 113 . The processing unit 112 of the authentication device 11 performs authentication processing for authenticating the first mobile device 31 by comparing the first authentication information AT1 received by the communication unit 111 with specific information stored in the storage unit 113. configured to run. If the verification result is correct, the processing unit 112 determines that the authentication processing of the first mobile device 31 has been completed. The authentication processing of the first mobile device 31 by the processing unit 112 is an example of the first authentication processing.

The processing unit 112 is configured to transmit the first encryption key KY1 from the communication unit 111 to the first mobile device 31 when it is determined that the first mobile device 31 has been successfully authenticated. First encryption key KY1 may be stored in advance in storage unit 113, or may be newly generated. In the latter case, the generated first encryption key KY1 is stored in storage unit 113 .

The processing unit 312 of the first mobile device 31 is configured to store the first encryption key KY<b>1 received by the communication unit 311 in the storage unit 313 . As a result, the first encryption key KY1 is shared between the authentication device 11 and the first mobile device 31, and the first communication link is established (STEP 11 in FIG. 3). Thereafter, data transmitted and received between the authentication device 11 and the first mobile device 31 is encrypted using the first encryption key KY1.

The processing unit 312 of the first mobile device 31 is configured to transmit a second trigger signal TR2 through the communication unit 311 upon confirming that the first communication link has been established. The second trigger signal TR2 may be an analog signal or a digital signal.

The second mobile device 32 comprises a communication unit 321 . The communication unit 321 is configured as an interface having an antenna capable of executing short-range wireless communication with other devices. In other words, the communication unit 321 is configured to be able to receive the second trigger signal TR2 transmitted from the first mobile device 31 . If the second trigger signal TR2 is an analog signal, the communication section 321 has an appropriate conversion circuit including an A/D converter. This description is applicable to all signals or data received by the communication unit 311 described below.

The second mobile device 32 comprises a processing unit 322 and a storage unit 323 . The processing unit 322 is configured to read the second authentication information AT2 from the storage unit 323 and transmit it from the communication unit 321 to the first mobile device 31 when the second trigger signal TR2 is received by the communication unit 321 . . The second authentication information AT2 is information that identifies at least one of the second mobile device 32 and the second user 42 . The second authentication information AT2 may be information that is permanently stored, or information that is distributed from an external server device and temporarily stored.

The second authentication information AT2 transmitted from the communication unit 321 may be in the form of analog data or digital data. If the second authentication information AT2 is in the form of analog data, the communication section 321 has an appropriate conversion circuit including a D/A converter. This description is applicable to all signals or data transmitted from the communication unit 321 described below.

The second authentication information AT2 is received by the communication unit 311 of the first mobile device 31 . The processing unit 312 of the first mobile device 31 compares the second authentication information AT2 received by the communication unit 311 with specific information stored in the storage unit 313, thereby authenticating the second mobile device 32. configured to do the work. If the matching result is correct, the processing unit 312 determines that the authentication process for the second mobile device 32 has been completed.

The processing unit 312 is configured to transmit the second encryption key KY2 from the communication unit 311 to the second mobile device 32 when it is determined that the authentication processing of the second mobile device 32 is successful. The second encryption key KY2 may be stored in advance in the storage unit 313, or may be newly generated. In the latter case, the generated second encryption key KY2 is stored in storage section 313 .

The processing unit 322 of the second mobile device 32 is configured to store the second encryption key KY2 received by the communication unit 321 in the storage unit 323 . As a result, the second encryption key KY2 is shared between the first mobile device 31 and the second mobile device 32, and a second communication link is established (STEP 12 in FIG. 3). Thereafter, data transmitted and received between the first mobile device 31 and the second mobile device 32 are encrypted using the second encryption key KY2.

The processing unit 322 of the second mobile device 32 is configured to encrypt the second authentication information AT2 upon confirming that the second communication link has been established. This encryption is done through an algorithm that can be decrypted by the authentication device 11 but not by the first mobile device 31 . The processing unit 322 is configured to transmit the encrypted second authentication information AT2 from the communication unit 321 to the first mobile device 31 .

The processing unit 312 of the first mobile device 31 is configured to transmit the encrypted second authentication information AT2 received by the communication unit 311 from the communication unit 311 to the authentication device 11 . That is, the encrypted second authentication information AT2 transmitted from the second mobile device 32 is relayed from the first mobile device 31 to the authentication device 11 (STEP 13 in FIG. 3).

The processing unit 112 of the authentication device 11 is configured to decrypt the second authentication information AT2 when the communication unit 111 receives the encrypted second authentication information AT2. The processing unit 112 is configured to perform an authentication process for authenticating the second mobile device 32 by matching the decrypted second authentication information AT2 with specific information stored in the storage unit 113. . If the matching result is correct, the processing unit 112 determines that the authentication process for the second mobile device 32 has been completed. The authentication processing of the second mobile device 32 by the processing unit 112 is an example of the second authentication processing.

The processing unit 112 is configured to encrypt the third encryption key KY3 when it is determined that the authentication process of the second mobile device 32 is successful. Third encryption key KY3 may be stored in advance in storage unit 113, or may be newly generated. In the latter case, the generated third encryption key KY3 is stored in storage section 113 . This encryption is done through an algorithm that is decryptable by the second mobile device 32 but not decryptable by the first mobile device 31 . The processing unit 112 is configured to transmit the encrypted third encryption key KY3 from the communication unit 111 to the first mobile device 31 .

The processing unit 312 of the first mobile device 31 is configured to transmit the encrypted third encryption key KY3 received by the communication unit 311 from the communication unit 311 to the second mobile device 32 . That is, the encrypted third encryption key KY3 transmitted from the authentication device 11 is relayed from the first mobile device 31 to the second mobile device 32 (STEP 14 in FIG. 3).

The processing unit 322 of the second mobile device 32 is configured to decrypt the encrypted third encryption key KY3 received by the communication unit 321 . As a result, the authentication device 11 and the second mobile device 32 share the third encryption key KY3. Thereafter, data transmitted and received between the authentication device 11 and the second mobile device 32 for the purpose of controlling the controlled device mounted on the vehicle 20 is encrypted using the third encryption key KY3.

The first mobile device 31 relays to the authentication device 11 the data encrypted using the third encryption key KY3 and transmitted from the second mobile device 32 . Similarly, the first mobile device 31 relays the data encrypted using the third encryption key KY3 and transmitted from the authentication device 11 to the second mobile device 32 (STEP 15 in FIG. 3).

Although illustration is omitted, encrypted communication can also be performed between the third mobile device carried by the third user and the authentication device 11 . For example, the processing unit 322 of the second mobile device 32 is configured to transmit the third trigger signal from the communication unit 321 upon confirming that the second communication link has been established with the first mobile device 31. sell. Upon receiving either the second trigger signal TR2 or the third trigger signal, the third mobile device transmits third authentication information identifying at least one of the third user and the third mobile device to the second trigger signal TR2 and the third mobile device. It may be configured to transmit to a source of three trigger signals. Through a similar configuration, simultaneous use of authentication device 11 by four or more mobile devices is enabled.

According to such a configuration, another mobile device intervening between a specific mobile device and authentication device 11 functions as a repeater, and authentication device 11 can establish a communication link only with a single mobile device. However, simultaneous use of the authentication device 11 by a plurality of mobile devices is possible. Data transmitted/received between the specific mobile device and the authentication device 11 is encrypted with an encryption key different from the encryption key used for encrypting data transmitted/received between another intervening mobile device and the authentication device 11. security for other intervening mobile devices.

That is, each of the first mobile device 31 and the second mobile device 32 can be both an intervening mobile device and an interposed mobile device. FIG. 4 illustrates a process flow that may be performed by each of the processing unit 312 of the first mobile device 31 and the processing unit 312 of the second mobile device 32 . In the following description, each of the processing unit 312 of the first mobile device 31 and the processing unit 312 of the second mobile device 32 is referred to as "processing unit of the mobile device".

The processing unit of the mobile device determines whether a communication link (the aforementioned first communication link) with the authentication device 11 has been established (STEP 20). For example, the determination can be made by adding or including information for identifying the authentication device 11 to the first encryption key KY1 transmitted from the authentication device 11 .

When it is determined that the first communication link with authentication device 11 has been established (YES in STEP 20), this mobile device is determined to act as an intervening device between authentication device 11 and another mobile device. Accordingly, the processing unit of the mobile device initiates transmission of a second trigger signal TR2 for establishing a second communication link with another mobile device.

Subsequently, the processing unit of the mobile device determines whether a second communication link has been established with another mobile device (STEP 21). For example, the determination can be made by adding or including information for identifying other mobile devices to the received second encryption key KY2. This process is repeated until it is determined that the second communication link has been established (NO in STEP 21).

When it is determined that the second communication link with the other mobile device has been established (YES in STEP 21), the processing unit of the mobile device determines whether encrypted authentication information has been received from the other mobile device ( STEP22). This process is repeated until it is determined that the encrypted authentication information has been received (NO in STEP22).

When it is determined that the encrypted authentication information has been received (YES in STEP22), the processing section of the mobile device relays the encrypted authentication information to the authentication device 11 (STEP23).

Subsequently, the processing unit of the mobile device determines whether or not the encrypted third encryption key KY3 has been received from the authentication device 11 (STEP 24). This process is repeated until it is determined that the encrypted third encryption key KY3 has been received (NO in STEP24).

When it is determined that the encrypted authentication information has been received (YES in STEP24), the processing unit of the mobile device relays the encrypted third encryption key KY3 to another mobile device (STEP25).

After that, the processing unit of the mobile device relays the data encrypted using the third encryption key KY3 and transmitted from the other mobile device to the authentication device 11, and the data encrypted using the third encryption key KY3 is sent to the authentication device. 11 to other mobile devices.

If it is determined that the first communication link with the authentication device 11 has not been established (NO in STEP 20), the processing unit of the mobile device establishes a communication link with another mobile device (the above-mentioned second communication link). (STEP 26). For example, the determination can be made by adding or including information for identifying other mobile devices to the received second encryption key KY2. If it is determined that a communication link with another mobile device has not been established (NO in STEP26), the process returns to STEP20.

When it is determined that a communication link with another mobile device has been established (YES in STEP 26), this mobile device is determined to act as a device interposed between the other mobile device and authentication device 11. . Therefore, the processing unit of the mobile device encrypts the authentication information held by itself and transmits it to the other mobile device (STEP 27).

Subsequently, the processing unit of the mobile device determines whether the encrypted third encryption key KY3 transmitted from the authentication device 11 has been received through another mobile device (STEP 28). This process is repeated until it is determined that the encrypted third encryption key KY3 has been received (NO in STEP28).

When it is determined that the encrypted third encryption key KY3 has been received (YES in STEP28), the processing unit of the mobile device starts transmitting data encrypted using the third encryption key (STEP29). .

As illustrated in FIGS. 4 and 5, after starting the encrypted data communication in STEP 29, the processing unit of the mobile device determines whether the first communication link between the other mobile device and the authentication device 11 has been disconnected. (STEP 31). This process is repeated until it is determined that the first communication link has been disconnected (NO in STEP31).

When it is determined that the first communication link has been disconnected after starting the encrypted data communication (YES in STEP 31), the processing unit of the mobile device automatically executes processing to establish a communication link with the authentication device 11 ( STEP32).

When the communication link with the authentication device 11 is established, the processing unit of the mobile device resumes encrypted data communication with the authentication device 11 (STEP 33).

If the first communication link is broken, e.g. due to termination of communication between the other mobile device and the authentication device 11, an efficient communication with the authentication device 11 can be performed without unnecessary intervention by the other mobile device. Encrypted data communication is enabled. Even if the first communication link is disconnected for some unexpected reason, the continuity of encrypted data communication with the authentication device 11 can be maintained.

Although the third encryption key KY3 received in STEP28 is used when establishing a communication link with the authentication device 11 in STEP32, the encryption key can be updated after the communication link is established. That is, encrypted data communication started in STEP 33 can be performed using the updated encryption key.

Priority information may be stored in the memory of each mobile device. The priority information is information that defines relative priority levels among a plurality of mobile devices that can share the authentication system 10 .

An example of priority information is information indicating attributes of a user carrying a mobile device. Examples of attributes include the owner of the vehicle 20, the owner's family, the owner's friends, the owner's car sharing partner (hereinafter abbreviated as share partner), the vehicle 20 dealer, and the like.

User attributes can be associated with authority related to operation control of controlled devices mounted on vehicle 20 . Rights may include temporal rights and control-type rights. Temporal authority corresponds to the length of time during which operation control of the controlled device is possible. The control-type authority corresponds to at least one type of the controlled device that is allowed to control the operation and the operation.

That is, a user's attribute can include a first attribute and a second attribute. A second attribute is defined as being associated with a more restricted authority than the user with the first attribute. For example, if the owner of vehicle 20 has a first attribute, the owner's family may have a second attribute. The priority indicated by the priority information associated with the first attribute is higher than the priority indicated by the priority information associated with the second attribute.

Another example of priority information is information that indicates usage of the mobile device. Examples of the usage status include the cumulative number of times of use, cumulative usage time, frequency of use per unit period, and the like. The priority indicated by the priority information associated with the usage having a higher value is higher than the priority indicated by the priority information associated with the usage having a lower value.

In this case, as exemplified in FIGS. 4 and 6, prior to starting encrypted data communication in STEP 29, the processing unit of the mobile device changes the priority indicated by the priority information held by itself to that of another mobile device. It can be configured to determine whether the priority is higher than the priority indicated by the priority information (STEP 41). The priority information of other mobile devices may be obtained over the second communication link at this time and may be added to or included in the second encryption key KY2 received to establish the second communication link. .

If the priority indicated by the priority information held by the mobile device is lower than the priority indicated by the priority information of the other mobile device (NO in STEP 41), the process proceeds to STEP 29 to perform encryption via the other mobile device. Data communication is started.

If the priority indicated by the priority information held by the mobile device is higher than the priority indicated by the priority information of the other mobile device (YES in STEP 41), the processing unit of the mobile device sends the authentication device 11 to the other mobile device. A command to disconnect the first communication link with is transmitted (STEP 42). After that, the process proceeds to STEP31 in FIG. That is, a communication link is established between the mobile device and the authentication device 11, and encrypted data communication with the authentication device 11 is started without going through another mobile device.

The other mobile device whose first communication link has been cut establishes a second communication link with the mobile device and performs encrypted data communication with the authentication device 11 via the mobile device.

According to such a configuration, it is possible to allow a mobile device with a higher priority to perform more efficient encrypted data communication with the authentication device 11 .

FIG. 7 illustrates the flow of processing executed by the processing unit 112 of the authentication device 11. As shown in FIG. First, the processing unit 112 determines whether the first communication link with the mobile device has been established (STEP 51). This process is repeated until it is determined that the first communication link has been established (NO in STEP51).

When it is determined that the first communication link has been established (YES in STEP 51), the processing unit 112 determines whether the communication unit 111 has received encrypted authentication information through the mobile device associated with the first communication link ( STEP 52). This authentication information was sent from another mobile device that has established a second communication link with the mobile device associated with the first communication link. This process is repeated until it is determined that the encrypted authentication information has been received (NO in STEP52).

When it is determined that the encrypted authentication information has been received (YES in STEP52), the processing unit 112 determines whether or not the authentication process for authenticating another mobile device has been established based on the authentication information (STEP53). . If it is determined that the authentication process has not been established (NO in STEP53), the process returns to STEP52.

If it is determined that the authentication processing of the other mobile device has been successful (YES in STEP53), processing section 112 encrypts third encryption key KY3 and transmits it to the mobile device (STEP54). The encrypted third encryption key KY3 is relayed by the mobile device to other mobile devices.

As illustrated in FIGS. 7 and 8, prior to transmitting the encrypted third encryption key KY3 in STEP 54, the processing unit of the mobile device sets the priority indicated by the priority information held by the mobile device to another. It can be configured to determine whether the priority is lower than the priority indicated by the priority information held by the mobile device (STEP 61). The mobile device's priority information may be obtained over the first communication link at this time and may be added to or included in the first encryption key KY1 received to establish the first communication link. The other mobile device's priority information may be obtained over the first and second communication links at this time, and may be appended to or included in the encrypted authentication information received in STEP 52 .

If the priority indicated by the priority information held by the mobile device is lower than the priority indicated by the priority information of the other mobile device (YES in STEP61), the process proceeds to STEP54 to obtain the encrypted third encryption key KY3. is sent.

If the priority indicated by the priority information held by the mobile device is higher than the priority indicated by the priority information of the other mobile device (NO in STEP 61), the processing unit 112 instructs the mobile device to communicate with the authentication device 11 first. A command to disconnect the communication link is transmitted (STEP 62).

Subsequently, the processing unit 112 automatically executes processing for establishing a communication link with another mobile device (STEP 63). After that, the process proceeds to STEP54, and the encrypted third encryption key KY3 is transmitted. A newly generated and encrypted cryptographic key may be transmitted.

The mobile device whose first communication link has been cut establishes a second communication link with another mobile device, and performs encrypted data communication with the authentication device 11 via the other mobile device.

Such a configuration also allows a mobile device with a higher priority to perform more efficient encrypted data communication with the authentication device 11 .

As illustrated in FIGS. 7 and 9, the processing unit 112 of the authentication device 11 receives a control request CR from the lock/unlock device 21 after starting encrypted data communication using the third encryption key KY3. (STEP 71). This process is repeated until it is determined that the control request CR has been received (NO in STEP71).

When the communication unit 111 determines that the control request CR has been received (YES in STEP71), the processing unit 112 transmits a response request RR requesting a response from another mobile device (STEP72). The response request RR is relayed by the mobile device to other mobile devices.

Subsequently, the processing unit 112 determines whether the response RP has been received by the communication unit 111 (STEP73).

When communication unit 111 determines that response RP has been received (YES in STEP73), processing unit 112 permits operation control of locking/unlocking device 21 (STEP74). Specifically, as illustrated in FIG. 2 , the processing unit 112 transmits the enable signal EN from the communication unit 111 to the locking/unlocking device 21 . Transmission of the enable signal EN may be performed via wireless communication or may be performed via wired communication.

For example, the locking/unlocking device 21 can be configured to perform the locking/unlocking operation when a touch sensor built into the doorknob detects that the user has touched the doorknob while the enable signal EN is being input. Alternatively, the locking/unlocking device 21 may directly execute the locking/unlocking operation upon receiving the enable signal EN.

When communication unit 111 determines that response RP has not been received (NO in STEP 73), processing unit 112 prohibits operation control of locking/unlocking device 21 (STEP 75).

According to such a configuration, it can be confirmed whether the control request CR requesting operation control of the locking/unlocking device 21 is transmitted from another mobile device. The security of the vehicle 20 can be improved because the operation control of the locking/unlocking device 21 is prevented based on the control request CR received while the other mobile device is absent.

Each of the processing unit 112 of the authentication device 11, the processing unit 312 of the first mobile device 31, and the processing unit 322 of the second mobile device 32 having various functions described above operates in cooperation with general-purpose memory. It can be implemented by a general purpose microprocessor. A CPU, MPU, and GPU can be exemplified as a general-purpose microprocessor. Examples of general-purpose memory include ROM and RAM. In this case, the ROM may store a computer program for executing the above-described process. ROM is an example of a non-transitory computer-readable medium that stores computer programs. A general-purpose memory may be used as each of storage unit 113 , storage unit 313 , and storage unit 323 . The general-purpose microprocessor designates at least a part of the computer program stored on the ROM, develops it on the RAM, and cooperates with the RAM to execute the above-described processing. The above computer program may be pre-installed in the general-purpose memory, or may be installed in the general-purpose memory after being downloaded from an external server device. In this case, the external server device is an example of a non-transitory computer-readable medium storing the computer program.

Each of the processing unit 112 of the authentication device 11, the processing unit 312 of the first mobile device 31, and the processing unit 322 of the second mobile device 32 is a dedicated integration, such as a microcontroller, ASIC, FPGA, etc., capable of executing the above computer programs. It may be realized by a circuit. In this case, the computer program is pre-installed in a storage element included in the dedicated integrated circuit. The storage element is an example of a non-transitory computer-readable medium storing a computer program. The storage element may be used as each of storage unit 113 , storage unit 313 , and storage unit 323 . Each of the processing unit 112 of the authentication device 11, the processing unit 312 of the first mobile device 31, and the processing unit 322 of the second mobile device 32 can also be implemented by a combination of a general-purpose microprocessor and a dedicated integrated circuit.

Each of the above-described embodiments is merely an example for facilitating understanding of the present invention. The configuration according to each of the embodiments described above can be modified and improved as appropriate without departing from the scope of the present invention.

The authentication system 10 can also be applied to mobile objects other than the vehicle 20 . Examples of other mobile objects include railroads, aircraft, ships, and the like. The mobile object may not require a driver.

The opening/closing body to be locked/unlocked by the locking/unlocking device 21 is not limited to the door of the moving body. Doors and windows in houses and facilities can also be examples of opening and closing bodies. In addition, various facilities in houses and facilities can also be examples of controlled devices. That is, the authentication device 11 and the locking/unlocking device 21 do not need to be mounted on the mobile body.

11: authentication device, 112: processing unit, 20: vehicle, 21: locking/unlocking device, 31: first mobile device, 312: processing unit, 313: storage unit, 32: second mobile device, 322: processing unit, 323 : storage unit, 41: first user, 42: second user, AT2: second authentication information, CR: control request, KY1: first encryption key, KY2: second encryption key, KY3: third encryption key, RR : response request

Claims (13)

a first communication link through the sharing of a first cryptographic key between a mobile device that can be carried by a user and an authentication device that authorizes control of the controlled device based on a first authentication process that authenticates the mobile device; to establish
causing the mobile device to establish a second communication link through sharing of a second encryption key with another mobile device that can be carried by another user;
causing the other mobile device to transmit encrypted authentication information identifying at least one of the other user and the other mobile device upon establishment of the second communication link;
causing the mobile device to relay the encrypted authentication information to the authentication device;
causing the authentication device to perform a second authentication process for authenticating the other mobile device based on the encrypted authentication information;
When the second authentication process is established, causing the encrypted third encryption key to be transmitted to the authentication device,
causing the mobile device to relay the encrypted third encryption key to the other mobile device;
using the third encryption key to execute data communication between the other mobile device and the authentication device via the mobile device;
Communication establishment method. establishing a communication link using the third encryption key between the other mobile device and the authentication device when the first communication link is disconnected;
The method of establishing communication according to claim 1. disconnecting the first communication link and using the third encryption key between the other mobile device and the authentication device if the priority of the other mobile device is higher than the priority of the mobile device; establish a communication link,
The communication establishment method according to claim 1 or 2. When the authentication device receives from the mobile device a request for control of the controlled device by the other mobile device, the authentication device transmits a response request to the other mobile device through the mobile device;
A communication establishment method according to any one of claims 1 to 3. The authentication device and the controlled device are mounted on a mobile object,
A communication establishment method according to any one of claims 1 to 4. A mobile device capable of being carried by a user, comprising:
Establishing a first communication link through sharing of a first cryptographic key with an authentication device that permits operation control of a controlled device based on an authentication process that authenticates the mobile device or another mobile device that can be carried by another user. It has a processing unit that executes processing for
The processing unit is
when the first communication link is established with the authentication device,
performing a process to establish a second communication link through sharing a second cryptographic key with the other mobile device;
relaying encrypted authentication information sent from the other mobile device to the authentication device when the second communication link is established, and encrypting a third encryption key sent from the authentication device; to said other mobile device;
when the first communication link is established with the other mobile device;
encrypting authentication information identifying at least one of the user and the mobile device and transmitting the encrypted authentication information to the other mobile device; and receiving an encrypted third encryption key transmitted from the authentication device through the other mobile device death,
starting encrypted data communication based on the third encryption key via the other mobile device with the authentication device;
mobile device. a storage unit storing first priority information indicating the priority of the mobile device;
When the first communication link is established with the other mobile device, the processing unit
obtaining second priority information indicating the priority of the other mobile device from the other mobile device;
If the priority indicated by the first priority information is higher than the priority indicated by the second priority information, the other mobile device is caused to disconnect the first communication link, and the third encryption key is used for the third encryption key. 3 Performing a process of establishing a communication link with the authentication device;
7. A mobile device according to claim 6. An authentication device that permits operation control of a controlled device based on a first authentication process that authenticates a mobile device that can be carried by a user,
a processing unit that performs processing for establishing a first communication link through sharing a first encryption key with the mobile device;
The processing unit is
at least one of the other user and the other mobile device transmitted from another mobile device that is capable of being carried by the other user and has established a second communication link with the mobile device through the sharing of a second cryptographic key; If encrypted authentication information identifying one is received through the mobile device, performing a second authentication process to decrypt the encrypted authentication information and authenticate the other mobile device;
If the second authentication process is successful, transmitting an encrypted third encryption key to the mobile device;
Authenticator. The processing unit is configured to establish a communication link with the other mobile device using the third encryption key when the first communication link is disconnected.
The authentication device according to claim 8. The processing unit is
obtaining first priority information indicating the priority of the other mobile device and second priority information indicating the priority of the mobile device;
If the priority indicated by the first priority information is higher than the priority indicated by the second priority information, disconnect the first communication link and communicate with the other mobile device using the third encryption key. configured to establish a link,
The authentication device according to claim 8 or 9. When the processing unit receives a request for controlling the controlled device by the other mobile device from the mobile device, the processing unit transmits a response request to the other mobile device through the mobile device.
Authentication device according to any one of claims 8 to 10. A computer program executable by a processing unit onboard a mobile device that can be carried by a user, comprising:
Executed to cause the mobile device to:
Establishing a first communication link through sharing of a first cryptographic key with an authentication device that permits operation control of a controlled device based on an authentication process that authenticates the mobile device or another mobile device that can be carried by another user. perform processing to
when the first communication link is established with the authentication device,
performing a process to establish a second communication link through sharing a second cryptographic key with the other mobile device;
relaying encrypted authentication information sent from the other mobile device to the authentication device when the second communication link is established, and encrypting a third encryption key sent from the authentication device; to said other mobile device;
when the first communication link is established with the other mobile device;
encrypting and transmitting authentication information identifying at least one of the user and the mobile device to the other mobile device;
receiving the encrypted third encryption key transmitted from the authentication device through the other mobile device;
starting encrypted data communication based on the third encryption key via the other mobile device with the authentication device;
computer program. A computer program executable by a processing unit installed in an authentication device that permits operation control of a controlled device based on a first authentication process that authenticates a mobile device that can be carried by a user,
By being executed, the authentication device
performing a process to establish a first communication link through sharing a first cryptographic key with the mobile device;
at least one of the other user and the other mobile device transmitted from another mobile device that is capable of being carried by the other user and has established a second communication link with the mobile device through the sharing of a second cryptographic key; If encrypted authentication information identifying one is received through the mobile device, performing a second authentication process to decrypt the encrypted authentication information and authenticate the other mobile device;
If the second authentication process is successful, transmitting an encrypted third encryption key to the mobile device;
computer program.

Images