JP4075544B2 - Authentication system - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an authentication system.
[0002]
[Prior art]
2. Description of the Related Art Conventionally, there is a method of authenticating using a personal identification number or a password input by a user. For example, when withdrawing cash at an ATM such as a bank or post office, the user inserts a predetermined cash card into the ATM card slot and inputs a personal identification number corresponding to the inserted cash card. Then, in the ATM, the password entered by the user is compared with the password assigned to the inserted cash card, and if they match, it is determined that the user is a legitimate user and cash can be withdrawn. To do.
[0003]
Further, for example, when accessing the Internet with a personal computer in the home, the user inputs a user name and a password associated with the user name to the provider server with which he / she has contracted. Then, the provider server refers to the password corresponding to the user name input by the user, and compares the referred password with the password input by the user. Then, if they match, it is recognized as a legitimate user who has contracted, and enables access to the Internet.
[0004]
As described above, in the conventional authentication method, a personal identification number assigned to a user, a password, or the like is input to determine whether the user is a legitimate user.
[0005]
[Problems to be solved by the invention]
In the conventional authentication method, the user cannot obtain authentication unless a password or a password is input. Therefore, if the user forgets the password or password, for example, it is necessary to inquire the management company that manages the password or password for the registered password or password. there were.
[0006]
The present invention has been made in view of such a problem, and an object of the present invention is to provide an authentication system capable of obtaining authentication without inputting a personal identification number or a password.
[0007]
[Means for Solving the Problems]
The authentication system according to claim 1 includes a determination unit that determines whether or not the input code and the pre-registered authentication code can be verified , and the input code and the authentication code can be verified by the determination unit . An authentication device that performs predetermined authorization when it is determined , a communication module that is mounted on the vehicle and communicates with the outside of the vehicle, an in-vehicle control device that is connected to the communication module and operates a predetermined in-vehicle device, storing the unique code defined uniquely to each device, and outputs the specific code to the vehicle-mounted control unit, a predetermined vehicle device based on the comparison result of the unique code by the bi-directional communication with the vehicle control apparatus a portable machine which Ru is operated and provided with communication means for communication with the portable device, and enter a unique code that is output from the portable device, a mobile phone and for outputting a unique code the input to the authentication device Comprising, determining means is adapted so to determine whether or not matching the authentication code as input code specific code transmitted from the cellular phone, authentication apparatus, after certification, vehicle equipment from the mobile phone Control command output means for outputting the control command to the communication module when receiving a control command to operate the vehicle, and the in-vehicle control device operates the in-vehicle device when receiving the control command through the communication module It is characterized by making it.
[0008]
As described above, the authentication system of the present invention inputs a unique code output from a portable device via a mobile phone provided with a communication means compatible with Bluetooth or the like for realizing short-distance wireless communication. The unique code is compared with an authentication code registered in advance to determine authentication. Thus, the user can be authenticated simply by performing an operation for outputting a code output request from the mobile phone to the mobile device, and as a result, it is not necessary to input a personal identification number or password.
Further, in an electronic key system that can control the locking mechanism of each door of the vehicle from a location away from the vehicle, for example, the in-vehicle control device receives a unique code transmitted from the portable device, and this received unique It is determined whether or not there is a predetermined relationship, for example, the code and the code stored in advance by the in-vehicle control device match. When these codes coincide with each other, the lock mechanism and the steering lock mechanism of each door of the vehicle are unlocked, or the vehicle engine is permitted to start. In the present invention, authentication using a code in the portable device and the in-vehicle control device is executed with the authentication system via the mobile phone. That is, it is possible to perform authentication between the portable device and the authentication system by registering a code having the same content as the code stored in advance in the in-vehicle control device in the authentication system as an authentication code.
Note that the communication means is not limited to that connected to the portable device by short-range wireless communication as described above, and may be connectable by wire.
The portable device may be a transmitter in a keyless entry system that controls a lock mechanism of each door of the vehicle by a user's remote operation, for example. That is, even in a keyless entry system, a receiver mounted on a vehicle receives a code transmitted from a transmitter carried by the user, and authentication is performed using the received code and a code stored in advance on the receiver side. Is going. Therefore, by registering the code stored in the receiver in the authentication system, the transmitter and the authentication system can be authenticated.
[0009]
Note that the authentication system of the present invention can be widely applied to systems that require authentication, such as authentication of cash cards in ATMs, authentication of ETC in-vehicle devices and roadside communication devices at toll road tollgates, and the like.
[0017]
According to the first aspect of the present invention, the user can operate a predetermined in-vehicle device at a place far away from the vehicle by the authentication between the portable device and the authentication system.
[0018]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, an authentication system according to an embodiment of the present invention will be described with reference to the drawings. In the present embodiment, an example in which the vehicle door lock mechanism is controlled by the authentication system of the present invention will be described.
[0019]
FIG. 1 is a diagram illustrating a schematic configuration of an authentication system according to the present embodiment. As shown in the figure, the authentication system according to the present embodiment includes a Web server 40, a mobile phone 50, and a portable device 60 used in an electronic key system. The Web server 40 can communicate with the communication module 30 mounted on the vehicle 10, and the security ECU 20 is connected to the communication module 30.
[0020]
The security ECU 20 mounted on the vehicle 10 is connected to a door lock mechanism and a body ECU (not shown) of each door of the vehicle 10, and when a control command is input from the communication module 30 described later, Output the lock / unlock signal of each door. When the door lock mechanism receives the lock / unlock signal, the door lock mechanism operates according to the signal. The body ECU detects the lock / unlock of each door and outputs a detection signal to the security ECU 20.
[0021]
Further, the security ECU 20 is connected to a transceiver (not shown) for performing bidirectional communication with the portable device 60 described later, and is uniquely determined for each portable device input from the portable device 60. A determination unit (not shown) for determining whether or not the ID code matches the code stored in advance in the security ECU 20 is provided. When it is determined by the determination unit that the two codes match, the security ECU 20 outputs an unlock signal for each door to the door lock mechanism. That is, the portable device 60 and the security ECU 20 perform authentication using an ID code by two-way communication, and when this authentication is obtained, the mechanism for controlling the locking mechanism of each door of the vehicle 10 is controlled. .
[0022]
The communication module 30 is connected to the security ECU 20. The communication module 30 transmits a control command for operating a predetermined vehicle-mounted device received from the Web server 40, which will be described later, to the security ECU 20, or sends a response signal to the control command received from the security ECU 20 to the Web. To the server 40.
[0023]
The Web server 40 is a server that can be connected via the Internet, and an authentication code having the same content as the code stored in the security ECU 20 is registered in advance. When an ID code output from the portable device 60 described later is input, it is determined whether or not the input ID code matches the above-described authentication code. When it is determined that the two codes match, the Web server 40 outputs a control command for operating a predetermined in-vehicle device to the communication module 30. That is, the Web server 40 executes an authentication process similar to the authentication process using the code in the security ECU 20 mounted on the vehicle 10.
[0024]
As is well known, the mobile phone 50 is composed of an input key, a liquid crystal display, a radio circuit, and the like, and can be connected to the Internet via a mobile phone network. Further, the mobile phone 50 has a built-in communication unit (not shown) corresponding to a communication standard such as Bluetooth using the 2.4 GHz band, and is configured to perform short-range wireless communication. ing. With this short-range wireless communication, the cellular phone 50 can communicate with a portable device 60 described later.
[0025]
The portable device 60 is a portable device that is used in an electronic key system that can control a lock mechanism and the like of each door of the vehicle 10 from a distance from the vehicle 10, and includes a transmission / reception circuit therein. The portable device 60 stores an ID code uniquely determined for each portable device, and outputs the ID code to the security ECU 20.
[0026]
Similarly to the mobile phone 50, the portable device 60 has a built-in communication unit (not shown) compatible with the above-described Bluetooth, and can communicate with the mobile phone 50. When receiving the code output request signal from the mobile phone 50, the portable device 60 outputs the above-described ID code to the mobile phone 50 via the communication unit.
[0027]
The connection between the portable device 60 and the cellular phone 50 is not limited to a communication unit capable of short-range wireless communication. For example, it may be a communication unit for connecting by wire. Moreover, in this embodiment, although the mobile telephone 50 is employ | adopted as a communication apparatus which connects the web server 40 and the portable device 60, it is not limited to this, For example, it has the above-mentioned communication part, Further, it may be a PDA (Personal Digital Assistants) or a PC (Personal computer) that can be connected to the Internet.
[0028]
Next, the operation of remotely operating the lock mechanism of each door of the vehicle 10 by the authentication using the mobile phone 50 and the mobile device 60 according to the characteristic part of the present embodiment will be described with reference to the flowcharts of FIGS. explain.
[0029]
In step S1 shown in FIG. 2, in order to access the Web server 40 from the mobile phone 50, an access operation of the mobile phone 50 by the user is requested. In step S2, access to the Web server 40 input by the user from the mobile phone 50 is attempted. When accessing the Web server 40 from the mobile phone 50, the user name is given. Thereby, the accessing user is specified on the Web server 40 side.
[0030]
When this access is completed, a request signal for transmitting the ID code of the portable device 60 to the Web server 40 is transmitted from the Web server 40 to the mobile phone 50 in Step S3. At the same time, the Web server 40 extracts a pre-registered authentication code (authentication code) corresponding to the user name transmitted from the mobile phone 50.
[0031]
In step S <b> 4, the mobile phone 50 that has received the ID code request signal establishes a short-range wireless communication link with the mobile device 60. In step S5, when the communication link in step S4 is established, the mobile phone 50 transmits a request signal for requesting transmission of the ID code to the mobile device 60.
[0032]
In step S <b> 6, when the portable device 60 receives this ID code transmission request signal, the portable device 60 transmits the ID code to the portable phone 50. The transmitted ID code may be eavesdropped at the time of transmission, so it may be encrypted and transmitted. In step S <b> 7, the mobile phone 50 receives the ID code transmitted from the mobile device 60 and transmits this ID code to the Web server 40.
[0033]
In step S8 shown in FIG. 3, the Web server 40 receives the ID code transmitted from the mobile phone 50, and determines whether or not the received ID code matches the extracted authentication code. If the two codes match, the process proceeds to step S9. If not, the process is terminated as authentication is impossible.
[0034]
In step S <b> 9, the Web server 40 transmits an instruction signal to the mobile phone 50 to display a remote operation menu screen on the mobile phone 50. After receiving this instruction signal, the cellular phone 50 displays a menu screen for remote operation. On this menu screen, operation items such as a lock / unlock operation of each door of the vehicle 10 are displayed. In the present embodiment, it is assumed that the lock operation of each door is selected by the user.
[0035]
In step S <b> 10, a request signal for requesting the lock operation of each door is transmitted from the mobile phone 50 to the Web server 40. In step S <b> 11, when receiving the request signal, the Web server 40 transmits a request signal for transmitting the ID code of the portable device 60 to the Web server 40 again to the mobile phone 50.
[0036]
In step S12, the mobile phone 50 transmits a request signal for requesting transmission of the ID code to the mobile device 60. In step S <b> 13, when the portable device 60 receives this ID code transmission request signal, the portable device 60 transmits the ID code to the portable phone 50. Note that this transmitted ID code may be encrypted and transmitted in the same manner as in step S6. In step S <b> 14, the mobile phone 50 receives the ID code transmitted from the mobile device 60 and transmits this ID code to the Web server 40.
[0037]
In step S15 shown in FIG. 4, the ID code transmitted from the mobile phone 50 is received, and it is determined whether or not the received ID code matches the authentication code, as in the process of step S8. If the two codes match, the process proceeds to step S16. If the codes do not match, authentication is impossible and the process ends.
[0038]
As described above, the authentication system in the present embodiment receives the ID code transmitted from the portable device 60 via the mobile phone 50, and compares the received ID code with the authentication code registered in the Web server 40 in advance. An authentication decision is being made. Accordingly, the user can be authenticated simply by performing an operation of transmitting a code output request from the mobile phone 50 to the mobile device 60, and as a result, does not need to input a personal identification number or password.
[0039]
In the present embodiment, after the authentication is obtained in step S8, the process associated with the authentication is performed again in steps S11 to S15. However, after the door lock operation instruction is requested in step S10, the step is performed. You may perform the process after step S16, without performing the authentication process of S11-step S15.
[0040]
Subsequently, in step S <b> 16, a control command signal instructing a locking operation of each door of the vehicle 10 is transmitted from the Web server 40 to the communication module 30 mounted on the vehicle 10. When receiving the control command signal, the communication module 30 transmits a door lock signal to the security ECU 20 and activates the lock of each door by the door lock mechanism.
[0041]
In step S <b> 17, when the door lock is detected by the body ECU, the vehicle 10 transmits a notification signal indicating that the door lock is completed to the Web server 40. In step S18, when the web server 40 receives this communication signal, it transmits an instruction signal to the mobile phone 50 so as to display that the door lock is completed. The user confirms that the door has been securely locked by the door lock completion message displayed on the mobile phone 50.
[0042]
As described above, the authentication system according to the present embodiment enables the user to operate the in-vehicle device such as the lock mechanism even at a location far away from the vehicle 10. It should be noted that the authentication system of this embodiment can be widely applied to systems that require authentication, such as authentication of cash cards in ATMs, authentication of ETC on-board devices and roadside communication devices at toll road tolls, etc. Needless to say.
[0043]
Moreover, in this embodiment, although the portable device used for the electronic key system which can control the locking mechanism etc. of each door of the vehicle 10 from the place away from the vehicle 10 is adopted as the portable device 60, For example, it may be a transmitter in a keyless entry system that controls the lock mechanism of each door of the vehicle by a user's remote operation. That is, even in a keyless entry system, a receiver mounted on a vehicle receives a code transmitted from a transmitter carried by the user, and authentication is performed using the received code and a code stored in advance on the receiver side. Is going. Therefore, by registering the code stored in the receiver in the Web server 40, the transmitter and the Web server 40 can be authenticated.
[Brief description of the drawings]
FIG. 1 is a conceptual diagram of an authentication system according to an embodiment of the present invention.
FIG. 2 is a flowchart showing authentication processing until a remote operation menu screen is displayed according to the embodiment of the present invention.
FIG. 3 is a flowchart showing an authentication process after requesting a door lock operation instruction according to the embodiment of the present invention;
FIG. 4 is a flowchart showing processing after authentication for a door lock operation instruction according to the embodiment of the present invention.
[Explanation of symbols]
10 Vehicle 20 Security ECU
30 Communication Module 40 Web Server 50 Mobile Phone 60 Mobile Device

Claims (1)

A determination unit configured to determine whether or not the input code and the authentication code registered in advance have been verified; and when the determination unit determines that the input code and the authentication code have been verified ; An authentication device for accreditation;
A communication module mounted on a vehicle and performing communication with the outside of the vehicle;
An in-vehicle controller connected to the communication module and operating a predetermined in-vehicle device;
Storing the unique code defined uniquely to each device, and outputs the specific code to the vehicle control device, the vehicle control device and based on a predetermined verification result of the unique code by two-way communication and a portable machine that Ru to operate the vehicle-mounted device,
A communication unit that communicates with the portable device, and a mobile phone that inputs a unique code output from the portable device and outputs the input unique code to the authentication device;
The determination means is configured to determine whether or not the unique code transmitted from the mobile phone has been verified against the authentication code as an input code ,
The authentication device further comprises a control command output means for outputting the control command to the communication module when receiving a control command for operating the in-vehicle device from the mobile phone after the authorization,
The said vehicle-mounted control apparatus operates the said vehicle-mounted apparatus, when the said control command is received via the said communication module, The authentication system characterized by the above-mentioned .

Images