JP2023178671A - Authentication device, authentication method, and program - Google Patents

Abstract

To provide an authentication device, an authentication method, and a program that allows smooth authentication processing even when there are a plurality of authentication methods.SOLUTION: In an authentication device 10 that communicates with key devices 20 and 30 and authenticates the key devices using digital data, information on an authentication method adopted by the key devices 20 and 30 are stored in association with authentication method identification information for identifying the authentication method through communication, authentication method identification information is identified through communication with the key devices 20 and 30 (S11), the authentication method is determined from the authentication method identification information with reference to storage means (S13, S14, S15), and the key devices 20 and 30 are authenticated using the determined authentication method (S17).SELECTED DRAWING: Figure 7

Description

The present invention relates to the technical field of an authentication device, an authentication method, and a program.

2. Description of the Related Art Conventionally, digital keys have been known that use digital data in an electronic device (key device) such as a non-contact IC card or a smartphone to unlock and lock a vehicle or a house. For example, in Patent Document 1, a Bluetooth low energy communication connection is established with a mobile device, the position of the mobile device is determined based on two-way ranging using impulse wireless ultra-wideband, and based on the position of the mobile device, A system for vehicle passive entry/passive start is disclosed that performs vehicle functions such as unlocking a door or trunk, allowing the vehicle to start, or activating wireless charging.

JP2019-528387A

Conventional digital key authentication supports only one authentication method and does not take into account processing when there are multiple types of key devices and multiple authentication methods. Therefore, if the authentication method is different, multiple authentication attempts may be made, and traces of authentication failures will be recorded, increasing the number of failures and causing the process to not proceed or reaching the lockout threshold. there were.

SUMMARY OF THE INVENTION The present invention has been made in view of the above-mentioned problems, and it is an object of the present invention to provide an authentication device and the like that can perform authentication processing smoothly even when there are multiple authentication methods.

In order to solve the above problem, the invention according to claim 1 provides an authentication device that communicates with a key device and authenticates the key device using digital data, including information on an authentication method adopted by the key device; a storage means for storing in association with authentication method specifying information for specifying the authentication method through the communication; an authentication method specifying information specifying means for specifying the authentication method specifying information through communication with the key device; Referring to the present invention, the present invention is characterized by comprising an authentication method determining means for determining the authentication method from the authentication method specifying information, and an authentication means for authenticating the key device using the determined authentication method.

The invention according to claim 2 is the authentication device according to claim 1, wherein the initial connection means specifies the authentication method and the authentication method specifying information by processing an initial connection between the key device and the authentication device. It is characterized by further comprising:

The invention according to claim 3 is the authentication device according to claim 1 or 2, in which the authentication method specifying information specifying means performs an anti-collision process for preventing collision of communication signals. The method is characterized in that the unique ID of the key device is specified.

The invention according to claim 4 is the authentication device according to claim 1 or claim 2, in which when the authentication means fails to perform authentication, the authentication method determines whether the authentication could not be performed according to a preset order of authentication methods. It is characterized in that the key device is authenticated by an authentication method different from the authentication method.

According to a fifth aspect of the invention, in the authentication device according to the fourth aspect, when the authentication method determining means cannot determine the authentication method from the authentication method specifying information by referring to the storage means, The present invention is characterized in that the authentication method is determined according to the order of authentication methods set in advance.

According to a sixth aspect of the invention, in the authentication device according to the first or second aspect, the authentication method specifying information specifying means specifies the communication method of the key device as the authentication method specifying information in the communication start process. It is characterized by specifying.

The invention according to claim 7 provides an authentication method that communicates with a key device and authenticates the key device using digital data, wherein the storage means stores information on an authentication method adopted by the key device, and the information on the authentication method adopted by the key device through the communication. a storing step of storing in association with authentication method specifying information specifying an authentication method; an authentication method specifying information specifying step of specifying the authentication method specifying information by communication with the key device; an authentication method determining step in which the authentication method determining means refers to the storage means and determines the authentication method from the authentication method specifying information; and the authentication means authenticates the key device using the determined authentication method. The method is characterized by including an authentication step.

The invention according to claim 8 provides a computer included in an authentication device that communicates with a key device and authenticates the key device using digital data, and a computer included in an authentication device that communicates with the key device and authenticates the key device using digital data. storage means for storing the authentication method identification information in association with the authentication method identification information for identifying the authentication method; authentication method identification information identification means for identifying the authentication method identification information by communicating with the key device; The present invention is characterized in that it functions as an authentication method determining means that determines the authentication method from method specifying information, and an authentication means that authenticates the key device using the determined authentication method.

According to the present invention, the storage means specifies the authentication method specifying information through communication with the key device, and stores information on the authentication method adopted by the key device in association with the authentication method specifying information that specifies the authentication method through communication. , the authentication method is determined from the authentication method specific information, and the key device is authenticated using the determined authentication method, so even if there are multiple authentication methods, there is no need to try authentication unnecessarily, and authentication can be performed smoothly. Can be processed.

1 is a diagram illustrating an example of a schematic configuration of an authentication processing system according to an embodiment. FIG. 2 is a diagram illustrating an example of a schematic configuration of an authentication device. It is a figure showing an example of the database of an authentication device. FIG. 2 is a diagram illustrating an example of a schematic configuration of a key device. FIG. 2 is a diagram illustrating an example of a schematic configuration of a key device. 3 is a flowchart illustrating an example of the operation of initial connection processing of the authentication device. It is a flowchart which shows an example of operation of recognition processing of an authentication device. It is a flowchart which shows the modification of the recognition process of an authentication device.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. The embodiment described below is a case where the present invention is applied to an authentication processing system in which authentication processing is performed between an authentication device installed inside a vehicle and a key device of a user boarding the vehicle. This is an embodiment. Note that the vehicle is an example of a moving object, such as a two-wheeled vehicle, a four-wheeled vehicle, or a bicycle.

[1. Outline configuration of authentication processing system S]
First, the general configuration of the authentication processing system S according to the present embodiment will be described with reference to FIG. 1 and the like. FIG. 1 is a diagram showing an example of a schematic configuration of an authentication processing system S according to this embodiment.

As shown in FIG. 1, the authentication processing system S includes an authentication device 10 mounted on a vehicle C, and a plurality of types of key devices 20, 30, and the like.

The authentication device 10 is, for example, a control device such as an ECU (Electronic Control Unit) provided in the vehicle C. Based on the authentication result by the authentication device 10, operations such as unlocking/locking of the doors of the vehicle C and starting of the engine of the vehicle C are performed. Note that the target is not limited to the vehicle C, but may also be a door of a house, equipment inside the house such as an air conditioner or water heater, a personal computer, or the like.

The key device 20 is, for example, a user's smartphone. The key device 30 is, for example, a user's non-contact IC card. Note that the key device may be, for example, a key for vehicle C having a smart entry function. The key device may be any digital key device that communicates with the authentication device 10 and is authenticated using digital data.

Here, the user is a passenger of the vehicle C, and owns the key device 20, the key device 30, and the like. In the case of private ownership, the user is the owner of vehicle C or his family. If the vehicle C is owned by a company, the user is an employee or the like who uses the vehicle C. When vehicle C is a rental car, the user is a rental car user. The digital data is, for example, digital data used for authentication of a private key, public key, common key, encryption key, ciphertext, etc.

The authentication device 10 is capable of short-range wireless communication with the key devices 20 and 30. For example, technologies such as NFC (Near Field Communication), Bluetooth (registered trademark), or UWB (Ultra Wide Band) are used for near field communication.

The authentication device 10 includes, for example, an embedded secure element (eSE).

FIG. 2 is a diagram showing an example of a schematic configuration of the authentication device 10. As shown in FIG. As shown in FIG. 2, the authentication device 10 includes a communication section 11, a storage section 12, a control section 13, and the like.

The communication unit 11 includes a plurality of types of antennas, and performs short-range wireless communication with the key devices 20 and 30 within a range where short-range wireless communication is possible. The communication unit 11 has multiple types of communication functions depending on the communication standards of the key devices 20 and 30. For example, the communication unit 11 has a function of communicating with the key device 20 according to a communication standard for the key device 20, such as Bluetooth (registered trademark). The communication unit 11 has a function of a contactless IC card reader/writer for the key device 30. The communication unit 11 is not limited to wireless communication, but may be wired communication when the authentication device 10 and the key device are connected in a contact type.

The storage unit 12 is, for example, a nonvolatile memory (NVM). The storage unit 12 stores an operating system (OS) and applications. The application includes a mutual authentication processing program and the like. Furthermore, as shown in FIG. A database has been constructed in which unique IDs (UIDs) and the like are associated with each other. Examples of the authentication method include a common key authentication method and a public key authentication method. Furthermore, the authentication method may be two-step authentication, multi-factor authentication, mutual authentication, mutual authentication, one-sided authentication, or the like. The storage unit 12 is an example of a storage unit that stores information on an authentication method adopted by the key device in association with authentication method identification information that identifies the authentication method through communication. The unique ID of the key device is an example of authentication method identification information.

An example of the unique ID is an ID assigned to each key device. There are a device address of the key device 20, a MAC address (Media Access Control address), a chip ID of an IC card of the key device 30, and the like. The unique ID may be any ID that can be distinguished from other key devices, as long as it is unique to the key device.

Furthermore, the storage unit 12 stores information on priorities regarding communication methods with the key devices 20, 30, etc., and information on priorities of authentication methods when recognizing the key devices 20, 30, etc. Examples of communication methods include communication based on NFC standards such as "Type A" and "Type B," communication based on Bluetooth (registered trademark) standards, and communication based on UWB standards. The priority order of authentication methods may be set for each version of the standard.

Furthermore, the storage unit 12 may store a communication method and an authentication method in association with each other. In this case, the communication method is an example of authentication method identification information. "Type A" is communication that uses type A of contactless communication, "Type B" is communication that uses type B of contactless communication, and communication methods that use Bluetooth (registered trademark). Authentication methods such as a common key authentication method and a public key authentication method are stored in association with each other. Note that the communication method and authentication method are highly related, and standards often include each communication method and authentication method as a set. The communication method adopted by the key device is an example of authentication method specifying information.

Further, the storage unit 12 stores authentication data used in mutual authentication processing for establishing a secure channel with the key devices 20 and 30 in association with the key devices. Such authentication data is, for example, a key set including a secure channel encryption key, a secure channel MAC (Message Authentication Code) key, and a data encryption key.

The control unit 13 includes a CPU (Central Processing Unit), a RAM (Random Access Memory), a ROM (Read Only Memory), and the like. The control unit 13 executes mutual authentication processing for establishing a secure session with the key devices 20 and 30 according to the mutual authentication processing program. Further, when mutual authentication between the authentication device 10 and the key devices 20 and 30 is completed by the control unit 13, the ECU of the vehicle C performs operations to unlock/lock the doors of the vehicle C, and to operate the engine of the vehicle C. A starting operation etc. is performed. The authentication device 10 functions as a computer, and the control unit 13 performs various calculations and processes according to programs. Note that the authentication device 10 may have the function of an ECU, the ECU may have the function of the authentication device 10, or the authentication device 10 and the ECU may be separate bodies.

Next, the key device 20, which is a smartphone, is a user's electronic device, and has the function of a digital key for the vehicle C by installing a dedicated application for the key. The key device 20 may include a secure element for authentication, such as a UICC (Universal Integrated Circuit Card).

FIG. 4 is a diagram showing an example of a schematic configuration of the key device 20. As shown in FIG. As shown in FIG. 4, the key device 20 includes a communication section 21, a storage section 22, a display section 23, an operation section 24, a system control section 25, and an input/output interface section 26. The system control section 25 and the input/output interface section 26 are connected via a system bus 27.

The communication unit 21 has an antenna and performs wireless communication according to the communication standard for the authentication device 10 and the key device 20.

The storage unit 22 stores an operating system and applications. The application includes a mutual authentication processing program and the like. The storage unit 22 stores authentication data (for example, a key set including a secure channel encryption key, a secure channel MAC key, and a data encryption key) used for mutual authentication processing to establish a secure channel with the authentication device 10. Stored.

The display section 23 is configured by, for example, a liquid crystal display element or an organic EL (Electro Luminescence) element. The operation unit 24 is a touch switch type display panel such as the display unit 23 being a touch panel.

The system control unit 25 includes, for example, a CPU 25a, a ROM 25b, and a RAM 25c. In the system control unit 25, the CPU 25a reads and executes various programs stored in the ROM 25b, RAM 25c, and storage unit 22. For example, the system control unit 25 executes mutual authentication processing for establishing a secure session with the authentication device 10 according to a mutual authentication processing program. After the secure session is established, operations such as unlocking/locking of the doors of the vehicle C are performed by operating the digital key displayed on the display unit 23 from the application.

The input/output interface section 26 is an interface between the communication section 21 and the storage section 22 and the system control section 25.

Next, the key device 30, which is a non-contact IC card, is an electronic information storage medium, and includes, for example, a secure element having high tamper resistance.

FIG. 5 is a diagram showing an example of a schematic configuration of the key device 30. As shown in FIG. As shown in FIG. 5, the key device 30 includes a communication section 31, a storage section 32, a control section 33, and the like.

The communication unit 31 includes an antenna and performs short-range wireless communication with the authentication device 10 within a range where short-range wireless communication is possible. Note that the near field communication protocol between the authentication device 10 and the key device 30 may be, for example, an NFC protocol (for example, a protocol defined by ISO 14443).

The storage unit 32 includes a RAM, NVM, and the like. The storage unit 32 stores an operating system and applications. The application includes a mutual authentication processing program and the like. Furthermore, the storage unit 32 stores authentication data used in mutual authentication processing for establishing a secure channel with the authentication device 10.

The control unit 33 executes mutual authentication processing for establishing a secure session with the authentication device 10 according to the mutual authentication processing program. After the secure session is established, operations such as unlocking/locking the doors of the vehicle C are performed.

[2. Operation of authentication processing system S]
Next, the operation of the authentication processing system S will be explained using diagrams.

(2.1 Initial connection processing operation)
First, the operation of initial connection processing between the authentication device 10 and each of the key devices 20 and 30 will be described using FIG. 6. FIG. 6 is a flowchart illustrating an example of the initial connection processing operation of the authentication device 10.

As shown in FIG. 6, the authentication device 10 starts processing for initial connection between the authentication device 10 and each of the key devices 20 and 30 (step S1). Specifically, the control unit 13 individually brings each of the key devices 20 and 30 close to the authentication device 10 within a range where short-range wireless communication is possible. A button on the software or hardware that starts initial connection processing such as pairing is selected, and initial connection processing is started. The control unit 13 refers to the storage unit 12 and attempts to connect with the target key device according to the priority order of the communication method. Anti-collision processing is performed using the unique ID of the target key device. Here, examples of the anti-collision method include type A anti-collision method (e.g. bit collision, time slot), type B anti-collision method (e.g. slot marker), etc. Anti-collision processing is preferred.

After connecting to the target key device, the control unit 13 refers to the storage unit 12 and performs authentication with the target key device according to the order of the authentication method.

Next, the authentication device 10 identifies the unique ID of the key device and the authentication method with the key device (step S2). Specifically, if pairing is successful in communication based on the communication standard for the key device 20, the control unit 13 specifies the device address as the unique ID of the key device 20. Furthermore, when the authentication device 10 succeeds in pairing with the target key device, the authentication device 10 specifies the authentication method adopted by the key device 20. In the case of a key device 30 such as a contactless IC card, the control unit 13 is used for anti-collision processing to prevent collision of communication signals between a plurality of key devices 30 during communication with the authentication device 10 during initial connection. The unique ID of the key device 30 that has been assigned is specified. Furthermore, when the control unit 13 succeeds in authentication with the target key device, the control unit 13 specifies the authentication method. The control unit 13 temporarily stores the identified unique ID and authentication method data in the RAM of the control unit 13 or the like. In this way, the authentication device 10 functions as an example of an initial connection means that specifies the authentication method and authentication method identification information by processing the initial connection between the key device and the authentication device.

Next, the authentication device 10 determines whether the initial connection process was successful (step S3). Specifically, the control unit 13 determines whether the initial connection process has reached the final process.

If the initial connection process is successful (step S3: YES), the authentication device 10 stores the specified unique ID and the specified authentication method (step S4). For example, as shown in FIG. 3, the control unit 13 stores the unique ID and the authentication method in association with each other in the storage unit 12.

If the initial connection process fails (step S3: NO), the authentication device 10 discards the unique ID and issues an error response (step S5). Specifically, the control unit 13 discards the temporarily stored unique ID and notifies the display unit or the like that the initial connection process has failed as an error response.

(2.2 Authentication operation)
Next, the authentication operation in which the authentication device 10 authenticates the key devices 20 and 30 will be described using FIG. 7. FIG. 7 is a flowchart illustrating an example of the operation of recognition processing by the authentication device 10.

As shown in FIG. 7, the authentication device 10 starts connection processing (step S10). When either of the key devices 20 and 30 enters within the near field communication range of the authentication device 10, the control unit 13 starts connection processing with the target key device. The control unit 13 refers to the storage unit 12 and attempts to connect to the target key device according to the stored information such as the unique ID and communication method. In the case of the key device 20 such as a smartphone, a connection based on the communication standard for the key device 20 is attempted. In particular, in the case of a key device 30 such as a non-contact IC card, anti-collision processing is performed using a unique ID. When the key device is brought close to the communication unit 11 of the authentication device 10, a conflict resolution command is transmitted from the communication unit 11 in order to detect whether a plurality of non-contact communication devices are present. The target key device transmits the unique ID to the authentication device 10 as a response.

Next, the authentication device 10 acquires a unique ID in the connection process (step S11). The control unit 13 receives the unique ID from the target key device. In this way, the authentication device 10 functions as an example of authentication method specifying information specifying means that specifies authentication method specifying information through communication with a key device. The authentication device 10 functions as an example of authentication method specifying information specifying means for specifying a unique ID of a key device as authentication method specifying information in anti-collision processing to prevent collisions of communication signals.

Next, the authentication device 10 determines whether or not the connection was successful (step S12), and if the connection fails, the authentication device 10 returns to the process of step S10 and performs the process. If the connection is successful, the authentication device 10 compares the unique ID with internal information (step S13). Specifically, the control unit 13 refers to the database of the storage unit 12 as shown in FIG. 3 and searches for an authentication method based on the received unique ID.

Next, the authentication device 10 determines whether there is an authentication method corresponding to the unique ID (step S14). Specifically, the control unit 13 refers to the database in the storage unit 12, performs a search based on the unique ID, and determines whether there is a corresponding authentication method.

If there is an authentication method corresponding to the unique ID, the authentication device 10 selects the corresponding authentication method (step S15). Specifically, the control unit 13 selects an authentication method corresponding to the unique ID from the database in the storage unit 12. The authentication device 10 functions as an example of an authentication method determining means that refers to a storage means and determines an authentication method from authentication method specifying information.

If there is no authentication method corresponding to the unique ID, the authentication device 10 selects an authentication method in a predetermined order (step S16). Specifically, the control unit 13 selects an authentication method by referring to a database of predetermined authentication method priority information in the storage unit 12.

Next, the authentication device 10 determines whether the authentication is successful (step S17). Specifically, the control unit 13 starts mutual authentication with the target key devices 20 and 30 according to the selected authentication method. The authentication device 10 functions as an example of authentication means for authenticating a key device using the determined authentication method.

If the selected authentication method is a common key authentication method, it is necessary to confirm that the authentication device 10 and the target key devices 20 and 30 hold a common key and that they have the correct key. implement. For example, the authentication device 10 generates a random number A and sends it to the target key devices 20 and 30. The target key devices 20 and 30 encrypt the random number A (ciphertext A) using the common key that they hold, and transmit the generated random number B to the authentication device 10. The authentication device 10 decrypts the ciphertext A and confirms that it is a random number A. The authentication device 10 encrypts the random number B using the common key and transmits it (ciphertext B) to the target key devices 20 and 30. The target key device 20, 30 decrypts the ciphertext B and confirms that it matches the random number B.

If the selected authentication method is a public key authentication method, the authentication device 10 and the target key devices 20 and 30 perform authentication in a state in which they hold the correct public key of the other party in advance. For example, the authentication device 10 generates a random number A and sends it to the target key devices 20 and 30. The target key device 20, 30 transmits the random number B, data signed with the private key of the target key device 20, 30 (signature B), and the generated random number B to the authentication device 10. The authentication device 10 verifies the signature B using the public key of the target key device 20, 30, and confirms that the other party is the target key device 20, 30. The authentication device 10 signs the random number B with the private key of the authentication device 10 (signature A), and transmits it to the target key devices 20 and 30. The target key devices 20 and 30 verify the signature A using the public key of the authentication device 10 and confirm that the other party is the authentication device 10.

If the authentication fails (step S17: NO), the authentication device 10 determines whether there is another authentication method (step S18). Specifically, the control unit 13 refers to a database of authentication method priority information predetermined in the storage unit 12 and determines whether there is an authentication method that has not yet been selected for the target key device 20 or 30. Determine whether or not. In this way, the authentication device 10 refers to the storage means, and when the authentication method cannot be determined from the authentication method specifying information, the authentication device 10 performs an authentication method that determines the authentication method according to a preset order of authentication methods. It functions as an example of a method determining means.

If there is another authentication method (step S18: YES), the authentication device 10 returns to the process of step S16, excludes the already selected authentication method from among the authentication methods in the predetermined order, and selects the next authentication method. Select an authentication method. In this way, the authentication device 10 functions as an example of an authentication means for authenticating the key device when authentication fails, using an authentication method different from the authentication method that failed to authenticate, according to the preset order of authentication methods. .

If there is no other authentication method (step S18: NO), the authentication device 10 performs authentication failure processing (step S19). Specifically, the control unit 13 notifies the display unit or the like that the authentication has failed as an error response.

If the authentication is successful, the ECU of the vehicle C performs operations such as unlocking/locking the doors of the vehicle C and starting the engine of the vehicle C.

As explained above, according to the above embodiment, the unique ID of an example of the authentication method specifying information is specified through communication with each key device 20, 30, and information on the authentication method adopted by each key device 20, 30 is identified. , the authentication method is determined from the unique ID by referring to a storage means such as the storage unit 12 that stores the information in association with the unique ID, and each key device 20, 30 is authenticated using the determined authentication method, so that multiple authentications can be performed. Even if there is a method, there is no need to try authentication unnecessarily, and the authentication process can be performed smoothly.

In addition, when identifying an authentication method and a unique ID as an example of authentication method specifying information through the initial connection process between each key device 20, 30 and the authentication device 10, information on the authentication method adopted by the key device 20, 30 is provided. A database can be constructed in advance by an initial connection, in which the information is stored in association with a unique ID that specifies the authentication method through communication.

In addition, when identifying the unique ID of the key device 20, 30 in anti-collision processing to prevent collision of communication signals, the unique ID of the key device to identify the authentication method is ID can be specified.

If authentication is not possible, if each key device 20, 30 is to be authenticated using an authentication method different from the authentication method that could not be authenticated according to the preset order of authentication methods, the key devices 20 and 30 are identified from authentication method specific information such as a unique ID. Even if authentication cannot be performed using the specified authentication method, the authentication method can be determined. Further, by applying an authentication method to the ranking and performing authentication within the range of the preset authentication method, it is possible to stop the authentication process at the number of times within the range of the authentication method.

When an authentication method cannot be determined from authentication method specific information such as a unique ID with reference to a storage means such as the storage unit 12, and the authentication method is determined according to a preset order of authentication methods, the authentication method Even if authentication cannot be performed using the authentication method specified from the specific information, the authentication method can be determined. Further, by applying an authentication method to the ranking and performing authentication within the range of the preset authentication method, it is possible to stop the authentication process at the number of times within the range of the authentication method.

(Modified example)
Next, a modification of the authentication operation will be described using FIG. 8. FIG. 8 is a flowchart showing a modification of the recognition process of the authentication device 10.

First, the authentication device 10 identifies a communication method (step S20). Specifically, when either of the key devices 20 and 30 enters within the short-range wireless communication range of the authentication device 10, the control unit 13 starts connection processing with the target key device. The control unit 13 refers to the storage unit 12 and attempts to connect to the target key device according to the stored information such as the unique ID and communication method. The control unit 13 specifies information on the communication method that has been successfully connected. In this way, the authentication device 10 functions as an example of an authentication method specifying information specifying means that specifies the communication method of the key device as the authentication method specifying information in the communication start process.

Next, the authentication device 10 compares the communication method with internal information (step S21). Specifically, the control unit 13 refers to the database in the storage unit 12 that associates communication methods and authentication methods, and searches for an authentication method based on the specified communication method.

Next, the authentication device 10 determines whether there is an authentication method corresponding to the communication method (step S22). Specifically, the control unit 13 refers to the database in the storage unit 12, performs a search based on the specified communication method, and determines whether or not there is a corresponding authentication method.

If there is an authentication method corresponding to the identified communication method, the authentication device 10 selects the corresponding authentication method (step S23). Specifically, the control unit 13 selects an authentication method corresponding to the specified communication method from the database of the storage unit 12.

If there is no authentication method corresponding to the identified communication method, the authentication device 10 selects an authentication method in a predetermined order as in step S16 (step S24).

Next, as in step S17, the authentication device 10 determines whether or not the authentication is successful (step S25).

If the authentication fails (step 25: NO), the authentication device 10 determines whether there is another authentication method, as in step S18 (step S26).

If there is another authentication method (step S26: YES), the authentication device 10 returns to the process of step S24, excludes the already selected authentication method from among the authentication methods in the predetermined order, and selects the next authentication method. Select an authentication method.

If there is no other authentication method (step S26: NO), the authentication device 10 performs authentication failure processing as in step S19 (step S27).

In the above modification, the communication method of each key device 20, 30 is specified through communication with each key device 20, 30, and the information on the authentication method adopted by each key device 20, 30 and the communication method are determined. The authentication method is determined from the communication method by referring to the storage means that stores the information in association with each other, and each key device 20, 30 is authenticated using the determined authentication method, so even if there are multiple authentication methods, unnecessary authentication is not possible. There is no need to try ``authentication'', and the authentication process can be performed smoothly.

In addition, when specifying the communication method of the key device 20, 30 in the communication start process, even if the unique ID of the key device 20, 30 is not known, the key device 20, 30 can be identified from the communication method of the key device 20, 30. The authentication method to be adopted can be specified. For example, even in the case of an anti-collision method that does not use a unique ID, the communication method of the key devices 20 and 30 can be specified. Moreover, even without the process of constructing a storage means in advance during the initial connection, if there is a database of communication methods and authentication methods, the authentication method of the key devices 20 and 30 can be specified.

10 Authentication device 20, 30 Key device

Claims (8)

An authentication device that communicates with a key device and authenticates the key device using digital data,
storage means for storing information on an authentication method adopted by the key device in association with authentication method specifying information for specifying the authentication method through the communication;
authentication method specifying information specifying means for specifying the authentication method specifying information through communication with the key device;
authentication method determining means that refers to the storage means and determines the authentication method from the authentication method specifying information;
authentication means for authenticating the key device using the determined authentication method;
An authentication device comprising: The authentication device according to claim 1,
An authentication device further comprising: initial connection means for specifying the authentication method and the authentication method specifying information by processing an initial connection between the key device and the authentication device. The authentication device according to claim 1 or 2,
An authentication device characterized in that the authentication method specifying information specifying means specifies a unique ID of the key device as the authentication method specifying information in anti-collision processing for preventing collision of communication signals. The authentication device according to claim 1 or 2,
If the authentication means fails to authenticate, the authentication device authenticates the key device using an authentication method different from the authentication method that failed to authenticate, according to a preset order of authentication methods. The authentication device according to claim 4,
The authentication method determining means refers to the storage means, and if the authentication method cannot be determined from the authentication method specifying information, the authentication method is determined in accordance with a preset order of authentication methods. Authentication device. In the authentication device according to claim 1 or claim 2,
The authentication device, wherein the authentication method specifying information specifying means specifies a communication method of the key device as the authentication method specifying information in the communication start process. An authentication method that communicates with a key device and authenticates the key device using digital data,
a storing step in which a storage means associates and stores information on an authentication method adopted by the key device and authentication method specifying information that specifies the authentication method through the communication;
an authentication method specifying information specifying step in which the authentication method specifying information specifying means specifies the authentication method specifying information through communication with the key device;
an authentication method determining step in which the authentication method determining means refers to the storage means and determines the authentication method from the authentication method specifying information;
an authentication step in which the authentication means authenticates the key device using the determined authentication method;
An authentication method characterized by comprising: A computer included in an authentication device that communicates with a key device and authenticates the key device using digital data,
storage means for storing information on an authentication method adopted by the key device in association with authentication method specifying information for specifying the authentication method through the communication;
authentication method specifying information specifying means for specifying the authentication method specifying information through communication with the key device;
authentication method determining means that refers to the storage means and determines the authentication method from the authentication method specifying information;
A program that causes the program to function as an authentication means for authenticating the key device using the determined authentication method.

Images