JP4719493B2 - Authentication system and authentication method - Google Patents

Description

  The present invention relates to an authentication device that performs user authentication and controls the electric lock, and an authentication process for a user who is connected to the authentication device via a network and is lent an authentication device based on the user's biometric information. The present invention relates to an authentication system including an authentication server that performs authentication and an authentication method.

  For rooms and buildings, access control to the space is ensured so that only users who are allowed to enter or enter the space by the space manager are allowed to enter the room or building. It becomes necessary for. A technology for realizing access control to such a space using a personal authentication system is generally known, and it can be operated for a long time all day compared to artificial access control by an administrator or the like. There is an advantage that the labor cost can be suppressed.

  In such entrance / exit management using a personal authentication system, personal belongings such as ID cards presented by a user (authenticated person) who wants to enter a space, stored information such as a personal identification number, physical information such as fingerprints and irises, etc. Using biometric information (biological information) such as features, voiceprints, and behavioral features such as signatures, it is confirmed that the person to be authenticated is the authorized person.

  In the conventional general authentication system, an authenticated device is used to input information for certifying that the authenticated user is the authorized user, and the authenticated user is permitted to use the information input from the input device. It is comprised from the authentication apparatus which authenticates whether it is a person himself / herself. Here, the information to be input to the input device is, for example, information recorded on the ID card, a personal identification number, or biological information such as a fingerprint. Biometric information includes not only fingerprints but also irises and retinas. In recent years, a personal authentication technique using such biometric information has been developed (see, for example, Patent Document 1).

  The input device is usually installed near the entrance of a space door or the like. In order to input a plurality of different information to the input device, a plurality of different types of input devices may be installed near the entrance of the space. In order to make it difficult for the authenticated person to impersonate the authorized person, for example, an ID card input device and a password input device are installed near the entrance of an important room such as a vault. On the other hand, the authentication device is usually installed in a space and controls the locking and unlocking of an electric lock attached to the door of the space.

Japanese Patent Laid-Open No. 2000-200315

  However, in such a prior art, when the person to be authenticated enters or enters a space, it is necessary to perform an explicit operation of inputting input information to the input device. For example, in an identity authentication system using an ID card, the person to be authenticated performs an explicit operation such as inserting a magnetic stripe ID card into the input device or lightly touching the non-contact smart card with the input device. There is a need to do. In the personal authentication system using a personal identification number, the person to be authenticated needs to input the personal identification number by an explicit operation of pressing a numeric key on an operation panel provided in the input device. In addition, when fingerprint authentication or vein authentication is performed with an authentication system using biometrics (biometric information), the person to be authenticated touches the input device, or in the case of retinal authentication, looks into the input device, In the case of face authentication, it is necessary to perform an explicit operation of approaching the input device. For this reason, there is a problem that the person to be authenticated has to perform a complicated operation when entering or entering a space.

  In particular, if the access to an important space is controlled to prevent impersonation of the authorized person by installing multiple different types of input devices, the authorized person can use multiple input devices. Different operations are required, and more complicated operations are required when entering or entering important spaces. In order to install a plurality of input devices, a certain area must be secured. For this reason, the number of installed input devices may be limited by the area of the installation location near the entrance.

  The present invention has been made in view of the above, and allows a user to easily enter or enter a room or a building where restrictions are imposed on entering or entering the building, and authenticating the user. It is an object of the present invention to provide an authentication system and an authentication method capable of maintaining the accuracy of the above.

  In order to solve the above-mentioned problems and achieve the object, the invention according to claim 1 is connected to an authentication device attached to a part of a user's body and an electric lock attached to an entrance / exit. An authentication device that controls the electric lock by authenticating a user, and an authentication server that is connected to the authentication device via a network and performs authentication processing of the user who is lent the authentication device based on the biometric information of the user The authentication device includes: a mounting unit that is fixed to a part of a user's body; a first storage unit that stores device identification information unique to the device; and the authentication device. A first wireless communication means for transmitting a detection signal indicating presence to the apparatus in a non-contact manner, a measuring means for measuring the biological information of a user attached by the attachment unit, and the authentication server mounting the device itself User who rented own device First data for receiving key information for authenticating the user with the authentication device when the user is determined to be a legitimate user and storing the received key information in the first storage means Authentication information generation for generating authentication information based on the key information stored in the first storage means and transmitting it to the authentication apparatus when the processing means and its own device are detected in the vicinity of the authentication apparatus And the authentication server associates and registers the device identification information of the authentication device lent to the user and the biometric information of the user lent the authentication device having the device identification information. A second storage means for storing the device lending information, a registration device for acquiring the biometric information of the user wearing the authentication device and receiving the device identification information from the authentication device, and the registration device Acquired by Based on the biometric information, the device identification information received by the registration device, and the device identification information and the biometric information registered in the device lending information, the user wearing the authentication device can use the authentication information. A legitimate usage authentication means for determining whether or not the user is a legitimate user who has been lent the device, and a legitimate user to whom the user wearing the authentication device by the legitimate usage authentication means is lent the authentication equipment. Key information generating means for generating key information, transmitting the key information to the authentication device, and transmitting the key information and the device identification information to the authentication device when it is determined that the key information is present. The authentication apparatus includes: a third storage unit that stores the device identification information and the key information in association with each other; and a right that the user wearing the authentication device by the authentication server is lent the authentication device. Use A communication unit that receives the device identification information and the key information of the authentication device mounted on the user from the authentication server, and the communication unit that is mounted on the user by the communication unit. A third data processing unit that stores the received device identification information and the key information in the third storage unit when the device identification information and the key information of the authentication device are received; Input device comprising third wireless communication means for receiving a detection signal from an authentication device in a contactless manner, detecting the presence of the nearby authentication device, and communicating with the detected authentication device in a contactless manner Based on the authentication information received from the authentication device and the key information stored in the third storage means, the user wearing the authentication device in the vicinity is a valid user Authenticator who authenticates whether or not And an electric lock control means for controlling the locking and unlocking of the electric lock, and the electric lock control means is a user who is authorized by the user wearing the authentication device by the personal authentication means The electric lock is unlocked when it is authenticated.

  In the invention according to claim 2, the authentication information generation means of the authentication device may provide response information for performing personal authentication by the authentication device when the device is detected in the vicinity of the authentication device. Challenge information indicating a request to be generated is received from the authentication device, and based on the received challenge information and the key information and the device identification information stored in the first storage unit, the authentication information is used as the authentication information. Generate response information, send the generated response information to the authentication device, the authentication device generates the challenge information when the input device detects the presence of the authentication device, A challenge information generating unit configured to transmit the generated challenge information via the third wireless communication unit; and The response information generated based on the transmitted challenge information, the key information, and the device identification information is received from the authentication device that transmitted the information via the third wireless communication unit, and received. Based on the response information, the device identification information, the key information, and the challenge information stored in the third storage unit, a user wearing the authentication device in the vicinity is a valid user It is characterized by authenticating whether or not.

  According to a third aspect of the present invention, the measuring unit of the authentication device is attached to a part of a user's body by the mounting unit when the biological information can be continuously measured. It is characterized by judging.

  Further, the invention according to claim 4 determines that the measurement unit of the authentication device has been removed from the mounting portion when the biometric information cannot be continuously measured, and the authentication device has the The first data processing means deletes the key information stored in the first storage means when it is determined that the measurement means has removed the mounting portion.

  According to a fifth aspect of the present invention, the registration device includes a biometric information scanner that acquires biometric information from a part of a body on which the authentication device is mounted, and a body on which the authentication device is mounted on the biometric information scanner. A part of the body of another user in a state of being close to the living body information scanner, and a cylindrical casing having a size that cannot be approached.

Further, in the invention according to claim 6, the challenge information generation unit of the authentication device generates a random number as the challenge information when the input device detects the presence of the authentication device, and generates the random number. A random number is transmitted to the authentication device, the authentication information generation means of the authentication device receives the random number from the authentication device, and the received random number and the key information stored in the first storage means A hash value is obtained by applying a one-way function to the device, the response information is generated from the hash value and the device identification information stored in the first storage means, and the generated response information is The identity authentication means of the authentication device receives the response information from the authentication device that has sent the random number via the third wireless communication means. Whether the received hash value of the response information matches the hash value obtained by applying a one-way function to the random number and the key information corresponding to the device identification information stored in the third storage unit It is characterized by judging whether or not the user who wears the authentication device in the vicinity is an authorized user if they match.

  Further, in the invention according to claim 7, when the valid use authentication unit of the authentication server further determines that the user wearing the authentication device is a valid user lent the authentication device When the erasure signal is transmitted from the authentication server to the authentication device and the authentication device, the first data processing means of the authentication device further receives the erasure signal from the authentication server. The key information stored in the authentication unit is deleted, the communication unit of the authentication device further receives the deletion signal from the authentication server, and the third data processing unit of the authentication device further includes the communication When the erasure signal is received by the means, the key information stored in the third storage means is erased.

  The invention according to claim 8 is connected to an authentication device attached to a part of the user's body and an electric lock attached to the entrance and controls the electric lock by authenticating the user. An authentication system comprising: an authentication device; and an authentication server connected to the authentication device via a network and performing authentication processing of a user who has been lent the authentication device based on user biometric information, The equipment for use is a mounting part that is fixed to a part of the user's body, first storage means for storing equipment identification information unique to the own equipment, and a detection signal that indicates the presence of the authentication apparatus in a non-contact manner. A first wireless communication means for transmitting; a measuring means for measuring biometric information of a user attached by the attachment unit; and a user who has attached the own apparatus by the authentication server is lent to the own apparatus. Determined to be a user A first data processing means for receiving key information for authenticating the user at the authentication apparatus and storing the received key information in the first storage means; Authentication information generating means for generating authentication information based on the key information stored in the first storage means and transmitting the authentication information to the authentication device when detected by the authentication server, the authentication server comprising: Storing device lending information in which the device identification information of the authentication device lending to the user and the biometric information of the user lending the authentication device having the device identification information are registered in association with each other. A storage unit; a third storage unit that stores the device identification information and the key information in association with each other; obtains biometric information of a user wearing the authentication device; and obtains the device from the authentication device. Registration device that receives identification information And the biometric information acquired by the registration device, the device identification information received by the registration device, and the device identification information and biometric information registered in the device lending information. A right use authentication means for determining whether the user wearing the authentication device is a legitimate user who has been lent the authentication device, and the user wearing the authentication device by the right use authentication means is the authentication device If it is determined that the user is a legitimate user, the key information generating means for generating the key information and transmitting it to the authentication device, and the device identification of the authentication device attached to the user A second data processing unit that stores the received device identification information and the key information in the third storage unit when the information and the key information are received; and the authentication information received from the authentication device. And authenticating whether or not the user wearing the authentication device in the vicinity of the authentication device is a valid user based on the key information stored in the third storage means A communication means for transferring the authentication information between the authentication server and the authentication device, and a detection signal from the authentication device is received in a non-contact manner. When the unlocking signal is received by the input unit including the third wireless communication unit that detects the presence of the authentication device and communicates with the detected authentication device in a non-contact manner, and the communication unit And an electric lock unlocking means for unlocking the electric lock.

Further, the invention according to claim 9 is the authentication system according to claim 8, wherein the authentication information generating means of the authentication device is configured to detect the authentication device when the device is detected in the vicinity of the authentication device. The challenge information indicating a request for generating response information for authenticating the user is received from the authentication device, the received challenge information, the key information stored in the first storage unit, and the device identification information And generating the response information as the authentication information, transmitting the generated response information to the authentication device, the authentication server, the presence of the authentication device is detected by the input device A challenge information generating unit configured to generate the challenge information and transmit the generated challenge information to the authentication device when detected; The identity authentication unit receives the response information generated based on the transmitted challenge information, the key information, and the device identification information from the authentication device that has transmitted the challenge information, and receives the received response information. Based on the response information, the device identification information stored in the third storage means, the key information, and the challenge information, the user wearing the authentication device in the vicinity of the authentication device is authorized. If the authentication is successful, an unlock signal is transmitted to the authentication device, and if the authentication is unsuccessful, a lock signal is transmitted to the authentication device. The communication means transfers the challenge information and the response information between the authentication server and the authentication device.

The invention according to claim 10 is connected to an authentication device attached to a part of the user's body and an electric lock attached to the entrance and controls the electric lock by authenticating the user. User authentication at the entrance / exit between an authentication device and an authentication server connected to the authentication device via a network and performing authentication processing of the user who has been lent the authentication device based on the biometric information of the user An authentication method for performing a measurement step of measuring biometric information of a mounted user in the authentication device, and a legitimate user who has been lent his device by the authentication server. A first data processing step for receiving key information for authenticating the user by the authentication device when the user is determined to be a user, and storing the received key information in a first storage means; The device An authentication information generating step of generating authentication information based on the key information stored in the first storage means and transmitting the authentication information to the authentication device when detected in the vicinity of the device, the authentication server In the acquisition step, the registration device of the authentication server acquires the biological information of the user wearing the authentication device, and the reception device receives the device identification information from the authentication device. An authentication device having a step, the biometric information acquired by the registration device, the device identification information received by the registration device, the device identification information of the authentication device lent to a user, and the device identification information The authentication based on the device identification information and the biometric information registered in the device lending information registered in association with the biometric information of the user who has been lent A legitimate usage authentication step for determining whether the user wearing the device is a legitimate user who has been lent the authentication device, and the user wearing the authentication device in the legitimate usage authentication step A key information generating step of generating key information and transmitting it to the authentication device and the authentication device when it is determined that the device is a legitimate user who has been lent the device; When it is determined by the server that the user wearing the authentication device is a legitimate user lent the authentication device, the device of the authentication device attached to the user from the authentication server A communication step for receiving the identification information and the key information, and when receiving the device identification information and the key information of the authentication device attached to the user by the communication step, A third data processing step of storing the device identification information and the key information in a third storage means, the authentication information received from the authentication device, and the key information stored in the third storage means And a user authentication step for authenticating whether or not a user wearing the authentication device in the vicinity is a valid user, and an electric lock control step for controlling locking and unlocking of the electric lock; And the electric lock control step unlocks the electric lock when the user wearing the authentication device is authenticated as a valid user by the identity authentication step. .

  According to the first and tenth aspects of the invention, the authentication server acquires the biometric information of the user wearing the authentication device, receives the device identification information from the authentication device, Based on the received device identification information and device lending information, it is determined whether or not the user wearing the authentication device is a legitimate user lending the authentication device. When it is determined that the user is a valid user, the authentication server generates key information, transmits the key information to the authentication device, and transmits the key information and the device identification information to the authentication device. The authentication device stores the received key information, while the authentication device stores the received device identification information and key information. When the authentication device is detected in the vicinity of the authentication device, the authentication device transmits the authentication information generated based on the stored key information to the authentication device, and the authentication device receives the received authentication information and Based on the stored key information, authenticate whether the user wearing the authentication device in the vicinity is a valid user, and if the user is authenticated as a valid user, lock the electric lock. Unlock. For this reason, users who are allowed to enter and exit the room or building by non-contact communication only when the user wearing the authentication device approaches the input device of the authentication device installed near the entrance of the room or building The person is authenticated whether or not he / she is an authorized person, and the electric lock is unlocked. Thereby, a user who is permitted to enter or enter a room or a building does not need a complicated operation on the input device, and can prevent impersonation of a user who is permitted to enter or enter the room. Therefore, according to the present invention, it is possible for a user to easily enter or enter a room or a building in which restrictions are imposed on entry or entry, and to maintain the accuracy of user authentication. There is an effect that can be done.

  Further, the invention according to claim 2 generates challenge information when the detection device receives the detection signal from the authentication device in a non-contact manner and detects the presence of a nearby authentication device, thereby generating the authentication information. Send to. The authentication device that has received the challenge information generates response information based on the received challenge information and the stored key information and device identification information, and transmits the response information to the authentication device. Based on the received response information, stored device identification information, key information, and challenge information, the authentication device authenticates whether the user wearing the nearby authentication device is a valid user. To do. For this reason, based on the response information based on the key information and challenge information in non-contact communication, the user wearing the authentication device just approaches the input device of the authentication device installed near the entrance of the room or building. The user is authenticated whether or not the user is permitted to enter or leave the room or building, and the electric lock is unlocked. As a result, a user who is allowed to enter or enter a room or building does not need a complicated operation on the input device, and can prevent impersonation of a user permitted to enter or enter the room. Even if it is a room or a building where restrictions are imposed on entry or entry, the user can easily enter or enter the building, and the accuracy of user authentication can be maintained.

  According to the invention of claim 3, the measuring unit of the authentication device is mounted on a part of the user's body by the mounting unit when the biometric information can be continuously measured. Therefore, it is possible to easily determine whether or not the authentication device is attached.

  Further, according to the invention of claim 4, in the authentication device, when it is determined that the biometric information has not been continuously measured, it has been removed from the mounting portion, and when it has been determined that the biometric information has been removed from the mounting portion, By deleting the stored key information, you cannot enter or enter the room or building where the authentication device is installed. There is an effect that it is possible to prevent a person other than the authorized user who is removed and wearing the authentication device from impersonating the authorized user who enters or enters the room.

  According to the invention of claim 5, the registration apparatus acquires a biological information from a part of the body on which the authentication device is mounted and a part of the body on which the authentication device is mounted on the biological information scanner. In the proximity of the biometric information scanner of a part of another user's body, the registration device can be properly lent the authentication device. When an unauthorized user reads biometric information, it becomes impossible for an unauthorized user other than the user to read his / her biometric information with the registration device, and for authentication by a malicious unauthorized user. There exists an effect that use of an apparatus can be prevented.

  According to the invention of claim 6, the authentication device generates a random number as challenge information and transmits the challenge information to the authentication device when the presence of the authentication device is detected. The hash value is obtained by applying a one-way function to the random number received from the key and the stored key information, and response information is generated from the hash value and its own device identification information and transmitted to the authentication device for authentication. The apparatus determines whether or not the hash value of the response information received from the authentication device matches the hash value obtained by applying a one-way function to the key information corresponding to the stored device identification information and the random number. Even if it is a room or a building where restrictions are imposed on entry or entry by authenticating that the user wearing the authentication device in the vicinity is a valid user if it matches, Easy for users It is possible to chamber or admission, an effect that it is possible to improve the accuracy of the personal authentication of the user.

  According to the invention of claim 7, in the authentication server, when it is determined that the user wearing the authentication device is an authorized user who has been lent the authentication device, the erasure signal is transmitted to the authentication device. The authentication device that received the erase signal deletes the stored key information, and the authentication device that received the delete signal deletes the stored key information. Will not be able to enter or enter a room or building in which an authentication device is installed, so that the authentication device used by a user who no longer needs to enter or enter the room or building is malicious. There is an effect that it is possible to prevent a certain third party from entering or entering a room or building where restrictions are imposed on entry or entry.

  Further, according to the invention according to claim 8, as in the first embodiment, a user who is allowed to enter or enter a room or building does not need a complicated operation on the input device, and Impersonation of users who are allowed to enter the building can be prevented. Therefore, according to the present invention, it is possible for a user to easily enter or enter a room or a building in which restrictions are imposed on entry or entry, and to maintain the accuracy of user authentication. There is an effect that can be done. In addition, according to the invention according to claim 8, since the authentication performed on each room or building is concentrated on the authentication server side, challenge information is generated in the authentication device installed in each room or each building. There is no need to provide means, identity authentication means, storage means for storing key information, and it is only necessary to provide communication means for transferring data between the electric lock control means, the authentication device, and the authentication server. There is an effect that it is possible to make a simple configuration of a large number of authentication devices that must be installed in each room or building.

  Further, according to the invention according to claim 9, as in the invention according to claim 2, the user wearing the authentication device only approaches the input device of the authentication device installed near the entrance of the room or building. Based on the response information based on the key information and challenge information in contactless communication, the user is authenticated whether the user is permitted to enter or leave the room or building, and the electric lock is unlocked. Is done. As a result, a user who is allowed to enter or enter a room or building does not need a complicated operation on the input device, and can prevent impersonation of a user permitted to enter or enter the room. Even if it is a room or a building where restrictions are imposed on entry or entry, the user can easily enter or enter the building, and the accuracy of user authentication can be maintained.

  Exemplary embodiments of an authentication system and an authentication method according to the present invention will be explained below in detail with reference to the accompanying drawings.

(Embodiment 1)
(Configuration of authentication system)
FIG. 1 is a block diagram illustrating an arrangement example of an authentication system according to the present embodiment in a room or a building. The authentication system according to the present embodiment includes an authentication server 110 having a registration device 100, an authentication device 120 to which an input device 130 and an electric lock 140 are connected, and an authentication device. Here, since the authentication device is attached to the user and moves with the user as shown in FIG. 2 to be described later, a part of the authentication system according to the present embodiment is not shown in FIG. It constitutes.

  As shown in FIG. 1, the authentication device 120 is installed in each office room, safe room, conference room, and examination room, and each building 1 and 2 building. An input device 130 and an electric lock 140 connected to the authentication device 120 are also installed at the entrances and exits of the rooms and buildings.

  The authentication device 120 is connected to an electric lock attached to the entrance / exit, and whether or not the user who has attached the authentication device 150 and has approached the input device 130 near the entrance / exit is a user permitted to enter or enter the building. The personal lock is performed to control the electric lock. The input device 130 is a part of the authentication device 120, receives a detection signal from the authentication device 150 worn by the approaching user without contact, detects the presence of the authentication device, and is detected. It communicates with the authentication device without contact.

  The authentication device 150 is worn on the user's arm by a wristband corresponding to the wearing portion in the present invention, acquires the user's biometric information and transmits it to the registration device 100, or enters each room or building. Alternatively, response data is sent when entering the building and transmitted to the authentication device 120 by non-contact communication. FIG. 2 is a schematic diagram showing a state in which a user wearing the authentication device 150 is approaching near the entrance of each room or building. The authentication device 150 generates detection signals at regular time intervals. As shown in FIG. 2, the authentication device 150 is attached to the input device 130 of the authentication device 120 by the user who is going to enter or enter the room near the entrance. By bringing the device 150 closer, the authentication device 120 receives a detection signal in a non-contact manner and detects the presence of the authentication device 150.

  As shown in FIG. 1, the authentication server 110 is installed in one place such as a room or place where the attendance procedure and the entrance procedure are performed, and the use is performed by renting the authentication device 150 based on the biometric information of the user. The person is authenticated and given permission to enter the room or enter the building. The authentication server 110 is connected to a registration device 100 that acquires biometric information of a user wearing the authentication device and receives a device ID that is identification information unique to each device from the authentication device.

  In the biological information system according to the present embodiment, the following authentication process is performed. The authentication device 150 is lent to the user in advance, and the biometric information such as the user's fingerprint and the device ID that is the identification information of the lent authentication device 150 are stored in the authentication server 110 in association with each other. When the user tries to enter or enter any room or building, the rented authentication device 150 is worn on the arm, and the registration device 100 and the authentication server 110 use the biometric information such as a fingerprint and the device ID. If the device is used properly, it is verified that the device has been used properly, and if it is used properly, the user wearing the authentication device 150 enters the room or building desired by the user. Is generated and transmitted to the authentication device 120 and the authentication device 120 installed in the room where entry is desired. When the user actually enters or enters the room, the authentication device 150 worn on the arm is brought close to the input device 130 of the authentication device 120 installed in the vicinity of the entrance of the room or building. The authentication of the challenge / response method is performed to authenticate whether or not the user who has approached is a user permitted to enter or enter the room. When the approaching user is a user permitted to enter or enter the room, the electric lock installed at the doorway is unlocked. When the user who is not permitted to enter or enter the room, the electric lock is locked. Leave in state.

(Structure of registration apparatus 100)
Next, the structure of the registration apparatus 100 will be described. FIG. 3 is a schematic diagram showing the outer shape of the registration apparatus 100. The registration device 100 is formed in a cylindrical shape having a substantially semicircular cross section, and a communication unit 101 and a biometric scanner 102 for reading biological information such as a fingerprint and a pulse are provided at the bottom. The size of the cylindrical hollow portion of the registration device 100 is such that only one arm with the authentication device 150 attached can be inserted. For this reason, the arm with the authentication device 150 attached to the hollow portion In the inserted state, the arms of other users cannot be inserted. Accordingly, it becomes impossible for an unauthorized user to read his / her biometric information with the registration device 100, and the use of the authentication device by a malicious unauthorized user can be prevented.

(Configuration of authentication device 150)
Next, details of the authentication device 150 will be described. FIG. 4 is a block diagram illustrating a functional configuration of the authentication device 150. As shown in FIG. 4, the authentication device 150 includes a measurement unit 401, a data processing unit 402, a response data generation unit 403, an alarm output unit 404, a wireless communication device, and a wireless communication device. The communication unit 405 and the storage unit 406 are mainly provided.

  The measuring unit 401 measures biological information such as vital signs (pulse, blood pressure, blood oxygen saturation, etc.) of the user who wears it. In the present embodiment, the measurement unit 401 detects that the measurement result is normal and the authentication device 150 is attached to the user when biometric information such as vital signs can be measured continuously for a certain period of time. However, if the measurement cannot be continued, the measurement result becomes abnormal and it is detected that the authentication device 150 has been removed.

  When registering a user who lends the authentication device 150 (hereinafter referred to as “user registration”), the data processing unit 402 authenticates the user from the authentication device 120 when entering or entering a room or building. The key data K is received, and the received key data K is stored in the storage unit 406. In addition, the data processing unit 402 performs a process of deleting the key information stored in the storage unit 406 when a deletion signal is received from the authentication server 110 when the registration of the user is canceled.

  The response data generation unit 403 receives a random number R as challenge information generated by the authentication device 120 at the time of user authentication, and performs one-way operation on the received random number R and the key data K stored in the storage unit 406. A hash function H (R, K) is obtained by applying a hash function which is a sex function, and response data [ID, H as response information obtained by concatenating the hash value and its own device ID stored in the storage unit 406. (R, K)] is generated, and the generated response data [ID, H (R, K)] is transmitted to the authentication device 120. The response data generation unit 403 corresponds to authentication information generation means in the present invention.

  The alarm output unit 404 outputs an error message and an alarm.

  The wireless communication unit 405 wirelessly communicates various data with the input device 130 of the authentication device 120 and the registration device 100 of the authentication server 110.

  The storage unit 406 is a storage medium such as a memory that stores the device ID of its own authentication device in advance and can store the key data K received from the authentication server 110.

(Configuration of authentication server 110)
Next, details of the authentication server 110 will be described. FIG. 5 is a block diagram of a functional configuration of the authentication server 110 according to the first embodiment. As shown in FIG. 5, the authentication server 110 mainly includes a registration device 100, a valid use authentication unit 501, a key data generation unit 502, a communication unit 503, and a device loan database 504. Yes. Since the registration apparatus 100 has been described above, a description thereof will be omitted.

  The legitimate use authentication unit 501 at the time of user registration, the biometric information of the user acquired from the authentication device 150 by the registration device 100, the device ID received from the authentication device 150 by the registration device 100, and a device loan database to be described later By determining whether or not the device ID registered in 504 matches the biometric information registered corresponding to the device ID, the user wearing the authentication device 150 determines whether the authentication device 150 A legitimate use authentication process is performed to determine whether or not the user is a lent legitimate user.

  The key data generation unit 502, when registering the user, determines that the user wearing the authentication device 150 is a legitimate user who has been lent to the authentication device 150 by the legitimate use authentication unit 501, that is, a legitimate user. When the use authentication is successful, key data K used for personal authentication is randomly generated, and the key data K is transmitted to the authentication device 150 via the registration device 100. In addition, the key data generation unit 502 performs processing for transmitting the generated key data K to the authentication device 120.

  The communication unit 503 controls data communication with the authentication device 120. The device lending database 504 is a database in which biometric information of a user who has lent the authentication device 150 is registered, and is stored in a storage medium such as a hard disk drive (HDD).

  FIG. 6 is an explanatory diagram showing an example of the contents of the device loan database 504. As shown in FIG. 6, in the device loan database 504, the device ID of the lent authentication device 150 and the biometric information (fingerprint, pulse, etc.) of the lent user are associated with each lent authentication device 150. Registered.

(Configuration of authentication device 120)
Next, details of the authentication device 120 will be described. FIG. 7 is a block diagram of a functional configuration of the authentication device 120 according to the first embodiment. As shown in FIG. 7, the authentication device 120 includes a communication unit 701, a data processing unit 702, a personal authentication unit 703, a random number generation unit 704, a message output unit 705, an electric lock control unit 706, and an input device. 130 and the memory | storage part 707 are comprised mainly, and it connects with the electric lock 140 which locks or unlocks the door of a room or a building.

  The input device 130 includes a wireless communication unit 708 that controls non-contact wireless communication with the authentication device 150 existing in the vicinity. The wireless communication unit 708 receives the detection signal output from the authentication device 150, detects that there is a user wearing the authentication device 150 in the vicinity, and sends that fact to the random number generation unit 704. Or the random number R is received from the random number generation unit 704 and transmitted to the authentication device 150.

  The communication unit 701 controls data communication with the authentication server 110. Specifically, when the authentication server 110 determines that the user wearing the authentication device 150 is a legitimate user who lent the authentication device, the communication unit 701 receives the user from the authentication server 110. A process of receiving the device ID and key data K of the authentication device 150 attached to the server and transmitting various data to the authentication server 110 is performed.

  The data processing unit 702 performs processing for saving the device ID and key data K received from the authentication device 150 in the storage unit 707 at the time of user registration. In addition, the data processing unit 702 performs a process of deleting the key information data K stored in the storage unit 707 when a deletion signal is received from the authentication server 110 when canceling the user registration.

  When the random number generator 704 receives from the wireless communication unit 708 of the input device 130 that the presence of an authentication device in the vicinity has been detected, the random number generator 704 generates a random number R as challenge information in the challenge / response method and performs wireless communication. The data is transmitted to the authentication device 150 via the unit 708. This random number R is effective only for the personal authentication performed at the time of entering or entering the room, and is temporarily stored in the storage unit 7, but is deleted when the personal authentication by the personal authentication unit 703 is completed. The

  The personal authentication unit 703 performs personal authentication to determine whether or not the user wearing the authentication device 150 in the vicinity of the input device 130 is an authorized user permitted to enter or enter the room. Specifically, the personal authentication unit 703 sends the response data [ID, H (R (R) generated as described above from the random number R transmitted from the nearby authentication device 150, the stored key data K, and the device ID. , K)] is received via the wireless communication unit 708, and a hash value H (R, K) is generated from the received response data, the device ID stored in the storage unit 707, the key data K, and the random number R. By determining whether the generated hash value H (R, K) matches the hash value H (R, K) in the response data, the user wearing the authentication device 150 existing in the vicinity Authenticate whether you are a legitimate user who is allowed to enter or enter.

  The electric lock control unit 706 controls unlocking and locking of the electric lock 140 according to the result of authentication by the personal authentication unit 703. Specifically, when the user authentication unit 703 authenticates that the user wearing the authentication device 150 present in the vicinity is a legitimate user permitted to enter or enter the building (authentication success), When it is determined that the user who unlocks the electric lock 140 and wears the authentication device 150 present in the vicinity is not a valid user permitted to enter or enter the room (authentication failure), the electric lock 140 Is kept locked. The message output unit 705 outputs various messages and error messages.

  The storage unit 707 is a storage medium such as a memory that stores the device ID and key data K received from the authentication server 110 in pairs and stores the random number R generated by the random number generation unit 704.

(Overall flow of user registration processing and user authentication processing)
Next, user registration processing and authentication processing by the authentication system according to this embodiment configured as described above will be described. The user registration process is installed in a room or building that enters or enters the authentication device 150 when a user who has previously been lent to the authentication device 150 attempts to enter or enter any room or building. In this process, the same key data K is stored in the authentication device 120 to register a user who enters or enters the room and receives permission to enter or enter the room or building. This user registration processing is performed at a place where the registration device 100 is installed and where attendance procedures and entrance procedures are performed.

  FIG. 8 is a sequence diagram illustrating an overall flow of user registration processing and authentication processing by the authentication system according to the first embodiment. When the user wishes to enter or enter the building, the user moves to the place where the entrance or entrance procedure is to be performed, wears the authentication device 150 that has been lent in advance, and is installed at the place where the entrance or entrance procedure is performed. It is inserted into the hollow portion of the cylindrical outer shape of the registration device 100. The authentication device 150 measures the biometric information (vital sign) of the attached user (step S801), and if it can be measured continuously for a certain time, the normal signal and its own device ID are stored in the registration device 100. Transmit (step S802).

  Upon receiving the normal signal and the device ID, the registration device 100 reads the user's biometric information (step S803), and the authentication server 150 uses the device ID and the biometric information read by the authentication server 110 and the device lending database 504. It is authenticated whether or not use of the authentication device 150 is used by a legitimate user who has lent the authentication device 150 (step S804).

  If it is authenticated as valid, the authentication server 110 generates key data K (step S805), and attempts to permit entry or entry into the room together with the registration signal and the received device ID. It transmits to the authentication apparatus 120 installed in the room or building (step S806). Upon receiving the registration signal, the authentication device 120 stores the received key data K and device ID in a pair in the storage unit 707 (step S807).

  Also, the authentication server 110 transmits the generated key data K to the authentication device 150 via the registration device 100 together with the removal detection start signal (step S808). The authentication device 150 that has received the key data K and the removal detection start signal stores the received key data K in the storage unit 406 (step S809). As a result, the user registration process is completed, and the user wearing the authentication device 150 is permitted to enter or enter the room or building.

  When the user is permitted to enter or enter the room or building in this way, the user authentication process is performed next. This user authentication process is a process of authenticating whether or not a user who has been permitted to enter or enter the room or building is entering or entering the room or building. This user authentication process is performed in a room or building where the user actually enters or enters the room.

  For this reason, the user who is permitted to enter or enter the room moves to the vicinity of the entrance / exit of the room or the building permitted to enter, or the authentication device 120 installed near the entrance / exit is installed. The input device 130 is moved closer. Thereby, the detection signal emitted from the authentication device 150 is detected by the input device 130 of the authentication device 120 (steps S810 and S811). Next, the authentication device 120 generates a random number R that is valid only for personal authentication at the time of entering or entering the room (step S812), and transmits the random number R to the authentication device 150 via the input device 130 (step S812). Step S813).

  The authentication device 150 that has received the random number R generates response data [ID, H (R, K)] from the received random number R, the key data K stored in the storage unit, and the device ID (step S814). The response data is transmitted to the authentication device 120 (step S815).

  The authentication device 120 that has received the response data generates a hash value H (R, K) from the random number R stored in the storage unit 707 and the key data K (step S816), and generates the generated hash value H (R, K) is compared with the hash value H (R, K) in the received response data to authenticate the identity of the user who is permitted to enter or enter the room (step S817). If the user is the user who is permitted to enter or enter the room, the electric lock 140 is unlocked (step S818).

(User registration process in authentication device 150)
Next, such user registration processing and authentication processing will be described in detail for each device. First, registration processing in the authentication device 150 will be described. FIG. 9 is a flowchart showing the procedure of registration processing in the authentication device 150.

  The user wears the authentication device 150 lent in advance on his / her arm and inserts it into the hollow portion of the cylindrical outer shape of the registration device 100. When the authentication device 150 is worn by the user, the measurement unit 401 measures the user's biometric information (vital sign) (step S901) and can continuously measure whether the measurement result is normal. Judgment is made (step S902).

  If the measurement result is not normal (that is, if measurement could not be continued) (step S902: No), an alarm is output by the alarm output unit 404 (step S903), and the process ends.

  On the other hand, if the measurement result is normal (that is, if measurement can be continued) in step S902 (step S902: Yes), the device ID stored in the storage unit 406 is read (step S904). ), The read device ID and normal signal are transmitted to the registration device 100 by the wireless communication unit 405 (step S905).

  The authentication server 110 authenticates whether or not the use of the authentication device 150 by the user is a legitimate use, and if the authentication is successful, the user enters the room or enters the building, and the key data K A removal detection start signal is transmitted via the registration device 100. Therefore, the data processing unit 402 receives the key data K and the removal detection start signal from the registration apparatus 100 via the wireless communication unit 405 (step S906), and stores the received key data K in the storage unit 406 ( Step S907).

  After receiving the removal detection start signal, the measurement unit 401 measures biological information (vital sign) at regular intervals (step S908), and determines whether the measurement result is normal (step S909). If the measurement result is not normal when the removal detection start signal is received (step S909: No), it is determined that the authentication device 150 has been removed from the user, and the alarm output unit 404 outputs an alarm. (Step S910), the key data K stored in the storage unit 406 is deleted (Step S911). As a result, even if another user wears the removed authentication device 150, the user cannot enter or enter a room or building permitted to enter or enter.

(Registration process in registration apparatus 100 and authentication server 110)
Next, registration processing in the registration apparatus 100 and the authentication server 110 that have received the device ID and the normal signal in step S905 will be described. FIG. 10 is a flowchart of a registration process performed by the registration apparatus 100 and the authentication server 110 according to the first embodiment.

  First, when the registration apparatus 100 receives a normal signal and a device ID from the authentication device 150 (step S1001), the biometric scanner 102 reads the biometric information of the user (step S1002). Then, the registration apparatus 100 sends the read biometric information and the received device ID to the valid use authentication unit 501.

  Next, the valid usage authentication unit 501 searches the device loan database 504 for the received device ID (step S1003), and collates the biometric information corresponding to the searched device ID with the biometric information read in step S1002. As a result, the authentication device 150 that has been lent to use the authentication device 150 by the user is authenticated for proper use (step S1004).

  And it is judged whether both biometric information corresponds (step S1005). If the two pieces of biometric information do not match (step S1005: No), it is determined that the use of the authentication device 150 by the user is not a valid use of the lent authentication device 150 (authentication failure), and so An error message is output (step S1006).

  On the other hand, if both pieces of biometric information match in step S1005 (step S1005: Yes), the use of the authentication device 150 by the user is a legitimate use of the authentication device 150 that has been lent (authentication success). Determination is made to allow the user wearing the authentication device 150 to enter or enter the room, and the key data generation unit 502 randomly generates key data K (step S1007). Then, the key data generation unit 502 transmits the registration signal, the generated key data K, and the received device ID to the authentication device 120 of the room or building permitted to enter or enter the room via the communication unit 503 (step S1008). Further, the key data generation unit 502 transmits the removal detection start signal and the generated key data K to the authentication device 150 via the communication unit 101 of the registration apparatus 100 (step S1009). The authentication device 150 receives the removal detection start signal and the generated key data K, and performs the processing from step S906 described above.

(Registration process in authentication device 120)
Next, registration processing in the authentication device 120 that has received the registration signal, key data K, and device ID transmitted in step S1008 will be described. FIG. 11 is a flowchart showing the procedure of the registration process in the authentication device 120 that has received the registration signal, the key data K, and the device ID.

  In the authentication device 120, the communication unit 701 receives a registration signal, key data K, and device ID from the authentication server 110 (step S1101), and the key unit K and device ID received by the data processing unit 702 are paired with the storage unit 707. (Step S1102).

  By the user registration process in each apparatus as described above, the user wearing the authentication device 150 is allowed to enter the room or enter the building.

(Authentication process in authentication device 120)
Next, an authentication process performed by the authentication apparatus 120 permitted to enter or enter the room after the user registration process is completed will be described. FIG. 12 is a flowchart showing a procedure of authentication processing by the authentication device 120 permitted to enter or enter the room.

  When the user registration process is completed and the user wearing the authentication device 150 is allowed to enter the room or enter the building, the user goes to the entrance or entrance of the room or building where entry or entry is permitted. The authentication device 150 is moved closer to the input device 130 of the authentication device 120 installed near the doorway. Accordingly, the detection signal is received from the authentication device 150 by the wireless communication unit 708 of the input device 130 of the authentication device 120 (step S1201), and it is detected that the authentication device 150 exists in the vicinity. Then, the random number generation unit 704 generates a random number R (step S1202), stores the generated random number R in the storage unit 707 (step S1203), and uses the random number R for authentication via the wireless communication unit 708 of the input unit 130. The data is transmitted to the device 150 (step S1204).

  The authentication device 150 that has received the random number R transmits the response data [ID, H (R, K)] generated from the random number R, the key data K, and the device ID. It is determined whether or not the user authentication unit 703 has received the message within a predetermined time via the unit 708 (step S1205). If the response data is not received within a certain time (step S1205: No), the random number R stored in the storage unit 707 is deleted by the data processing unit 702 (step S1206).

  On the other hand, if the response data is received within a predetermined time in step S1205 (step S1205: Yes), the personal authentication unit 703 uses the hash value H (from the random number R and the key data K stored in the storage unit 707. R, K) is generated (step S1207). Then, the personal authentication unit 705 collates the generated hash value H (R, K) with the hash value H (R, K) in the received response data to determine whether the user is permitted to enter or enter the room. No authentication is performed (step S1208). Then, the identity authentication unit 705 determines whether or not both hash values match (step S1209). If they match (step S1209: Yes), the user who is permitted to enter or enter the room And the electric lock controller 706 unlocks the electric lock 140 (step S1210).

  On the other hand, if both hash values do not match in step S1209 (step S1209: No), it is determined that the user is a malicious third party who is not the user himself / herself who is permitted to enter or enter the room. The lock controller 706 keeps the electric lock 140 in the locked state, and the message output unit 705 outputs an error message (step S1211).

(Authentication process in authentication device 150)
Next, an authentication process in the authentication device 150 that has received the random number R from the authentication device 120 in step S1204 will be described. FIG. 13 is a flowchart showing a procedure of authentication processing in the authentication device 150.

  In the authentication device 150, the response data generation unit 403 receives the random number R via the wireless communication unit 405 (step S1301), and the one-way function is added to the received random number R and the key data K stored in the storage unit 406. A hash function H (R, K) is obtained by applying a hash function (step S1302). Then, the response data generation unit 403 generates response data [ID, H (R, K)] obtained by concatenating the hash value H (R, K) and the own device ID stored in the storage unit 406. (Step S1303). Then, the response data generation unit 403 transmits the generated response data [ID, H (R, K)] to the authentication device 120 via the wireless communication unit 405 (step S1304). In the authentication device 120 that has received the response data [ID, H (R, K)], the processing after step S1205 described above is executed, and unlocking / locking of the electric lock is controlled based on the result of the personal authentication. .

(Overall flow of deregistration process)
Next, user registration cancellation processing will be described. This deregistration process can enter or enter the room by erasing the rented authentication device 150 and the key data K stored in the authentication device 120 installed in the room or building permitted to enter or enter the room. This is a process for deleting a registration of a new user. This user deregistration process is performed at the place where the registration device 100 is installed, and when the user enters the room or building that is permitted to enter the room or the building is not entered or entered anymore. Done only once.

  FIG. 14 is a sequence diagram showing the overall flow of the registration cancellation process. If the user does not enter or enter the building anymore, the user moves to the place where the entry or entry procedure is canceled (in this embodiment, the same place as the place where the entry or entry procedure is performed) and is lent in advance. The authentication device 150 is worn on the arm and inserted into the hollow portion of the cylindrical outer shape of the registration device 100 installed at the place where the entrance or the entry procedure is canceled. The authentication device 150 measures the biometric information (vital sign) of the attached user (step S1401), and when the authentication device 150 can measure continuously for a certain period of time, the normal signal and its own device ID are stored in the registration device 100. Transmit (step S1402).

  The registration apparatus 100 that has received the normal signal and the device ID reads the biometric information of the user (step S1403), and the authentication device 150 for authentication by the user from the biometric information read by the authentication server 110 and the device loan database 504. It is authenticated whether or not the use of the authentication device 150 is used by a legitimate user who lent the authentication device 150 (step S1404).

  If it is authenticated as valid, the authentication server 110 transmits the erasure signal and the received device ID to the authentication device 120 installed in a room or building in which entry or entry is permitted (step). S1405). Upon receiving the erasure signal, the authentication device 120 searches the storage unit 707 for the same device ID as the received device ID, and stores the key data K stored as a pair with the device ID and the device ID from the storage unit 707. Erasing is performed (step S1406).

  Also, the authentication server 110 transmits a removal detection end signal to the authentication device 150 via the registration device 100 (step S1407). Upon receiving the removal detection end signal, the authentication device 150 deletes the key data K stored in the storage unit 406 (step S1408). As a result, the user deregistration process is completed, and the user wearing the authentication device 150 has been released from the room or building permission.

(Registration cancellation processing in authentication device 150)
Next, such user registration cancellation will be described in detail for each device. First, the registration cancellation process in the authentication device 150 will be described. FIG. 15 is a flowchart showing the procedure of deregistration processing in the authentication device 150.

  The user wears the authentication device 150 lent in advance on his / her arm and inserts it into the hollow portion of the cylindrical outer shape of the registration device 100. When the authentication device 150 is attached to the user, the measurement unit 401 measures the user's biometric information (vital sign) (step S1501), can continuously measure, and determines whether the measurement result is normal. (Step S1502).

  If the measurement result is not normal (that is, if measurement could not be continued) (step S1502: No), an alarm is output by the alarm output unit 404 (step S1503), and the process ends.

  On the other hand, in step S1502, if the measurement result is normal (that is, if measurement can be continued) (step S1502: Yes), the device ID stored in the storage unit 406 is read (step S1504). ), The read device ID and the normal signal are transmitted to the registration device 100 by the wireless communication unit 405 (step S1505).

  The authentication server 110 authenticates whether or not the use of the authentication device 150 lent by the user is a legitimate use, and if the authentication is successful, a removal detection end signal passes through the registration device 100. And will be sent. Therefore, the data processing unit 402 receives the removal detection end signal from the registration apparatus 100 via the wireless communication unit 405 (step S1506), and deletes the key data K stored in the storage unit 406 (step S1507). ).

  After receiving the removal detection end signal, the measurement unit 401 measures biological information (vital sign) at regular intervals (step S1508), and determines whether the measurement result is normal (step S1509). If the measurement result is not normal when the removal detection end signal is received (step S1509: No), it is determined that the authentication device 150 has been removed from the user, but no abnormality is output and no alarm is output. And

(Registration cancellation processing in registration apparatus 100 and authentication server 110)
Next, registration cancellation processing in the registration apparatus 100 and the authentication server 110 that have received the device ID and the normal signal in step S1505 will be described. FIG. 16 is a flowchart illustrating a procedure of registration cancellation processing in the registration device 100 and the authentication server 110 that have received the device ID and the normal signal.

  First, when the registration apparatus 100 receives a normal signal and a device ID from the authentication device 150 (step S1601), the biometric scanner 102 reads the user's biometric information (step S1602). Then, the registration apparatus 100 sends the read biometric information and the received device ID to the valid use authentication unit 501.

  Next, the legitimate use authentication unit 501 searches the device lending database 504 for the received device ID (step S1603), and collates the biometric information corresponding to the retrieved device ID with the biometric information read in step S1602. As a result, the authentication device 150 for which the user has been lent to use the authentication device 150 is authenticated for proper use (step S1604).

  And it is judged whether both biometric information corresponds (step S1605). If the two pieces of biometric information do not match (step S1605: No), it is determined that the authentication device 150 that has been lent to use the authentication device 150 by the user is not a valid use (authentication failure), and that is indicated. An error message is output (step S1606).

  On the other hand, if both pieces of biometric information match in step S1605 (step S1605: Yes), the legitimate usage authentication unit 501 legitimately uses the authentication device 150 to which the user has been lent. It is determined that (authentication is successful), and the user who wears the authentication device 150 enters the entry or entry via the communication unit 503 in order to cancel the permission to enter or enter the room. It transmits to the authentication apparatus 120 of the permitted room or building (step S1607). Further, the legitimate use authentication unit 501 transmits a removal detection end signal to the authentication device 150 via the communication unit 101 of the registration apparatus 100 (step S1608). The authentication device 150 receives the removal detection end signal and performs the processing from step S1506 described above.

(Registration cancellation processing in authentication device 120)
Next, a registration process in the authentication device 120 that has received the erase signal and the device ID transmitted in step S1607 will be described. FIG. 17 is a flowchart illustrating a procedure of deregistration processing in the authentication device 120 that has received the erasure signal and the device ID.

  In the authentication device 120, the communication unit 701 receives the erasure signal and device ID from the authentication server 110 (step S1701), searches the storage unit 707 for the same device ID as the device ID received by the data processing unit 702, The key data K stored as a pair of the device ID and the device ID is deleted from the storage unit 707 (step S1702).

  As a result of the user deregistration process in each apparatus as described above, entry permission or entry permission for the user wearing the authentication device 150 is canceled.

  As described above, in the authentication system according to the first embodiment, the user wears the lent authentication device 150 on his / her arm before entering or entering any room or building. The registration device 100 and the authentication server 110 perform user authentication using biometric information such as a vein pattern and a device ID, and permit entry into a room or building. When the user enters or enters the room, the authentication device 150 worn on the arm is brought close to the input device 130 of the authentication device 120 installed near the entrance of the room or building. The authentication device 120 controls the unlocking / locking of the electric lock by performing identity authentication based on challenge / response authentication to determine whether the approaching user is a user permitted to enter or enter the room. Therefore, the user authentication is performed only by the user wearing the authentication device approaching the input device of the authentication device installed near the entrance of the room or building. For this reason, a user who is permitted to enter or enter a room or building does not need a complicated operation on the input device, and can prevent impersonation of a user who is permitted to enter or enter the room. Therefore, the user can easily enter or enter the room or building where the entry or entry is restricted, and the accuracy of user authentication can be maintained.

(Embodiment 2)
In the biometric information system according to the first exemplary embodiment, the authentication apparatus 120 installed in a room or a building performs identity authentication as to whether or not the user entering or entering the room is a user permitted to enter or enter the room. However, in the authentication system according to the second embodiment, personal authentication performed for each room or building is concentrated on the authentication server 110 side.

  Similarly to the first embodiment, the authentication system according to the second embodiment includes an authentication device 150, an authentication server 1810 having the registration device 100, and an authentication device 1820 to which the input device 130 and the electric lock 140 are connected. Is done. Note that the arrangement example of each device in a room or building and the authentication device 150 are the same as those in the first embodiment, and thus description thereof is omitted.

  FIG. 18 is a block diagram of a functional configuration of the authentication server 1810 according to the second embodiment. As illustrated in FIG. 18, the authentication server 110 includes a registration device 100, a valid usage authentication unit 501, a key data generation unit 502, a communication unit 503, a device loan database 504, a random number generation unit 1804, and personal authentication. The configuration mainly includes a unit 1803, a data processing unit 1802, and a storage unit 1807. Note that the registration device 100, the valid usage authentication unit 501, the key data generation unit 502, the communication unit 503, and the device lending database 504 are the same as the authentication server 110 according to the first embodiment, and thus description thereof is omitted. To do.

  The random number generation unit 1804 generates a random number R effective only for one-time personal authentication as challenge information when a detection signal indicating the presence of an authentication device in the vicinity of the input device 130 is received from the authentication device 120. The data is transmitted to the authentication device 1820 via the communication unit 503.

  The personal authentication unit 1803 performs personal authentication to determine whether or not the user wearing the authentication device 150 in the vicinity of the input device 130 of the authentication device 1820 is a legitimate user permitted to enter or enter the room. . Specifically, the personal authentication unit 1803 authenticates the response data [ID, H (R, K)] generated from the random number R, the key data K, and the device ID generated by the nearby authentication device 150. Received from the device 1820 via the communication unit 503. Then, a hash value H (R, K) is generated from the device ID, key data K, and random number R stored in the storage unit 1807, and the generated hash value H (R, K) and the hash value in the response data are generated. By determining whether or not H (R, K) matches, whether or not the user wearing the authentication device 150 in the vicinity of the authentication device 1820 is a legitimate user permitted to enter or enter the room. Authenticate the person. The authentication result is transmitted to the authentication device 1820 via the communication unit 503. That is, when it is determined that the user wearing the authentication device 150 is a legitimate user permitted to enter or enter the room (successful authentication), the unlocking signal is sent to the authentication device 1820 via the communication unit 503. When it is determined that the user is not an authorized user (authentication failure), a lock signal is transmitted to the authentication device 1820 via the communication unit 503.

  The data processing unit 1802 performs processing of storing the device ID received from the authentication device 150 and the generated key data K in the storage unit 1807 at the time of user registration. The data processing 1802 performs a process of deleting the key information data K stored in the storage unit 1807 when canceling the user registration.

  The storage unit 1807 is a storage medium such as a memory that stores a pair of the device ID received from the authentication device 150 and the generated key data K, and stores the random number R generated by the random number generation unit 1804.

  Next, details of the authentication device 1820 will be described. FIG. 19 is a block diagram of a functional configuration of the authentication device 1820 according to the second embodiment. As shown in FIG. 7, the authentication device 1820 mainly includes a communication unit 1901, a message output unit 705, an electric lock control unit 1906, and an input device 130. Is connected to an electric lock 140 that locks or unlocks. Here, since yesterday of the message output unit 705 and the input device 130 is the same as that of the authentication device 120 according to the first embodiment, the description thereof is omitted.

  The communication unit 1901 controls data communication with the authentication server 1810. Specifically, the communication unit 701 transfers the detection signal received from the authentication device 150 by the wireless communication unit 708 of the input device 130 to the authentication server 1810 or uses the random number R received from the authentication server 1810 as the authentication device. 150 is transferred via the wireless communication unit 708. In addition, the communication unit 1901 performs processing to transfer response data received from the authentication device 150 via the wireless communication unit 708 to the authentication server 1810. Further, the communication unit 1901 receives a release signal and a lock signal for the electric lock 140 from the authentication server 1810.

  The electric lock control unit 706 controls the unlocking and locking of the electric lock 140 according to the unlocking signal and the locking signal received from the authentication server 1810. Specifically, the electric lock control unit 706 unlocks the electric lock 140 when receiving the unlock signal from the authentication server 1810, and locks the electric lock 140 when receiving the lock signal from the authentication server 1810. Keep it as it is.

(Overall flow of user registration processing and user authentication processing)
Next, user registration processing and authentication processing by the authentication system according to this embodiment configured as described above will be described. FIG. 20 is a sequence diagram illustrating an overall flow of user registration processing and authentication processing by the authentication system according to the second embodiment. When the user wishes to enter or enter the building, the user moves to the place where the entrance or entrance procedure is to be performed, wears the authentication device 150 that has been lent in advance, and is installed at the place where the entrance or entrance procedure is performed. It is inserted into the hollow portion of the cylindrical outer shape of the registration device 100. The authentication device 150 measures the biometric information (vital sign) of the attached user (step S2001), and if it can continuously measure for a certain time, the normal device and its own device ID are stored in the registration device 100. Transmit (step S2002).

  Upon receiving the normal signal and the device ID, the registration apparatus 100 reads the user's biometric information (step S2003), and the authentication server 150 uses the device ID and the biometric information read by the authentication server 1810 and the device lending database 504. It is authenticated whether or not use of the authentication device 150 is used by a legitimate user who has lent the authentication device 150 (step S2004).

  If it is authenticated as valid, the authentication server 1810 generates key data K (step S2005), and stores the received device ID and the generated key data K as a pair in the storage unit 1807 ( Step S2006).

  Further, the authentication server 1810 transmits the generated key data K to the authentication device 150 via the registration device 100 together with the removal detection start signal (step S2007). Upon receiving the key data K and the removal detection start signal, the authentication device 150 stores the received key data K in the storage unit 406 (step S2008). As a result, the user registration process is completed, and the user wearing the authentication device 150 is permitted to enter or enter the room or building.

  When the user is permitted to enter or enter the room or building in this way, the user authentication process is performed next.

  The user permitted to enter or enter the building moves to the vicinity of the entrance / exit of the room or building permitted to enter the entrance or entrance, and the installed authentication device 150 is an input device of the authentication device 1820 installed near the entrance / exit. Approach 130. As a result, the detection signal issued from the authentication device 150 is detected by the input device 130 of the authentication device 1820 (steps S2009 and S2010). Then, the authentication device 1820 transfers the detection signal received by the input device 130 to the authentication server 1810 (step S2011).

  The authentication server 1810 that has received the detection signal generates a random number R that is valid only for personal authentication when entering or entering the room once (step S2012), and transmits the random number R to the authentication device 1820 (step S2013). The authentication device 1820 transfers the random number R received from the authentication server 1810 to the authentication device 150 via the input device 130 (step S2014).

  The authentication device 150 that has received the random number R generates response data [ID, H (R, K)] from the received random number R, the key data K stored in the storage unit, and the device ID (step S2015). The response data [ID, H (R, K)] is transmitted to the authentication device 1820 (step S2016). The authentication device 1820 transfers the received response data [ID, H (R, K)] to the authentication server 1810 (step S2017).

  Upon receiving the response data [ID, H (R, K)], the authentication server 1810 generates a hash value H (R, K) from the random number R stored in the storage unit 1807 and the key data K (step S2018). ), By comparing the generated hash value H (R, K) with the hash value H (R, K) in the received response data, the identity authentication as to whether the user is permitted to enter or enter the room. This is performed (step S2019). When the user is the user who is permitted to enter or enter the room (authentication success), an unlock signal is transmitted to the authentication device 1820 (step S2020). The authentication device 1820 that has received the unlock signal unlocks the electric lock 140 (step S2021).

(User registration process in registration apparatus 100 / authentication server 1810)
Next, such user registration processing and authentication processing will be described in detail for each apparatus. Note that the user registration process in the authentication device 150 is the same as that in the first embodiment, and a description thereof will be omitted. In the second embodiment, the user registration process is performed only between the authentication device 150 and the authentication server 1810, and the user registration process is not performed in the authentication device 1820. Therefore, registration processing in the registration apparatus 100 and the authentication server 110 will be described.

  FIG. 21 is a flowchart of a registration process performed by the registration apparatus 100 and the authentication server 1810 according to the second embodiment. The processing (steps S2101 to S2105, S2106) from when the registration apparatus 100 receives the normal signal and the device ID from the authentication device 150 until the authentication of the proper device use in the authentication server 1810 (steps S2101 to S2105, S2106) Steps S1001 to S1005 and S1006) are performed in the same manner.

  In step S2105, if the biometric information corresponding to the device ID matches the biometric information read by the biometric scanner 102 (step S2105: Yes), the use of the authentication device 150 by the user has been lent. In order to permit the user wearing the authentication device 150 to enter or enter the room, the key data generation unit 502 randomly determines the key data K to determine that the authentication device 150 is legitimate use (authentication success). (Step S2107). Then, the data processing unit 1802 stores the received device ID and the generated key data K as a pair in the storage unit 1807 (step S2108). And then. The key data generation unit 502 transmits the removal detection start signal and the generated key data K to the authentication device 150 via the communication unit 101 of the registration apparatus 100 (step S2109).

(Authentication process in authentication device 1820)
Next, an authentication process performed by the authentication device 1820 that is permitted to enter or enter the room after completion of the user registration process will be described. FIG. 22 is a flowchart showing a procedure of authentication processing by the authentication device 1820 that is permitted to enter or enter the room. When the user registration process is completed and the user wearing the authentication device 150 is allowed to enter the room or enter the building, the user goes to the entrance or entrance of the room or building where entry or entry is permitted. The authentication device 150 is moved closer to the input device 130 of the authentication device 120 installed near the doorway. Accordingly, the wireless communication unit 708 of the input device 130 of the authentication device 1820 receives the detection signal from the authentication device 150 (step S2201), and detects that the authentication device 150 exists in the vicinity. Next, the communication unit 1901 transfers the received detection signal to the authentication server 1810 (step S2202).

  The authentication server 1810 receives the detection signal, generates a random number R, and transmits the generated random number R to the authentication device 1820. The communication unit 1901 receives the random number R (step S2203) and transfers it to the authentication device 150. (Step S2204).

  Next, since the authentication device 150 generates response data [ID, H (R, K)] and transmits it to the authentication device 1820, the communication unit 1901 uses the response data [ID, H (R, K)]. Is received (step S2205) and transferred to the authentication device 150 (step S2206).

  Next, the authentication server 1810 authenticates the user with the response data [ID, H (R, K)], and an electric lock unlocking signal or locking signal is transmitted as a result. For this reason, the communication unit 1901 receives this, and the electric lock control unit 1906 checks whether or not the received signal is an unlock signal (step S2207).

  If the received signal is an unlock signal (step S2207: Yes), the electric lock 140 is unlocked by the electric lock control unit 1906 (step S2208). On the other hand, when the received signal is not a release signal but a locking signal (step S2207: No), the electric lock control unit 1906 leaves the electric lock 140 in the locked state, and the message output unit 705 outputs an error message. (Step S2209).

(Authentication process in the authentication server 1810)
Next, authentication processing in the authentication server 1810 that has received the detection signal in step S2202 will be described. FIG. 23 is a flowchart of an authentication process procedure in the authentication server 1810 according to the second embodiment.

  When the communication unit 503 receives the detection signal from the authentication device 1820 (step S2301), the random number generation unit 1804 generates a random number R (step S2302), stores the generated random number R in the storage unit 1807 (step S2303), The random number generation unit 1804 transmits the random number R to the authentication device 1820 via the communication unit 503 (step S2304).

  The random number R is transferred from the authentication device 1820 to the authentication device 150, and the authentication device 150 generates response data [ID, H (R, K)] from the random number R, the key data K, and the device ID. Since it is transmitted to the authentication device 1820 and transferred from the authentication device 1820, the personal authentication unit 703 determines whether or not response data has been received within a predetermined time (step S2305). If the response data is not received within a certain time (step S2305: No), the random number R stored in the storage unit 1807 is deleted by the data processing unit 1802 (step S2306).

  On the other hand, if the response data is received within a predetermined time in step S2305 (step S2305: Yes), the personal authentication unit 1803 uses the hash value H (from the random number R and the key data K stored in the storage unit 1807. R, K) is generated (step S2307). Then, the personal authentication unit 1805 compares the generated hash value H (R, K) with the hash value H (R, K) in the received response data to determine whether the user is permitted to enter or enter the room. Authentication of whether or not is performed is performed (step S2308). The identity authentication unit 1805 determines whether or not the two hash values match (step S2309). If they match (step S2309: Yes), the user is the user who is permitted to enter or enter the building. It is determined that there is an unlock signal, and the communication unit 503 transmits the unlock signal to the authentication device 1820 (step S2310).

  On the other hand, if both hash values do not match in step S2309 (step S2309: No), it is determined that the user is a malicious third party who is not the user himself / herself who is permitted to enter or enter the room. The unit 503 transmits a locking signal to the authentication device 1820 (step S1211).

  As described above, in the authentication system according to the second embodiment, as in the first embodiment, the user can easily enter or enter a room or a building in which restrictions are imposed on the entry or entry. The accuracy of user authentication can be maintained.

  In the authentication system according to the second embodiment, since the authentication performed for each room or building is concentrated on the authentication server 110 side, the authentication device 1820 installed in each room or each building has a random number. There is no need to provide a processing unit that performs generation processing and personal authentication processing, and a storage unit that stores key data, and performs data transfer between the processing unit that controls the electric lock, the authentication device 150, and the authentication server 1810. Since a processing unit may be provided, the authentication device 1820 that needs to be installed in each room or building and needs a large number can be simplified.

  In the authentication system according to the first and second embodiments, the authentication device always unlocks the electric lock when the personal authentication is successful. However, the user is not allowed to enter the room or the building. When you want to prove that you are a licensed person without face-to-face, if the user authentication is successful, the user has been successfully authenticated or the user authentication failed without immediately unlocking the electric lock. In such a case, it may be configured to output a message to that effect. In this case, it may be configured such that the electric lock is unlocked after receiving a voice to the effect that the user is permitted to enter or enter the room.

  The authentication server according to the first and second embodiments includes a control device such as a CPU, a storage device such as a ROM (Read Only Memory) and a RAM, an external storage device such as an HDD and a CD drive device, and a display device such as a display device. And an input device such as a keyboard and a mouse, and has a hardware configuration using a normal computer.

  The authentication system and the authentication method in the present invention can be applied in a case where there are a plurality of scenes in which a user who intends to enter or enter the room has to prove that the user who is allowed to enter or enter the room is authorized. It is valid. For example, in the present invention, when a security guard who is in charge of patrols in a building, when entering the building, proves the security guard himself to the authentication device installed indoors in each building. An authentication system and an authentication method are useful.

It is a block diagram which shows the example of arrangement | positioning in the room or building of the authentication system concerning Embodiment 1. FIG. It is a schematic diagram which shows the state which the user who mounted | wore the authentication apparatus 150 with the vicinity of the entrance / exit of each room or each building approached. 2 is a schematic diagram showing an outer shape of a registration device 100. FIG. 2 is a block diagram showing a functional configuration of an authentication device 150. FIG. 2 is a block diagram showing a functional configuration of an authentication server 110 according to the first embodiment. FIG. It is explanatory drawing which shows an example of the content of the apparatus loan database. 2 is a block diagram showing a functional configuration of an authentication device 120 according to the first embodiment. FIG. FIG. 3 is a sequence diagram illustrating an overall flow of user registration processing and authentication processing by the authentication system according to the first exemplary embodiment; 5 is a flowchart showing a procedure of registration processing in the authentication device 150. 4 is a flowchart illustrating a registration process procedure in the registration apparatus 100 and the authentication server 110 according to the first exemplary embodiment. It is a flowchart which shows the procedure of the registration process in the authentication apparatus 120 which received the registration signal, key data K, and apparatus ID. It is a flowchart which shows the procedure of the authentication process by the authentication apparatus 120 with which entry or the admission was permitted. 5 is a flowchart showing a procedure of authentication processing in the authentication device 150. It is a sequence diagram which shows the whole flow of a registration cancellation | release process. 5 is a flowchart illustrating a procedure of registration cancellation processing in the authentication device 150. It is a flowchart which shows the procedure of the registration cancellation | release process in the registration apparatus 100 and the authentication server 110 which received apparatus ID and the normal signal. It is a flowchart which shows the procedure of the registration cancellation | release process in the authentication apparatus 120 which received the deletion signal and apparatus ID. It is a block diagram which shows the functional structure of the authentication server 1810 concerning Embodiment 2. FIG. It is a block diagram which shows the functional structure of the authentication apparatus 1820 concerning Embodiment 2. FIG. It is a sequence diagram which shows the flow of the whole user registration process by the authentication system concerning Embodiment 2, and an authentication process. 10 is a flowchart illustrating a registration processing procedure in the registration apparatus 100 and the authentication server 1810 according to the second embodiment. It is a flowchart which shows the procedure of the authentication process by the authentication apparatus 1820 permitted entry or entrance. 10 is a flowchart illustrating a procedure of authentication processing in the authentication server 1810 according to the second embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 Registration apparatus 101,503,1901 Communication part 102 Biometrics scanner 110,1810 Authentication server 120,1820 Authentication apparatus 130 Input apparatus 140 Electric lock 150 Authentication apparatus 401 Measuring part 402,702,1802 Data processing part 403 Response data generation part 404 Alarm output unit 405, 708 Wireless communication unit 501 Valid use authentication unit 502 Key data generation unit 504 Device loan database 703, 1803 Personal authentication unit 704, 1804 Random number generation unit 705, 1905 Message output unit 706, 1906 Electric lock control unit

Claims (10)

An authentication device attached to a part of the user's body, an authentication device connected to an electric lock attached to the entrance and exiting to control the electric lock by authenticating the user, and the authentication device and network An authentication system including an authentication server connected to perform authentication processing of a user who has been lent the authentication device based on biometric information of the user,
The authentication device is:
A wearing part that is fixed to a part of the user's body;
First storage means for storing device identification information unique to the device;
First wireless communication means for transmitting a detection signal indicating the presence without contact to the authentication device;
Measuring means for measuring biological information of a user worn by the wearing part;
When the authentication server determines that the user wearing the device is a legitimate user who has been lent the device, the authentication device receives key information for authenticating the user and received the key information First data processing means for storing the key information in the first storage means;
Authentication information generating means for generating authentication information based on the key information stored in the first storage means and transmitting the authentication information to the authentication apparatus when the device is detected in the vicinity of the authentication device; Prepared,
The authentication server is
Second storage for storing device lending information in which the device identification information of the authentication device lent to the user and the biometric information of the user lent to the authentication device having the device identification information are registered in association with each other. Means,
While acquiring the biometric information of the user wearing the authentication device, a registration device that receives the device identification information from the authentication device;
The authentication device is mounted based on the biometric information acquired by the registration device, the device identification information received by the registration device, and the device identification information and the biometric information registered in the device lending information. Legitimate use authentication means for determining whether or not the user is a legitimate user lent to the authentication device;
When it is determined that the user wearing the authentication device by the valid use authentication means is a valid user who has been lent the authentication device, key information is generated and the key information is transferred to the authentication device. Key information generating means for transmitting and transmitting the key information and the device identification information to the authentication device,
The authentication device
Third storage means for storing the device identification information and the key information in association with each other;
When it is determined by the authentication server that the user wearing the authentication device is a legitimate user lent the authentication device, the authentication server attaches the authentication device attached to the user. Communication means for receiving the device identification information and the key information;
When the device identification information and the key information of the authentication device attached to the user by the communication unit are received, the received device identification information and the key information are stored in the third storage unit. 3 data processing means;
A third wireless communication unit that receives a detection signal from the authentication device in a contactless manner, detects the presence of the nearby authentication device, and communicates with the detected authentication device in a contactless manner; An input device;
Based on the authentication information received from the authentication device and the key information stored in the third storage means, whether the user wearing the authentication device in the vicinity is a valid user Identity authentication means for authenticating
Electric lock control means for controlling locking and unlocking of the electric lock, and
The authentication system, wherein the electric lock control means unlocks the electric lock when it is authenticated by the personal authentication means that the user wearing the authentication device is an authorized user. The authentication information generating means of the authentication device, when the self device is detected in the vicinity of the authentication device, authenticates challenge information indicating a request for generating response information for authenticating the user with the authentication device. Based on the challenge information received from the device and the key information and the device identification information stored in the first storage means, the response information is generated as the authentication information, and the generated Sending response information to the authentication device;
The authentication device
Challenge information generating means for generating the challenge information and transmitting the generated challenge information via the third wireless communication means when the input device detects the presence of the authentication device. Prepared,
The personal authentication means includes the response information generated based on the transmitted challenge information, the key information, and the device identification information from the authentication device that has transmitted the challenge information. The authentication device that is present in the vicinity is attached based on the received response information, the device identification information stored in the third storage means, the key information, and the challenge information. The authentication system according to claim 1, wherein the authenticated user is authenticated whether or not the user is a valid user.   2. The measuring device of the authentication device, when the biometric information can be continuously measured, determines that it is mounted on a part of a user's body by the mounting unit. Or the authentication system of 2. The measurement unit of the authentication device determines that the biometric information has been removed from the mounting unit when the biometric information cannot be continuously measured,
The first data processing unit of the authentication device deletes the key information stored in the first storage unit when the measurement unit determines that the first data processing unit has been removed from the mounting unit. The authentication system according to any one of claims 1 to 3, characterized in that: The registration device
A biometric information scanner for acquiring biometric information from a part of the body wearing the authentication device;
A cylindrical housing portion having a size incapable of being approached to the biological information scanner of a part of the body of another user in a state in which a part of the body on which the authentication device is mounted is close to the biological information scanner; ,
The authentication system according to claim 1, further comprising: The challenge information generation means of the authentication device generates a random number as the challenge information when the input device detects the presence of the authentication device, and transmits the generated random number to the authentication device.
The authentication information generation unit of the authentication device receives the random number from the authentication device, and applies a one-way function to the received random number and the key information stored in the first storage unit. Obtaining a hash value, generating the response information from the hash value and the device identification information stored in the first storage means, and transmitting the generated response information to the authentication device,
The identity authentication unit of the authentication device receives the response information from the authentication device that has transmitted the random number via the third wireless communication unit, and receives the hash value of the received response information, and the third It is determined whether or not the key information corresponding to the device identification information stored in the storage means matches the hash value obtained by applying a one-way function to the random number. The authentication system according to any one of claims 2 to 5, wherein a user who wears the authentication device existing in the network is authenticated as a valid user. The valid use authentication means of the authentication server further, when it is determined that the user wearing the authentication device is a valid user who has been lent the authentication device, the erasure signal and the authentication device Sent to the authentication device,
The first data processing means of the authentication device further erases the key information stored in the first storage means when receiving the erase signal from the authentication server,
The communication means of the authentication device further receives the erasure signal from the authentication server,
The third data processing means of the authentication device further erases the key information stored in the third storage means when the erasure signal is received by the communication means. The authentication system according to any one of 1 to 6. An authentication device attached to a part of the user's body, an authentication device connected to an electric lock attached to the entrance and exiting to control the electric lock by authenticating the user, and the authentication device and network An authentication system including an authentication server connected to perform authentication processing of a user who has been lent the authentication device based on biometric information of the user,
The authentication device is:
A wearing part that is fixed to a part of the user's body;
First storage means for storing device identification information unique to the device;
First wireless communication means for transmitting a detection signal indicating the presence without contact to the authentication device;
Measuring means for measuring biological information of a user worn by the wearing part;
When the authentication server determines that the user wearing the device is a legitimate user who has been lent the device, the authentication device receives key information for authenticating the user and received the key information First data processing means for storing the key information in the first storage means;
Authentication information generating means for generating authentication information based on the key information stored in the first storage means and transmitting the authentication information to the authentication apparatus when the device is detected in the vicinity of the authentication device; With
The authentication server is
Second storage for storing device lending information in which the device identification information of the authentication device lent to the user and the biometric information of the user lent to the authentication device having the device identification information are registered in association with each other. Means,
Third storage means for storing the device identification information and the key information in association with each other;
While acquiring the biometric information of the user wearing the authentication device, a registration device that receives the device identification information from the authentication device;
The authentication device is mounted based on the biometric information acquired by the registration device, the device identification information received by the registration device, and the device identification information and the biometric information registered in the device lending information. Legitimate use authentication means for determining whether or not the user is a legitimate user lent to the authentication device;
Key information that generates the key information and transmits it to the authentication device when it is determined that the user wearing the authentication device by the valid use authentication means is a valid user who has been lent the authentication device. Generating means;
Second data processing for storing the received device identification information and the key information in the third storage means when the device identification information and the key information of the authentication device attached to the user are received Means,
Based on the authentication information received from the authentication device and the key information stored in the third storage means, a user wearing the authentication device in the vicinity of the authentication device is legitimate. A user authentication means for authenticating whether or not the user is a user,
The authentication device
Communication means for transferring the authentication information between the authentication server and the authentication device;
A third wireless communication unit that receives a detection signal from the authentication device in a contactless manner, detects the presence of the nearby authentication device, and communicates with the detected authentication device in a contactless manner; An input device;
An electric unlocking means for unlocking the electric lock when the unlocking signal is received by the communication means;
An authentication system characterized by comprising: The authentication information generating means of the authentication device, when the self device is detected in the vicinity of the authentication device, authenticates challenge information indicating a request for generating response information for authenticating the user with the authentication device. Based on the challenge information received from the device and the key information and the device identification information stored in the first storage means, the response information is generated as the authentication information, and the generated Sending response information to the authentication device;
The authentication server is
When it is detected that the presence of the authentication device is detected by the input device, the challenge information is generated, and further includes challenge information generation means for transmitting the generated challenge information to the authentication device,
The identity authentication means receives the response information generated based on the transmitted challenge information, the key information, and the device identification information from the authentication device that transmitted the challenge information, and the received response information And based on the device identification information, the key information, and the challenge information stored in the third storage means, the user who wears the authentication device in the vicinity of the authentication device is authorized If the authentication is successful, an unlock signal is transmitted to the authentication device, and if the authentication is unsuccessful, a lock signal is transmitted to the authentication device.
The authentication system according to claim 8, wherein the communication unit of the authentication device transfers the challenge information and the response information between the authentication server and the authentication device. An authentication device attached to a part of the user's body, an authentication device connected to an electric lock attached to the entrance and exiting to control the electric lock by authenticating the user, and the authentication device and network An authentication method for authenticating a user at an entrance / exit with an authentication server that performs authentication processing of a user who is connected and lent the authentication device based on biometric information of the user,
In the authentication device,
A measurement step for measuring biological information of the user who is attached;
When the authentication server determines that the user wearing the device is a legitimate user who has been lent the device, the authentication device receives key information for authenticating the user and received the key information A first data processing step for storing the key information in a first storage means;
An authentication information generating step of generating authentication information based on the key information stored in the first storage means and transmitting the authentication information to the authentication device when the device is detected in the vicinity of the authentication device; Including
In the authentication server,
An acquisition step in which the registration device of the authentication server acquires biometric information of a user wearing the authentication device;
A receiving step in which the registration device of the authentication server receives the device identification information from the authentication device;
The biometric information acquired by the registration device, the device identification information received by the registration device, the device identification information of the authentication device loaned to a user, and an authentication device having the device identification information are loaned. Based on the device identification information and the biometric information registered in the device lending information registered in association with the user's biometric information, the user wearing the authentication device is lent the authentication device. A legitimate usage authentication step for determining whether the user is a legitimate user;
When it is determined that the user wearing the authentication device in the legitimate use authentication step is a valid user who has been lent the authentication device, key information is generated and the key information is transferred to the authentication device. Transmitting and transmitting the key information and the device identification information to the authentication device, and a key information generation step,
In the authentication device,
When it is determined by the authentication server that the user wearing the authentication device is a legitimate user lent the authentication device, the authentication server attaches the authentication device attached to the user. A communication step of receiving the device identification information and the key information;
A third storage unit that stores the received device identification information and the key information in a third storage unit when the device identification information and the key information of the authentication device attached to the user by the communication step are received; Data processing steps,
Based on the authentication information received from the authentication device and the key information stored in the third storage means, whether the user wearing the authentication device in the vicinity is a valid user A personal authentication step for authenticating
An electric lock control step for controlling locking and unlocking of the electric lock,
The electric lock control step unlocks the electric lock when the user wearing the authentication device is authenticated as a valid user by the identity authentication step.

Images