JP6155675B2 - Authentication processing method and authentication processing apparatus - Google Patents

Description

  The invention disclosed herein relates to an authentication processing method and an authentication processing apparatus for authenticating the normality of a user who receives a product or receives a service.

  Patent Document 1 discloses an authentication processing method and an authentication processing device in a charging system for an electric vehicle. In this authentication processing method, when communication is not established, authentication with a guest account is performed based on emergency guest account information and guest authentication information. The minimum necessary functions (services) of the vehicle information terminal can be used on the condition that the authentication with the guest account is established.

JP 2012-203428 A

  In the configuration of the prior art, both a remote authentication function by a server and a local authentication function are provided. For this reason, it is necessary to store information for authentication in a local device. However, it is necessary to provide a large amount of storage area locally for storing authentication information. Moreover, it is necessary to provide a high security function locally.

  From such a viewpoint, further improvements are required for the conventional authentication processing method and authentication processing apparatus.

  One of the objects of the present invention is to provide a simple authentication processing method and authentication processing apparatus that can be used between a provider terminal and a user terminal.

  Another object of the present invention is to provide a simple authentication processing method and authentication processing apparatus capable of appropriately limiting the establishment of authentication.

  Another object of the present invention is to provide a simple authentication processing method and authentication processing apparatus capable of appropriately limiting the establishment of authentication based on the location information of the provider terminal and the location information of the user terminal.

  Another object of the invention is that it can be used when the remote authentication function by the server cannot be used, and the establishment of authentication is appropriately restricted based on the location information of the provider terminal and the location information of the user terminal. It is to provide a simple authentication processing method and authentication processing device that can be used.

  The present invention employs the following technical means to achieve the above object. It should be noted that the reference numerals in parentheses described in the claims and in this section indicate the correspondence with the specific means described in the embodiments described later as one aspect, and the technical scope of the present invention It is not limited.

One of the disclosed inventions is an authentication processing method for determining whether or not the provider terminal (3) can be used by authenticating the user terminal (2) that is a mobile object, and is installed away from the provider terminal (3). Only the key information indicating a part of the provider terminals is used from the provider information storage unit (43) that stores the key information indicating the plurality of provider terminals (3). A delivery process (150, 160) for delivery to the key storage unit (27) of the user terminal (2) and storage of the key information stored in the key storage unit (27) from the user terminal (2) to the provider terminal ( Based on the input process (174, 175, 183, 187) input to 3) and the key information input to the provider terminal, the provider terminal (3) determines whether or not the provider terminal (3) can be used. Key information determination step (188, 189) And, delivering process, based on the position information about the provider terminal and the position information on the user terminal (2) (3), to evaluate the potential use of the provider terminal by the user terminal, allows the use The user terminal (2) and the provider terminal (3) whose characteristics exceed a predetermined threshold value are associated, and key information indicating the associated provider terminal (3) is distributed to the associated user terminal (2) Furthermore, based on the main authentication information stored in the main authentication information storage unit (26) provided in the user terminal, the main that determines whether or not the provider terminal (3) can be used in the authentication terminal (4). The authentication process (171, 172, 181, 182, 184, 190) is provided, and the key information determination process determines whether or not the provider terminal (3) can be used instead of the main authentication process when the main authentication process cannot be completed. It is characterized by determining .

  According to the present invention, whether or not the provider terminal can be used is determined at the provider terminal by using the key information previously distributed from the authentication terminal to the user terminal in the distribution step. Since the key information indicating some provider terminals is distributed from the key information indicating a plurality of provider terminals, the use of the provider terminals can be restricted. In addition, it is possible to determine whether or not the provider terminal can be used at the provider terminal without a process between the provider terminal and the authentication terminal.

One of the disclosed inventions is an authentication processing device that determines whether or not the provider terminal (3) can be used by authenticating the user terminal (2) that is a mobile object, and is installed apart from the provider terminal (3). Provided in the authentication terminal (4) and provided in the provider information storage unit (43) for storing key information indicating the plurality of provider terminals (3) and in the user terminal (2) for storing the key information. A key storage unit (27), distribution means (150, 160) for distributing and storing only key information indicating a part of provider terminals from the provider information storage unit to the key storage unit, and a key storage unit ( 27) based on the input means (174, 175, 183, 187) for inputting the key information stored in the user terminal (2) to the provider terminal (3), and the key information input to the provider terminal. In the provider terminal (3), the provider terminal ( ) Of have a key information determining means for determining availability (188 and 189), delivery means, based on the position information on the user terminal (2) and the position information about the provider terminal (3), use The provider terminal evaluates the possibility of using the provider terminal by the provider terminal, associates the provider terminal (3) with the user terminal (2) and the provider terminal (3) where the possibility of use exceeds a predetermined threshold, and associates the provider terminal ( Key information indicating 3) is distributed to the associated user terminal (2), and further provided in the user terminal, the main authentication information storage unit (26) for storing the main authentication information, and the user terminal ( 2) Communication provided between the provider terminal (3) and between the provider terminal (3) and the authentication terminal (4), and transmits main authentication information to the authentication terminal via the provider terminal. Provided in the means (5, 28, 34, 44) and the authentication terminal (4) And main authentication means (171, 172, 181, 182, 184, 190) for determining whether or not the provider terminal (3) can be used based on the main authentication information. The key information determination means is authenticated by the communication means. When the main authentication information cannot be transmitted to the terminal, the availability of the provider terminal (3) is determined instead of the main authentication means .

  According to this invention, using the key information distributed in advance from the authentication terminal to the user terminal by the distribution means, the provider terminal determines whether or not the provider terminal can be used. Since the key information indicating some provider terminals is distributed from the key information indicating a plurality of provider terminals, the use of the provider terminals can be restricted. In addition, it is possible to determine whether or not the provider terminal can be used at the provider terminal without a process between the provider terminal and the authentication terminal.

1 is a block diagram of an authentication system according to an embodiment of the invention. It is a flowchart which shows the preparation process of the user terminal of one Embodiment. It is a flowchart which shows the preparation process of the authentication terminal of one Embodiment. It is a data list figure which shows an example of the management data of one Embodiment. It is a top view which shows an example of the position of the terminal of one Embodiment. It is a data list figure which shows an example of the management data of one Embodiment. It is a top view which shows an example of the position of the terminal of one Embodiment. It is a data list figure which shows an example of the management data of one Embodiment. It is a top view which shows an example of the position of the terminal of one Embodiment. It is a data list figure which shows an example of the management data of one Embodiment. It is a top view which shows an example of the position of the terminal of one Embodiment. It is a flowchart which shows the authentication process of the user terminal of one Embodiment. It is a flowchart which shows the authentication process of the provider terminal of one Embodiment. It is a flowchart which shows the authentication process of the authentication terminal of one Embodiment. It is a sequence diagram which shows an example of the processing flow of one Embodiment.

  A plurality of modes for carrying out the invention will be described below with reference to the drawings. In each embodiment, parts corresponding to the matters described in the preceding embodiment may be denoted by the same reference numerals, and redundant description may be omitted. When only a part of the configuration is described in each mode, the other modes described above can be applied to the other parts of the configuration. Not only combinations of parts that clearly show that combinations are possible in each embodiment, but also combinations of the embodiments even if they are not explicitly stated unless there is a problem with the combination. Is also possible.

(Authentication system)
In FIG. 1, an authentication system 1 according to an embodiment of the invention is shown. The authentication system 1 provides an authentication processing device using computer resources. The authentication processing device executes an authentication processing method according to the invention. The authentication system 1 provides an authentication processing method and an authentication processing device that determine whether or not the provider terminal 3 can be used by authenticating the user terminal 2 that is a mobile body.

  The authentication system 1 is also a charging system 1 for an electric vehicle. The electric vehicle is equipped with a battery that can be charged from the outside. For example, the electric vehicle can be an electric vehicle using only a battery as a power source, or a plug-in hybrid vehicle equipped with a fuel-using power source such as an internal combustion engine or a fuel cell.

  The authentication system 1 includes a user terminal 2 that belongs to a user who receives some benefit when authentication is established. The authentication system 1 includes a plurality of user terminals 2 under its management. For example, a user can purchase a tangible or intangible product from a provider when authentication is established. In the illustrated embodiment, the commodity is electric power. In addition, the user can receive a service from the provider when authentication is established. In the illustrated embodiment, the service is the use of a charging station.

  The user terminal 2 can be provided by an information terminal. The user terminal 2 can be a device mounted on the electric vehicle itself or a portable terminal that can be carried by the user. For example, the user terminal 2 can be provided by a mobile phone owned by the user, a smartphone, a monitor device for power management provided in a house or business office, and the like. In the illustrated example, the user terminal 2 is an electric vehicle. Many functions of the user terminal 2 are provided by a navigation device mounted on the electric vehicle.

  The authentication system 1 includes a provider terminal 3 belonging to a provider that provides goods or services to a user. The authentication system 1 includes a plurality of provider terminals 3 under its management. The provider terminal 3 is a charging stand that supplies electric power to the electric vehicle in order to charge the battery of the electric vehicle. Many functions of the provider terminal 3 are provided by a computer installed in the charging station. The user terminal 2 and the provider terminal 3 are configured to be capable of data communication with each other. The user terminal 2 and the provider terminal 3 are also called local devices.

  The authentication system 1 includes an authentication terminal 4 for providing an authentication service for authenticating the user or the user terminal 2. The authentication here is authentication for determining whether the user or the user terminal 2 is permitted to use the provider terminal 3. For example, the authentication terminal 4 provides user authentication or authentication that the user terminal 2 belongs to the user.

  The authentication system 1 can include one or a plurality of authentication terminals 4. The number of authentication terminals 4 is clearly smaller than the number of user terminals 2 belonging to the authentication system 1 and the number of provider terminals 3 belonging to the authentication system 1. The authentication terminal 4 and the user terminal 2 are configured to be capable of data communication with each other. The authentication terminal 4 and the provider terminal 3 are configured to be capable of data communication with each other. In many cases, the authentication terminal 4 is located in a district away from the user terminal 2 and the provider terminal 3. The authentication terminal 4 is also called a remote device. The authentication terminal 4 can also be called a certificate authority, an authentication center, or an authentication server.

  The user terminal 2, the provider terminal 3, and the authentication terminal 4 are provided by a control device using a computer. The control device is an electronic control unit. The control device includes a processing device (CPU) and a memory (MMR) as a storage medium for storing a program. The control device is provided by a microcomputer including a computer-readable storage medium. The storage medium stores a computer-readable program non-temporarily. The storage medium can be provided by a semiconductor memory or a magnetic disk. By being executed by the control device, the program causes the control device to function as the device described in this specification, and causes the control device to function so as to execute the control method described in this specification. The means provided by the control device can also be called a functional block or module that achieves a predetermined function.

  The authentication system 1 includes a data communication system 5. The data communication system 5 provides data communication between two parties in the user terminal 2, the provider terminal 3, and the authentication terminal 4. The data communication system 5 can be provided by various data communication devices by wireless and / or wire. Data communication between the user terminal 2 and the authentication terminal 4 may be provided via the provider terminal 3. In this case, key information to be described later is provided from the authentication terminal 4 to the user terminal 2 via the provider terminal 3.

  A power connection 6 for charging can be formed between the user terminal 2 and the provider terminal 3. The power connection 6 can be provided by a wired connection by a charging cable or a wireless connection by electromagnetic coupling. Data communication between a part of the data communication system 5, that is, between the user terminal 2 and the provider terminal 3 may be provided via the power connection 6.

  Compared to data communication between the user terminal 2 and the authentication terminal 4 and data communication between the provider terminal 3 and the authentication terminal 4, data communication between the user terminal 2 and the provider terminal 3 is: Less likely to cause communication failure. This is because the user terminal 2 and the provider terminal 3 are arranged close to each other when the electric vehicle can be charged from the charging stand. Therefore, even when a communication failure occurs between the provider terminal 3 and the authentication terminal 4, it is often possible to realize normal data communication between the user terminal 2 and the provider terminal 3.

  A communication failure refers to an event in which communication between the provider terminal 3 and the authentication terminal 4 is not possible. For example, a case where a disaster such as an earthquake occurs in a district where the authentication terminal 4 is installed or a district where the provider terminal 3 is installed and the communication line is down can be included. Moreover, the case where the authentication terminal 4 goes down by a power failure or a high load can be included. Moreover, the case where the communication line utilization rate becomes high and congestion occurs can be included. Furthermore, the case where the communication part of the provider terminal 3 and / or the authentication terminal 4 fails can also be included.

  The authentication system 1 provides at least one authentication. In this embodiment, the authentication system 1 provides multiple types of authentication. The authentication provided by the authentication system 1 can include a first authentication and a second authentication. When the authentication is established, the provider terminal 3 allows use by the user terminal 2. When the authentication is not established, the provider terminal 3 rejects and prohibits use by the user terminal 2.

  The first authentication is also called main authentication. In the main authentication, the authentication terminal 4 authenticates the user terminal 2 in response to a request from the provider terminal 3. In the main authentication, it is used based on the main authentication information provided from the user terminal 2 and provided to the authentication terminal 4 via the provider terminal 3 and the authentication information preset and stored in the authentication terminal 4 Authentication of the person terminal 2 is executed. The information for main authentication is provided by information specific to the user terminal 2, for example. The information for main authentication can be non-public information.

  The main authentication is an advanced authentication process that provides high security. In this embodiment, the main authentication is authentication for charging a user for a fee generated by using the provider terminal 3 and making a payment. The main authentication is provided by authentication for a credit card, for example. The main authentication can be called remote authentication because it requires the authentication terminal 4 installed remotely at the time of authentication. Since the main authentication is provided using an authentication method that is normally used for billing settlement, it can also be called normal authentication.

  The second authentication is also called secondary authentication. In the sub-authentication, authentication is performed between the user terminal 2 and the provider terminal 3 based on the sub-authentication information distributed in advance from the authentication terminal 4 to the user terminal 2. Here, the provider terminal 3 authenticates the user terminal 2. In the sub-authentication, the user terminal 2 is authenticated based on the sub-authentication information distributed in advance from the authentication terminal 4 to the user terminal 2 and the sub-authentication information preset and stored in the provider terminal 3. Executed. The sub-authentication information is also identification information for identifying one or a plurality of provider terminals 3 selected from among the plurality of provider terminals 3.

  The sub authentication information can be information associated with one or a plurality of provider terminals 3. For example, the sub authentication information can be provided by key information unique to one provider terminal 3. The sub authentication information may be data common to a plurality of provider terminals 3 located in the vicinity. The sub-authentication information may be a plurality of key information given to one provider terminal 3. In this case, a plurality of pieces of key information may be properly used depending on the time zone for receiving the user. Such a usage method is effective for distributing users in an emergency such as an earthquake. In this case, the key information can include information indicating a time zone in which the charging station can be used. The sub-authentication information can be fixedly provided to the provider terminal 3, that is, the charging stand. Instead of this, the sub-authentication information can be configured to be temporarily given to the provider terminal 3.

  The information for sub-authentication is information placed at a lower security level than the information for main authentication. The information for sub-authentication is, for example, unique to the provider terminal 3 and can be provided by using public key information.

  Sub-authentication provides lower security than main authentication. In this embodiment, the sub-authentication is authentication for charging a user for a fee generated by using the provider terminal 3 and making a payment. The information amount of the sub authentication information is smaller than the information amount of the main authentication information. Therefore, the processing amount required for sub-authentication is much smaller than the processing amount required for main authentication. Since the sub-authentication authenticates the user device 2 by a simple process compared to the main authentication, it can also be called simple authentication. The sub-authentication can be called local authentication because it requires the user terminal 2 and the provider terminal 3 installed locally at the time of authentication.

(User terminal)
The user terminal 2 includes a control unit 21. The control unit 21 executes a main authentication process 21a for main authentication and a sub authentication process 21b for sub authentication.

  The user terminal 2 includes a position information providing unit 22. The position information providing unit 22 provides position information indicating the position of the user terminal 2 to the control unit 21. The position information providing unit 22 provides position information indicating the position of the user terminal 2 in at least one of the present, the future, and the past. The position information providing unit 22 can be configured to provide position information indicating at least the current position of the user terminal 2. The position information providing unit 22 can be configured to additionally provide position information indicating the future, that is, the predicted position of the user terminal 2. The location information providing unit 22 can be configured to additionally provide location information indicating the past, that is, the recorded location of the user terminal 2.

  The position information providing unit 22 includes a position detection unit 22 a that detects the current position of the user terminal 2. The position detection unit 22a can be provided by a satellite positioning device, for example, a GPS device. The position detection unit 22a provides position information indicating the current position of the user terminal 2.

  The position information providing unit 22 includes a navigation function unit 22b. The navigation function unit 22b is provided by a route guidance device mounted on an electric vehicle, for example, a navigation device. The navigation function unit 22b displays a map and the position of the electric vehicle on the map on a display device provided in the electric vehicle. Further, when the destination is set, the navigation function unit 22b searches for a route from the current location to the destination and displays the route on the map to assist in driving the electric vehicle. The navigation function unit 22b provides location information indicating a destination and / or a waypoint between the current location and the destination. Therefore, the navigation function unit 22b provides position information indicating the position of the user terminal 2 in the future.

The position information providing unit 22 includes an operation history storage unit 22c. The operation history storage unit 22c stores the operation history of the electric vehicle on the map provided by the navigation function unit 22b. The operation history indicates the position of the electric vehicle in the past. The operation history indicates the date and day of the past operation and the day of the week. The operation history can include a past charging history, that is, information for identifying a charging station used for charging, a charging date and time, a day of the week, and the like. Therefore, the operation history storage unit 22c provides position information indicating the position of the user terminal 2 in the past.

  The user terminal 2 includes a rechargeable power supply device 23. The rechargeable power supply device 23 includes a battery that can be charged from the outside. This battery is a driving power source for the electric vehicle. The rechargeable power supply device 23 is placed under the control of the control unit 21.

  The user terminal 2 includes a battery state acquisition unit 24. The battery state acquisition unit 24 acquires the battery state of the rechargeable power supply device 23 and inputs it to the control unit 21. The battery state acquisition unit 24 acquires the amount of power charged in the battery, that is, an SOC (State Of Charge) indicating the state of charge from the battery, and inputs it to the control unit 21.

  The user terminal 2 can provide not only functions for authentication, charging and navigation, but also other functions. The user terminal 2 can include an external application unit 25 for providing other functions. The external application unit 25 can have a function for acquiring a drive plan using an electric vehicle. The external application unit 25 automatically sets the destination and sets the route based on the drive plan by automatically cooperating with the navigation function unit 22b. When such cooperation with the external application unit 25 is provided, the destination may be automatically set without being set only depending on the user's operation.

  The user terminal 2 includes a main authentication information storage unit 26 that stores main authentication information for main authentication. The main authentication information is data necessary for authenticating the user himself or the user terminal 2. The main authentication information is provided by data associated with the authentication information stored in the authentication terminal 4. The user terminal 2 includes a key storage unit 27 that stores sub-authentication information for sub-authentication, that is, key information.

  The user terminal 2 includes a communication unit 28 for data communication with the authentication terminal 4 and the provider terminal 3. The communication unit 28 is configured to perform data communication with the provider terminal 3 even when data communication with the authentication terminal 4 is impossible due to a communication failure.

(Provider terminal)
The provider terminal 3 includes a control unit 31. The control unit 31 executes a main authentication process 31a for main authentication and a sub authentication process 31b for sub authentication.

  The provider terminal 3 includes an identification information storage unit 32 that stores sub authentication information for sub authentication, that is, key information. The identification information storage unit 32 stores identification information given to the provider terminal 3 in advance, that is, key information.

  The provider terminal 3 includes a charging device 33. The charging device 33 supplies power to the rechargeable power supply device 23 of the electric vehicle and charges the battery. The charging device 33 is under the control of the control unit 31. The charging device 33 supplies power when the control unit 31 confirms that the main authentication is established or the sub-authentication is established.

  The provider terminal 3 includes a communication unit 34 for data communication with the authentication terminal 4 and the user terminal 2. The communication unit 34 is configured to perform data communication with the user terminal 2 even when data communication with the authentication terminal 4 is impossible due to a communication failure.

(Authentication terminal)
The authentication terminal 4 includes a control unit 41. The control unit 41 executes a main authentication process 41a for main authentication and a sub authentication process 41b for sub authentication.

  The authentication terminal 4 includes an authentication information management database 42 that stores authentication information for main authentication. The authentication information management database 42 stores a plurality of user terminals 2 belonging to the authentication system 1 and / or non-public data for authenticating users.

  The authentication terminal 4 includes a provider information management database 43 that stores sub-authentication information for sub-authentication, that is, provider information including key information. The provider information management database 43 stores identification information for identifying a plurality of provider terminals 3 belonging to the authentication system 1, that is, key information. Further, the provider information management database 43 stores position information indicating the positions of the plurality of provider terminals 3. The location information can include information indicating the district to which each provider terminal 3 belongs. The location information of the provider terminal 3 is registered and stored in the provider information management database 43 in the procedure for joining the authentication system 1.

  The authentication terminal 4 includes a communication unit 44 for data communication with the user terminal 2 and the provider terminal 3.

(User terminal preparation process)
As illustrated in FIG. 2, the user terminal 2 executes a preparation process 150 for enabling sub-authentication. By executing the preparation process 150, the authentication terminal 4 actually requires sub-authentication, and provides a receiving means for receiving sub-authentication information for sub-authentication from the authentication terminal 4 before being requested.

  In step 151, whether or not the user terminal 2 has just been activated is determined by whether or not the power switch has been switched from the OFF state to the ON state. If it is immediately after the user terminal 2 is activated, the process proceeds to step 152.

  In step 152, transmission processing from the user terminal 2 to the authentication terminal 4 is executed. Here, information indicating the current position of the user terminal 2, that is, current position information is transmitted from the user terminal 2 to the authentication terminal 4. Thereby, the current location information when the user terminal 2 is activated is provided from the user terminal 2 to the authentication terminal 4. Further, in step 152, by identifying and specifying the user terminal 2, authentication information for authenticating the user terminal 2 in the authentication terminal 4, for example, an ID code is transmitted. In step 152, additional information is transmitted. The additional information can include, for example, the battery status of the user terminal 2, instructions from the user, credit information in the user's credit card transaction, moving speed, and the like.

  If it is not immediately after the user terminal 2 is activated, the process proceeds to step 153. In step 153, it is determined whether it is a regular processing time. The periodic processing time is set at a predetermined time interval in order to periodically transmit the current position information from the user terminal 2 to the authentication terminal 4. The interval of the regular processing time can be set to several minutes, several hours, or the like. If it is the regular processing time, the process proceeds to step 152. As a result, during the period when the user terminal 2 is in the activated state, the current position information is provided from the user terminal 2 to the authentication terminal 4 periodically. Through steps 151-153, the current location information of the user terminal 2 is provided from the user terminal 2 to the authentication terminal 4.

  In step 154, it is determined whether or not a destination is set in the navigation function unit 22b. This determination can also be referred to as a determination of whether or not the route guidance by the navigation function unit 22b is being executed, or a process of determining whether or not a future electric vehicle position can be predicted. If the destination is set, the process proceeds to step 155. In step 155, information indicating the position of the future user terminal 2, that is, future position information is transmitted from the user terminal 2 to the authentication terminal 4. The future position information may include position information indicating a destination and / or position information indicating a route. Thereby, the future position information of the user terminal 2 is provided from the user terminal 2 to the authentication terminal 4.

  In step 156, it is determined whether it is a history transmission time. The history transmission time is set at a predetermined interval in order to periodically transmit the operation history stored in the operation history storage unit 22c from the user terminal 2 to the authentication terminal 4. The interval of the history transmission time can be set to several days, weeks, months or the like. If it is the history transmission time, the process proceeds to step 157. In step 157, information indicating the past position of the user terminal 2, that is, past position information is transmitted from the user terminal 2 to the authentication terminal 4. The past position information can include data stored in the operation history storage unit 22c. The past position information can include position information such as a destination and a route that are repeatedly stored in the operation history storage unit 22c over a predetermined number of times. Furthermore, the past position information can include the operation date and time of the operation history, the day of the week, and the like. Thereby, the past location information of the user terminal 2 is provided from the user terminal 2 to the authentication terminal 4.

  In step 158, it is determined whether or not the user terminal 2 has received key information from the authentication terminal 4. If key information is received, the process proceeds to step 159. In step 159, the key information recorded in the key storage unit 27 is updated.

  In step 158, the newly received key information can be overwritten to delete the previously stored key information. Alternatively, priority may be given to key information based on a predetermined rule, and only high priority key information may be stored. Such a method is effective for suppressing the storage capacity of the key storage unit 27. It is also effective when there is too much key information received. For example, a rule can be set so that a higher priority is given as it is closer to the user terminal 2. Further, a rule can be set so that a higher priority is given to a point closer to a point where the amount of charge is reduced and charging is expected to be required on the route to the destination. Further, the rule may be set so that the key information of the charging station that has already passed on the route to the destination is deleted, and the key information of the charging station on the route is newly acquired and stored. In addition, when charging is completed or completed at a certain charging stand, a rule may be set so that key information of the charging stand stored in the key storage unit 27 is deleted. Such deletion of key information after charging may cause a situation in which the same user monopolizes the use of the charging station when an emergency such as an earthquake occurs and electric vehicles are concentrated on the charging station. It is effective to prevent.

(Authentication terminal preparation process)
As illustrated in FIG. 3, the authentication terminal 4 executes a preparation process 160 for enabling sub-authentication. By executing the preparation process 160, the authentication terminal 4 actually requires sub-authentication, and provides a distribution means for distributing sub-authentication information for sub-authentication to the user terminal 2 before being requested.

  In step 161, processing for collecting location information indicating the location of the user terminal 2 is executed. In step 161, position information of a plurality of user terminals 2 belonging to the authentication system 1 is collected. In step 162, the location information of the user terminal 2 is received. The position information received from the authentication terminal 4 from the user terminal 2 can include at least one of current information, future information, and past information. The current information indicates the current position of the user terminal 2, that is, the current location where the user terminal 2 is located. The future information indicates the future position of the user terminal 2. The future information indicates a destination set by the user, a destination automatically set by the navigation function unit 22b, and / or a route guided by the navigation function unit 22b. The past information indicates a past operation history of the user terminal 2. The operation history can include information such as a past position, a past route, a habitually visited point, and a habitual route.

  In step 163, sub-authentication data for sub-authentication, that is, key information is determined, and distribution processing for distributing the determined key information to the user terminal 2 is executed. In step 163, key information is determined and distributed to the plurality of user terminals 2. In step 163, the possibility of using the provider terminal 3 by the user terminal 2 is evaluated based on the position information of the user terminal 2 and the position information of the provider terminal 3. In step 163, the user terminal 2 and the provider terminal 3 that are highly likely to be used are associated with each other. Specifically, the user terminal 2 and the provider terminal 3 that are considered that the possibility of use exceeds a predetermined threshold are associated with each other. Further, in step 163, key information given to one or a plurality of provider terminals 3 associated with one user terminal 2 is determined. That is, the key information is determined based on the position information. The determined key information is distributed to the associated user terminal 2, in other words, transmitted.

  Further, in step 163, the association between the user terminal 2 and the provider terminal 3 can be adjusted based on the additional information transmitted from the user terminal 2 to the authentication terminal 4. For example, the threshold for the association is adjusted based on the additional information. For example, the association between the user terminal 2 and the provider terminal 3 can be adjusted based on the battery state of the user terminal 2, the instruction from the user, the user's credit information, the moving speed, and the like. When the battery charge state SOC is transmitted from the user terminal 2, the charge state SOC is low, and the key information is distributed only to the user terminal 2 that is expected to use the provider terminal 3 soon. May be. Further, based on the user's credit information, when the user's credit rating is lower than a predetermined level, the user terminal 2 of the user may be excluded from the distribution target. Further, the user terminal 2 that is expected to travel fast on an expressway or the like may be excluded from the distribution target.

  The step 163 can include a distribution process 163a that is regularly executed and a distribution process 163b that is executed with a non-stationary event as a trigger.

  In the distribution process 163a, the specific user terminal 2 and one or a plurality of provider terminals 3 are associated with each other based on the position information of the specific user terminal 2 and the position information of the plurality of provider terminals 3. The associated provider terminal 3 is treated as the selected provider terminal 3. The key information of the selected provider terminal 3 is distributed to the specific user terminal 2. The distribution process 163a can be executed regularly each time position information is received or every predetermined time. The distribution process 163a can also be called a regular distribution process.

  In step 164, the position information of the user terminal 2 is received and it is determined whether or not it is available. If the location information of the specific user terminal 2 is available, the process proceeds to step 165. In step 165, the specific user terminal 2 and one or more provider terminals 3 are associated. In other words, one or a plurality of provider terminals 3 is selected based on the position information of a specific user terminal 2 and the position information of a plurality of provider terminals 3. Here, based on the position information of the specific user terminal 2, one or a plurality of provider terminals 3 that may be visited by the specific user terminal 2 are selected. For example, the provider terminal 3 located near the user terminal 2 is selected based on the current information of the user terminal 2. For example, the provider terminal 3 located near the future position of the user terminal 2 is selected based on the future information of the user terminal 2. For example, the provider terminal 3 located near the past position of the user terminal 2 is selected based on the past information of the user terminal 2.

  4, 6, 8, and 10 show an example of selection of the provider terminal based on the current information on the management data 43a. The management data 43a is stored in the provider information management database 43. The management data 43a includes the district to which the provider terminal 3 belongs, the location information of the provider terminal 3, the name of the provider terminal 3, and key information unique to the provider terminal 3 with respect to each of the plurality of provider terminals 3. Fortune. In the illustrated example, the provider terminal 3 of No. 1 to No. 10 belongs to the authentication system 1. The key information given to each provider terminal 3 is a three-digit number.

  5, FIG. 7, FIG. 9, and FIG. 11 show an example of selection of the provider terminal 3 based on the current information on the map plane 43b. In the figure, the position of the user terminal 2 is indicated by a triangle. The position of the provider terminal 3 is indicated by a rectangle. In the example shown in the figure, the map plane 43b is divided into four areas, A area, B area, C area, and D area. The future route of the user terminal 2 is indicated by a broken line. The operation history of the user terminal 2 is indicated by a one-dot chain line.

  4 and 5 show an example in which current information is used. When the authentication terminal 4 receives the current position of the user terminal 2, that is, the A car, the authentication terminal 4 selects the provider terminal 3 belonging to the same area as the user terminal 2 based on the current position, and the key information is selected for the A car. Deliver to. In this example, the key information of the No. 6 machine and the No. 7 machine belonging to the C area is distributed to the user terminal 2. Instead of the illustrated example, key information of the provider terminal 3 located within a predetermined distance range from the A car, for example, within a 10 km range, may be distributed to the user terminal 2 of the A car.

  6 and 7 show an example in which future information is used. In the user terminal 2, that is, the A car, a destination is set in the navigation function unit 22b, and route guidance is executed. When the authentication terminal 4 receives the destination and / or route from the user terminal 2, based on this future information, the authentication terminal 4 and the provider terminal 3 located near the route and the provider terminal 3 located near the destination And the key information is distributed to the A car. In this example, the key information of No. 7, No. 6, No. 1, No. 2, and No. 5 is distributed to the user terminal 2 along the route.

8 and 9 show an example in which past information is used. In the user terminal 2, that is, the A car, operation history data is accumulated in the navigation function unit 22b. Upon receiving the operation history from the user terminal 2, the authentication terminal 4 selects the provider terminal 3 located in the vicinity of the past operation route based on the past information, and distributes the key information to the A car. . In this example, the key information of No. 5, No. 8, No. 9, and No. 10 is distributed to the user terminal 2 along the past operation route. The authentication terminal 4 estimates the district, facility, route, etc. that the user terminal 2 will be headed in the future from the past operation history, and distributes the key information of the provider terminal 3 located in the vicinity of the estimated position You may make it do. The authentication terminal 4 can also distribute the key information of the provider terminal 3 located in the vicinity of the route to the commercial facility when a commercial facility that is often heading for a specific day and time can be identified from the operation history. Good.

  Returning to FIG. 3, in step 166, the key information of the selected provider terminal 3 is transmitted to the specific user terminal 2. As a result, the key information of one or a plurality of provider terminals 3 that are expected to be likely to be used by the specific user terminal 2 visiting the specific user terminal 2 is distributed.

  The distribution of the key information in step 166 can be configured to be executed only when the normality of the user terminal 2 is authenticated. For example, the position information transmitted from the user terminal 2 to the authentication terminal 4 can be given an ID code for identifying and specifying the user terminal 2. The authentication terminal 4 can store the ID code of the user terminal 2 whose use of the provider terminal 3, that is, charging should be prohibited. In this case, the authentication terminal 4 can be configured not to distribute the key information when the ID code of the user terminal 2 matches the ID code that should be prohibited from being charged. The authentication process between the user terminal 2 and the authentication terminal 4 for deciding whether or not to distribute such key information restricts the use of the key information, improper diffusion of the key information, Contribute to deter unauthorized use.

  In the distribution process 163b, the distribution process is executed in response to an unsteady event. As a non-stationary event, the occurrence of a situation requiring key information can be used. For example, the occurrence of a communication failure between the provider terminal 3 and the authentication terminal 4 is one of situations where key information is required. The request from the user terminal 2 or the provider terminal 3 may be a non-stationary event.

  In the distribution process 163b, the authentication terminal 4 detects the occurrence of a communication failure between the specific provider terminal 3 and the authentication terminal 4. When a communication failure is detected, a specific provider terminal 3 and one or a plurality of user terminals 2 are connected based on the position information of the specific provider terminal 3 and the position information of the plurality of user terminals 2. Associate. The associated user terminal 2 is treated as the selected user terminal 2. The key information of the specific provider terminal 3 is distributed to the selected user terminal 2. The distribution process 163b can also be referred to as an unsteady distribution process.

  In step 167, it is determined whether or not there is a communication failure between the specific provider terminal 3 and the authentication terminal 4. If there is a communication failure, the process proceeds to step 168. In step 168, the specific provider terminal 3 and one or more user terminals 2 are associated. In other words, one or a plurality of user terminals 2 are selected based on the position information of a specific provider terminal 3 and the position information of a plurality of user terminals 2. Here, one or a plurality of user terminals 2 that may visit the specific provider terminal 3 are selected based on the position information of the specific provider terminal 3. For example, based on the current information of the plurality of user terminals 2, the user terminal 2 located near a specific provider terminal 3 is selected. For example, based on the future information of the plurality of user terminals 2, the user terminal 2 that is likely to pass or arrive near the specific provider terminal 3 is selected. For example, based on past information of a plurality of user terminals 2, a user terminal 2 that is likely to pass or reach near a specific provider terminal 3 is selected.

  In step 169, the key information of the specific provider terminal 3 is transmitted to the selected user terminal 2. Thereby, the key information of the specific provider terminal 3 is obtained for one or a plurality of user terminals 2 that are expected to visit and use the specific provider terminal 3 under communication failure. be delivered. In step 169, as in step 166, an authentication process between the user terminal 2 and the authentication terminal 4 may be executed.

  10 and 11 show an example of processing that responds to the occurrence of a communication failure. A case where a communication failure occurs between the No. 6 machine of the provider terminal 3 and the authentication terminal 4 is illustrated. The authentication terminal 4 detects this communication failure when a communication failure occurs with the No. 6 machine. When a communication failure is detected, the authentication terminal 4 selects the user terminal 2 located near the Unit 6 where the communication failure has occurred and / or the user terminal 2 that may use the Unit 6 To do. The authentication terminal 4 distributes the key information of the sixth machine to the selected user terminal 2. In this example, the key information of the sixth car is distributed to the user terminal 2 of the C car located in the vicinity of the sixth car and the user terminal 2 of the D car approaching toward the sixth car.

  In the preparation processes 150 and 160, only the key information indicating a part of the provider terminals is obtained from the provider information storage unit 43 storing the key information indicating the plurality of provider terminals 3. A distribution process is provided for distribution and storage. In other words, the preparation processes 150 and 160 include a provider information storage unit 43 that stores key information indicating a plurality of provider terminals 3, a key storage unit 27 that is provided in the user terminal 2 and stores key information, Distributing means for distributing and storing only key information indicating some provider terminals from the provider information storage unit to the key storage unit is provided. The provider information storage unit 43 is provided in the authentication terminal 4 installed away from the provider terminal 3.

  The distribution process provided by the preparation processes 150 and 160 evaluates the possibility of using the provider terminal 3 by the user terminal 2 based on the position information regarding the user terminal 2 and the position information regarding the provider terminal 3. The user terminal 2 and the provider terminal 3 are associated with each other with the possibility of use exceeding a predetermined threshold value. Furthermore, the key information indicating the associated provider terminal 3 is distributed to the associated user terminal 2. The distribution step associates the user terminal 2 with the provider terminal 3 based on at least one of the current position, the future position, and the past position of the user terminal 2 included in the position information regarding the user terminal 2. In the distribution step, key information indicating one or a plurality of provider terminals 3 associated with the specific user terminal 2 is distributed to the specific user terminal 2.

  The distribution means provided by the preparation processes 150 and 160 evaluates the possibility of using the provider terminal 3 by the user terminal 2 based on the position information regarding the user terminal 2 and the position information regarding the provider terminal 3. The user terminal 2 and the provider terminal 3 are associated with each other with the possibility of use exceeding a predetermined threshold value. Furthermore, the key information indicating the associated provider terminal 3 is distributed to the associated user terminal 2. The distribution unit associates the user terminal 2 with the provider terminal 3 based on at least one of the current position, the future position, and the past position of the user terminal 2 included in the position information regarding the user terminal 2. The distribution unit distributes key information indicating one or a plurality of provider terminals 3 associated with the specific user terminal 2 to the specific user terminal 2.

(User terminal authentication process)
As illustrated in FIG. 12, when the user terminal 2 uses the provider terminal 3, the user terminal 2 executes an authentication process 170 for requesting its own authentication. The user terminal 2 provides a main authentication requesting means for requesting main authentication by executing the authentication process 170. The user terminal 2 provides a sub-authentication start means for requesting sub-authentication by executing the authentication process 170.

  When the provider terminal 3 is a charging stand as in the illustrated example, data communication between the user terminal 2 and the provider terminal 3 is wired via a communication line attached to the charging cable or a power line. Can be provided. Further, data communication between the user terminal 2 and the provider terminal 3 can be provided by short-range wireless communication.

  In step 171, the main authentication is requested from the user terminal 2 to the provider terminal 3. In step 171, main authentication information for main authentication is transmitted from the user terminal 2 to the provider terminal 3. In step 172, it is determined whether or not charging is permitted by main authentication, that is, whether or not use of the provider terminal 3 is permitted. When the main authentication is established and charging is permitted, the process proceeds to step 173. In step 173, a charging process, that is, a power receiving process is executed.

  If charging is not permitted in step 172, the process proceeds to step 174. In step 174, it is determined whether or not key information is requested from the provider terminal 3 to the user terminal 2. If there is a request for key information, that is, if the provider terminal 3 permits the use of key information, the process proceeds to step 175.

  In step 175, execution of sub-authentication is requested from the user terminal 2 to the provider terminal 3. In other words, key information is transmitted from the user terminal 2 to the provider terminal 3. In step 176, the user terminal 2 automatically transmits the key information stored in the key storage unit 17. Instead, the user terminal 2 can display the key information stored in the key storage unit 17 on the display device, prompt manual input by the user who saw the display, and transmit the input result. Such a configuration is effective for notifying the user of using the key information and confirming the user's intention to use the key information.

  In step 176, it is determined whether or not charging is permitted by sub-authentication, that is, whether or not use of the provider terminal 3 is permitted. If sub-authentication is established and charging is permitted, the process proceeds to step 173.

  If sub-authentication is not established in step 176, the process ends. If the key information is not requested in step 174, that is, if the provider terminal 3 does not accept sub-authentication, the process is also terminated. That is, when neither main authentication nor sub-authentication is established, the charging process is not executed.

(Provider terminal authentication process)
As illustrated in FIG. 13, the provider terminal 3 executes an authentication process 180 in response to a request from the user terminal 2. The provider terminal 3 provides a sub-authentication processing means for performing sub-authentication by executing the authentication process 180. The sub-authentication is authentication executed based on sub-authentication information that is distributed in advance from the authentication terminal 4 to the user terminal 2 and transmitted from the user terminal 2 to the provider terminal 3. The provider terminal 3 executes the authentication process 180 to provide relay means for relaying the main authentication information transmitted from the user terminal 2 to the provider terminal 3 and transmitting it to the authentication terminal 4.

  In step 181, it is determined whether or not main authentication is requested from the user terminal 2. If main authentication is requested, the process proceeds to step 182. In step 182, main authentication is requested from the provider terminal 3 to the authentication terminal 4. Here, the main authentication information transmitted from the user terminal 2 to the provider terminal 3 in the above-described authentication process 170 is transmitted from the provider terminal 3 to the authentication terminal 4.

  In step 183, it is determined whether or not a communication failure has occurred between the provider terminal 3 and the authentication terminal 4. If no communication failure has occurred, the process proceeds to step 184. In step 184, it is determined whether main authentication has been established. In other words, it is determined whether to permit or reject the use of the provider terminal 3 by the user terminal 2. If the main authentication is not established, the process ends and the use is rejected.

  If the main authentication is established in step 184, the process proceeds to step 185. In step 185, charging permission is returned to the user terminal 2. That is, usage permission is notified from the provider terminal 3 to the user terminal 2. In step 186, a charging process from the provider terminal 3 to the user terminal 2, that is, a power feeding process is executed. Thereby, charge of the user terminal 2 is performed.

  In step 183, if a communication failure has occurred, the main authentication cannot be completed. Therefore, the user terminal 2 can be authenticated by the main authentication, and it cannot be determined whether or not the provider terminal 3 can be used. If a communication failure has occurred, the process proceeds to step 187. In step 187, key information is requested from the provider terminal 3 to the user terminal 2. In other words, the provider terminal 3 notifies the user terminal 2 that the sub-authentication can be executed.

  Steps 183 and 187 provide sub-authentication limiting means for limiting the use of sub-authentication. In the authentication system 1, main authentication is positioned as a main authentication method. Sub-authentication using key information is a simple authentication method compared to main authentication. Therefore, it is desirable to limit the use of sub-authentication, that is, acceptance of key information, in order to suppress and prevent excessive use and unauthorized use of sub-authentication. Moreover, you may set the time slot | zone which can utilize subauthentication. Further, different key information may be distributed for each time zone, and a time zone in which the provider terminal 3 can be used may be set for each of the plurality of user terminals 2. Such a restriction is effective for suppressing concentration of a large number of user terminals 2 on the provider terminal 3.

  In step 188, the key information transmitted from the user terminal 2 is collated with the key information stored in the provider terminal 3. In other words, a sub-authentication process using key information is executed. In step 189, it is determined whether sub-authentication has been established. When the key information transmitted from the user terminal 2 matches the key information stored in the provider terminal 3, it can be determined that the sub-authentication has been established. If the key information transmitted from the user terminal 2 does not match the key information stored in the provider terminal 3, or if the key information cannot be obtained from the user terminal 2, the sub-authentication is not established. The

  If sub-authentication is established in step 189, the process proceeds to step 185. If the sub-authentication is not established, the process ends.

(Authentication terminal authentication process)
As illustrated in FIG. 14, the authentication terminal 4 executes an authentication process 190 in response to a request from the provider terminal 3. The authentication terminal 4 provides main authentication processing means for executing main authentication by executing the authentication processing 190. The main authentication is authentication executed based on main authentication information transmitted from the user terminal 2 to the authentication terminal 4 via the provider terminal 3.

  In step 191, it is determined whether or not the main authentication is requested from the provider terminal 3. If main authentication is requested, the process proceeds to step 192. In step 192, main authentication is executed based on the main authentication information transmitted from the user terminal 2 to the provider terminal 3 and relayed by the provider terminal 3 to the authentication terminal 4. Here, it is authenticated whether or not the user terminal 2 is authorized. This authentication can also be referred to as a determination as to whether or not the user terminal 2 is authorized to use the provider terminal 3. In step 193, it is determined whether or not main authentication is established. If the main authentication is established, the process proceeds to step 194. In step 194, it is answered that the main authentication is established for the provider terminal 3, that is, the user terminal 2 is permitted to use the provider terminal 3. If the authentication is not established, the process proceeds to step 195. In step 195, it is answered that the main authentication is not established for the provider terminal 3, that is, the user terminal 2 is not permitted to use the provider terminal 3.

  Steps 174, 175, 183, and 187 provide an input process for inputting the key information stored in the key storage unit 27 from the user terminal 2 to the provider terminal 3. Steps 188 and 189 provide a key information determination step for determining whether or not the provider terminal 3 can be used in the provider terminal 3 based on the key information input to the provider terminal 3. Steps 174, 175, 183, and 187 provide an input means for inputting the key information stored in the key storage unit 27 from the user terminal 2 to the provider terminal 3. Steps 188 and 189 provide key information determination means for determining whether or not the provider terminal 3 can be used in the provider terminal 3 based on the key information input to the provider terminal 3.

  Steps 171, 172, 181, 182, 184, and 190 are the use of the provider terminal 3 in the authentication terminal 4 based on the main authentication information stored in the main authentication information storage unit 26 provided in the user terminal 2. A main authentication process for determining whether or not to accept is provided. The key information determination step determines whether or not the provider terminal 3 can be used instead of the main authentication step when the main authentication step cannot be completed. In the distribution step, key information indicating a specific provider terminal 3 that cannot complete the main authentication step is distributed to one or a plurality of user terminals 2 associated with the specific provider terminal 3.

  The authentication system 1 includes a main authentication information storage unit 26 that is provided in the user terminal 2 and stores main authentication information. The authentication system 1 is provided between the user terminal 2 and the provider terminal 3 and between the provider terminal 3 and the authentication terminal 4, and sends main authentication information to the authentication terminal 4 via the provider terminal 3. Communication means 5, 28, 34, 44 for transmission are provided. The authentication system 1 further includes main authentication units 171, 172, 181, 182, 184, and 190 that are provided in the authentication terminal 4 and determine whether or not the provider terminal 3 can be used based on the main authentication information. The key information determination unit determines whether or not the provider terminal 3 can be used instead of the main authentication unit when the main authentication information cannot be transmitted to the authentication terminal by the communication unit. The distribution means distributes key information indicating a specific provider terminal 3 that cannot transmit main authentication information to the authentication terminal 4 to one or a plurality of user terminals 2 associated with the specific provider terminal 3.

(Authentication terminal authentication process)
FIG. 15 illustrates a data flow between the terminals 2, 3, and 4 and a processing procedure. The authentication system 1 executes main authentication 111 and sub-authentication 112 in order to determine whether or not the provider terminal 3 can be used by the user terminal 2. In the illustrated example, the main authentication 111 is used as a main authentication method. The sub-authentication 112 is used as an auxiliary authentication method when the main authentication 111 cannot be used due to a communication failure.

  In the main authentication 111, a request is transmitted from the user terminal 2. The request for main authentication is relayed by the provider terminal 3 and received by the authentication terminal 4. The authentication terminal 4 executes main authentication processing and transmits the result to the provider terminal 3. The provider terminal 3 determines whether or not to provide the charging service to the user terminal 2 based on the result of the main authentication, and returns it to the user terminal 2. As a result, the authentication system 1 determines whether or not the provider terminal 3 can be used by the user terminal 2 based on the result of the main authentication.

  The sub-authentication 112 includes a preparation procedure 113 and an authentication procedure 114. The preparation procedure 113 is executed prior to the authentication procedure 114. The preparation procedure 113 further includes a steady procedure 113a and an unsteady procedure 113b.

  In the regular procedure 113a, the use possibility of the provider terminal 3 by the user terminal 2 is evaluated based on the position information of the user terminal 2 and the position information of the provider terminal 3, and the use is highly likely to be used. The subscriber terminal 2 and the provider terminal 3 are associated with each other. In the regular procedure 113a, the location information of the user terminal 2 is transmitted from the user terminal 2 to the authentication terminal 4. The authentication terminal 4 transmits key information indicating the available provider terminal 3 to the user terminal 2.

  In the emergency procedure 113b, the evaluation and the association are executed in response to some event. In the unsteady procedure 113b, the location information of the user terminal 2 is transmitted from the user terminal 2 to the authentication terminal 4. Furthermore, the authentication terminal 4 detects an event that is a trigger for executing the association. In the illustrated example, the occurrence of a communication failure is detected. Here, the event that triggers the association is an event in which the specific user terminal 2 or the specific provider terminal 3 can be determined. After the association, the authentication terminal 4 transmits key information indicating the provider terminal 3 that can be used without main authentication to the user terminal 2.

  In the authentication procedure 114, the user terminal 2 first requests main authentication. The provider terminal 3 requests sub-authentication from the user terminal 2 when the main authentication cannot be completed due to a communication failure. The user terminal 2 transmits key information that is sub-authentication information to the provider terminal 3. The provider terminal 3 executes a sub-authentication process based on the key information. The provider terminal 3 determines whether or not to provide the charging service to the user terminal 2 based on the result of the sub-authentication, and returns it to the user terminal 2. As a result, when the main authentication cannot be used, the authentication system 1 determines whether or not the provider terminal 3 can be used by the user terminal 2 based on the result of the sub-authentication.

(Other embodiments)
The preferred embodiments of the invention have been described above, but the invention is not limited to the above-described embodiments, and various modifications can be made. The structure of the said embodiment is an illustration to the last, Comprising: The technical scope of invention is not limited to the range of these description. The invention is not limited to the combinations shown in the embodiments, and can be implemented independently. Some technical scope of the invention is indicated by the description of the scope of claims, and further includes all modifications within the meaning and scope equivalent to the description of the scope of claims.

  For example, the means and functions provided by the control device can be provided by software only, hardware only, or a combination thereof. For example, the control device may be configured by an analog circuit.

  In the above embodiment, only when the main authentication cannot be used, whether or not the provider terminal 3 can be used by the user terminal 2 is determined based on the result of the simple authentication that is the sub-authentication. Instead of this, whether or not the provider terminal 3 can be used by the user terminal 2 may be determined using only simple authentication using key information. In this case, it is desirable that the authentication terminal 4 authenticates the user terminal 2 in the process of distributing the key information from the authentication terminal 4 to the user terminal 2. By adopting authentication with high security in the distribution stage of key information, unauthorized use can be suppressed even in simple authentication using key information. In this case, data communication between the provider terminal 3 and the authentication terminal 4 is not necessary. As a result, communication load can be reduced, and further, the communication function between the provider terminal 3 and the authentication terminal 4 can be deleted.

  In the above embodiment, the sub-authentication is not executed when the main authentication is available. Alternatively, when the main authentication is available, the sub authentication may be used together. In this case, when the user terminal 2 uses the provider terminal 3, the key information is always transmitted from the user terminal 2 to the provider terminal 3.

  In the above embodiment, the key information in the sub-authentication is transmitted from the user terminal 2 to the provider terminal 3 by data communication. Instead, the key information may be manually input to the provider terminal 3. In this case, when the user terminal 2 is requested for key information from the provider terminal 3, the user terminal 2 displays the key information on the display device and requests manual input from the user. The provider terminal 3 is provided with a manual input device for manually inputting key information. The provider terminal 3 acquires the key information from the user terminal 2 via the user's manual input.

1 authentication system,
2 user terminal (electric vehicle), 21 control unit, 22 position information providing unit,
22a position detection unit, 22b navigation function unit, 22c operation history storage unit,
23 rechargeable power supply, 24 battery status acquisition unit, 25 external application unit,
26 main authentication information storage unit, 27 key storage unit, 28 communication unit,
3 provider terminal (charging station), 31 control unit, 32 identification information storage unit,
33 charging device, 34 communication unit,
4 authentication terminal (server), 41 control unit, 42 recognition information management database,
43 provider information management database, 44 communication section,
5 Data communication system, 6 Power connection.

Claims (8)

In the authentication processing method for determining whether or not the provider terminal (3) can be used by authenticating the user terminal (2) which is a mobile body,
A part from a provider information storage unit (43) that is provided in an authentication terminal (4) installed away from the provider terminal (3) and stores key information indicating the plurality of provider terminals (3). A distribution step (150, 160) for distributing and storing only the key information indicating the provider terminal to the key storage unit (27) of the user terminal (2);
An input step (174, 175, 183, 187) for inputting the key information stored in the key storage unit (27) from the user terminal (2) to the provider terminal (3);
Based on the key information input to the provider terminal, said at provider terminal (3), have a said provider terminal (3) Key information determination step of determining availability of (188, 189) ,
The distribution step evaluates the possibility of use of the provider terminal by the user terminal based on the positional information on the user terminal (2) and the positional information on the provider terminal (3). The user terminal (2) whose possibility of use exceeds a predetermined threshold and the provider terminal (3) are associated, and the key information indicating the associated provider terminal (3) is associated with the associated terminal Deliver to user terminal (2),
Furthermore, based on the main authentication information stored in the main authentication information storage unit (26) provided in the user terminal, the authentication terminal (4) determines whether or not the provider terminal (3) can be used. A main authentication process (171, 172, 181, 182, 184, 190),
The key information determination step determines whether or not the provider terminal (3) can be used instead of the main authentication step when the main authentication step cannot be completed . The distribution step includes the user terminal (2) and the provider terminal based on at least one of a current position, a future position, and a past position of the user terminal included in position information regarding the user terminal (2). The authentication processing method according to claim 1 , wherein (3) is associated. The delivery process claims, characterized in that delivering the key information indicating one or more of the provider terminal associated with a particular said user terminal (2), in particular of the user terminal (2) The authentication processing method according to claim 1 or 2 . The distribution step distributes the key information indicating the specific provider terminal (3) in which the main authentication step cannot be completed to one or a plurality of the user terminals associated with the specific provider terminal (3). The authentication processing method according to any one of claims 1 to 3, wherein: In the authentication processing device for determining whether or not the provider terminal (3) can be used by authenticating the user terminal (2) which is a mobile body,
A provider information storage unit (43) that is provided in an authentication terminal (4) installed apart from the provider terminal (3) and stores key information indicating the plurality of provider terminals (3);
A key storage unit (27) provided in the user terminal (2) for storing the key information;
Distribution means (150, 160) for distributing and storing only key information indicating a part of the provider terminals from the provider information storage unit to the key storage unit;
Input means (174, 175, 183, 187) for inputting the key information stored in the key storage unit (27) from the user terminal (2) to the provider terminal (3);
Based on the key information input to the provider terminal, said at provider terminal (3), have a key information determining means for determining availability of the provider terminal (3) (188, 189) ,
The distribution means evaluates the possibility of use of the provider terminal by the user terminal based on the position information regarding the user terminal (2) and the position information regarding the provider terminal (3). The user terminal (2) whose possibility of use exceeds a predetermined threshold and the provider terminal (3) are associated, and the key information indicating the associated provider terminal (3) is associated with the associated terminal Deliver to user terminal (2),
Furthermore, a main authentication information storage unit (26) that is provided in the user terminal and stores main authentication information;
It is provided between the user terminal (2) and the provider terminal (3) and between the provider terminal (3) and the authentication terminal (4), and the main authentication information is sent to the provider terminal. Communication means (5, 28, 34, 44) for transmitting to the authentication terminal via
Main authentication means (171, 172, 181, 182, 182, 184, 190) provided in the authentication terminal (4) and determining whether or not the provider terminal (3) can be used based on the main authentication information. ,
The key information determination means determines whether or not the provider terminal (3) can be used instead of the main authentication means when the communication means cannot transmit the main authentication information to the authentication terminal. Authentication processing device to do. The distribution means includes the user terminal (2) and the provider terminal based on at least one of a current position, a future position, and a past position of the user terminal included in the position information regarding the user terminal (2). 6. The authentication processing device according to claim 5 , wherein the authentication processing device is associated with (3). Said delivering device claims, characterized in that delivering the key information indicating one or more of the provider terminal associated with a particular said user terminal (2), in particular of the user terminal (2) The authentication processing device according to claim 5 or claim 6 . The distribution means uses the key information indicating the specific provider terminal (3) that cannot transmit the main authentication information to the authentication terminal as one or a plurality of the usages associated with the specific provider terminal (3). The authentication processing device according to claim 5 , wherein the authentication processing device is distributed to a user terminal.

Images