JP4404840B2 - Authentication system, authentication key distribution server, and program - Google Patents

Description

The present invention relates to an authentication system including an authentication key distribution server, and enables a user who plans to visit a plurality of visited places to successfully authenticate when he / she visits a previous visited place as scheduled. The present invention relates to a technique for reducing the risk of impersonation by the three parties.

As a conventional technique, an encryption key is generated using position information of a place where a decryption is to be performed.
There is a method in which a location is acquired by PS (Global Positioning System) or the like, and a decryption key is generated based on the location.

However, in these methods, authentication is performed based on the location of only one point, so it is relatively easy to impersonate.

For example, in systems that ensure the security of vending machines and ATMs (automated teller machines), the schedule for maintenance is precisely defined. Helps ensure that you are a legitimate worker.
JP 2002-268549 A Japanese Patent Laid-Open No. 10-341212 JP 2005-204000 A

Therefore, the present invention mainly aims to solve such a problem, and successfully authenticates a user who plans to visit a plurality of visited places when he / she visits a previous visited place as scheduled. The problem is to reduce the risk of impersonation by a third party.

An authentication system according to the present invention includes:
User terminal used by users who plan to visit multiple visited places, an authentication device installed at the visited place and capable of communicating with the user terminal, and an authentication key connectable to the user terminal and the authenticating device via the network An authentication system comprising a distribution server,
User terminal
(A) an arrival notification instruction unit that receives an instruction to transmit an arrival notification by a user operation;
(B) a location acquisition unit that identifies the location of the user terminal when receiving an instruction to transmit the notification of arrival;
(C) an arrival notification transmitter that transmits an arrival notification including the location to the authentication key distribution server;
(D) As a reply to the notification of arrival, an authentication key receiving unit by visiting place that receives the authentication key by visiting place,
(E) a terminal side series key storage unit that stores the authentication key for each visited place received for each visited place as a series of keys;
(F) an authentication request instruction unit that receives an instruction to transmit an authentication request by a user operation;
(G) When receiving an instruction to send an authentication request, the terminal side series key transmission unit for sending the terminal side series key stored in the terminal side series key storage unit to the authentication device;
The authentication key distribution server
(1) an arrival notification receiving unit that receives an arrival notification including a location from the user terminal;
(2) For a plurality of ordered visit sites, a schedule table that stores a schedule visit location that is a location of each visit location and a visit location authentication key provided for each visit location in association with each other;
(3) When the arrival notification is received, the planned visit location of the visited location is obtained from the schedule table, the location included in the arrival notification is compared with the planned visit location, and if they match, the visited location is identified. An arrival determination unit that determines that the arrival is within the schedule,
(4) an authentication key transmitter that transmits an authentication key for each visited place of the visited place to the user terminal when it is determined that the arrival is within the schedule;
(5) A server-side series key transmission unit that transmits the visited site and the authentication key group for each visited site before the visited site as a series of keys on the server side to the authentication device corresponding to the visited site. Have
The authentication device
(A) a server-side series key receiving unit that receives a server-side series of keys from the authentication key distribution server;
(B) a terminal-side series key receiving unit that receives a terminal-side series of keys from the user terminal;
(C) It has a series key authentication unit for authenticating a user based on a series of keys on the server side and a series of keys on the terminal side.

In addition, the user terminal further includes a current time acquisition unit that specifies the current time when an instruction for arrival notification transmission is received,
The arrival notification transmission unit of the user terminal transmits an arrival notification including the current time in addition to the location to the authentication key distribution server,
The arrival notification receiving unit of the authentication key distribution server receives the arrival notification including the current time in addition to the location from the user terminal,
The schedule table of the authentication key distribution server includes, for a plurality of ordered visit sites, in addition to the planned visit location that is the location of each visit location and the authentication key for each visit location provided for each visit location,
Stores the scheduled visit time, which is the scheduled visit time, in association with it,
When the arrival determination unit of the authentication key distribution server receives the arrival notification, it acquires the scheduled visit time in addition to the planned visit position of the visited place from the schedule table, and compares the location included in the arrival notification with the planned visit position In addition, the current time included in the arrival notification is compared with the scheduled visit time, and if they match, the visited place is identified and it is determined that the arrival is within the schedule.

An authentication key distribution server according to the present invention includes:
An authentication key distribution server that can be connected via a network to a user terminal used by a user who plans to visit a plurality of visited places, and an authentication device that is installed at the visited place and can communicate with the user terminals, and includes the following: (1) Arrival notification receiving unit that receives an arrival notification including a location from a user terminal (2) A scheduled visit that is the location of each of a plurality of ordered visits The schedule table (3) that stores the location and the authentication key for each visited location associated with each location, and stores the arrival notification. When the arrival notification is received, the planned visiting location of the visited location is acquired from the scheduled table, and the arrival notification is received. The arrival determination unit that compares the included location and the planned visit location, and determines the arrival location within the schedule by identifying the visited location when it is the same (4) reached when it is determined to be within the schedule Visit Authentication key transmitter that transmits the authentication key for each area to the user terminal (5) Visits that have arrived using a set of authentication keys for each of the visited areas of the visited area and the visited area before the visited area as a series of keys on the server side A server-side series key transmission unit that transmits to the authentication device corresponding to the ground.

In addition, the arrival notification receiving unit receives an arrival notification including the current time in addition to the location from the user terminal,
The schedule table is for a plurality of ordered locations, in addition to the planned visit location that is the location of each visited location and the authentication key for each visited location provided for each visited location, as well as the planned visit time Store the time in association,
When the arrival notification is received, the arrival determination unit obtains the scheduled visit time in addition to the planned visit location of the visited place from the schedule table, and in addition to comparing the location and the planned visit location included in the arrival notification, the arrival determination Compare the current time included in the notification with the estimated visit time and if they match,
It is characterized in that the visited place is identified and determined to be within the schedule.

The program according to the present invention is:
About a plurality of ordered visits that can be connected via a network to a user terminal used by a user who plans to visit multiple visits and an authentication device that is installed at the visit and can communicate with the user terminals. The computer serving as the authentication key distribution server having the schedule table that stores the scheduled visit location that is the location of each visited location and the authentication key for each visited location provided for each visited location in association with each other is executed. (1) Arrival notification reception procedure for receiving a notification of arrival including a location from a user terminal (2) When a notification of arrival is received, a planned visit position of a visited place is acquired from the schedule table, A location determination procedure that compares the location included in the notification of arrival and the planned visit location and, if they match, identifies the visited location and determines that it is within the schedule (3) Determines the arrival within the schedule Authentication key transmission procedure for transmitting the authentication key for each visited place of the visited place to the user terminal (4) The server-side authentication key group for the visited place and the visited place before the visited place As a series of keys, a server-side series key transmission procedure for transmitting to the authentication device corresponding to the visited place of arrival.

In addition, the schedule table possessed by the authentication key distribution server includes, for a plurality of ordered visit sites, in addition to the planned visit location that is the location of each visit location, and the visit location specific authentication key provided for each visit location, Stores the scheduled visit time, which is the scheduled visit time, in association with it,
The arrival notification reception procedure receives an arrival notification including the current time in addition to the location from the user terminal,
When the arrival notification is received, the arrival determination procedure obtains the scheduled visit time from the schedule table in addition to the planned visit location of the visited location, and in addition to comparing the location and the planned visit location included in the arrival notification A comparison is made between the current time included in the notification and the scheduled visit time, and when they match each other, the visited place is identified and the arrival within the schedule is determined.

According to the present invention, the arrival notice is received from each visited place, it is determined whether it has arrived within the schedule, and the authentication key for each visited place is returned only when it is within the schedule, and returned at the previous visited place. Since the authentication is not successful unless a series of keys are prepared, the risk of impersonation by a third party can be reduced.

Embodiment 1 FIG.
FIG. 1 is a diagram showing a configuration of an authentication system according to the present invention. The authentication key distribution server 101 is connected to the authentication device 102 via a network. The user terminal 103 is configured to be able to connect to the authentication key distribution server 101 via a wireless medium (for example, a mobile phone network) and the Internet. In addition, the user terminal 103 and the authentication device 102 are configured to perform short-range wireless communication such as infrared communication.

As an example of provision, an authentication device 102 is provided in a vending machine, ATM, or the like, and a worker who maintains these devices is authenticated as a user.

Next, a visit route of the user will be described. FIG. 2 is a diagram illustrating the concept of a visit route.
In this example, the user plans to visit in the order of the first visited place, the second visited place, and the third visited place. The positions (for example, latitude and longitude) of the first visited place, the second visited place, and the third visited place are represented by the planned visited positions P1, P2, and P3, respectively. Moreover, the scheduled time to visit each visited place can be represented by the scheduled visit times T1, T2, and T3, respectively. An authentication device 102 (authentication device identification information: S1) is installed at the third visited place.

The operation when the user reaches each visited place will be described. When the user arrives at each visited location, a notification of arrival is transmitted from the user terminal 103 to the authentication key distribution server 101, and the authentication key distribution server 101 returns a visited location-specific authentication key to the user terminal 103.

FIG. 3 is a diagram illustrating the configuration of the user terminal. The user terminal 103 is connected to the arrival notification instruction unit 30.
1, location acquisition unit 302, current time acquisition unit 303, arrival notification transmission unit 304, visit location authentication key reception unit 305, terminal side series key storage unit 306, authentication request instruction unit 307, and terminal side series key transmission unit It has 308 elements.

FIG. 4 is a diagram illustrating a processing flow relating to the arrival notification of the user terminal. When the user arrives at each visited location, the user performs an operation to instruct the user terminal 103 to transmit a notification of arrival. As a result, the arrival notification instruction unit 301 receives an instruction for arrival notification transmission (S401). Next, in the location processing (S402) by the location acquisition unit 302, the location is specified using a built-in GPS processing unit or the like, and further the current time acquisition processing by the current time acquisition unit 303 (S40).
3) The current time is specified using a built-in clock unit. Then, in the arrival notification transmission process (S404) by the arrival notification transmission unit 304, an arrival notification including the location as the arrival position and the current time as the arrival time is generated, and the arrival notification is transmitted to the authentication key distribution server 101. .

Next, the authentication key receiving unit 305 visit site authentication key reception process (S405) receives the authentication key for each visited site from the authentication key distribution server 101 as a reply to the notification of arrival, and received it for each visited site. The authentication key for each place to be visited is stored in the terminal-side series key storage unit 306 as a series of keys in order.

Next, the operation on the authentication key distribution server side will be described. FIG. 5 is a diagram showing the configuration of the authentication key distribution server. The authentication key distribution server 101 includes an arrival notification reception unit 501 and an arrival determination unit 502.
, Schedule table 503, authentication key generation unit 504, authentication key transmission unit 505, serial key transmission determination unit 5
06 and a series key transmission unit 507.

FIG. 6 is a diagram illustrating an example of a schedule table. A record is provided for each visited place, and the scheduled visit position, the scheduled visit time, the visited place authentication key, and the authentication device identification information items are stored in association with each other. In the present embodiment, the scheduled visit position, the scheduled visit time, and the items of the authentication device identification information are set in advance by a schedule setting unit (not shown). The association between the visited place and the authentication device identification information may be stored by providing another authentication device table without depending on the schedule table.

FIG. 7 is a diagram showing an authentication key distribution processing flow according to the first embodiment. First, arrival notification reception processing (S701) by the arrival notification receiving unit 501 is performed. In this process, the user terminal 1
Wait for the arrival notification from 03. In the arrival notification, as described above, the user terminal 10
3 arrival positions and arrival times are included. When the arrival notification is received, arrival determination processing (S702) by the arrival determination unit 502 is performed. In this process, the scheduled visit position and the scheduled visit time are sequentially acquired from each record of the schedule table 503, the arrival position is compared with the scheduled visit position, the arrival time is compared with the scheduled visit time, and both are within an allowable range. In this case, the destination ID is specified and it is determined that the visit is within the schedule. If either or both do not match within the allowable range, it is determined that the visit is unscheduled. If it is determined that the visit is not scheduled, the process returns to S701. As the allowable range, for example, a difference up to 10 m is set as a predetermined allowable range regarding the position, and 1
A predetermined range is used so that the difference up to 0 minutes is a predetermined allowable range related to time. Alternatively, the schedule table 503 may be provided with items of an allowable range related to position (for example, within 10 m) and an allowable range related to time (for example, within 10 minutes), and these allowable ranges may be used.

If it is determined that the visit is scheduled, an authentication key generation process (S70) by the authentication key generation unit 504 is performed.
Perform 3). In this process, a site-specific authentication key corresponding to the site ID is generated. The authentication key for each place of visit is generated irregularly so that it is difficult to guess. The authentication key for each visited place is stored in the record of the visited place ID in the schedule table 503. Then, in the authentication key transmission process (S704) by the authentication key transmission unit 505, the authentication key for each visited place is returned to the user terminal 103.

The authentication key distribution server 101 further performs a series key transmission determination process (by the series key transmission determination unit 506).
S705) is performed. In this process, it is determined whether an authentication device is installed at the visited place, and if it is set, it is determined that transmission is necessary. In this example, when the authentication device identification information is set in the item of the authentication device identification information, it is determined that the authentication device is installed. Regardless of this example, when the authentication device is installed in all visited places, this determination is unnecessary.

If it is determined that transmission is necessary, a series key transmission process (S706) by the series key transmission unit 507 is performed. In this processing, the authentication key group is acquired from the schedule table 503 corresponding to the visit place ID and the visit place IDs of the previous visit places, and these keys are stored in the authentication device 102 as a series key in the order of the visit places. Send. The authentication device 102 is specified by authentication device identification information associated with the visited place ID. The correspondence relationship is acquired from the schedule table or the authentication device table described above.

Next, an operation in which the authentication device authenticates the user will be described. FIG. 8 is a diagram showing a processing flow relating to the authentication request of the user terminal. Authentication request instruction processing by the authentication request instruction unit 307 (
In step S <b> 801), an authentication request transmission instruction is received by a user's operation, and the terminal side stored in the terminal side sequential key storage unit 306 in the terminal side sequential key transmission process (S <b> 802) by the terminal side sequential key transmission unit 308. A series of keys (authentication key group for each visited place of the visited place and the previously visited place)
Sent to the authentication device.

The operation on the authentication device side will be described. FIG. 9 is a diagram illustrating a configuration of the authentication device. The authentication apparatus 102 includes a server side series key receiving unit 901, a series key authentication unit 902, and a terminal side series key receiving unit 903.

FIG. 10 is a diagram illustrating an authentication processing flow of the authentication device. In the server side series key receiving process (S1001) by the server side series key receiving part 901, a series of server side keys are received from the authentication key distribution server 101, and the terminal side series key receiving part 902 by the terminal side series key receiving part (902) S1002
), A series of key on the terminal side is received from the user terminal 103, and in the series key authentication process (S1002) by the series key authentication unit 903, based on the series of key on the server side and the series of key on the terminal side, User authentication is performed. For example, when all the series of keys match, it is determined that the authentication is successful. If either is different, it is determined that the authentication has failed.

Embodiment 2. FIG.
In the above-described embodiment, the authentication key for each visited place is generated every time the arrival determination is made. However, the authentication key for each visited place may be set in the schedule table 503 in advance.

FIG. 11 is a diagram showing a configuration of an authentication key distribution server according to the second embodiment. The authentication key generation unit 504 generates an authentication key for each visited place in advance, and sets an authentication key for each visited place in the schedule table 503.

FIG. 12 is a diagram showing an authentication key distribution processing flow according to the second embodiment. As shown in the figure, the authentication key generation process is omitted, and the authentication key transmission unit 505 acquires the authentication key for each visited place of the visited place from the schedule table 503 and transmits it to the user terminal 103.

Embodiment 3 FIG.
In the above embodiment, when the location included in the arrival notification matches the planned visit position, and when the current time included in the arrival notification matches the planned visit time, it is determined that the arrival is within the schedule. The arrival within the schedule may be determined by comparing only the positions without performing the comparison.

FIG. 13 is a diagram illustrating a configuration of a user terminal according to Embodiment 3, and FIG. 14 is a diagram illustrating a processing flow related to arrival notification of the user terminal according to Embodiment 3. As shown, S
The current time acquisition unit 303 that performs the current time acquisition process of 403 is not necessary, and the arrival notification transmission unit 304 transmits an arrival notification including only the arrival position (= location position) to the authentication key distribution server in the arrival notification transmission process of S1403. To do.

FIG. 15 is a diagram illustrating a configuration of the authentication key distribution server according to the third embodiment, and FIG. 16 is a diagram illustrating an example of a schedule table according to the third embodiment. As shown in FIG. 16, the item of scheduled visit time becomes unnecessary. Then, the arrival notification receiving unit 501 receives the arrival notification including only the arrival position in the arrival notification receiving process of S701, and the arrival determination unit 502 determines the location and the scheduled visit included in the arrival notification in the arrival determination process of S702. Only the position is compared, and if the positional relationship is within an allowable range, the destination ID is specified and it is determined that the visit is within the schedule. If they do not match within the allowable range, it is determined that the visit is unscheduled.

The authentication key distribution server 101, the authentication device 102, and the user terminal 103 are all computers, and each element can execute processing by a program. Further, the program can be stored in a storage medium so that the computer can read the program from the storage medium.

FIG. 17 is a diagram illustrating a hardware configuration of the authentication key distribution server, the authentication device, and the user terminal. An arithmetic device 1701, a data storage device 1702, a memory 1703, and a communication interface 1704 are connected to the bus. The data storage device 1702 is, for example, a ROM (
Read Only Memory) or a hard disk. The memory 1703 is a normal RAM (Random Access Memory). The program is normally stored in the data storage device 1702, and is loaded into the memory 1703 and sequentially read into the arithmetic device 1701 for processing.

It is a figure which shows the structure of the authentication system which concerns on this invention. It is a figure which shows the concept of a visit route. It is a figure which shows the structure of a user terminal. It is a figure which shows the processing flow which concerns on the arrival notification of a user terminal. 3 is a diagram showing a configuration of an authentication key distribution server according to Embodiment 1. FIG. It is a figure which shows the example of a schedule table. FIG. 6 is a diagram showing an authentication key distribution processing flow according to the first embodiment. It is a figure which shows the processing flow concerning the authentication request | requirement of a user terminal. It is a figure which shows the structure of an authentication apparatus. It is a figure which shows the authentication processing flow of an authentication apparatus. 6 is a diagram illustrating a configuration of an authentication key distribution server according to Embodiment 2. FIG. FIG. 10 is a diagram showing an authentication key distribution processing flow according to the second embodiment. It is a figure which shows the structure of the user terminal which concerns on Embodiment 3. FIG. FIG. 10 is a diagram showing a processing flow related to arrival notification of a user terminal according to Embodiment 3. FIG. 10 is a diagram illustrating a configuration of an authentication key distribution server according to a third embodiment. FIG. 10 is a diagram showing an example of a schedule table according to the third embodiment. It is a figure which shows the hardware constitutions of an authentication key delivery server, an authentication apparatus, and a user terminal.

Explanation of symbols

DESCRIPTION OF SYMBOLS 101 Authentication key distribution server, 102 Authentication apparatus, 103 User terminal, 301 Arrival notification instruction | indication part, 302 Location position acquisition part, 303 Current time acquisition part, 304 Arrival notification transmission part, 305 Visited area authentication key reception part, 306 terminal Side serial key storage unit, 307 authentication request instruction unit, 308 terminal side serial key transmission unit, 501 arrival notification reception unit, 502 arrival determination unit, 50
3 schedule table, 504 authentication key generation unit, 505 authentication key transmission unit, 506 series key transmission determination unit, 507 series key transmission unit, 901 server side series key reception unit, 902 terminal side series key reception unit, 903 series key authentication unit .

Claims (6)

User terminal used by users who plan to visit multiple visited places, an authentication device installed at the visited place and capable of communicating with the user terminal, and an authentication key connectable to the user terminal and the authenticating device via the network An authentication system comprising a distribution server,
User terminal
(A) an arrival notification instruction unit that receives an instruction to transmit an arrival notification by a user operation;
(B) a location acquisition unit that identifies the location of the user terminal when receiving an instruction to transmit the notification of arrival;
(C) an arrival notification transmitter that transmits an arrival notification including the location to the authentication key distribution server;
(D) As a reply to the notification of arrival, an authentication key receiving unit by visiting place that receives the authentication key by visiting place,
(E) a terminal side series key storage unit that stores the authentication key for each visited place received for each visited place as a series of keys;
(F) an authentication request instruction unit that receives an instruction to transmit an authentication request by a user operation;
(G) When receiving an instruction to send an authentication request, the terminal side series key transmission unit for sending the terminal side series key stored in the terminal side series key storage unit to the authentication device;
The authentication key distribution server
(1) an arrival notification receiving unit that receives an arrival notification including a location from the user terminal;
(2) For a plurality of ordered visit sites, a schedule table that stores a schedule visit location that is a location of each visit location and a visit location authentication key provided for each visit location in association with each other;
(3) When the arrival notification is received, the planned visit location of the visited location is obtained from the schedule table, the location included in the arrival notification is compared with the planned visit location, and if they match, the visited location is identified. An arrival determination unit that determines that the arrival is within the schedule,
(4) an authentication key transmitter that transmits an authentication key for each visited place of the visited place to the user terminal when it is determined that the arrival is within the schedule;
(5) A server-side series key transmission unit that transmits the visited site and the authentication key group for each visited site before the visited site as a series of keys on the server side to the authentication device corresponding to the visited site. Have
The authentication device
(A) a server-side series key receiving unit that receives a server-side series of keys from the authentication key distribution server;
(B) a terminal-side series key receiving unit that receives a terminal-side series of keys from the user terminal;
(C) An authentication system comprising a series key authentication unit for authenticating a user based on a series of keys on the server side and a series of keys on the terminal side. The user terminal further includes a current time acquisition unit for specifying the current time when receiving an instruction for arrival notification transmission,
The arrival notification transmission unit of the user terminal transmits an arrival notification including the current time in addition to the location to the authentication key distribution server,
The arrival notification receiving unit of the authentication key distribution server receives the arrival notification including the current time in addition to the location from the user terminal,
The schedule table of the authentication key distribution server includes, for a plurality of ordered visit sites, in addition to the planned visit location that is the location of each visit location and the authentication key for each visit location provided for each visit location,
Stores the scheduled visit time, which is the scheduled visit time, in association with it,
When the arrival determination unit of the authentication key distribution server receives the arrival notification, it acquires the scheduled visit time in addition to the planned visit position of the visited place from the schedule table, and compares the location included in the arrival notification with the planned visit position In addition to the above, the current time included in the arrival notification is compared with the scheduled visit time, and if they match, the visited place is identified and the arrival within the schedule is determined. Authentication system. An authentication key distribution server that can be connected via a network to a user terminal used by a user who plans to visit a plurality of visited places, and an authentication device that is installed at the visited place and can communicate with the user terminals, and includes the following: An authentication key distribution server characterized by having an element (1) a arrival notification receiver for receiving a notification of arrival including a location from a user terminal (2) for each of a plurality of ordered visits, When the arrival notification is received, the scheduled visit position of the visited location is acquired from the scheduled table. The arrival determination unit that compares the location included in the arrival notification with the planned visit location and matches the location, and determines the arrival location within the schedule by determining the arrival place reached (4) When determined as arrival within the schedule In addition, Authentication key transmission unit for transmitting the authentication key for each visited place of the visited place to the user terminal (5) A series of keys on the server side for the visited place and the authentication key group for the visited place before the visited place As a server side series key transmission part which transmits to the authentication apparatus corresponding to the visited place of arrival. The arrival notification receiving unit receives the arrival notification including the current time in addition to the location from the user terminal,
The schedule table is for a plurality of ordered locations, in addition to the planned visit location that is the location of each visited location and the authentication key for each visited location provided for each visited location, as well as the planned visit time Store the time in association,
When the arrival notification is received, the arrival determination unit obtains the scheduled visit time in addition to the planned visit location of the visited place from the schedule table, and in addition to comparing the location and the planned visit location included in the arrival notification, the arrival determination Compare the current time included in the notification with the estimated visit time and if they match,
4. The authentication key distribution server according to claim 3, wherein the visited place is identified and determined to be within the schedule. About a plurality of ordered visits that can be connected via a network to a user terminal used by a user who plans to visit multiple visits and an authentication device that is installed at the visit and can communicate with the user terminals. The computer serving as the authentication key distribution server having the schedule table that stores the scheduled visit location that is the location of each visited location and the authentication key for each visited location provided for each visited location in association with each other is executed. (1) Arrival notification reception procedure for receiving a notification of arrival including a location from a user terminal (2) When a notification of arrival is received, the planned visit position of the visited place is obtained from the schedule table, and the notification of arrival A location determination procedure that compares the location included in the site with the planned visit location and, if they match, determines the visited location and arrives within the plan (3) Determines arrival within the plan Authentication key transmission procedure for transmitting the authentication key for each visited place of the visited place to the user terminal (4) The server-side authentication key group for the visited place and the visited place before the visited place As a series of keys, a server-side series key transmission procedure for transmitting to the authentication device corresponding to the visited place of arrival. The schedule table possessed by the authentication key distribution server visits a plurality of ordered visit sites in addition to the planned visit location, which is the location of each visit location, and the visit location specific authentication key provided for each visit location. The estimated visit time is stored in association with the scheduled visit time,
The arrival notification reception procedure receives an arrival notification including the current time in addition to the location from the user terminal,
When the arrival notification is received, the arrival determination procedure obtains the scheduled visit time from the schedule table in addition to the planned visit location of the visited location, and in addition to comparing the location and the planned visit location included in the arrival notification The program according to claim 5, wherein the current time included in the notification is compared with the scheduled visit time, and if they match, the visited place is identified and the arrival within the schedule is determined.

Images