JP5104292B2 - Authentication apparatus, authentication method, and program - Google Patents

Description

  The present invention confirms the presence of each other by performing wireless transmission and reception periodically or irregularly between the wireless key and the main body side device, and when the wireless key and the main body side device exceed a predetermined communication range, The present invention relates to an authentication device and a program for limiting functions of a side device or generating an alarm.

  In recent years, security systems have been put into practical use in which an operation lock of an electronic device such as a mobile phone or a personal computer is wirelessly controlled in consideration of security.

  As one form of such a security system, in order to prevent the mobile phone from being stolen, a user of the mobile phone possesses an identification signal transmitter in the form of a card, and between the mobile phone and the identification signal transmitter. In some cases, the mobile phone can be used when the predetermined identification code is communicated with each other and the identification code can be confirmed by both parties (see, for example, Patent Document 1).

  In Patent Literature 1 of such a wireless bidirectional communication system, an operation of detecting a signal periodically emitted from a portable device (hereinafter referred to as a wireless key) in a device mounted on the main body side such as an electronic device. It was the composition which performed continuously.

  The system has three modes: a search mode, an authentication mode, and an initial authentication mode that is an intermediate stage for shifting from the search mode to the authentication mode. The configuration enables operation of electronic devices in the authentication mode. A configuration for restricting the operation of the device is shown. The search mode and the authentication mode are identified based on the radio field intensity.

For example, when the signal strength is strong (the distance to the user with the wireless key is short), the electronic device can be used as an authentication mode, and when the signal strength is weak (the distance is long), the electronic device can be used as a search mode. To do.
JP 2004-143806 A

  However, in the above-described conventional configuration, when a plurality of wireless keys are registered in the main body side device, when the search mode is entered, the main body side device is authenticated as one of the plurality of wireless keys when searching for the wireless key. I don't know what will be done. In other words, in the mode in which the wireless key is registered and set in the main unit (hereinafter referred to as pairing mode), there are multiple ones regardless of the order in which the wireless keys are registered and the situation in which the user uses the wireless key. There was a problem of authenticating with the wireless key, which was inconvenient for users. In other words, I was unable to find and authenticate my intended wireless key in search mode.

  In addition, if there is a wireless key A that is already registered in the main unit, and the user wants to purchase a new key and register additional wireless key B, the user must pair the main unit with the wireless key B. Register and set in ring mode. After registration is completed, the main unit, the already registered wireless key A, and the newly registered wireless key B are all in search mode, and the main unit searches for the wireless key in search mode. It is not convenient whether or not authentication communication is performed as an authentication key.

  The present invention solves the above-described conventional problem. When a plurality of wireless keys can be set in the main unit, in addition to the already registered wireless key A, the wireless key B is additionally registered in the pairing mode. When set, in search mode that shifts after registration is completed, search section A that searches for only one specific wireless key B in accordance with the order of registration and the set priority, and all registered after that A search section B for searching for a wireless key is provided, and when a wireless key is additionally registered, authentication is performed as intended by the user, and the purpose is to improve convenience.

  When the wireless key and the main body side device perform mutual wireless transmission / reception to confirm the presence of each other and the wireless key and the main body side device exceed a predetermined communication range, the main body side An authentication device that restricts the function of the device or generates an alarm, wherein the wireless key is registered in the main body side device and set so that authentication communication is possible, and the wireless key and the main body side device When the main unit side device receives a response of the wireless key, the search mode continues to transmit search communication for a certain period of time until the main unit side device receives the wireless key response, and the main unit side device performs predetermined communication with the wireless key. An authentication mode for performing authentication communication for authenticating whether the wireless device is in the range and the device on the main body side is the registered wireless key; When registered in the body side device, in the search mode, a search section A in which only one specific wireless key is searched for communication according to the order of registration of the wireless keys and a set priority, and a search section A An authentication apparatus having a search section B for performing search communication for all registered wireless keys after the completion is configured.

  And when the wireless key has already been registered in the main unit side, and additional wireless key has been registered, it is specified during the search section A of the main unit according to the registered order and the set priority. By performing search communication with only one wireless key, it becomes possible to search only for the wireless key that the user registered immediately before (ie, the wireless key that the user wants to use now), and the old wireless that is not intended by the user Since it is not authenticated as a key, the convenience of the user is improved.

  In addition, if search communication is performed by searching for a wireless key according to the priority setting set by the user on the main unit, the wireless key that the user wants to use is preferentially searched regardless of the order of registration. Communication becomes possible and convenience is further improved.

  By using the authentication apparatus, the authentication method, and the program of the present invention, a specific registration registered in the main body side device in the period of the search section A of the search mode according to the registered order and the priority set by the user. Only one of the wireless keys can be search-communicated, and the wireless key intended by the user can be preferentially authenticated, thereby improving convenience.

According to a first aspect of the present invention, the wireless key and the main unit side device confirm each other's existence by performing wireless transmission / reception periodically or irregularly, and the wireless key and the main unit side device exceed a predetermined communication range. An authentication device that restricts the function of the main unit side device or generates an alarm when the wireless key is registered in the main unit side device and is set to enable authentication communication; and When the wireless key and the main body side device are out of the communication range, the main body side device continues to transmit search communication for a certain period until receiving the wireless key response; An authentication mode for performing authentication communication for authenticating whether the key is within a predetermined communication range and the main unit is the registered wireless key; When the wireless key is registered in the main unit, in the search mode, a search section A in which only one specific wireless key is searched for communication according to the order in which the wireless keys are registered and the set priority, and search The authentication apparatus includes a search section B that performs search communication for all registered wireless keys after section A ends.

  Then, during the search period A in the search mode, only one of the specific wireless keys registered in the main body side device can be search-communicated according to the registered order and the priority set by the user. Thus, only the wireless key intended by the user is preferentially authenticated, and convenience is improved.

  A second invention includes a wireless key additionally registered in the pairing mode, and when the main device shifts from the pairing mode to the search mode, only the wireless key added in the pairing mode is searched. The authentication apparatus according to claim 1, wherein standby search communication is performed in section A.

  Then, the main device that has shifted from the pairing mode to the search mode searches for only the wireless key added in the pairing mode immediately before during the search section A and performs authentication, so that the additionally registered wireless key is used as it is. It can be used as an authentication key, improving user convenience.

  According to a third aspect of the present invention, the wireless key and the main unit side apparatus confirm each other's existence by performing radio transmission / reception periodically or irregularly, and the wireless key and the main body side apparatus exceed a predetermined communication range. An authentication device that restricts the function of the main unit side device or generates an alarm when the wireless key is registered in the main unit side device and is set to enable authentication communication; and When the wireless key and the main body side device are out of the communication range, the main body side device continues to transmit search communication for a certain period until receiving the wireless key response; An authentication mode for performing authentication communication for authenticating whether the key is within a predetermined communication range and the main unit is the registered wireless key; A step of registering the wireless key in the main unit, and a step of performing search communication for only one specific wireless key in accordance with the order in which the wireless keys are registered and the set priority in the search mode (search section A ) And a step of performing search communication for all wireless keys registered after the search section A (search section B).

  In the period of the search section A in the search mode, only one specific wireless key registered in the main body side device can be search-communicated according to the registered order and the priority set by the user. Thus, the wireless key intended by the user is preferentially authenticated, and convenience is improved.

  The fourth invention includes a step of additionally registering a wireless key in the pairing mode, a step in which the apparatus on the main body side shifts from the pairing mode to the search mode, and only the wireless key added in the pairing mode. The authentication method according to claim 3, further comprising a step of performing standby search communication in the search section A.

  Then, the main device that has shifted from the pairing mode to the search mode searches for only the wireless key added in the pairing mode immediately before during the search section A and performs authentication, so that the additionally registered wireless key is used as it is. It can be used as an authentication key, improving user convenience.

  A fifth invention is a program for causing a computer to realize at least a part of the authentication device according to any one of claims 1 and 2.

  Since it is a program, at least a part of the present invention can be realized with simple hardware by cooperating hardware resources such as an electric / information device and a computer. In addition, the program can be distributed / updated and installed easily by recording on a recording medium or distributing the program using a communication line.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. Note that the present invention is not limited to the embodiments.

(Embodiment 1)
FIG. 1 shows a block diagram of an authentication apparatus according to Embodiment 1 of the present invention.

  In FIG. 1, a cellular phone 101 has functions of the first antenna 1, the first transmission / reception unit 2, the first reception information determination unit 3, the first response unit 4, and the cellular phone 101 which are the main body side devices 102. The setting means 5 is comprised.

  The wireless key 103 includes a second antenna 6, second transmission / reception means 7, second reception information determination means 8, and second response means 9.

  In this embodiment, the main body side device 102 is described as being incorporated in the mobile phone 101, but it can also be incorporated in an electronic device such as a notebook personal computer. The wireless key 103 and the main body side device 102 constitute an authentication device.

  The authentication apparatus according to the present embodiment uses a specific low power radio wave 426 MHz band. In the same apparatus, a system is used that randomly uses channel 4 (hereinafter referred to as CH4) in the pairing mode and search mode, which are operation modes, and CH1 to 3 in the authentication mode.

  An authentication method between the main device 102 and the wireless key 103 will be described with reference to FIG.

  When the main unit 102 cannot communicate with the paired wireless key 103 at a distance, the main unit 102 operates in a mode called a search mode. The pairing operation between the main unit 102 and the wireless key 103 will be described later. In the search mode, the main body apparatus 102 transmits search requests 11, 12, and 13 to the paired wireless key 103 at predetermined intervals to search for the wireless key 103. In this embodiment, a search request is transmitted every 2 seconds.

  When the wireless key 103 receives the search request 13, the key side simple ID 14 is transmitted to the main body side device 102. The main body side device 102 confirms the received key side simple ID 14, determines whether it is a paired partner, and responds with the main body side simple ID 15. The wireless key 103 confirms whether the received main body side device 102 is the main body side paired.

  When it is confirmed that the signal is from the device paired with the simple ID, the wireless key 102 transmits the key side ID 16 to the main body side device 102, and when confirmed, the main body side device 102 sends the main body side ID 17 to the wireless key 103. Send to. The wireless key 103 confirms the main body side device 102.

  As described above, when the wireless key 103 paired with itself is searched for from the main body side device 102 and it is confirmed that they are partners registered for pairing, the mode shifts from the search mode to the authentication mode. Each simple ID is composed of a part of actual ID data, and the data size is smaller than the ID data.

  Next, the authentication mode will be described. The authentication request signal 18 is transmitted from the main body side device 102 for a short time. When the wireless key 103 receives the authentication request 18, the wireless key 103 transmits an authentication response signal 19. The authentication request 18 and the authentication response signal 19 include identification data formed from a part of the ID, and by detecting the identification data, it is authenticated that each other is linked.

  For example, authentication requests 18 and 20 are sequentially transmitted from the main unit 102 every 8 seconds, and responses 19 and 21 are returned from the wireless key 103 when identification data is detected and authenticated. By repeating this, mutual authentication is maintained.

  The state in which the authentication response is returned in response to the authentication request in this way is the authentication mode, and if the reception level is equal to or higher than the predetermined value during the authentication mode period, the main body apparatus 102 is incorporated. The function restriction of the electronic device such as the mobile phone 101 or the alarm from the wireless key 103 is not performed.

  The authentication requests 18 and 20 and the authentication responses 19 and 21 are transmitted and received by the first transmission / reception means 2 and the second transmission / reception means 7 in FIG.

  When the first transmission / reception means 2 or the second transmission / reception means 7 receives the radio waves of the authentication requests 18 and 20 and the authentication responses 19 and 21, the reception level is detected although not shown. If it is determined that the reception level is equal to or higher than the predetermined reception level P1, the authentication mode is maintained and the above authentication procedure is repeated. When the reception level is less than P1, specific functions of the mobile phone, functions such as electronic money and mail are restricted.

  Next, a case will be described in which the distance between the wireless key 103 and the main device 102 is increased and the reception levels of the authentication response signals 19 and 21 detected by the main device 102 are equal to or lower than a predetermined reception level P2. When the radio wave of the authentication request 22 from the main body side device 102 cannot be received by the wireless key 103 and the authentication response 23 is not returned, or when the authentication response 23 cannot be received by the main body side device 102, the main body side device 102 Shifts to search mode.

  When the search mode is entered, the function of an electronic device such as a mobile phone in which the main unit 102 is mounted is limited. For example, in the case of a mobile phone, the function of the mobile phone is restricted by prohibiting key operations so that the address information cannot be seen, the electronic money function is prohibited, and outgoing calls are prohibited. Is to disable some or all of

  On the other hand, if the wireless key 103 cannot receive the authentication request 22, the wireless key 103 shifts to the search mode. Although not shown in the figure, a buzzer is sounded to notify the user of misplacement. If it can be received, the authentication mode is continued.

  When shifting to the search mode, the main device 102 transmits a search request intermittently, and after 48 hours, the wireless key 103 is stopped.

  Next, the operation and effect of the search mode after the pairing operation of the main body apparatus 102 and the wireless key 103 will be described with reference to FIGS.

  FIG. 3 is a sequence diagram showing an operation in which the main unit 102 and the wireless key 103 registered for pairing in the pairing mode of the first embodiment shift to the search mode. FIG. 4 is a sequence diagram of the search mode after the pairing operation. FIG. 5 is a sequence diagram showing processing in the search A section of the search mode after the pairing operation.

  In FIG. 3, the main device 102 set in the pairing mode intermittently transmits search requests 24, 25, and 26 to the wireless key 103 in the pairing mode.

  The wireless key 103 that has received the search request 26 transmits a key-side simple ID 27 to the main unit 102 as a response. The main body device 102 that has received the key-side simple ID 27 transmits the random number data 28 to the wireless key 103. The wireless key 103 that has received the random number data 28 transmits the key side ID 29 to the main body side device 102, and the main body side device 102 transmits the main body side ID 30 to the wireless key 103. Then, a common key is generated from the random number data 28, the key ID, and the main body ID (FIG. 33).

  When the wireless key 103 receives the main body side ID 30, it generates a common key, transmits the main body side ID 32 to the main body side device 102, and the main body side device 102 similarly generates the common key (FIG. 33).

  When the main device 102 generates the common key, it sets a priority flag on the key ID of the paired wireless key 103 and records it in the nonvolatile memory (FIG. 334).

  Then, when pairing is completed, each shifts to the search mode. The main device 102 and the wireless key 103 that have been paired and registered in the pairing mode register with each other as communication partners.

  When shifting to the search mode, the main device 102 transmits the search requests 35 and 36 intermittently for 2 seconds in 30 seconds of the search section A37. The wireless key 103 receives intermittently for 0.2 seconds and responds with a key-side simple ID when a search request is received. The main unit 102 in the search section A waits for a signal of only the wireless key 103 registered in the immediately previous pairing mode, and ignores other signals. That is, even when a plurality of wireless keys 103 are registered in the main body side authentication device 102, only the wireless key 103 registered immediately before during the search section A can perform search communication.

  When the signal of the wireless key 103 cannot be received within 30 seconds of the search section A and the search communication is not completed, the process proceeds to the search section B40. In the search section B, it waits for and responds to the signals of all of the plurality of wireless keys 103 paired with the apparatus 102 on the main body side. The main unit 102 changes the transmission interval of the search requests 38 and 39 to 11 seconds, and the wireless key 103 changes the intermittent reception to 1 second. Search section B is 3 hours. When the search section B elapses, the search mode is further changed, and the main device 102 stops transmitting the search request in 48 hours.

  FIG. 5 shows search communication in the search section A after pairing. The main unit 102 transmits search requests 41, 42, and 3 intermittently for 2 seconds, and waits for a response of the wireless key 103 registered in the immediately preceding pairing operation. When the wireless key 103 receives the search request 43 via the second antenna (6 in FIG. 1) and the second transmitting / receiving means (7 in FIG. 1), the second reception information determination is made as to whether the signal is a normal signal. It is determined by the means (8 in FIG. 1), and the key side simple ID 44 is returned by the second response means (9 in FIG. 1).

  The main body device 102 that has received the key-side simple ID 44 determines whether the signal is a normal signal received by the first antenna (1 in FIG. 1) and the first reception information determination means (3 in FIG. 1). The reception information determination means 3 makes the determination, and the main response ID 45 is transmitted by the first response means 4.

  Similarly, when the main body side simple ID 45 is received by the wireless key 103 and coincides with the paired main body side device 102, the key side ID 46 is transmitted to the wireless key 103 main body side device 102.

  The main device 102 that has received the key ID 46 determines whether the received ID is the ID of the wireless key 103 registered in the immediately previous pairing mode. The determination is performed by the first reception information determination means (3 in FIG. 1). Together with the key side ID of the wireless key 103, a priority flag to be recorded when registered in the pairing mode immediately before is determined. When the received key ID 46 matches the ID of the wireless key held in the main device 102 and the priority flag is raised, the main ID 48 is transmitted by the first response means (4 in FIG. 1). The priority flag is deleted (49 in FIG. 5). Then, the main device 102 shifts to the authentication mode. When it is determined that the wireless key 103 that has received the main body side ID 48 is the ID of the paired main body side device 102, the mode shifts to the authentication mode.

  If the key ID of the wireless key 103 with no priority flag set is received, no response is returned to the wireless key 103 and the process returns to the beginning of the search mode, and the main device 102 transmits the search request intermittently. (49 in FIG. 5). Although not shown, when the search section A elapses, the search section B is entered and the priority flag is deleted.

  As described above, when the wireless key 103 is additionally registered in the pairing mode, the priority flag is recorded in the nonvolatile memory of the main device 102 together with the ID information of the wireless key 103. Also, the priority flag indicates that the search communication between the main unit 102 and the wireless key 103 ends normally after the pairing is completed, or the search section A is not completed because the search communication is not completed and the time of the search section A elapses. The priority flag is deleted. That is, after the pairing, only the wireless key 103 registered for pairing immediately before is searched in the search section A only once. Thereafter, in the search section A37, search communication with all the registered wireless keys 103 becomes possible. When the wireless key 103 is newly purchased and additionally registered by this process, the added wireless key 103 is search-communicated and authenticated, and can be used as it is as an authentication key, so that convenience for the user is improved.

  Note that the intermittent period of the transmission signal in the search mode and the authentication mode described in the first embodiment and the time of the search section A, the search section B, and the like can be changed as necessary, and are not limited thereto.

  In the first embodiment, the authentication device provided with the main body device 102 in the mobile phone 101 has been described. However, the same effect may be obtained with a notebook PC or other electronic device, not necessarily a mobile phone.

  Although the specific low-power radio band 426 MHz has been described as the radio band used by the authentication device, it does not depend on the frequency band.

  In addition, it has been described that the mode is shifted to the search mode after pairing and the wireless key 103 additionally registered in the search section A is preferentially communicated only once. You may make it communicate.

The priority may be set from the setting means 5 of the mobile phone 101, and a priority flag may be set in one of the plurality of registered wireless keys 103. In this way, even when a plurality of wireless keys 103 are used, it is possible to improve the convenience by setting the wireless keys 103 that are most frequently used by the user, instead of the latest registration order. It becomes like this.

  As described above, according to the present embodiment, a specific wireless key registered in the main body side device is registered in the search period A in the search mode in accordance with the registration order and the priority set by the user. Thus, it is possible to perform search communication for only one device, and the wireless key that the user wants to use or intends to use is preferentially authenticated, so that convenience can be improved.

  In addition, after the pairing registration, the mode is shifted to the search mode, and only the wireless key 103 additionally registered immediately before in the search section A is received by the main unit 102, so that the wireless key additionally registered for use by the user is Convenience is improved because search communication is performed as intended and authenticated and can be used as an authentication key. That is, authentication with an unintended wireless key can be reduced.

  The means described in this embodiment is a program for cooperating hardware resources such as a CPU (or microcomputer), a RAM, a ROM, a storage / recording device, an electrical / information device including an I / O, a computer, a server, and the like. You may implement with the form. In the form of a program, new functions can be easily distributed / updated and installed by recording them on a recording medium such as magnetic media or optical media or distributing them via a communication line such as the Internet.

  The authentication apparatus, the authentication method, and the program according to the present invention can be used for a security system using a wireless key that includes a search mode that is not synchronized with a wireless key and an authentication mode that is authenticated and synchronized. Moreover, it can be used not only for mobile phones but also for personal computers and PDAs.

Block diagram of authentication apparatus in Embodiment 1 of the present invention The figure explaining the communication sequence of the authentication apparatus in Embodiment 1 of this invention The figure explaining the pairing sequence of the authentication apparatus in Embodiment 1 of this invention The figure explaining the search sequence of the authentication apparatus in Embodiment 1 of this invention The figure explaining the sequence of the search area A of the authentication apparatus in Embodiment 1 of this invention.

Explanation of symbols

37 Search Section A
38 Search section B
102 Main unit side device 103 Wireless key

Claims (5)

When the wireless key and the main body side device perform mutual wireless transmission / reception to confirm the presence of each other and the wireless key and the main body side device exceed a predetermined communication range, the main body side An authentication device that restricts the function of the device or generates an alarm, wherein the wireless key is registered in the main body side device and set so that authentication communication is possible, and the wireless key and the main body side device When the main unit side device receives a response of the wireless key, the search mode continues to transmit search communication for a certain period of time until the main unit side device receives the wireless key response, and the main unit side device performs predetermined communication with the wireless key. An authentication mode for performing authentication communication for authenticating whether the wireless device is in the range and the main device is the registered wireless key;
When a wireless key is registered in the main body side device, in the search mode, a search section A that performs search communication for only one specific wireless key in accordance with the order in which the wireless keys are registered and the set priority, An authentication apparatus having a search section B for performing search communication of all registered wireless keys after the search section A is completed. A wireless key additionally registered in the pairing mode is provided, and when the main body side device shifts from the pairing mode to the search mode, only the wireless key added in the pairing mode is waited in the search section A for standby search communication. The authentication device according to claim 1 which performs. When the wireless key and the main body side device perform mutual wireless transmission / reception to confirm the presence of each other and the wireless key and the main body side device exceed a predetermined communication range, the main body side An authentication device that restricts the function of the device or generates an alarm, wherein the wireless key is registered in the main body side device and set so that authentication communication is possible, and the wireless key and the main body side device When the main unit side device receives a response of the wireless key, the search mode continues to transmit search communication for a certain period of time until the main unit side device receives the wireless key response, and the main unit side device performs predetermined communication with the wireless key. An authentication mode for performing authentication communication for authenticating whether the wireless device is in the range and the main device is the registered wireless key;
A step of registering the wireless key in the main unit side, and a step of performing search communication for only one specific wireless key in accordance with the order in which the wireless keys are registered and the set priority in the search mode (search section) A) and an authentication method comprising a step of performing search communication for all wireless keys registered after the search section A (search section B). A step of additionally registering a wireless key in the pairing mode; a step in which the apparatus on the main unit side shifts from the pairing mode to the search mode; and a standby search in the search section A for only the wireless key added in the pairing mode. The authentication method according to claim 3, further comprising a step of performing communication. The program for making a computer implement | achieve at least one part of the authentication apparatus of any one of Claim 1 or 2.

Images