JP5670633B2 - Authentication code generation device and vehicle - Google Patents

Description

  The present invention relates to an authentication code generating device that generates an authentication code and a vehicle including the same.

  Conventionally, a wireless key is used as a key of an automobile. By using the wireless key, the user can unlock or lock the door without inserting the key into the door key cylinder when opening the door of the automobile. Can be locked.

  Such a wireless key stores an authentication code. On the other hand, the same authentication code is also stored in the locking unit of the automobile. When unlocking and locking, the locking unit of the vehicle receives or reads the authentication code from the wireless key, and compares the authentication code of the wireless key with the authentication code stored in the locking unit of the vehicle. When the codes match, the locking unit unlocks or locks the door of the automobile (see, for example, Patent Document 1).

  Since this authentication code is fixed for each wireless key, there is a problem in terms of security. For example, it is conceivable that a malicious third party intercepts a radio wave transmitted from another person's wireless key and duplicates the radio wave to illegally unlock the door of the other person's automobile. It is also conceivable that a malicious third party illegally unlocks the door of the other person's automobile by decrypting the authentication code from the wireless key of another person in some way and copying the authentication code.

  If the authorization code is fixed, if these frauds are made or suspected, the vehicle owner will prepare a new wireless key with a different authorization code and A new locking unit corresponding to the new wireless key must be replaced in the vehicle. Similarly, when the wireless key is lost, it is necessary to renew the wireless key and replace it with a new locking unit.

  Therefore, it is conceivable to counter such illegal activities by updating the authentication code of the locking unit of the vehicle and the wireless key and updating the authentication code periodically or by a user's update operation. In other words, if the authentication code is updated after the unauthorized person copies the authentication code, then the unauthorized person cannot unlock the vehicle door with the copied authentication code.

JP 2002-295079 A

  However, it is troublesome for the user to frequently update the authentication code of the wireless key. A system that automatically and periodically updates the authentication code of the wireless key can be considered, but in order to generate a random authentication code to improve safety, an algorithm and seed for generating a random number are required. . In a system that generates a random authentication code using random numbers, for example, time is used as a seed of random numbers. In this way, in a system that automatically generates an authentication code periodically and automatically, a third party can easily guess the seed for generating the authentication code, and if the authentication code generation algorithm is deciphered, the authentication code can be easily There is a problem of being guessed.

  The present invention has been made to solve the conventional problems, and provides an authentication code generation device capable of generating an authentication code that is difficult to guess by a third party and a vehicle equipped with such an authentication code generation device. With the goal.

  An authentication code generation device of the present invention is an authentication code generation device that generates an authentication code, and includes a movement history storage unit that stores a movement history of a moving body that moves with a user, and a movement stored in the movement history storage unit. An authentication code generation operation unit that generates an authentication code based on the history and an output unit that outputs the authentication code generated by the authentication code generation operation unit.

  With this configuration, the authentication code generation device generates an authentication code based on the movement history of the user. The user movement history is unique information for each user, and an authentication code is generated using such unique information, so it is difficult for a third party to guess the authentication code. Note that the “moving body that moves together with the user” may be not only a moving body that runs on its own like a vehicle, but also a thing that the user carries and moves like a portable electronic device.

  The authentication code generating device is provided in the mobile body. With this configuration, the movement history, which is information unique to the user, does not go outside via another medium, and leakage of movement history information can be prevented.

  In the authentication code generation device, the authentication code is a code for starting the authentication code generation device. With this configuration, even if a malicious third party tries to illegally extract the user's movement history or authentication code stored in the authentication code generation device, the authentication code generation device can be activated if the authentication code is not known. become unable.

  In the authentication code generation device, the authentication code is a code for activating the mobile body. With this configuration, even if a malicious third party tries to create a movement history illegally by moving with the mobile body, the mobile body cannot be activated unless the authentication code is known. become unable.

  In the authentication code generation device, the movement history includes movement route information of the moving body. The inventor has discovered that when a moving path history of a moving object is displayed on a map, it looks like a human vein diagram. By taking a history of travel routes for a certain period and adding travel time information, the travel route history on this map becomes information that is extremely difficult to guess. This is because a malicious third party must accurately reproduce the user's movement history in order to accurately estimate the movement route information. Therefore, it is possible to make it difficult for a third party to guess the authentication code by using the movement route information of the mobile object as a movement history and generating the authentication code based on the movement history.

  In the authentication code generation device, the movement history includes arrival point information of the moving body. For the same reason as described above, since the history of the arrival point is information unique to each user, generating an authentication code based on this makes it difficult to guess the authentication code by a third party.

  In the authentication code generation device, the authentication code generation calculation unit uses data indicating the movement history or a part thereof as the authentication code. With this configuration, for example, the movement history or a part thereof can be expressed as binary data, and the binary data can be used as an authentication code as it is. As described above, since the movement history itself has randomness, an authentication code that is difficult to guess can be obtained by using the data indicating the movement history or a part thereof as the authentication code as it is.

  In the authentication code generation device, the authentication code generation calculation unit generates a random number using data indicating the movement history or a part thereof as a seed, and uses the random number as the authentication code. With this configuration, since the random number is generated using the movement history data having a random property or a part thereof as a seed, and the random number is used as the authentication code, it is extremely difficult to guess the generated authentication code. .

  In the authentication code generation device, the output unit outputs the authentication code generated by the authentication code generation calculation unit to an authentication key. Here, the “authentication key” refers to an article in which an authentication code is stored, and an apparatus that performs authentication performs authentication by receiving or reading the authentication code from the authentication key. The authentication key is usually possessed by the person who is authenticated. The authentication key may be, for example, a vehicle wireless key that stores an authentication code, may be a mobile phone that stores the authentication code, or may be another article. With this configuration, when the user needs to be authenticated, the user can be authenticated using the authentication key.

  In the authentication code generation device, the output unit receives the authentication code generated by the authentication code generation calculation unit from the authentication key, on the condition that the authentication code generation calculation unit is received from the authentication key. The authentication code newly generated is output. With this configuration, since the authentication code is updated only when the authentication key is used for authentication, a person who does not have the authentication key cannot obtain a newly generated authentication code from the authentication code generation device.

  Further, in the authentication code generation device, the authentication code is a code for starting the authentication code generation device, and the authentication code generation calculation unit is in a state where the authentication code generation device is started, An authentication code is generated, and the output unit outputs the authentication code to the authentication key in a state where the authentication code generation device is activated. With this configuration, the authentication code is updated and output only when the authentication key is authenticated, so that a person who does not have the authentication key cannot obtain a newly generated authentication code from the authentication code generation device. .

  In the authentication code generation device, the output unit wirelessly outputs the authentication code to the authentication key. With this configuration, the authentication code can be received without connecting the authentication key to the connector or the like of the authentication code generation device.

  In the authentication code generation device, the output unit outputs the authentication code to an authentication execution device. With this configuration, the authentication execution device can receive the authentication code from the authentication code generation device, and can execute authentication when the user requests authentication with the authentication key.

  In the authentication code generation device, the moving body is a vehicle. With this configuration, the authentication code can be generated based on the movement history of the vehicle. Since the moving speed of the vehicle is faster than the moving speed of the user on foot, a moving history sufficient to generate the authentication code in a shorter period can be obtained. Therefore, the authentication code can be updated more frequently.

  In the authentication code generation device, the movement history includes operation information of a vehicle accelerator and / or brake. The vehicle accelerator and brake operation information is unique to each user and is almost impossible for others to guess. Therefore, by generating an authentication code based on this information, an authentication code that is extremely difficult to guess can be generated.

  In the authentication code generation device, the moving body is an automobile, and the authentication code is a code for unlocking a door of the automobile. According to this configuration, the door of the automobile cannot be unlocked without the authentication key, so that the theft damage of the automobile can be reduced. Further, without the authentication key, it is impossible to open the door of the automobile and enter the vehicle, so that a new authentication code generated by the authentication code generation device in the vehicle is not stolen.

  In the authentication code generation device, the mobile body is a portable electronic device. Since the portable electronic device moves together with the user, information on effective movement history can be obtained.

  The vehicle of the present invention is a vehicle having a door that can be locked and unlocked, and a movement history storage unit that stores a movement history of the vehicle, and an authentication code based on the movement history stored in the movement history storage unit An authentication code generation calculation unit, an output unit that outputs the authentication code generated by the authentication code generation calculation unit to an authentication key, and an authentication code that stores the authentication code generated by the authentication code generation calculation unit A code storage unit, an authentication code read from the authentication key is compared with an authentication code stored in the authentication code storage unit, and a door unlocking unit that unlocks the door when both authentication codes match or correspond; It has the composition provided with.

  With this configuration, the authentication code is generated based on information specific to the user and the vehicle, such as the movement history of the vehicle, making it difficult to guess the authentication code. Further, since the authentication code generation calculation unit is provided inside the door unlocked by the authentication code, the authentication code generation calculation unit cannot be contacted without knowing the authentication code, and is generated by the authentication code generation calculation unit. Authentication code can be prevented from leaking outside.

  According to the present invention, since the authentication code is generated based on the movement history that is unique information for each user, there is an excellent effect that it is difficult to guess the authentication code by a third party.

The block diagram which shows the structure of the vehicle in the 1st Embodiment of this invention. The figure which shows the example which showed on the map the movement history obtained by accumulating movement path information over 1 month in the 1st Embodiment of this invention The figure which shows the example which showed on the map the movement history obtained by accumulating movement route information over 2 months in the 1st Embodiment of this invention The figure which shows the example which showed the movement history obtained by accumulating movement path information over 3 months in the 1st Embodiment of this invention on the map Table showing an example of the movement history stored in the movement history storage unit in the first embodiment of the present invention The flowchart which shows the operation | movement which performs communication of the authentication code between a wireless key and an authentication code production | generation apparatus in the initial stage in the 1st Embodiment of this invention The flowchart which shows the authentication code update operation | movement of the authentication code production | generation apparatus in the 1st Embodiment of this invention The figure which shows the example which showed on the map the movement history obtained by accumulating arrival point information over one month in the modification of the 1st Embodiment of this invention The figure which shows the example which showed on the map the movement history obtained by accumulating arrival point information over two months in the modification of the 1st Embodiment of this invention The figure which shows the example which showed on the map the movement history obtained by accumulating arrival point information over three months in the modification of the 1st Embodiment of this invention The block diagram which shows the structure of the vehicle in the 2nd Embodiment of this invention. The table | surface which shows the other example of the movement history memorize | stored in the movement history memory | storage part in the 1st Embodiment of this invention The block diagram which shows the structure of the authentication system in the 3rd Embodiment of this invention. The block diagram which shows the structure of the authentication system in the 4th Embodiment of this invention.

Hereinafter, a vehicle according to an embodiment of the present invention will be described with reference to the drawings.
(First embodiment)
FIG. 1 is a block diagram illustrating a configuration of a vehicle according to the first embodiment. In FIG. 1, only the structure relevant to this invention is represented among each structure of a vehicle. In the present embodiment, the vehicle 10 is an automobile provided with a lockable door. The vehicle 10 includes an authentication code generation device 11 that generates an authentication code, and an authentication code storage unit 13 that stores the generated authentication code. The vehicle 10 further includes a drive recorder 12. The drive recorder 12 has a function of outputting vehicle movement route information, which will be described later.

  First, the wireless key 100 used for the vehicle 10 will be described. The wireless key 100 includes a key part 101 and a grip part 102. An RF antenna and an IC chip for performing wireless communication are embedded in the grip portion 102. An authentication code is stored in the IC chip. The wireless key 100 can output the information of the authentication code on a radio wave to the outside by using the RF antenna and the IC chip. Further, the IC chip has a function of rewriting the stored authentication code in response to a request for rewriting the authentication code together with a new authentication code from the outside. The wireless key 100 is provided with an unlocking button and a locking button. When the unlocking button is pressed, an unlock request signal is wirelessly output together with the authentication code. When the lock button is pressed, a lock request signal is wirelessly output together with the authentication code. The wireless key 100 is an example of the authentication key of the present invention.

  The vehicle 10 includes a vehicle activation unit 17 that activates the vehicle 10. By inserting the key part 101 of the wireless key 100 into the vehicle activation part 17 and rotating the wireless key 100, the vehicle 10 is activated, and the authentication code generation device 11, the drive recorder 12, various electronic devices and engines (not shown) are installed. Each device of the vehicle 10 including it starts. The vehicle activation unit 17 includes a wireless communication unit that performs wireless communication with the wireless key 100 and an authentication code verification unit that performs verification of the authentication code, and has a function of starting the vehicle 10 using the authentication code. May be. Alternatively, the vehicle may be activated by either inserting the key unit 101 and rotating the wireless key 100 or verifying the authentication code. Furthermore, the configuration may be such that the vehicle is activated when the key unit 101 is inserted to rotate the wireless key 100 and the authentication code is verified.

  The door of the vehicle 10 includes a door lock mechanism 16, a door unlocking / locking unit 14, and a door wireless communication unit 15. The door lock mechanism 16 is a mechanism that locks or unlocks the door. The door unlocking section 14 controls door locking or unlocking by the door lock mechanism 16. The door radio communication unit 15 receives the authentication code transmitted from the wireless key 100 by radio waves and outputs the authentication code to the door unlocking unit 14. The door unlocking unit 14 is an example of an authentication execution device according to the present invention.

  The authentication code generation device 11 includes a movement history storage unit 111, an authentication code generation calculation unit 112, and an update wireless communication unit 113. The drive recorder 12 includes a GPS receiver 121 and a clock 122. The drive recorder 12 takes out the position of the vehicle 10 that changes as the vehicle 10 travels with the GPS receiver 121 every unit time, and combines it with the time obtained by the clock 122 as information on the travel route of the vehicle 10. The data is output to the movement history storage unit 111. The movement history storage unit 111 accumulates movement route information of the vehicle 10 sent from the drive recorder 12 and stores this as movement history.

  2A to 2C are examples in which a movement history obtained by accumulating movement route information over a certain period is shown on a map. FIG. 2A shows a travel history for January of a certain year, FIG. 2B shows a travel history for January and February of the same year, and FIG. 2C shows a travel history from January to March of the same year. In the figure, a thin line indicates a road, and a thick line indicates a road on which the vehicle has actually moved in the corresponding period. As shown in FIGS. 2A to 2C, the movement history looks like a vein in vein authentication and is information unique to the vehicle. Therefore, by generating the authentication code using the movement history, an authentication code unique to the vehicle can be generated. As is clear from FIGS. 2A to 2C, the movement history becomes more complicated as the period for taking the movement history is longer.

  The movement history storage unit 111 stores information on the movement route together with the time. FIG. 3 is a table showing an example of the movement history stored in the movement history storage unit 111. In this example, the latitude and longitude information of the vehicle 10 received by the GPS receiver 121 is recorded every 10 seconds and used as a movement history.

  The authentication code generation calculation unit 112 generates an authentication code based on the movement history stored in the movement history storage unit 111. There are various methods for generating the authentication code from the movement history. For example, the method of using the data included in the movement history or a part thereof as an authentication code as it is, and the data included in the movement history or a part thereof are used. There is a method of generating a random number as a seed and using the generated random number as an authentication code. When a part of the data included in the movement history is used as an authentication code as it is, for example, the last one digit of the decimal point of latitude and longitude at each time over a certain period (for example, several tens of minutes, several hours, several days) An authentication code can be obtained by taking out and arranging them.

  Also, as shown in FIGS. 2A to 2C, the movement history can be represented by an image, and this image data can be used as an authentication code. In this case, an image of the movement history may be generated by changing the line color of the movement route according to the number of times of travel. When generating random numbers using the data included in the movement history or a part thereof as a seed, take out the latitude and longitude of each time according to a predetermined condition, generate a random number by a known method from the latitude and longitude, An authentication code may be used. The authentication code generated in this way is output to the update wireless communication unit 113 and the authentication code storage unit 13.

  The update wireless communication unit 113 wirelessly transmits the generated authentication code to the wireless key 100 inserted in the vehicle activation unit 17. For this purpose, the update wireless communication unit 113 is provided within a range where radio waves can sufficiently reach from the grip portion 102 of the wireless key 100 inserted into the vehicle activation unit 17. When the vehicle activation unit 17 has a wireless communication unit and activates the vehicle using the authentication code, the position where the radio wave reaches both the wireless communication unit of the vehicle activation unit 17 and the update wireless communication unit 113. It is desirable to provide a holder for the wireless key 100 and to urge the holder to place the wireless key 100 during operation. The update of the authentication code will be described later.

  Next, a configuration for performing door unlocking using the wireless key 100 will be described in detail. When unlocking the door from the outside of the vehicle 10 with the door locked, the user brings the wireless key 100 close to the door wireless communication unit 15 and presses the unlock button of the wireless key 100. An unlock request signal is output from the wireless key 100 together with the authentication code. This is received by the door wireless communication unit 15 and output to the door unlocking unit 14. The door unlocking unit 14 compares the acquired authentication code with the authentication code stored in the authentication code storage unit 13 and determines whether or not the two authentication codes match.

  When it is determined that they match, a control signal for unlocking the door is sent to the door lock mechanism 16 in accordance with the unlock request signal acquired from the door wireless communication unit 15. Similarly, in the case of locking, the door unlocking / locking unit 14 collates the authentication code acquired from the door wireless communication unit 15 and sends a control signal for locking the door to the door lock mechanism 16. It is also possible to provide a keyhole near the door knob and directly operate the door lock mechanism 16 using the key portion 101 of the wireless key 100.

  FIG. 4 shows a flow when the authentication code is communicated between the wireless key 100 and the authentication code generating device 11 in the initial stage. Initial registration is performed after the vehicle 10 is manufactured and delivered to the user. Specifically, first, the wireless key 100 requests initial registration from the authentication code generation device 11 (step S41). Upon receiving the initial registration request, the authentication code generation device 11 gives a default authentication code to the wireless key 100 (step S42). At this time, the default authentication code is also stored in the authentication code storage unit 13 of the vehicle 10. The steps so far are performed by, for example, a manufacturer or a dealer.

  This default authentication code is an authentication code that is randomly generated regardless of the movement history of the vehicle 10. For the time being, the wireless key 100 can use the default authentication code to lock the door of the vehicle 10. In the conventional vehicle key, the default authentication code is used without being changed thereafter. In the present embodiment, this default authentication code is changed to an authentication code unique to the user as described below.

  When the user uses the vehicle 10, the authentication code generation device 11 stores the movement history of the vehicle (step S43). When a certain period of time has elapsed, the wireless key 100 requests a new authentication code from the authentication code generating device 11 (step S44). The certain period may be, for example, one month, may be several days or hours, and may be a period in which a movement history with sufficiently high randomness is obtained to generate an authentication code. When requesting a new authentication code, the wireless key 100 passes the default authentication code to the authentication code generation device 11.

  Upon receiving a request for a new authentication code and a default authentication code, the authentication code generation device 11 collates the default authentication code received from the wireless key 100 with the authentication code stored in the authentication code storage unit 13. If the two authentication codes match, a new authentication code is generated based on the stored movement history (step S45). The authentication code generation device 11 gives the generated new authentication code to the wireless key 100 together with the default authentication code (step S46). The wireless key 100 changes the authentication code to be used by replacing the default authentication code with this new authentication code (step S47).

  The authentication code is subsequently updated at regular intervals. FIG. 5 is a flowchart for explaining the authentication code update operation of the authentication code generation device 11. When the movement history storage unit 111 receives information on the movement route from the drive recorder 12, the movement history storage unit 111 stores it as a movement history (step S51). The authentication code generation calculation unit 112 determines whether or not a certain period has elapsed (step S52), and if the certain period has not elapsed (NO in step S52), continues to store the movement history. When the fixed period has elapsed (YES in step S52), the authentication code generation calculation unit 112 generates an authentication code (step S53). This fixed period may be a period in which a movement history with sufficiently high randomness is obtained to generate the authentication code, and may be, for example, one month, several days or several hours.

  The authentication code generation calculation unit 112 outputs the generated authentication code to the authentication code storage unit 13 and the update wireless communication unit 113. The authentication code storage unit 13 replaces an authentication code that has been newly input from the authentication code generation calculation unit 112 with the authentication code that has already been stored. At the same time, the update wireless communication unit 113 transmits the authentication code generated by the authentication code generation calculation unit 112 to the wireless key 100, and the wireless key 100 newly transmits the authentication code already stored from the update wireless communication unit 113. Replace with the received authentication code. In this way, the authentication code is updated (step S54).

  As described above, according to the present embodiment, an authentication code is generated based on vehicle travel route information and is periodically updated. Since the movement path of the vehicle is unique information for each vehicle, the authentication code is generated based on this information, so that the authentication code is difficult to guess by others. Also, according to the present embodiment, the authentication code is generated in a closed space inside the vehicle, and the update is also performed inside the vehicle, so the authentication code does not go out of the vehicle for update. The possibility that the authentication code is leaked is low.

  In the above embodiment, the time factor of a certain period is used to determine the timing for changing the default authentication code to a new authentication code and the timing for updating the authentication code. You may determine these timings according to quantity. That is, when the movement history becomes a sufficient amount for generating the authentication code, the default authentication code may be changed to a new authentication code, or the authentication code may be updated. For example, when the movement history storage unit 111 stores movement information data as shown in FIG. 3, when the number of data reaches 100, the default authentication code is changed to a new authentication code, or authentication is performed. The code may be updated.

  In the above-described embodiment, information on the travel route of the vehicle 10 is accumulated and used as a travel history. However, information on the arrival point of the vehicle 10 may be accumulated and used as a travel history. Since the vehicle 10 is parked for a certain period of time at the arrival point, when the vehicle 10 is parked for a certain time (for example, 15 minutes) or more, the position can be regarded as the arrival point. The movement history storage unit 111 receives vehicle position (latitude and longitude) and time information from the drive recorder 12 for each unit time in the same manner as in the above embodiment, and the time between two consecutive data. Is equal to or longer than the predetermined time, the position indicated by one of the two data (the two positions are substantially the same) is stored as the arrival point together with the arrival time. The movement history can be obtained by accumulating the information of the arrival points.

  6A to 6C are examples in which the movement history obtained by accumulating the arrival point information obtained in this way over a certain period is shown on a map. 6A shows a movement history in January of a certain year, FIG. 6B shows a movement history in January and February of the same year, and FIG. 6C shows a movement history from January to March of the same year. In the figure, “x” indicates a destination. If such arrival point information is accumulated for a certain period together with arrival time information, it becomes information unique to the vehicle 10.

  Also, before the authentication code generation device 11 wirelessly outputs the new authentication code generated by the authentication code generation calculation unit 112 to the wireless key 100 via the update wireless communication unit 113, the update wireless communication unit 113 first performs wireless communication. The currently valid authentication code is received from the key 100 and collated with the authentication code stored in the authentication code storage unit 13 so that the authentication code is output from the update wireless communication unit 113 only when the verification is successful. May be.

  Furthermore, before the wireless key 100 receives the authentication code currently valid together with the new authentication code from the update wireless communication unit 113 and updates the authentication code, the wireless key 100 checks the currently valid authentication code, The authentication code may be updated with the wireless key 100 only when the verification is successful. In this way, a newly generated authentication code is not given to the wireless key 100 that does not originally have an accurate authentication code.

  Further, in the above embodiment, when the generated authentication code is given from the vehicle 10 to the wireless key 100, the authentication code is transmitted wirelessly through the update wireless communication unit 113, and the door wireless communication unit 15 is transmitted from the wireless key 100. Although the authentication codes are received or read through the wireless communication, the authentication codes may be exchanged by wire. In this case, the door lock mechanism 16 is provided with a key hole, and when the wireless key 100 is inserted into the key hole and rotated to lock or unlock the door, the wireless key 100 is inserted into the key hole. A connector may be provided on the keyhole and the wireless key 100 so that the authentication code can be transmitted. Similarly, the vehicle activation unit 17 may be provided with a connector on the vehicle activation unit 17 and the wireless key 100 so that the authentication code can be transmitted with the wireless key 100 inserted into the vehicle activation unit 17. .

  Further, either one of the update wireless communication unit 113 and the door wireless communication unit 15 may have the other function. That is, the vehicle 10 may be configured to include one wireless communication unit for update and door.

  Moreover, in said embodiment, the same authentication code is memorize | stored in the authentication code memory | storage part 13 and the wireless key 100, and the door unlocking part 14 which is an authentication execution apparatus is whether both authentication codes correspond. However, the authentication code stored in the authentication code storage unit 13 and the authentication code stored in the wireless key 100 may correspond to each other according to a predetermined rule. This predetermined rule can be stored on the authentication execution device side.

  In the above embodiment, the vehicle 10 is an automobile, but the vehicle of the present invention may be a vehicle other than an automobile such as a motorcycle.

(Second Embodiment)
FIG. 7 is a block diagram illustrating a configuration of a vehicle according to the second embodiment. The vehicle 20 of the present embodiment is different from the vehicle 10 of the first embodiment in that accelerator and brake operation information is used as the movement history.

  As shown in FIG. 7, a vehicle operation detection unit 22 is used in the vehicle 20 instead of the drive recorder 12 of the vehicle 10 according to the first embodiment. The vehicle operation detection unit 22 includes an accelerator operation detection unit 221, a brake operation detection unit 222, and a timepiece 223. The accelerator operation detection unit 221 and the brake operation detection unit 222 detect, as operation information, an accelerator depression amount and a brake depression amount (collectively referred to as “vehicle operation amount”) at regular intervals, respectively. This is output to the movement history storage unit 211 together with time information from the clock 223.

  The movement history storage unit 211 accumulates vehicle operation amount information together with time information, and stores this as movement history. FIG. 8 is a table showing an example of the movement history stored in the movement history storage unit 211. In this example, the amount of depression of the accelerator and brake is recorded every 15 seconds and used as a movement history. The authentication code generation calculation unit 212 generates an authentication code based on the movement history. However, as in the first embodiment, the data included in the movement history or a part thereof may be used as the authentication code as it is, A random number may be generated using data included in the history or a part thereof as a seed, and the generated random number may be used as an authentication code.

  The other elements of the vehicle 20 of the present embodiment are the same as the corresponding elements of the vehicle 10 of the first embodiment. The wireless key 100 is also the same as the wireless key 100 described in the first embodiment. In the present embodiment, the operation for changing the default authentication code to a new authentication code and the operation for updating the authentication code are the same as those in the first embodiment.

  According to the present embodiment, information that is unique to the user, such as the history of the amount of operation of the accelerator and the amount of operation of the brake, but information that is almost impossible for a third party to guess is used as the movement history. Since the authentication code is generated based on the movement history, it is almost impossible for a third party to guess the authentication code.

  In the above-described embodiment, information on the accelerator operation amount and the brake operation amount is used as the movement history. However, only one of the information may be accumulated and used as the movement history. Alternatively, the steering angle of the steering wheel may be accumulated as a vehicle operation amount and used as a movement history.

(Third embodiment)
FIG. 9 is a block diagram illustrating a configuration of the authentication system according to the third embodiment of this invention. In the first and second embodiments, the same authentication code is stored in the vehicle authentication code storage units 13 and 23 and the wireless key 100, and when the vehicle door is unlocked, these authentication codes are stored. It was confirmed that the owner of the wireless key 100 is not an unauthorized person. In the present embodiment, such personal authentication is applied to applications other than unlocking the door of the vehicle.

  The authentication system 200 includes a vehicle 30, a base station 40, a management center 50, and an authentication execution device 60. The vehicle 30 includes an authentication code generation calculation unit 31 and a drive recorder 32. In the first vehicle 10, the wireless key 100 of the vehicle corresponds to the authentication key of the present invention, but the mobile phone 300 corresponds to the authentication key in the authentication system 200. The authentication code generation calculation unit 31 and the drive recorder 32 are the same as the authentication code generation calculation unit 11 and the drive recorder 12 of the first embodiment, respectively. However, the update wireless communication unit 313 has a function of performing wireless communication with the mobile phone 300 and a function of performing communication with the management center 50 via the base station 40.

  When generating the authentication code in the same manner as in the first embodiment, the authentication code generating device 31 outputs the generated authentication code to the mobile phone 300 of the user of the vehicle through the update wireless communication unit 313. On the other hand, the authentication code generation device 31 transmits the generated authentication code to the base station 40 through the update wireless communication unit 313. The base station 40 transmits this authentication code to the management center 50 connected via the network.

  The management center 50 is connected to the authentication execution device 60 via a network. The management center 50 receives the authentication code generated by the vehicle 30 and manages the authentication code. The authentication execution device 60 executes authentication when the person to be authenticated requests authentication with the mobile phone 300. At this time, the person to be authenticated passes his / her user ID to the authentication execution device 60 and also passes an authentication code stored in the mobile phone 300. Upon receiving the user ID, the authentication execution device 60 inquires of the management center 50 about the authentication code of the user ID, and the management center 50 returns the authentication code corresponding to the user ID to the authentication execution device 60. The authentication execution device 60 compares the authentication code received from the mobile phone 300 with the authentication code sent from the management center 50, and if both authentication codes match or correspond, the person to be authenticated is not an unauthorized person. to decide.

  When this authentication system 200 is applied to a bank system, for example, it is as follows. The authentication execution device is a bank automatic teller machine (hereinafter referred to as “ATM”). When the person to be authenticated wants to withdraw his / her deposit at the ATM, the person to be authenticated first inserts a cash card into the ATM. ID information is stored in the cash card, and the ATM obtains the ID information of the person to be authenticated from the cash card. Normally, input of the personal identification number by the person to be authenticated is required here. In this embodiment, instead of inputting the personal identification number, the cellular phone 300 is held by wireless communication by holding the cellular phone 300 over the ATM. Send the authentication code stored in.

  When the ATM receives the ID information and authentication code of the person to be authenticated in this way, the ATM transmits the ID information to the management center 50 and requests an authentication code corresponding to the ID information. The person to be authenticated registers his / her ID information in the management center 50 in advance. Thereby, the management center 50 can return the authentication code corresponding to the ID information sent from the ATM to the ATM.

  According to the present embodiment, the user is free from the troublesomeness of changing the password. That is, conventionally, when a user authenticates the user by entering a password together with his / her ID at an authentication execution apparatus, it has been desired to change the password frequently in order to improve safety. However, such a change of the password is troublesome for the user, and there is a problem that if the password is changed frequently, the user forgets the latest password. On the other hand, in this embodiment, the user does not need to store the authentication code corresponding to the password in the beginning. The authentication code can be easily updated by carrying the mobile phone 300 and getting into the vehicle 30.

(Fourth embodiment)
FIG. 10 is a block diagram illustrating a configuration of the authentication system according to the fourth embodiment. In the third embodiment, the authentication code is generated based on the movement history of the vehicle, but in this embodiment, the authentication code is generated based on the movement history of the mobile phone. Similar to the vehicle 30 of the third embodiment, the mobile phone 400 of the present embodiment includes an authentication code generation device 41, a PGS receiver 421, and a clock 422. The mobile phone 400 not only has a function as an authentication code generation device of the present invention but also serves as an authentication key of the present invention. For this purpose, the mobile phone 400 includes an authentication code storage unit 43 and an authentication wireless communication unit 48.

  The authentication code generation device 41 includes a movement history storage unit 411, an authentication code generation calculation unit 412, and an update wireless communication unit 413. These functions are the same as those in the first or third embodiment. . However, the update wireless communication unit 413 communicates with the base station 40 of the mobile phone.

  Similar to the third embodiment, the user can authenticate himself / herself with an authentication execution device (for example, a bank ATM) using the mobile phone 400. The cellular phone 400 generates an authentication code in the authentication code generation device 41 in the same manner as in the first or third embodiment, and stores the generated authentication code in the authentication code storage unit 43.

  When the user performs authentication by the authentication execution device 60, the user passes the ID information of the person to the authentication execution device 60 and holds the mobile phone 400 over the authentication execution device 60, and the authentication code is received from the authentication wireless communication unit 48. Is output wirelessly. At this time, the user ID information is passed to the authentication execution device 60 by a method other than the cellular phone 400 (for example, a key input by the user himself / herself or a method of reading from the card possessed by the user).

  The procedure in which the authentication execution device 60 performs authentication is the same as that in the third embodiment. In the authentication system 500, the procedure for updating the authentication code is basically the same as in the first to third embodiments. However, when the authentication code is updated by the authentication system 500, a new authentication code is sent from the update wireless communication unit 413 to the management center 50 via the base station 40. At this time, the management center 50 updates the authentication code. Is completed, the update completion notification is transmitted from the management center 50 to the update wireless communication unit 413 via the base station 40.

  The mobile phone 400 does not update the authentication code in the authentication code storage unit 43 until the notification of the update completion is received. After receiving the notification of the communication completion, the mobile phone 400 stores the authentication code with the authentication code related to the update completion notification. The authentication code stored in the unit 43 is updated. In this way, when the authentication code is not updated in the management center 50 due to a communication failure or the like, it is possible to prevent the authentication code from being updated only in the mobile phone 400 that is the authentication key. it can.

  According to the present embodiment, mobile phone 400 that can be used as an authentication key is provided, and the authentication code used in mobile phone 400 is generated based on the movement history of mobile phone 400 itself. The movement history of the mobile phone 400 (that is, the movement history of the user who owns the mobile phone 400) is different for each mobile phone and is information unique to each mobile phone. Therefore, if an authentication code is generated using such unique information, an authentication code that is difficult to guess by a third party can be obtained.

  In the first to fourth embodiments, the authentication code generators 11, 21, 31, and 41 are provided in the vehicles 10 to 30 or the mobile phone 400, which are mobile objects. The apparatus may be a separate body from the moving body. In this case, the movement information (movement route information, destination information, vehicle operation amount information, etc.) generated by the mobile body is transmitted to an external authentication code generation device by wire or wireless.

  Since the present invention generates an authentication code based on a movement history that is unique information for each user, it has the effect of making it difficult to guess an authentication code by a third party, and generates an authentication code It is useful as a device and a vehicle equipped with the device.

10, 20, 30 Vehicle (automobile)
11, 21, 31, 41 Authentication code generation device 111, 211, 311, 411 Movement history storage unit 112, 212, 312, 412 Authentication code generation operation unit 113, 213, 313, 413 Update wireless communication unit 13, 23, 43 Authentication code storage unit 14, 24 Door unlocking / locking unit 15, 25 Door wireless communication unit 48 Authentication wireless communication unit 50 Management center 60 Authentication execution device 100 Wireless key 101 Key unit 102 Grip unit 200, 500 Authentication system 300, 400 Mobile phone

Claims (17)

An authentication code generation device that generates an authentication code,
A movement history storage unit that stores a movement history of a moving body that moves with the user, accumulated over a certain period of time;
An authentication code generation operation unit that generates an authentication code based on the movement history stored in the movement history storage unit;
An output unit that outputs the authentication code generated by the authentication code generation calculation unit;
Equipped with a,
The authentication code generation operation unit generates a random number using data indicating the movement history or a part thereof as a seed, and uses the random number as the authentication code .   The authentication code generation device according to claim 1, wherein the authentication code generation device is provided in the mobile body.   The authentication code generation device according to claim 1, wherein the authentication code is a code for starting the authentication code generation device.   The authentication code generation apparatus according to claim 2, wherein the authentication code is a code for activating the mobile body.   The authentication code generation apparatus according to claim 1, wherein the movement history includes movement route information of the moving body accumulated over a certain period.   The authentication code generation device according to claim 1, wherein the movement history includes arrival point information of the moving body accumulated over a certain period.   The authentication code generation device according to claim 1, wherein the authentication code generation calculation unit uses data indicating the movement history or a part thereof as the authentication code.   The authentication code generation apparatus according to claim 1, wherein the output unit outputs the authentication code generated by the authentication code generation calculation unit to an authentication key. The output unit receives the authentication code newly generated by the authentication code generation operation unit as the authentication key on condition that the authentication code generated by the authentication code generation operation unit is received from the authentication key. The authentication code generation apparatus according to claim 8 , wherein the authentication code generation apparatus outputs the authentication code. The authentication code is a code for activating the authentication code generation device,
The authentication code generation calculation unit generates the authentication code in a state where the authentication code generation device is activated,
The authentication code generation device according to claim 8 or 9 , wherein the output unit outputs the authentication code to the authentication key in a state where the authentication code generation device is activated. The output unit, the authentication code generating device as claimed in any one of claims 8 to 10, wherein the outputting the authentication code wirelessly to the authentication key.   The authentication code generation device according to claim 1, wherein the output unit outputs the authentication code to an authentication execution device. The moving body, the authentication code generating device according to any one of claims 1 to 11 characterized in that it is a vehicle. 14. The authentication code generating device according to claim 13 , wherein the movement history includes operation information of a vehicle accelerator and / or brake accumulated over a certain period. The authentication code generation device according to claim 13 or 14 , wherein the mobile body is an automobile, and the authentication code is a code for unlocking a door of the automobile. The moving body, the authentication code generating device as claimed in any one of claims 1 to 12 characterized in that it is a portable electronic device. A vehicle having a lockable door,
A movement history storage unit for storing the movement history of the vehicle accumulated over a certain period;
An authentication code generation operation unit that generates an authentication code based on the movement history stored in the movement history storage unit;
An output unit that outputs the authentication code generated by the authentication code generation calculation unit to an authentication key;
An authentication code storage unit for storing the authentication code generated by the authentication code generation calculation unit;
Checking the authentication code read from the authentication key with the authentication code stored in the authentication code storage unit, a door unlocking unit that unlocks the door when both authentication codes match or correspond;
Equipped with a,
The said authentication code production | generation calculating part produces | generates a random number using the data which show the said movement history, or its part as a seed | species, and uses the said random number as the said authentication code .