JP6235406B2 - Authentication method, authentication device and authentication program - Google Patents

Description

  The present invention relates to an authentication method, an authentication device, and an authentication program for authenticating an application when an external device is controlled by the application.

  As an authentication technique for delegating execution authority to an application used when a user uses an external device, a standardized OAuth (non-patent document) is widely used. In OAuth, authority is delegated by issuing an access token to the application by user operation. An expiration date is set for the access token.

OAuth2.0 IETF RFC6749

  The validity period of the access token varies depending on the application. For example, the expiration date of an access token for Internet banking is a sufficient time. In addition, the expiration date of the access token for the purpose of controlling the air conditioner may be 12 hours or more, for example.

  When the access token expires, the end user needs to perform a process of reissuing the access token. The process of reissuing the access token when the access token expires will be briefly described.

  When a user accesses an application using an already expired access token that has already been acquired, the expiration date has expired, so the application notifies the callback of the URL of the authentication device that issues the access token. The user obtains a new access token by accessing the URL.

  As described above, when the access token expires, the history so far is reset. For example, when the user operates the application when the expiration date of the access token is exceeded, the access token must be reissued, and the reissue operation may be troublesome for the user.

  The present invention has been made in view of such a problem, and an object thereof is to provide an authentication method, an authentication apparatus, and an authentication program that allow an application to be used safely without burdening the user.

Authentication method of the present invention, an application for controlling an external device, a authentication method authenticating unit executes the authentication, performs a token issuing step, and token authentication step, the token updating step, the token transmitting step . In the token issuing step, an access token of an application that controls an external device is issued. In the token authentication step, an operation signal for operating the device, to which an access token input from an application is attached, is authenticated with the access token. In the token update step, when the access token is authenticated, a new access token in which the access token is updated is generated. In the token transmission step, an access token and a new access token are transmitted to the application.

  The authentication device of the present invention is an authentication device for authenticating an application that controls an external device, and includes a token issuing unit, a token authentication unit, a control target response evaluation unit, a token update unit, and a token transmission. A portion. The token issuing unit issues an access token for an application that controls an external device. The token authenticating unit authenticates an operation signal for operating the apparatus, to which the access token input from the application is attached, with the access token. When the access token is authenticated, the token update unit generates a new access token in which the access token is updated. The token transmission unit transmits the access token and the new access token to the application.

  The authentication program according to the present invention causes a computer to function as the authentication device described above.

  According to the present invention, an operation signal to which an access token input from an application that controls an external device is attached is authenticated with the access token. When the operation signal is authenticated, a new access token updated with the access token is obtained. Generated. Since the expiration date of the new access token is automatically updated in conjunction with the operation signal within the expiration date of the access token, there is no need to reissue the access token, reducing the user's operational burden. . The new access token allows you to use the application safely.

The figure which shows the function structural example of the authentication apparatus 100 of the 1st Embodiment of this invention. The figure which shows the system configuration | structure of the authentication system 500 in which the authentication apparatus 100 is used. The figure which shows the operation | movement flow of the authentication apparatus 100 with the operation | movement sequence of an authentication system. The figure which shows the example of the access token in OAuth. The figure which shows a mode that an access token is updated. The figure which shows the function structural example of the authentication apparatus 200 of the 2nd Embodiment of this invention. The figure which shows the operation | movement flow of the authentication apparatus 200 with the operation | movement sequence of an authentication system. The figure which shows the function structural example of the authentication apparatus 300 of the 3rd Embodiment of this invention. The figure which shows the operation | movement flow of the authentication apparatus 300 with the operation | movement sequence of an authentication system.

Embodiments of the present invention will be described below with reference to the drawings. The same reference numerals are given to the same components in a plurality of drawings, and the description will not be repeated.

[First Embodiment]
FIG. 1 illustrates a functional configuration example of the authentication device 100 according to the first embodiment. The authentication apparatus 100 includes an application authentication unit 10, a token issuing unit 20, a token recording unit 30, a token transmission unit 40, a token authentication unit 50, a token update unit 60, and a target control unit 70. The application authentication unit 10 authenticates access from an application. The token issuing unit 20 issues an access token for the authenticated application. The token authenticating unit 50 authenticates an operation signal for operating an external device to which an access token input from an application is attached with the access token. When the access token is authenticated, the token update unit 60 generates a new access token in which the access token is updated. The token recording unit 30 records the access token issued by the token issuing unit 20 and the new access token generated by the token update unit 60. The token transmission unit 40 transmits the access token and the new access token to the application. The target control unit 70 outputs a target control signal for controlling the operation of the external device based on the operation signal attached to the authenticated access token.

  The authentication device 100 is realized by a predetermined program being read into a computer constituted by, for example, a ROM, a RAM, a CPU, and the like, and the CPU executing the program. The same applies to other devices described below.

  Before describing the operation of the authentication device 100 of the present embodiment, an authentication system 500 in which the authentication device 100 is used will be described. FIG. 2 shows a system configuration example of the authentication system 500. The authentication system 500 includes an application 800, an authentication device 100, and a device 700.

  The application 800 is software installed on a PC operated by a user, for example. The application 800 is software installed on a user's PC, for example, for Internet banking or for controlling an air conditioner or lighting via an IP network. Note that the application 800 may be a server that exists on the network.

  The authentication device 100 functions as an intermediate server arranged between the application 800 and the external device 700. The authentication device 100 authenticates the application 800 and controls the device 700 with an operation signal from the authenticated application 800.

  The device 700 is a device (device) having a specific function such as an air conditioner. Alternatively, it is a server that provides Internet banking.

  Hereinafter, the present embodiment will be described assuming that the application 800 is software for operating a home air conditioner installed in a user's PC, for example, and the apparatus 700 is an air conditioner, for example.

  FIG. 3 shows an operation sequence of the authentication system including the authentication device 100. With reference to FIG. 1 and FIG. 3, the operation of the authentication apparatus 100 of the present embodiment will be described.

  For example, the user requests the application 800 to issue an access token for the purpose of turning on the power of the device 700 (air conditioner) (step S800). The application 800 here is, for example, air conditioner control software downloaded from a website of an air conditioner manufacturer to a user's PC.

  The application authentication unit 10 of the authentication device 100 authenticates the token issue request from the application 800 (step S10). In the authentication, an application that can be handled by the authentication apparatus 100 is authenticated by its ID (Identification). The ID is a character string corresponding to the application on a one-to-one basis, and may be, for example, one character A, B, C,.

  The token issuing unit 20 issues an access token that gives access authority to the application 800 authenticated by the application authentication unit 10 (step S20). The access token issued by the token issuing unit 20 is recorded in the token recording unit 30 (step S30).

  The token transmission unit 40 transmits the access token issued by the token issuing unit 20 to the application 800 (step S40).

  FIG. 4 shows a specific example of components of an access token in OAuth. The first column in FIG. 4 represents the element names of the constituent elements, and the second column represents a specific example. The first line is an identifier of the access token, the second line is an arbitrary character string that can be attached to the access token, and the third line is an expiration date of the access token. FIG. 4 shows that the identifier of the access token is “2YotnFZFEjr1zCsicMWpAA” and its expiration date is 3600 seconds.

  The access token transmitted by the token transmission unit 40 is acquired by a token acquisition unit (not shown) of the application 800 (step S801). The acquired access token is registered by being stored in a storage unit such as a RAM of the user's PC in which the application 800 is installed (step S802).

  In this example, after the access token is registered, it is assumed that the user performs an operation of turning on the power of the device 700 (air conditioner). The application 800 attaches an access token to the operation signal for turning on the power and transmits it to the authentication device 100 (step S803).

  The token authenticating unit 50 of the authentication device 100 authenticates the operation signal for operating the device 700 attached with the access token input from the application 800 with the access token (step S50). Authentication is performed using the identifier of the access token and the expiration date.

  Assuming that the identifier recorded by the authentication apparatus 100 in step 30 is, for example, “11111”, whether or not the identifier of the access token input from the application 800 matches “11111” recorded in step S30, and the user of step 803 Authentication is performed at two points: whether the operation is within the validity period of the access token.

  When the access token is authenticated by the token authenticating unit 50 (Yes in step S50), the token updating unit 60 generates a new access token in which the access token is updated (step S60). At this time, for example, the access token (identifier: 11111) is updated to generate a new access token (identifier: 11112). The expiration date of the new access token is 3600 seconds, for example, from the time of step S803.

  When the access token is not authenticated (No in step S50), the token authentication unit 50 notifies the application 800 of an error. As a reason for not being authenticated, it is conceivable that the expiration date at which the access in step S803 is performed when the expiration date of the access token with the identifier “11111” is exceeded. At this time, a new access token is not generated.

  The target control unit 70 outputs a target control signal for controlling the operation of the apparatus 700 based on the operation signal attached to the authenticated access token (step S70). In this example, a target control signal for turning on the power of the air conditioner is output. The target control signal is a signal obtained by encoding a user operation signal into a format that the apparatus 700 can recognize.

  The device 700 that has received the target control signal transmits a control target response signal to the authentication device 100 as a response to the target control signal. The control target response signal is, for example, a signal indicating whether or not the control by the target control signal is successful.

  The token transmission unit 40 transmits the new access token generated in step S60 and the control target response signal to the application 800 (step S80). The application 800 that has received the new access token and the control target response signal attaches the new access token (identifier: 11112) to an operation signal such as temperature setting, which is an operation for the next device 700, to the authentication device 100. to access.

  FIG. 5 schematically shows how the access token is updated. If the user performs a user operation on the application 800 within the validity period of the first access token (identifier: 11111), the access token is updated at that time, and a new access token (identifier 11112) is generated. Therefore, the validity period of the access token is extended sequentially.

  In the prior art, even if the user performs a re-operation within the validity period of the access token (identifier: 11111), the access token is not updated. Therefore, an operation for re-issuing the access token after the validity period is necessary. The reissuing operation is troublesome for the user.

  Also in this embodiment, if there is no user operation within the validity period of the access token (identifier: 11111), the access token must be reissued. However, the user can re-operate within the validity period of the access token (identifier: 11111). If there is, a new access token (identifier: 11112) is generated at that time. Therefore, even if the user re-operates after the expiration date of the access token (identifier: 11111), the procedure for reissuing the access token is not necessary.

  As described above, according to the present embodiment, it is possible to reduce the operation burden on the user. In addition, since the identifier of the access token update is also changed, the application 800 and the device 700 can be linked safely.

  Although the example in which the identifier of the access token is updated with a serial number has been described, it may be a random value identifier generated each time the identifier is updated using a uniform random number function, for example. By using a random number as the identifier of the access token, the degree of security can be further improved.

[Second Embodiment]
FIG. 6 illustrates a functional configuration example of the authentication apparatus 200 according to the second embodiment. The authentication device 200 generates a new access token only when the target control signal to be transmitted to the device 700 is correctly received by the device 700.

  The authentication apparatus 200 includes an application authentication unit 10, a token issuing unit 20, a token recording unit 30, a token authentication unit 50, a target control unit 70, a control target response evaluation unit 210, a response result transmission unit 220, a token transmission unit 240, and a token update. Part 260.

  The application authentication unit 10, the token issuing unit 20, the token recording unit 30, the token authentication unit 50, and the target control unit 70 are the same as the authentication device 100 of the first embodiment, as is clear from the reference numerals.

  FIG. 7 shows an operation sequence of the authentication system including the authentication device 200. With reference to FIG. 6 and FIG. 7, the operation of a functional component different from the authentication device 100 (FIG. 1) will be described.

  The operation until the target control unit 70 of the authentication device 200 outputs a target control signal for controlling the operation of the device 700 based on the operation signal attached to the authenticated access token (step S70) is the first implementation. This is the same as the authentication device 100 of the embodiment. The operation after the control target response evaluation unit 210 receives the control target response signal from the device 700 is different from that of the authentication device 100.

  The control target response evaluation unit 210 receives the control target response signal, which is a response from the device 700 to the user's operation signal, and evaluates whether the control target response signal is correct (step S90). If the control target response signal is a correct response, the control target response evaluation unit 210 outputs, for example, “1” as a response result. If the control target response signal is invalid, for example, “0” is output. The correct response is, for example, a response signal when the set temperature information is correctly set for the air conditioner when the temperature setting of the air conditioner is set to “25 ° C.”. For example, when the set temperature is already set to “25 ° C.” and the set temperature information “25 ° C.” is received again, the air conditioner responds with an unauthorized control target response signal. For example, a case where the power supply of the air conditioner is turned off is considered as a fraudulent control target response signal. As described above, the fraud of the control target response signal is a response when the target control signal is not correctly received by the apparatus 700, and there may be a plurality of cases.

  When the control target response signal is positive, the token update unit 260 generates a new access token in which the access token received from the application 800 by the token authentication unit 50 is updated (step S100). When the control target response signal is invalid, the access token is not updated. The new access token may be generated without relying on the access token received from the application 800. That is, a completely new access token may be generated.

  The token transmission unit 240 transmits the new access token generated by the token update unit 260 to the application 800 (step S110). The new access token is recorded in the token recording unit 30 (step S120). If the control target response signal is invalid, a new access token is not generated, and therefore no new access token is transmitted. The response result transmission unit 220 transmits the response result output from the control target response evaluation unit 210 to the application 800 (step S130).

  According to the authentication apparatus 200 of the present embodiment, when the control target response signal is positive, a new access token is generated. Therefore, while the correct response is obtained from the apparatus 700, the authentication apparatus 200 of the first embodiment is used. Similar to the authentication device 100, the operation burden on the user can be reduced. Conversely, when the control target response signal is invalid, a new access token is not generated. Therefore, the authentication device 200 can generate a new access token more securely.

[Third Embodiment]
FIG. 8 illustrates a functional configuration example of the authentication apparatus 300 according to the third embodiment. The authentication device 300 logs the progress of the control target response signal input from the device 700.

  The authentication apparatus 300 includes an application authentication unit 10, a token issuing unit 20, a token recording unit 30, a token authentication unit 50, a target control unit 70, a control target response evaluation unit 310, a response result transmission unit 220, a token transmission unit 240, and a token update. Unit 260 and log recording unit 310.

  The authentication device 300 is different from the authentication device 200 (FIG. 6) in that it includes a log recording unit 310 and a control target response evaluation unit 390. The log recording unit 310 records the control target response signal. The control target response evaluation unit 390 receives a control target response signal that is a response from the device 700 to an operation signal for operating the device 700 by the application 800, and evaluates whether the control target response signal is correct or incorrect. The result and the control target response signal are recorded in the log recording unit 310.

  FIG. 9 shows an operation sequence of the authentication system including the authentication device 300. With reference to FIG. 8 and FIG. 9, the operation of the control target response evaluation unit 390 different from the authentication device 200 (FIG. 6) will be described.

  For example, the number of successes when the evaluation result is positive and the number of failures when it is incorrect may be added to the evaluation result output by the control target response evaluation unit 390. The control target response evaluation unit 390 evaluates a control target response signal that is a response from the device 700 to the operation signal for the application 800 to operate the device 700 (step S90). At this time, if the evaluation result is positive, the number of success is incremented (increment) (step S91), and if not, the numerical value obtained by incrementing the number of failure (step S92) is recorded in the log recording unit 310.

  The control target response evaluation unit 390 reflects the numerical values of the number of successes and the number of failures in the evaluation result. For example, a new access token is generated based on whether or not the number of successful evaluation results for the last 10 control target response signals is greater than or equal to a predetermined value (step S93 and above).

  By counting the number of successes and the number of failures in this way, a new access token can be generated based on numerical information obtained by statistically processing the status of the latest device 700. The numerical information is not limited to the number of times.

  For example, the most recent success rate is obtained from the number of successes and the number of failures, and control such as generating a new access token is possible if the success rate is a predetermined value or more. If the success rate is less than or equal to a predetermined value (below step S93), a new access token is not generated and only the control target response result is transmitted to the application 800 (step S130).

  According to the authentication apparatus 300 of the present embodiment, by using the control target response signal and the evaluation result recorded in the log recording unit 310, the authentication apparatus 300 can perform control according to the status of the apparatus 700. To do. For example, if the power supply of the air conditioner (device 700) has been turned off from the beginning, the evaluation result output by the control target response evaluation unit 390 becomes invalid, but if the power supply of the air conditioner is turned on after that, the access token It is possible to perform an operation intended by the user without reissuing.

  As described above, according to the authentication device 100 of the first embodiment, the expiration date of the new access token is automatically updated in conjunction with the operation signal within the expiration date of the access token. It is not necessary to reissue the access token. As a result, the operation burden on the user can be reduced.

  Further, according to the authentication apparatus 200 of the second embodiment, when the control target response signal is positive, the new access token is updated, so that the first response is obtained while the correct response is obtained from the apparatus 700. Similar to the authentication device 100 of the embodiment, the operation burden on the user can be reduced. On the other hand, when the control target response signal is illegal, a new access token is not generated, so that a new access token can be generated more safely.

  Further, according to the authentication device 300 of the third embodiment, it is possible to perform control according to the status of the device 700 by using the evaluation result and the control target response signal recorded in the log recording unit 310. To do.

  As described above, according to the authentication devices 100, 200, and 300, it is possible to smoothly continue using the device 700 by automatically extending the validity period of the access token. As described above, the identifier of the access token may be a random value identifier. Further, the function of the target control unit 70 may be provided inside, for example, a device management gateway that controls the device 700 in the vicinity of the device 700.

  Note that, as a specific example of the application 800, description has been made by showing the use of Internet banking and the use of controlling an air conditioner, lighting, etc., but the application 800 is not limited to these examples. The authentication method of the present invention can be applied to other uses such as applications such as SNS (Social Networking Service) and EC (Electronic Commerce).

  When the processing unit in the above apparatus is realized by a computer, the processing contents of the functions that each apparatus should have are described by a program. Then, by executing this program on the computer, the processing unit in each device is realized on the computer.

  The program is distributed by selling, transferring, or lending a portable recording medium such as a DVD or CD-ROM in which the program is recorded. Further, the program may be distributed by storing the program in a recording device of the server computer and transferring the program from the server computer to another computer via a network.

  Each means may be configured by executing a predetermined program on a computer, or at least a part of these processing contents may be realized by hardware.

  As described above, the present invention is not limited to the above-described embodiment, and various modifications can be made within the scope of the gist thereof.

10: Application authenticating unit 20: Token issuing unit 30: Token recording unit 40: Token transmitting unit 50: Token authenticating unit 60: Token updating unit 70: Target control unit 100, 200, 300: Authentication device 700: Device 800: Application

Claims (7)

An authentication method executed by an authentication device that authenticates an application that controls an external device,
A token issuing step for issuing an access token for the application;
A token authentication step for authenticating an operation signal for operating the device, to which the access token input from the application is attached, with the access token;
A token update step for generating a new access token in which the access token is updated when the access token is authenticated;
A token transmission step of transmitting the access token and the new access token to the application;
An authentication method characterized by performing . The authentication method according to claim 1,
Furthermore,
The control target response signal which is a response from the device to the operation signal is input, and a control target response evaluation step for evaluating the correctness of the control target response signal is performed .
The token update step is a token update step of generating a new access token in which the access token is updated when the control target response signal is positive.
An authentication method characterized by that. In the authentication method according to claim 2,
The control target response evaluation step receives a control target response signal, which is a response from the device to the operation signal, as an input, evaluates whether the control target response signal is correct, and evaluates the evaluation result and the control target response signal. Is a control target response evaluation step for recording
An authentication method characterized by that. An authentication device for authenticating an application that controls an external device,
A token issuing unit that issues an access token for the application;
A token authenticating unit for authenticating an operation signal for operating the device, to which the access token input from the application is attached, with the access token;
When the access token is authenticated, a token update unit that generates a new access token updated with the access token,
A token transmission unit that transmits the access token and the new access token to the application;
An authentication device comprising: The authentication device according to claim 4,
Furthermore,
A control target response evaluation unit that evaluates the correctness / incorrectness of the control target response signal with a control target response signal that is a response from the device to the operation signal as an input,
The token update unit generates a new access token in which the access token is updated when the control target response signal is positive.
An authentication apparatus characterized by that. The authentication device according to claim 5,
Furthermore,
A log recording unit for recording the control target response signal;
The control target response evaluation unit receives a control target response signal, which is a response from the device to the operation signal, and evaluates the correctness / incorrectness of the control target response signal, and the evaluation result and the control target response signal Is a control target response evaluation unit that records
An authentication apparatus characterized by that.   An authentication program for causing a computer to function as the authentication device according to claim 4.

Images