JP6824512B2 - Authentication system and authentication method - Google Patents

Description

The present invention relates to an authentication system using an electronic terminal.

When opening a new account at a financial institution, it is generally necessary to present an identification card such as a driver's license at the counter to verify the identity. In recent years, with the development of computers and communication network technologies, it has become possible to open an account using a portable terminal (see, for example, Patent Document 1).

Japanese Unexamined Patent Publication No. 2014-21765

However, the current situation is that fraudulent accounts have been opened by forging identification cards such as driver's licenses. Since these fraudulent accounts may be used for crimes such as transfer fraud, it is desired to confirm the identity at the time of opening the account and prevent the opening of fraudulent accounts.

Therefore, in view of such a problem, it is an object of the present invention to provide an authentication system and an authentication method that can surely confirm the identity at the time of opening an account and effectively prevent so-called spoofing in user authentication.

In order to achieve the above object, in the authentication system of the present invention, a digital power meter and a unique location by a predetermined function formula based on the unique power meter identification information assigned to the power meter. From a location code generator having a location code generator that generates a code, a communication processing unit that transmits the location code by a predetermined communication method, and an electronic terminal that has received the location code transmitted by the communication processing unit. The first authentication server that receives the location code and authenticates the electronic terminal based on the location code is integrated with or separate from the first authentication server, and has user information associated with the location code. However, it is characterized by including a second authentication server that determines whether or not the user information matches the user information received from the bank counter or an external server.

In the present invention, the location code generation unit is supplied from the unique location code generator identification information assigned to the location code generation unit and the first authentication server in addition to the power meter identification information. The location code is generated by the function formula based on the salt information.

In the present invention, the communication processing unit is characterized in that the location code is transmitted to the electronic terminal by ultrasonic communication.

In the present invention, in a state where the watt-hour meter, the location code generator, and the electronic terminal are activated, the alive signal generated by the location code generator is the watt-hour meter, the location. When the code generator and the electronic terminal are transmitted and received, and the first authentication server can confirm the existence of the alive signal, the salt information is transmitted to the location code generator. It is characterized by.

In the present invention, the first authentication server authenticates the electronic terminal based on the alive signal, the user ID and password, the location code, and the unique device identification information of the electronic terminal.

In the present invention, the second authentication server sends a numbered PIN code to a user, and determines whether or not the PIN code returned from the user matches the numbered PIN code. To do.

In the authentication method of the present invention, the location code generation step of generating a unique location code by the location code generator by a predetermined function formula based on the unique power meter identification information assigned to the digital power meter. , The transmission step of transmitting the location code by the communication processing unit by a predetermined communication method, and receiving the location code from the electronic terminal receiving the location code transmitted by the communication processing unit, and based on the location code. Whether or not the authentication step of authenticating the electronic terminal by the first authentication server, the user information associated with the location code, and the user information received from the bank counter or the external server match or not is determined by the first item. It is characterized by having a step of determining by a second authentication server integrated with or separate from the authentication server.

In the authentication method of the present invention, a PIN code issued by the second authentication server is sent to the user, and it is determined whether or not the PIN code returned from the user matches the issued PIN code. It is characterized by having.

According to the present invention, identity verification can be reliably performed when an account is opened, and so-called spoofing can be effectively prevented in user authentication.

It is a block diagram which shows the whole structure of the authentication system which concerns on embodiment of this invention (the first aspect). It is a block diagram which shows the other example (1) with respect to the whole structure of the authentication system which concerns on embodiment of this invention. It is a block diagram which shows the other example (2) with respect to the whole structure of the authentication system which concerns on embodiment of this invention. It is a block diagram which shows the structure of the smart meter which concerns on embodiment of this invention. It is a schematic diagram which shows the unique information which each of the smart meter and the location code generator which concerns on embodiment of this invention has. It is a block diagram which shows the structure of the location code generation apparatus which concerns on embodiment of this invention. It is a schematic diagram provided for the explanation of the salt answer information generated by the location code generation apparatus which concerns on embodiment of this invention. FIG. 5 is a schematic diagram provided for explaining an alive signal transmitted / received between a smart meter, a location code generator, and an electronic terminal according to an embodiment of the present invention. It is a block diagram which shows the structure of the location code authentication and ID password authentication server which concerns on embodiment of this invention. The present invention provides an explanation of the relationship between the location code generated by the location code generator according to the embodiment of the present invention and the location code that the location code authentication and ID password authentication server is expected to be generated by the location code generator. It is a schematic diagram. It is a schematic diagram which shows the network topology constructed between the smart meter management server, the smart meter, the location code generator, the electronic terminal, the location code authentication and the ID password authentication server according to the embodiment of the present invention. In the embodiment of the present invention, it is a schematic diagram provided for explaining the correspondence between the smart meter associated with the user ID and password and the location code generator, which is recognized by the location code authentication and ID password authentication server. .. In the embodiment of the present invention, it is a schematic diagram provided for the description of the activation process of the location code generator and the electronic terminal. FIG. 5 is a schematic diagram provided for explaining the activation process of the location code generator and the smart meter in the embodiment of the present invention. In the embodiment of the present invention, it is a schematic diagram provided for the description of the activation process of the location code generator and the second electronic terminal. In the embodiment of the present invention, it is a flowchart which shows the procedure of the activation process of the location code generator and the 1st and 2nd electronic terminals. In the embodiment of the present invention, it is a flowchart which shows the procedure of the activation process of a location code generator and a smart meter. It is a sequence chart which shows the authentication process and the identity verification sequence in the authentication system which concerns on embodiment of this invention (the first aspect). FIG. 5 is a schematic diagram provided for explaining a series of flows from the generation of an alive signal to the generation of salt answer information in the embodiment of the present invention. FIG. 5 is a schematic diagram provided for explaining the four elements of the authentication process in the embodiment of the present invention. In the embodiment of the present invention, it is a flowchart which shows the authentication processing procedure by a location code authentication and an ID password authentication server. FIG. 5 is a schematic diagram provided for explaining an example in which login authentication is not permitted when the latest alive signal cannot be obtained in the embodiment of the present invention. FIG. 5 is a schematic diagram provided for explaining an example in which login authentication is not permitted when the latest alive signal cannot be obtained and the salt answer information does not match in the embodiment of the present invention. Schematic diagram provided for explaining an example in which login authentication is not permitted when the latest alive signal cannot be obtained, the salt answer information does not match, and the device identification information of the electronic terminal does not match in the embodiment of the present invention. Is. In the embodiment of the present invention, when the latest alive signal cannot be obtained, the salt answer information does not match, the device identification information of the electronic terminal does not match, the user ID and password do not match, and the smart meter It is a schematic diagram provided to explain an example in which login authentication is not permitted in the case of theft. It is a block diagram which shows the whole structure of the authentication system which concerns on embodiment of this invention (the second aspect). It is a sequence chart which shows the authentication process and the identity verification sequence in the authentication system which concerns on embodiment of this invention (the second aspect). It is a block diagram which shows the whole structure of the authentication system which concerns on embodiment of this invention (third aspect). It is a sequence chart which shows the authentication process and the identity verification sequence in the authentication system which concerns on embodiment of this invention (the third aspect). FIG. 5 is a configuration diagram showing an overall configuration (1) of an authentication system using both the A route and the B route in the embodiment of the present invention. FIG. 5 is a configuration diagram showing an overall configuration (2) of an authentication system using both the A route and the B route in the embodiment of the present invention. FIG. 5 is a configuration diagram showing an overall configuration (3) of an authentication system using both the A route and the B route in the embodiment of the present invention. FIG. 5 is a schematic diagram provided for explaining an authentication process by an authentication system using both the A route and the B route in the embodiment of the present invention.

<Embodiment of the present invention>
Hereinafter, embodiments of the present invention will be described with reference to the drawings.

<Overall configuration of authentication system>
As shown by a broken line in FIG. 1, the authentication system 1 according to the embodiment of the present invention includes a smart meter 20, a smart meter management server 30, a location code generator 40, an electronic terminal 60, and location code authentication and ID password authentication. The server 80s (the first authentication server and the second authentication server are integrated) is provided. When the user U opens an account at the bank counter 110, the identity of the user U is confirmed by using the authentication system 1 in addition to presenting the identification card.
First, the authentication system 1 shown in the broken line will be described, and then the method of identity verification will be described.

The smart meter 20 is wirelessly connected to the smart meter management server 30 via a communication route called the so-called A route, and is also wirelessly connected to the location code generator 40 via a communication route called the so-called B route.

Here, the A route is data corresponding to the power consumption measured by the smart meter 20 with respect to the smart meter management server 30 prepared by the electric power company (hereinafter, this is also referred to as "power usage data"). It is a communication path of the access system network that directly transmits.).

In the connection between the smart meter 20 and the smart meter management server 30 via the A route, a plurality of smart meters 20 transmit data by wireless multi-hop communication to a concentrator (aggregator) (not shown) while performing a so-called bucket relay. Then, the concentrator may be connected to the smart meter management server 30 via a WAN (Wide Area Network) line and a router.

In addition, the B route is a wireless system in which a HEMS (Home Energy Management System) terminal in a building and a smart meter 20 are connected as a physical layer using a 920 MHz band (Wi-SUN), and the power of the smart meter 20 is used. This is a communication path of a home communication network that transmits quantity data to the HEMS terminal. Therefore, the smart meter 20 can communicate with the location code generator 40 via the B route connected to the HEMS terminal in the building.

As shown in FIG. 2, the smart meters 20A and 20B may be connected to a distribution board 90 connected to home appliances such as an indoor air conditioner, and the smart meters 20B to the distribution board 90 may be connected to the smart meters 20B. The smart meter 20A may be connected in series. Further, the smart meters 20A and 20B do not necessarily have to be separate from the location code generation device 40, and may have an integrated configuration incorporating the location code generation device 40.

Further, as shown in FIG. 3, when the distance from the smart meter 20 to the location code generation device 40M (master unit) is long, the smart meter 20 has a first PLC (Power Line Communication) device D1 and a second It is possible to connect to the location code generation device 40M (master unit) via the PLC device D2.

In this case, the smart meter 20 is wirelessly connected to the location code generator 40S (slave unit), and the location code generator 40S (slave unit) is connected to the first PLC device D1. The location code generation device 40M (master unit) is connected to the second PLC device D2.

The first PLC device D1 and the second PLC device D2 are connected to a power line via outlets C1 and C2, and the first PLC device D1 and the second PLC device D2 are connected to a power line communication (for example,). Both are connected by G3-PLC). However, the present invention is not limited to this, and the first PLC device D1 and the second PLC device D2 may be connected to each other via the distribution board 90 (FIG. 2). The smart meter 20 may have an integral structure with the first PLC device D1, and the location code generation device 40 may have an integral structure with the second PLC device D2.

In this case, a power supply unit such as an outlet C1 is arranged near the installation location of the smart meter 20, and power is supplied from the outlet C1 to the smart meter 20.

<Smart meter>
The smart meter 20 is generally a digital watt-hour meter that is individually attached to each minimum unit of consumers who pay electricity charges for each household, each store, and the like. The smart meter 20 has an arithmetic processing function and a communication function for communicating with the outside. However, for example, when a smart meter 20 is provided for each floor and each store, such as a building, and the owner of the building is the minimum unit for paying electricity charges, the owner owns a plurality of smart meters 20. Sometimes.

However, as shown in FIG. 2, as in the smart meters 20A and 20B, although the smart meter 20A is owned by the consumer who pays the electricity charge, the smart meter 20B has nothing to do with the payment of the electricity charge. It is also possible to newly provide it personally in order to construct this authentication system 1. That is, the smart meter 20 can be purchased and installed as a private property separately from the electric power company in order to construct the authentication system 1 regardless of the payment of the electricity charge.

The smart meter 20 is a unique watt-hour meter that is different from each other. Therefore, each of the plurality of smart meters 20 has different unique smart meter identification information (hereinafter, this is also referred to as "SM identification information"). The SM identification information assigned to the smart meter 20 is unique information that cannot be rewritten.

As shown in FIG. 4, the smart meter 20 includes a power consumption measuring unit 21, a smart meter storage unit 22, and a communication processing unit 25. The power consumption measuring unit 21 is a functional unit that measures and holds the power consumption when power is used, and is based on the measured values measured by a current sensor that measures current, a voltage sensor that measures voltage, and the like. Performs arithmetic processing to calculate power usage data.

The power consumption measuring unit 21 is composed of, for example, a CPU (Central Processing Unit), a memory, an MCU (Micro Control Unit) including an interface, and the like. The power consumption measuring unit 21 stores the activate ID and the initial password for the location code generation device 40 and the smart meter 20 to activate in the smart meter storage unit 22. Here, activate means to enable devices connected to each other.

The smart meter storage unit 22 is a functional unit that stores the unique SM identification information assigned to the smart meter 20 in a non-rewritable state. The smart meter storage unit 22 includes, for example, a ROM (Read Only Memory) or the like. That is, as shown in FIG. 5A, the smart meter 20 has unique SM identification information that is unique and non-rewritable.

The communication processing unit 25 is a functional unit that transmits power usage data supplied from the power usage measuring unit 21 to the outside, and is configured by, for example, a wireless LSI (Large-Scale Integration) compatible with 920 MHz. The communication processing unit 25 wirelessly transmits the power usage data to the smart meter management server 30 via the A route, for example, every 30 minutes. However, the communication processing unit 25 may transmit the power usage data by wire via the A route. Further, the communication processing unit 25 modulates a 920 MHz carrier wave based on the SM identification information of the smart meter 20 stored in the smart meter storage unit 22, and generates a location code using the modulated signal obtained as a result as a radio wave. Wireless transmission to the device 40 via route B.

<Smart meter management server>
The smart meter management server 30 (FIG. 1) is a server that has a CPU, a large-capacity storage, a network interface, and the like, and manages a large number of smart meters 20.

The smart meter management server 30 centrally manages the location (address, etc.) where the smart meter 20 is installed, the SM identification information of the smart meter 20, and the personal information of the contractor of the smart meter 20. The smart meter management server 30 is connected to the location code authentication and ID password authentication server 80s, which will be described later, via a network NT such as the Internet.

The smart meter management server 30 always maintains a communication connection state with the smart meter 20, and if the smart meter 20 breaks down or is stolen and removed, communication with the smart meter 20 is performed. It is possible to detect that the connection state is no longer maintained, and it is possible to determine that the connection state is abnormal. In this case, the smart meter management server 30 can notify the location code authentication and ID password authentication server 80s that the smart meter 20 is in an abnormal state via a network such as the Internet.

<Location code generator>
The location code generator 40 is wirelessly connected to the smart meter 20 and the electronic terminal 60, and is particularly connected to the electronic terminal 60 by an ultrasonic communication method. However, the present invention is not limited to this, and optical communication methods having high directivity (straightness) such as infrared communication and visible light communication with respect to the electronic terminal 60, Bluetooth (registered trademark), WLAN (Wireless Local Area Network), etc. It may be connected by the short-range wireless communication method of.

As shown in FIG. 6, the location code generation device 40 includes a storage unit 41, a control unit 42, and a communication processing unit 43.

The storage unit 41 is a functional unit that stores unique identification information (hereinafter, also referred to as “LC identification information”) assigned in advance to the location code generation device 40, and is a rewritable ROM (Read). Only Memory), for example, consists of flash memory. However, since the storage unit 41 has a unique connection relationship between the location code generator 40 and the smart meter 20, it is possible to store the SM identification information of the smart meter 20 in advance in addition to the LC identification information. In that case, it may consist of a non-rewritable ROM or the like.

That is, as shown in FIG. 5B, the location code generation device 40 has unique LC identification information in advance. Further, the storage unit 41 does not store the SM identification information in advance, but receives the SM identification information from the smart meter 20 via the communication processing unit 43, and stores the SM identification information together with the LC identification information. Is also possible.

In addition to the application program for performing ultrasonic communication between the communication processing unit 43 and the electronic terminal 60, a dedicated application program for generating a location code or the like is pre-installed in the storage unit 41. The communication processing unit 43 performs ultrasonic communication with the electronic terminal 60 based on this application program.

The control unit 42 is composed of an MCU including a CPU, a memory, and an interface, and when the MCU and an application program cooperate with each other, the location code generation unit 42a, the activate processing unit 42b, the alive signal generation unit 42c, and the like are combined. Each functional part is built.

The location code generation unit 42a is a functional unit that generates a code related to the location to which the smart meter 20 and the location code generation device 40 are attached (hereinafter, this is also referred to as a “location code”). Specifically, the location code generation unit 42a stores a predetermined salt answer function expression provided in advance from the location code authentication and ID password authentication server 80s in the storage unit 41.

That is, the location code generation unit 42a uses the salt information (some arbitrary data) given from the location code authentication and ID password authentication server 80s, the LC identification information stored in the storage unit 41, and the SM identification information to perform a salt answer function. Generate a location code that is salt answer information by the formula.

Here, the salt answer function expression is an encryption of salt answer information (encryption of hash value, etc.) by, for example, a hash function in which lossy processing is performed when salt information is given from the location code authentication and ID password authentication server 80s. It is a function expression that generates data). The salt information is data that is input for calculating the salt answer information based on the salt answer function formula. For example, the power consumption data can be used as the salt information. However, the data is not limited to the power consumption data, and various arbitrary data such as a set value of prime numbers, a random value, and the like can be used.

This salt answer function expression is provided in advance from the location code authentication and ID password authentication server 80s as a unique function expression that differs for each location code generation device 40. That is, as shown in FIG. 5C, the location code generator 40 holds a unique salt answer function expression. The location code authentication and ID password authentication server 80s stores the correspondence between the location code generator 40 and the salt answer function expression.

In this way, the location code generation unit 42a stores a unique salt answer function expression, and uses salt information, LC identification information, and SM identification information to form a location consisting of serial data by the salt answer function expression. Generate code as salt answer information.

However, the location code generation unit 42a does not have to generate the location code by the salt answer function formula using all the salt information, the LC identification information, and the SM identification information, and at least the location code generation unit 42a uses the SM identification information to salt. The location code may be generated by the answer function expression, or the location code may be generated by arbitrarily combining the salt information, the LC identification information, and the SM identification information.

As shown in FIG. 7, for example, even if there are two location code generators 40a and 40b and the same salt information (for example, [XKH48269PIM]) is provided by the location code authentication and ID password authentication server 80s, the location The code generators 40a and 40b have different salt answer function expressions, different LC identification information (AA-BB-CC) and different LC identification information (ZZ-YY-XX), and both SM identification information. Both are different.

Therefore, even if the salt information is the same, the location code generation unit 42a of the location code generator 40a generates a unique location code (for example, [POPPNNJRFFSS]) as salt answer information, and the location code of the location code generator 40b. The generation unit 42a generates a unique location code (for example, [TPGVELNWPS]) as salt answer information.

The activate processing unit 42b is a functional unit that performs activation processing of the location code generation device 40, the electronic terminal 60, and the smart meter 20. The activate processing unit 42b internally stores the activate ID, the initial password, and the like, and activates the location code generator 40 and the electronic terminal 60 using the activate ID and the initial password to activate the location code generator 40. Activate the 40 and the smart meter 20.

When the alive signal generation unit 42c receives the power usage charge data wirelessly transmitted via the communication processing unit 25 of the smart meter 20 at intervals of 30 minutes by the communication processing unit 43 described later, the alive signal generation unit 42c is based on the power usage charge data. This is a functional unit that generates an alive signal at predetermined time intervals (for example, every 1 second) and transmits it to the smart meter 20 again via the communication processing unit 43.

Here, as shown in FIG. 8, the alive signal AL is the location code generator 40 in an activated state in which the location code generator 40, the smart meter 20, and the electronic terminal 60 are effectively connected. 40-> smart meter 20-> location code generator 40-> electronic terminal 60-> location code generator 40-> smart meter 20-> ... The transmission is performed without interruption while patrolling between the three parties. The existence of this alive signal AL means that the network topology by the regular three parties is established.

The communication processing unit 43 establishes (activates) wireless communication with the smart meter 20 via the B route according to the application program of the storage unit 41, and SM identification information of the location code generation device 40 from the smart meter 20. It is possible to receive. The communication processing unit 43 exchanges the alive signal AL with the smart meter 20 and the electronic terminal 60.

Further, the communication processing unit 43 can receive the salt information and the alive signal AL from the location code authentication and ID password authentication server 80s as ultrasonic waves from the electronic terminal 60 by the microphone 46, and the location code generation unit 42a It is possible to authenticate the location code generated by the above as ultrasonic waves from the speaker 45 to the electronic terminal 60.

As shown in FIG. 6, the communication processing unit 43 includes a radio signal conversion unit 43a, an ultrasonic conversion unit 43b, and an acoustic processing unit 43c. The wireless signal conversion unit 43a has the same configuration as the communication processing unit 25 of the smart meter 20. Therefore, the wireless signal conversion unit 43a demodulates the radio wave received from the smart meter 20, restores the SM identification information and the alive signal AL, and modulates the alive signal AL to be wirelessly transmitted to the smart meter 20. It is possible to do. The wireless signal conversion unit 43a stores the SM identification information obtained from the smart meter 20 in the storage unit 41.

The radio signal conversion unit 43a can also transmit the location code generated by the location code generation unit 42a from the smart meter 20 to the smart meter management server 30 by the so-called A route. In that case, for example, the location code. The carrier wave is modulated based on the above, and wirelessly transmitted to the smart meter 20 as radio waves.

When the ultrasonic conversion unit 43b receives the location code or the alive signal AL composed of the serial data generated by the location code generation unit 42a via the radio signal conversion unit 43a, the ultrasonic conversion unit 43b outputs the location code as ultrasonic waves from the speaker 45. It is a functional part that converts into an ultrasonic signal of.

The sound processing unit 43c generates an ultrasonic sound source corresponding to the ultrasonic signal supplied from the ultrasonic conversion unit 43b and outputs it from the speaker 45, and receives the ultrasonic sound output from the speaker of the electronic terminal 60 by the microphone 46. It is a functional unit that outputs an ultrasonic signal to the ultrasonic conversion unit 43b. For example, when the sound processing unit 43c receives salt information as ultrasonic waves from the location code authentication and ID password authentication server 80s via the electronic terminal 60, or receives the alive signal AL as ultrasonic waves from the electronic terminal 60, the ultrasonic waves are supersonic. The sound wave signal is output to the location code generation unit 42a via the ultrasonic conversion unit 43b and the radio signal conversion unit 43a.

Here, the reason for performing ultrasonic communication between the location code generator 40 and the electronic terminal 60 is that the location code generator 40 and the electronic terminal 60 do not require complicated processing to establish a communication link as compared with radio wave communication. This is because it is easy to establish a communication link with the terminal 60 and the confidentiality at the time of data transmission is high. For ultrasonic waves, it is only necessary to convert the signal sent to the other device into ultrasonic waves, oscillate from the speaker, and receive it with the microphone of the other device, which is easy with software without the need for special hardware configuration. It is a feasible communication method.

In addition, ultrasonic waves have a transmission speed as slow as one millionth of electricity and light, have a limited reach, and have strong directivity, so the installation interval between the location code generator 40 and the electronic terminal 60 is short. Therefore, the risk of leakage is reduced as compared with the case where the installation interval is long.

<Electronic terminal>
The electronic terminal 60 is wired (or wirelessly connected) to the location code authentication and ID password authentication server 80s via routers rt1 and rt2. However, the electronic terminal 60 and the location code authentication and ID password authentication server 80s may be connected to each other without going through the routers rt1 and rt2, or may be wirelessly connected. Here, the electronic terminal 60 is preferably an electronic device including a speaker and a microphone capable of transmitting and receiving at least ultrasonic waves, such as a smartphone, a notebook computer, and a mobile phone.

The electronic terminal 60 is a computer device having a CPU, ROM, RAM, memory, speaker, microphone, camera, and the like. The electronic terminal 60 used in the authentication system 1 is pre-installed with a dedicated application program for performing ultrasonic communication and various dedicated processes with the location code generator 40, and other than that, it is normal. Similar to a smartphone.

When the electronic terminal 60 performs ultrasonic communication with the location code generation device 40, the electronic terminal 60 can perform ultrasonic communication via its own speaker and microphone according to an application program. Specifically, the electronic terminal 60 transmits the salt information from the location code authentication and ID password authentication server 80s to the location code generator 40, or the location code which is the salt answer information generated by the location code generator 40. Can be received as an ultrasonic wave and transmitted to the location code authentication and ID password authentication server 80s.

The electronic terminal 60 stores the unique device identification information assigned to itself in advance in the memory, and when the location code authentication and the login authentication request to the ID password authentication server 80s are requested, the location code is also used for this device identification information. Authentication and ID password Wireless transmission to the authentication server 80s. It is assumed that the location code authentication and ID password authentication server 80s also stores the device identification information of the electronic terminal 60 in advance.

<Location code authentication and ID password authentication server>
The location code authentication and ID password authentication server 80s is a server having a CPU, a large-capacity storage, a network interface, and the like, and the electronic terminal 60 is a legitimate user before the electronic terminal 60 accesses, for example, a content server or the like. Is to authenticate.
In this embodiment, one location code authentication and ID password authentication server 80s has two functions of location code authentication and ID password authentication, and the first authentication server and the second authentication server have two functions. Although it is an integrated configuration, the ID password authentication server, which is the first authentication server, and the location code authentication server, which is the second authentication server, can be configured separately.

As shown in FIG. 9, the location code authentication and ID password authentication server 80s includes a communication processing unit 80a composed of a network interface, a storage unit 80b composed of a large-capacity storage, and an authentication processing unit 80c composed of a CPU. Each function of the communication processing unit 80a, the storage unit 80b, and the authentication processing unit 80c of the location code authentication and ID password authentication server 80s is a cooperation between these hardware resources and a predetermined authentication program stored in the storage unit 80b. It is realized by working.

The communication processing unit 80a is a functional unit that wirelessly transmits and receives data between the location code authentication and ID password authentication server 80s and the electronic terminal 60. The storage unit 80b is a functional unit that stores salt information, a salt answer function formula, SM identification information of the smart meter 20, LC identification information of the location code generation device 40, device identification information of the electronic terminal 60, and the like.

The authentication processing unit 80c includes salt answer information (location code) received from the location code generator 40, an alive signal AL received from the electronic terminal 60, SM identification information of the smart meter 20, a user ID and password from the electronic terminal 60, and , A functional unit that performs login authentication based on device identification information, etc., and details will be described later.

The location code authentication and ID password authentication server 80s can transmit salt information to the electronic terminal 60 by the communication processing unit 80a, and transmit the salt information to the location code generator 40 as ultrasonic waves via the electronic terminal 60. .. Further, the location code authentication and ID password authentication server 80s uses the communication processing unit 80a to transmit the salt answer information (location code) from the location code generator 40 and the user ID, password, and device identification information from the electronic terminal 60. It can be received.

As shown in FIG. 10, the location code authentication and ID password authentication server 80s has the salt information ([XKH48269PIM]) transmitted to the location code generator 40 and the same salt held by the location code generator 40. The answer function formula is stored in the storage unit 80b. Therefore, the location code authentication and ID password authentication server 80s can determine the validity of the salt answer information ([POPPNNJRFFSS]) received from the electronic terminal 60, that is, the location code by the authentication processing unit 80c. The authentication processing unit 80c performs login authentication processing using not only the salt answer information (location code) but also the alive signal AL, the user ID and password from the electronic terminal 60, the device identification information, and the like.

<Mutual relationship between smart meters, location code generators, and electronic terminals>
As shown in FIG. 11, in the authentication system 1, the smart meter 20, the location code generation device 40, and the electronic terminal 60 are each physically unique as devices, and the topology of a single network that connects the three parties. Is also unique. Therefore, in the authentication system 1, in addition to these three parties, the entire network topology including the smart meter management server 30 and the location code authentication and ID password authentication server 80s is also unique, and the smart meter management server 30 It is possible to send and receive signals in the network from the location code authentication to the ID password authentication server 80s. That is, the path leads to the entire network.

Therefore, a solid combination of the smart meter 20, the location code generator 40, and the electronic terminal 60 that constructs between the smart meter management server 30 of the authentication system 1 and the location code authentication and ID password authentication server 80s. If even one of them changes, the network topology will also change. For example, the location code authentication and ID password authentication server 80s authenticates with the user ID and password from the electronic terminal 60 when this network topology is activated and data based on the rules is not transmitted / received to the entire topology. It becomes possible to refuse.

As shown in FIG. 12, the location code authentication and ID password authentication server 80s is the location associated with the user ID and password used when the electronic terminal 60 logs in to the location code authentication and ID password authentication server 80s. The correspondence between the code generator 40 and the smart meter 20 is recognized in advance. Therefore, since the above-mentioned correspondence cannot be established with the combination of the other smart meter 20, the other location code generator 40, and the other user ID and password, the location code authentication and the ID password authentication server 80s link the three parties. It cannot be attached.

The location code generator 40 can be activated with the smart meter 20 and the electronic terminal 60, and when activated, can continuously receive data transmitted from the smart meter 20 and the electronic terminal 60. This makes it possible to transmit the location code and the alive signal AL generated by the user to the smart meter 20 and the electronic terminal 60 being activated.

Further, when the activation with the smart meter 20 is released, the location code generation device 40 limits the data (location code) transmitted to the electronic terminal 60, and the limitation continues until it is activated again.

The combination of the activated location code generator 40 and the smart meter 20 is unique, and the location code generator 40 is limited to the smart meter 20 once it has been activated with the smart meter 20. Can be reactivated. Therefore, the location code generator 40 cannot be activated with a smart meter 20 other than the smart meter 20 that was activated first, and the location code generator 40 cannot be diverted to a connection with another smart meter 20. It will be possible.

The location code generator 40 can activate a plurality of electronic terminals 60, but certain conditions are required to activate the second and subsequent electronic terminals 60. It will be described later.

<Activation of location code generator and smart meter and electronic terminal>
First, before activating the location code generator 40 and the smart meter 20
It is necessary to activate the location code generator 40 and the electronic terminal 60. The reason is that the smart meter 20 and the location code generator 40 may not have an input unit (mouse, keyboard, etc.) and a display unit (liquid crystal screen, etc.) for displaying the input result, and are located between the two. Because there is no way to activate it.

As shown in FIG. 13, when activating the location code generator 40 and the first electronic terminal 60, the electronic terminal 60 sets an activate ID and an initial password for activating the location code generator 40. Received and stored in advance from the location code authentication and ID password authentication server 80s.

Specifically, the legitimate user of the location code generator 40 is notified to the electronic terminal 60 of the activate ID and the initial password from the location code authentication and ID password authentication server 80s as being a legitimate user of the authentication system 1. Therefore, the activation ID and the initial password can be stored in the electronic terminal 60.

The electronic terminal 60 reads the activate ID and the initial password according to the operation of the user, and transmits these to the location code generation device 40 by ultrasonic communication. The activate processing unit 42b of the location code generator 40 determines whether or not the activate ID and the initial password from the electronic terminal 60 are correct, and if it is determined to be correct, activates with the first electronic terminal 60. Execute the process. After the activation is completed, the initial password can be changed to an arbitrary value by the user, but the activation ID cannot be changed because it is a unique ID associated with the location code generator 40.

Subsequently, as shown in FIG. 14, when activating the location code generator 40 and the smart meter 20, the electronic terminal 60 uses the activate ID and the initial password used when activating the location code generator 40. Is wirelessly transmitted to the smart meter 20 via the location code generator 40. The power consumption measuring unit 21 of the smart meter 20 determines whether or not the activate ID and the initial password are correct, and if it is determined to be correct, executes the activate process with the location code generator 40.

Next, as shown in FIG. 15, a case where the location code generation device 40 and the second electronic terminal 60s are activated will be described. In order to activate the location code generator 40 with the second electronic terminal 60s, it is necessary that the activation process between the smart meter 20 and the first electronic terminal 60 has been completed.

In this case, if the activation process is completed between the location code generator 40 and the first electronic terminal 60, even if the first electronic terminal 60 is currently inactive, two units It is possible to perform an activate process between the electronic terminal 60s of the eye and the location code generator 40.

Subsequently, the procedure when the location code generation device 40 performs the activation process as described above between the electronic terminal 60 and the smart meter 20 will be described.

As shown in the main routine MRT1 of FIG. 16, the control unit 42 of the location code generation device 40 determines in step SP1 whether or not what is received from the electronic terminal 60 via the communication processing unit 43 is an activate request. When the determination is made by the activate processing unit 42b and a negative result is obtained (step SP1: NO), the process proceeds to the next step SP2, and when a positive result is obtained (step SP1: YES), the process proceeds to step SP5.

In step SP2, the activate processing unit 42b of the control unit 42 is the communication processing unit 43.
The activation processing unit 42b determines whether or not what is received via the smart meter 20 is an activation request from the smart meter 20. Here, since the smart meter 20 does not have an input unit and a display unit, an activation request is made from the smart meter 20 to the location code generator 40 via the electronic terminal 60.

If a negative result is obtained in step SP2 (step SP2: NO), this means that the activate request is not from the legitimate electronic terminal 60 and smart meter 20 associated with the location code generator 40. In this case, the activate processing unit 42b moves to the next step SP3. On the other hand, when an affirmative result is obtained in step SP2 (step SP2: YES), the process proceeds to the next step SP4, and the process proceeds to the activation process with the smart meter 20 as described later.

In step SP3, the activate processing unit 42b notifies the electronic terminal 60 of an error because it is not an activation request from the regular electronic terminal 60 and the regular smart meter 20, and activates the display screen of the electronic terminal 60. Display a bait error and end the activate process.

In step SP5, the activate processing unit 42b determines whether or not the electronic terminal 60 that has received the activate request is the first unit, and if the location code generator 40 is in the non-active state, the electronic terminal 60 Is the first unit, so an affirmative result is obtained (step SP5: YES), and the process proceeds to the next step SP6.

In step SP6, the activate processing unit 42b receives the activate ID for activation and the initial password for activation from the electronic terminal 60, and proceeds to the next step SP7.

In step SP7, the activate processing unit 42b determines whether or not both the activate ID received from the electronic terminal 60 and the activation initial password are correct. Here, if it is a legitimate electronic terminal 60, the activation ID and the initial password for activation have been received in advance from the location code authentication and ID password authentication server 80s, and the activation of the location code generator 40. The processing unit 42b also stores the activate ID assigned to the electronic terminal 60 and the initial password for the activate.

When an affirmative result is obtained in step SP7 (step SP7: YES), the activate processing unit 42b has the activate ID stored by itself, the initial password for activation, and the activate received from the electronic terminal 60. Since the ID and the initial password for activation match, it can be recognized as a legitimate electronic terminal 60 having a legitimate connection relationship. Therefore, the activate processing unit 42b moves to the next step SP8, performs the activate processing with the electronic terminal 60, and then returns to the step SP1 again.

On the other hand, when a negative result is obtained in step SP7 (step SP7: NO), the activate processing unit 42b does not match the activate ID and the activation initial password, and has a valid connection relationship. Recognizing that it is not a legitimate electronic terminal 60, the process proceeds to the next step SP9, the activation error is displayed on the electronic terminal 60, and then the process returns to step SP1 again.

By the way, when a negative result is obtained in step SP5 (step SP5: NO), this means that the electronic terminal 60 that has received the activate request is not the first terminal but the second terminal. In this case, the activate processing unit 42b moves to the next step SP10 and performs the activate processing on the second electronic terminal 60s.

In step SP10, the activate processing unit 42b generates a temporary password for the second electronic terminal 60s only when it has already been activated with the first electronic terminal 60, and uses this as the first electronic terminal. It is transmitted to 60 by ultrasonic communication by the communication processing unit 43, and the process proceeds to the next step SP11.

In step SP11, the first electronic terminal 60 displays the received temporary password. In step SP12, the temporary password and the same activate ID as in the case of the first electronic terminal 60 are input from the second electronic terminal 60s. In step SP13, the activate processing unit 42b receives the activate ID and the temporary password, proceeds to the processing of the next steps SP7 to SP9, and based on the activate ID and the temporary password, of the second electronic terminal 60s. Execute the activate process. By the way, the owners of the first electronic terminal 60 and the second electronic terminal 60s can receive the same activation ID from the second electronic terminal 60s as in the case of the first electronic terminal 60. This is because they are the same as long as they are users, and can be said to be the regular second electronic terminal 60s following the regular first electronic terminal 60.

Subsequently, the activation process of the location code generator 40 and the smart meter 20 in step SP4 will be described in detail. As shown in FIG. 17, in step SP41, the activate processing unit 42b of the location code generator 40 determines whether or not the location code generator 40 and the first electronic terminal 60 have already been activated. When the determination is made and a negative result is obtained (step SP41: NO), the process returns to step SP1 (FIG. 15), and when a positive result is obtained (step SP41: YES), the process proceeds to the next step SP42.

In step SP42, the activate processing unit 42b wirelessly connects to the smart meter 20 by the communication processing unit 43 in response to a request from the electronic terminal 60 that has already been activated, and moves to the next step SP43.

In step SP43, the activate processing unit 42b smartly applies the activate ID previously assigned to the smart meter 20 from the location code authentication and ID password authentication server 80s and the initial password for activation from the activated electronic terminal 60. It is determined whether or not reception is performed on behalf of the meter 20. Here, when a negative result is obtained (step SP43: NO), the process returns to step SP43 again, and the activate processing unit 42b receives the activate ID of the smart meter 20 and the initial password for activation from the electronic terminal 60. Wait until you do.

On the other hand, when an affirmative result is obtained in step SP43 (step SP43: YES), the activate processing unit 42b moves to the next steps SP44 to S46, and similarly to the smart meter 20 as in steps SP7 to SP9. Execute the activate process.

That is, when the activate processing unit 42b recognizes that the smart meter 20 has a legitimate connection relationship with the location code generator 40 based on the activate ID and the initial password for activation (step SP44: YES), activate processing with the smart meter 20 in step SP45.

On the other hand, when the activate processing unit 42b recognizes that it is not a legitimate electronic terminal 60 that does not have a valid connection relationship based on the activate ID and the initial activation password (step SP44: NO). In step SP46, after notifying the electronic terminal 60 that an activating error has occurred between the smart meter 20 and the location code generator 40 and displaying it, the activation process with the smart meter 20 is terminated.

<Authentication processing sequence>
Next, in such an authentication system 1, the authentication processing sequence (SK1 to SK15) at the time of the location code authentication using the smart meter 20, the location code generation device 40, and the electronic terminal 60 and the login processing by the ID password authentication server 80s. , The sequence chart of FIG. 18 will be described.
As described above, in this embodiment, one location code authentication and ID password authentication server 80s has two functions of location code authentication and ID password authentication, and is the first authentication server and the first authentication server. Although the two authentication servers are integrated, the first authentication server that performs the authentication processing sequence (SK1 to SK15) at the time of login processing and the second authentication server that performs the identity verification processing sequence (SK16 to SK20) , Can also be a separate configuration.

First, in the processing procedure SK1, the electronic terminal 60 sends the activate ID and the initial password for activation to the location code generator 40 as authentication information from the electronic terminal 60 for activating with the location code generator 40. Send.

In the processing procedure SK2, the location code generation device 40 performs an activation process with the electronic terminal 60 when the authentication of the electronic terminal 60 is successful, and notifies the electronic terminal 60 that the activation has been completed. That is, the location code generation device 40 first completes the activate process with the electronic terminal 60.

After that, the location code generation device 40 completes the activate processing with the smart meter 20 in the processing procedures SK3 and SK4 in the same manner as the activation processing of the electronic terminal 60 (processing procedures SK1 and SK2).

The control unit 42 of the location code generation device 40 has completed the activation processing with both the electronic terminal 60 and the smart meter 20, and the topology by the regular three parties has been established. Therefore, in the processing procedure SK5, the alive signal generation unit 42c Generates an alive signal AL and transmits it to the smart meter 20.

When the communication processing unit 25 of the smart meter 20 receives the alive signal AL transmitted from the location code generation device 40 in the processing procedure SK6, it returns this to the location code generation device 40.

When the location code generation device 40 receives the alive signal AL from the smart meter 20 by the communication processing unit 43 in the processing procedure SK7, the location code generation device 40 transmits the alive signal AL to the electronic terminal 60 by ultrasonic communication via the communication processing unit 43. To do.

When the electronic terminal 60 receives the alive signal AL in the processing procedure SK8, the electronic terminal 60 immediately returns the alive signal AL to the location code generation device 40 by ultrasonic communication. In this way, as shown in FIG. 19, the location code generation device 40 continues to circulate the alive signal AL among the three parties thereafter. However, the direction of circulation of the alive signal AL is opposite to this, that is, the location code generator 40 → the electronic terminal 60 → the location code generator 40 → the smart meter 20 → the location code generator 40 → ... May be good.

In the processing procedure SK9, the electronic terminal 60 has a normal topology established between the location code generator 40 and the smart meter 20, and the alive signal AL can be circulated. Therefore, the alive signal AL can be used as the desired server. Authentication request information consisting of a user ID and password for logging in and unique device identification information assigned to the electronic terminal 60 is transmitted to the location code authentication and ID password authentication server 80s.

The location code authentication and ID password authentication server 80s generates salt information in the processing procedures SK10 and SK11, and transmits the salt information to the location code generator 40 via the electronic terminal 60 by ultrasonic communication.

When the location code generator 40 receives the salt information in the processing procedures SK12 and SK13, the location code generator 40 uses the SM identification information of the smart meter 20, the LC identification information of the location code generator 40, and the salt information to provide a predetermined salt answer. Unique salt answer information (location code) is generated by a function formula, and this is transmitted from the electronic terminal 60 to the location code authentication and ID password authentication server 80s.

The location code authentication and ID password authentication server 80s determines the authenticity of the login request from the electronic terminal 60 in the processing procedure SK14. Specifically, as shown in FIG. 20, in the location code authentication and ID password authentication server 80s, the smart meter 20, the location code generator 40, and the electronic terminal 60 are the three parties of the location code authentication and ID password authentication server 80s. The latest alive signal AL that circulates between the three parties, the user ID and password from the electronic terminal 60, and the salt answer information (location code) generated by the location code generator 40 are constructed to allow a legitimate and unique network topology. , And, only when all of the unique device identification information of the electronic terminal 60 are correctly prepared, it is determined that the login request from the electronic terminal 60 is true, and the login authentication is permitted. The login authentication processing procedure by the location code authentication and the ID password authentication server 80s will be specifically described with reference to the flowchart of FIG.

As shown in FIG. 21, the authentication processing unit 80c of the location code authentication and ID password authentication server 80s identifies the alive signal AL, the user ID, the password, and the device of the electronic terminal 60 from the electronic terminal 60 in step SP51 of the processing procedure SK14. The communication processing unit 80a determines whether or not the authentication request information consisting of information has been received, and if a negative result is obtained (step SP51: NO), it waits until the authentication request information is received, and if a positive result is obtained (step SP51: NO). Step SP51: YES), the process proceeds to the next step SP52.

In step SP52, the authentication processing unit 80c determines whether or not the alive signal AL is the latest one based on the generation time of the alive signal AL included in the authentication request information received from the electronic terminal 60. As described above, since the alive signal AL is generated every second, the authentication processing unit 80c can determine whether or not it is the latest alive signal AL by comparing it with the current time. For example, if the difference between the time when the alive signal AL is generated and the current time is within, for example, 2 seconds, it may be determined that the alive signal AL is the latest alive signal.

In step SP52, the authentication processing unit 80c determines whether or not the latest alive signal AL has been normally received. Here, when a negative result is obtained (step SP52: NO), this means that the smart meter 20, the location code generator 40, and the electronic terminal 60 are authorized by the location code authentication and ID password authentication server 80s. It means that the latest alive signal AL cannot be received because the unique network topology is not constructed. At this time, the authentication processing unit 80c moves to step SP58 and sends the electronic terminal 60 to “NOT”.
The non-authentication result information representing "TRUE" is transmitted to the electronic terminal 60, and "NOT TRUE" is transmitted.
Is displayed, the login authentication processing procedure is terminated.

On the other hand, when an affirmative result is obtained in step SP52 (step SP52: YES), in the authentication processing unit 80c, the smart meter 20, the location code generator 40, and the electronic terminal 60 perform location code authentication and ID password. Recognizing that the normal and unique network topology recognized by the authentication server 80s is being constructed, the process proceeds to the next step SP53, and the salt information is transmitted to the electronic terminal 60 by the communication processing unit 80a.

As a result, the electronic terminal 60 transmits the salt information to the location code generation device 40. The location code generation device 40 generates salt answer information (location code) by a salt answer function formula using salt information, SM identification information, and LC identification information, and generates location code authentication and ID password authentication server from the electronic terminal 60. Send to 80s.

In step SP54, the authentication processing unit 80c receives the salt answer information (location code) from the location code generation device 40, and proceeds to the next step SP55. In step SP55, the authentication processing unit 80c uses the latest alive signal AL, the user ID and password from the electronic terminal 60, the salt answer information (location code) generated by the location code generator 40, and the device identification of the electronic terminal 60. Only when all four elements of the information are correctly aligned, a positive result is obtained (step SP55: YES), and the process proceeds to the next step SP56.

In step SP56, the authentication processing unit 80c executes a login process for the electronic terminal 60, and in the next step SP57, the authentication result information representing “TRUE” is transmitted to display “TRUE” on the electronic terminal 60. After that, the login authentication processing procedure is completed.

On the other hand, if a negative result is obtained in step SP55 (step SP55: NO), this means that the authentication processing unit 80c cannot allow login because all four elements are not complete. The process proceeds to step SP58, and after transmitting the non-authentication result information to the electronic terminal 60 as described above, the login authentication processing procedure ends.

Here, when a negative result is obtained in step SP55, for example, when only the latest alive signal AL cannot be acquired as shown in FIG. 22, the latest alive signal AL and salt answer information are obtained as shown in FIG. When (location code) cannot be obtained, as shown in FIG. 24, the latest alive signal AL, salt answer information (location code) and device identification information cannot be obtained, and as shown in FIG. 25, four elements. There are cases where not all can be obtained.

However, as shown in FIG. 25, a malicious third party illegally obtains a user ID and password, illegally obtains an electronic terminal 60, illegally obtains a location code generator 40, and a smart meter. If 20 is obtained illegally, it is considered that there is a possibility that a malicious third party may spoof.

However, if the smart meter 20 is removed from its legitimate location and installed elsewhere, communication between both the smart meter management server 30 and the smart meter 20 will be disconnected. Therefore, the smart meter management server 30 determines that the smart meter 20 is not installed at the original location or is in an abnormal state in which a failure has occurred, and authenticates the location code to the effect that the abnormality is present via the Internet. And it is possible to send to the ID password authentication server 80s.

As a result, the location code authentication and ID password authentication server 80s can illegally acquire the user ID, password, electronic terminal 60, location code generator 40, and smart meter 20 even if a malicious third party illegally acquires the user ID, password, electronic terminal 60, and smart meter 20. It is possible to prevent unauthorized login authentication and effectively invalidate unauthorized login authentication by a malicious third party.

In this way, in the authentication system 1, only when the smart meter 20, the location code generator 40, and the electronic terminal 60 have constructed a legitimate and unique network topology recognized by the location code authentication and ID password authentication server 80s. Since the login authentication process can be executed, spoofing by a malicious third party can be significantly prevented compared to the conventional case, and the security of the network can be further guaranteed compared to the conventional method. ..

The first aspect of the user's identity verification will be described with reference to the sequence charts of FIGS. 1 and 18 again.
In the processing procedure SK16, the user U requests the bank counter 110 (in the present invention, the bank counter 110 means a staff member of the bank counter and a computer operated by the staff member) to open an account. Here, the user U presents the address and the name to the bank counter 110 by means of an identification card such as a driver's license. In addition, the user U may present the electric power customer number to the bank counter 110 by notifying the amount of electricity used (meter reading slip) or the like.
In the processing procedure SK17, the bank counter 110 transmits user information such as the address and name of user U (and the electric power customer number if presented) to the location code authentication and ID password authentication server 80s, and the user of the user U. Inquires the location code authentication and ID password authentication server 80s whether the information is correct or not.

In the processing procedure SK18, the location code authentication and ID password authentication server 80s is authentic whether or not the user information received from the bank counter 110 and the user information held by the location code authentication and ID password authentication server 80s match. Make a judgment. Specifically, when "TRUE" is transmitted in the processing procedure SK15, as described above, the latest alive signal AL, the user ID and password from the electronic terminal 60, and the salt answer generated by the location code generator 40. Since all four elements of the information (location code) and the device identification information of the electronic terminal 60 are correctly aligned, it is considered that the legitimate user is using the legitimate electronic terminal 60 at the legitimate location. .. Here, the location code authentication and ID password authentication server 80s has user information such as an address and a name in relation to at least the location code of the above-mentioned four elements for a legitimate user. It is determined whether or not the information and the user information received from the bank counter 110 match. In other words, the location code authentication and ID password authentication server 80s has a list of user information such as address and name for a large number of legitimate users, at least in relation to the location code, and the user U is included in the list. Is included or not.
If the results of the authenticity determination match, in the processing procedure SK19, the location code authentication and ID password authentication server 80s transmits the authentication result information representing "TRUE" to the bank counter 110. On the other hand, if they do not match, the location code authentication and ID password authentication server 80s transmits the non-authentication result information representing "FALSE" to the bank counter 110.

When the bank counter 110 receives "TRUE", the identity verification of the user U is completed, so that the bank counter 110 continues the account opening procedure of the user U in the processing procedure SK20, while the bank counter 110 receives the "FALSE". Since the identity verification of the user U has not been completed, the account opening procedure of the user U is canceled in the processing procedure SK20.

In the present invention, at the time of opening an account, in addition to the conventional identity verification work using an ID card, it is determined by using a location code whether or not the user actually resides in a legitimate location described in the ID card. This makes it possible to reliably verify the identity.

A second aspect of user identity verification will be described with reference to the overall configuration of the authentication system of FIG. 26 and the sequence chart of FIG. 27. The authentication system 1 of FIG. 26 is the same as the authentication system 1 of FIG. 1, and the authentication during the login process of FIG. 27 (SK1 to SK15) is the same as the authentication during the login process of FIG. To do.
In the processing procedure SK16, the user U requests the bank counter 110 to open an account, and in the processing procedure SK17, the bank counter 110 transmits the user information of the user U to the location code authentication and ID password authentication server 80s. The location code authentication and ID password authentication server 80s is inquired as to whether or not the user information of the user U is correct.
In the processing procedure SK18, the location code authentication and ID password authentication server 80s is authentic whether or not the user information received from the bank counter 110 and the user information held by the location code authentication and ID password authentication server 80s match. Make a judgment. The processing up to this point is the same as the processing of the first aspect.

If the results of the authenticity determination match, in the processing procedure SK19, the location code authentication and ID password authentication server 80s transmits the authentication result information representing "TRUE" to the bank counter 110, and in the processing procedure SK20, the location. The code authentication and ID password authentication server 80s issues a PIN code and transmits it to any electronic terminal of the user U. On the other hand, if they do not match, the location code authentication and ID password authentication server 80s transmits the non-authentication result information representing "FALSE" to the bank counter 110.

Although not shown, when the bank counter 110 receives the "FALSE", the identity verification of the user U has not been completed, so the bank counter 110 cancels the account opening procedure of the user U.

In the processing procedure SK21, the user U transmits the received PIN code to the bank counter 110. Specifically, the user U may enter the PIN code into the PIN code input terminal provided at the bank counter 110, or may verbally convey the PIN code to the staff at the bank counter 110.
In the processing procedure SK22, the bank counter 110 transmits the PIN code to the location code authentication and ID password authentication server 80s, and requests the location code authentication and ID password authentication server 80s to determine the correctness of the PIN code.
In the processing procedure SK23, the location code authentication and ID password authentication server 80s determines whether or not the PIN code transmitted from the bank counter 110 matches the issued PIN code.
If the results of the correctness determination match, in the processing procedure SK24, the location code authentication and ID password authentication server 80s transmits the authentication result information representing "TRUE" to the bank counter 110. On the other hand, if they do not match, the location code authentication and ID password authentication server 80s transmits the non-authentication result information representing "FALSE" to the bank counter 110.

When the bank counter 110 receives "TRUE", the identity verification of the user U is completed, so that the bank counter 110 continues the account opening procedure of the user U in the processing procedure SK25, while the bank counter 110 receives the "FALSE". Since the identity verification of the user U has not been completed, the account opening procedure of the user U is canceled in the processing procedure SK25.

In the present invention, at the time of opening an account, in addition to the conventional identity verification work using an identification card, it is determined by using the location code whether or not the user actually resides in the legitimate location described in the identification card. At the same time, the identity can be surely confirmed by determining the correctness of the PIN code.

A third aspect of user identity verification will be described with reference to the overall configuration of the authentication system of FIG. 28 and the sequence chart of FIG. 29. The authentication system 1 of FIG. 28 is the same as the authentication system 1 of FIG. 1, and the authentication during the login process of FIG. 29 (SK1 to SK15) is the same as the authentication during the login process of FIG. To do.
In the processing procedure SK16, the user U requests the bank server 110s to open an account online by using an arbitrary electronic terminal. The bank server 110s is an arbitrary external server managed by the bank, and is a server that accepts requests for opening an account online.
In the processing procedure SK17, the bank server 110s transmits the user information of the user U to the location code authentication and ID password authentication server 80s, and determines whether or not the user information of the user U is correct in the location code authentication and ID password authentication server 80s. Contact.
In the processing procedure SK18, the location code authentication and ID password authentication server 80s is authentic whether or not the user information received from the bank server 110s and the user information held by the location code authentication and ID password authentication server 80s match. Make a judgment. The processing up to this point is the same as the processing of the first aspect.

If the results of the authenticity determination match, in the processing procedure SK19, the location code authentication and ID password authentication server 80s transmits the authentication result information representing "TRUE" to the bank server 110s, and in the processing procedure SK20, the location. The code authentication and ID password authentication server 80s issues a PIN code and sends the PIN code to the address of the user U by a personal limited receipt mail or the like. On the other hand, if they do not match, the location code authentication and ID password authentication server 80s transmits the non-authentication result information representing "FALSE" to the bank server 110s.

Although not shown, when the bank server 110s receives the "FALSE", the identity verification of the user U is not completed, so the bank server 110s cancels the account opening procedure of the user U.

In the processing procedure SK21, the user U transmits the received PIN code from an arbitrary electronic terminal to the location code authentication and ID password authentication server 80s.
In the processing procedure SK22, the location code authentication and ID password authentication server 80s determines whether or not the received PIN code matches the issued PIN code.
If the results of the correctness determination match, the location code authentication and ID password authentication server 80s transmits the authentication result information representing "TRUE" to the bank server 110s in the processing procedure SK23. On the other hand, if they do not match, the location code authentication and ID password authentication server 80s transmits the non-authentication result information representing "FALSE" to the bank server 110s.

When the bank server 110s receives the "TRUE", the identity verification of the user U is completed. Therefore, in the processing procedure SK24, the bank server 110s continues the account opening procedure of the user U, while the bank server 110s receives the "FALSE". Since the identity verification of the user U has not been completed, the account opening procedure of the user U is canceled in the processing procedure SK24.

In the present invention, at the time of opening an account, in addition to the conventional identification work using an identification card, it is determined by using the location code whether or not the user actually resides in the legitimate location described in the identification card. At the same time, the identity can be surely confirmed by sending the PIN code to the user's address by the person-only receipt mail or the like.

<Authentication system using both A route and B route>
Next, a plurality of authentication systems using both the A route and the B route will be described. As shown by the broken line in FIG. 30, which has the same reference numerals as those corresponding to those in FIG. 1, the authentication system 1a
It includes a smart meter 20, a location code authentication and smart meter management server 30s, a location code generator 40, an electronic terminal 60, and an ID password authentication server 80. The authentication system 1a is different in that the location code authentication and smart meter management server 30s and the ID password authentication server 80 are provided in place of the smart meter management server 30 and the location code authentication and ID password authentication server 80s. .. In this embodiment, the ID password authentication server 80 as the first authentication server and the location code authentication and smart meter management server 30s as the second authentication server are separate bodies.
First, the authentication system 1a shown in the broken line will be described, and then the identity verification at the bank counter 110 will be described.

The location code authentication and smart meter management server 30s can receive the location code generated by the location code generator 40 from the smart meter 20 by the so-called A route.

The location code generator 40 transmits the location code to the ID password authentication server 80 via the electronic terminal 60 by the so-called B route as before, and the ID password authentication server 80 receives the location code received via the B route. It is transmitted to the location code authentication and smart meter management server 30s via the router rt3, the Internet, and the router rt4.

The location code authentication and smart meter management server 30s has basically the same configuration as the configuration of the location code authentication and ID password authentication server 80s (FIG. 9), and is received via the A route in an authentication processing unit (not shown). The location code is matched with the location code received via the B route.

If both location codes match, the location code authentication and smart meter management server 30s recognize it as normal login authentication, transmit the authentication result information representing "TRUE" to the smart meter 20 via route A, and further B. The location code generator 40 transmits the authentication result information to the electronic terminal 60 via the route, and the authentication result information is transmitted to the ID password authentication server 80 via the Internet.

As a result, the ID password authentication server 80 can execute the login process using the user ID and password by the electronic terminal 60 based on the location code authentication and the authentication result information received from the smart meter management server 30s.

When the user U requests the bank counter 110 to open an account, the bank counter 110 transmits the user information of the user U to the location code authentication and the smart meter management server 30s, and whether or not the user information of the user U is correct. Inquire about the location code authentication and smart meter management server 30s.

The location code authentication and smart meter management server 30s determines whether or not the user information received from the bank counter 110 and the user information held by the location code authentication and smart meter management server 30s match.
If the results of the authenticity determination match, the location code authentication and smart meter management server 30s transmits the authentication result information representing "TRUE" to the bank counter 110. On the other hand, if they do not match, the location code authentication and smart meter management server 30s transmits the non-authentication result information representing "FALSE" to the bank counter 110.

Further, as shown by a broken line in FIG. 31, the authentication system 1b includes a smart meter 20, a smart meter management server 30, a location code generator 40, an electronic terminal 60, and a location code authentication and ID password authentication server 80s. There is. This authentication system 1b has the same overall configuration as the authentication system 1 of FIG. 1, except that the location code authentication and the ID password authentication server 80s perform matching.

In this case, the smart meter management server 30 receives the location code generated by the location code generator 40 from the smart meter 20 by the so-called route A. The smart meter management server 30 transmits the location code to the location code authentication and ID password authentication server 80s via the router rt4, the Internet, and the router rt3. The location code generation device 40 transmits the location code to the location code authentication and ID password authentication server 80s via the electronic terminal 60 by the so-called B route as before.

Therefore, the location code authentication and ID password authentication server 80s matches the location code received via the A route with the location code received via the B route in the authentication processing unit 80c. If both location codes match, the location code authentication and ID password authentication server 80s recognizes it as normal login authentication, transmits the authentication result information representing "TRUE" to the electronic terminal 60, and logs in by the electronic terminal 60. Execute the process. However, the present invention is not limited to this, and the location code authentication and ID password authentication server 80s can also transmit the authentication result information from the smart meter 20 to the electronic terminal 60 via the location code generator 40 via the A route. is there.
Since the identity verification procedure by the bank counter 110 is the same as that in FIG. 18, the description thereof will be omitted.

Further, as shown by a broken line in FIG. 32 having the same reference numerals as those in FIG. 1, the authentication system 1c includes a smart meter 20, a smart meter management server 30, a location code generator 40, an electronic terminal 60, and an ID password. In addition to the authentication server 80, a location code authentication server 100 is provided. The authentication system 1c is different in that the location code authentication server 100 is newly provided. The location code authentication server 100 has basically the same configuration as the configuration of the location code authentication and ID password authentication server 80s (FIG. 9).
In this embodiment, the ID password authentication server 80 as the first authentication server and the location code authentication server 100 as the second authentication server are separate bodies.

In this case, the location code received by the location code authentication server 100 from the smart meter management server 30 via the router rt4 by the so-called A route and the location code received from the ID password authentication server 80 via the router rt3 by the so-called B route. Match with. If both location codes match, the location code authentication server 100 recognizes it as normal login authentication, and transmits the authentication result information representing "TRUE" to the electronic terminal 60 via the A route or the B route.

When the user U requests the bank counter 110 to open an account, the bank counter 110 sends the user information of the user U to the location code authentication server 100, and determines whether the user information of the user U is correct or not. Contact the authentication server 100.

The location code authentication server 100 determines the authenticity of whether or not the user information received from the bank counter 110 and the user information held by the location code authentication server 100 match.
If the results of the authenticity determination match, the location code authentication server 100 transmits the authentication result information representing "TRUE" to the bank counter 110. On the other hand, if they do not match, the location code authentication server 100 transmits the non-authentication result information representing "FALSE" to the bank counter 110.

From the above, as shown in FIG. 33, in the authentication systems 1a to 1c, in any of the location code authentication and smart meter management server 30s, the location code authentication and ID password authentication server 80s, or the location code authentication server 100, A The location codes received from both the route and the B route are matched, and if both location codes match, it is accepted as normal login authentication. In this case as well, authentication is performed using not only the location code but also the latest alive signal AL, the user ID and password from the electronic terminal 60, and the device identification information of the electronic terminal 60.

As a result, if the location code generated by the location code generator 40 is either the A route via the smart meter 20 or the B route via the electronic terminal 60, if a regular network topology is not constructed, the location is located. Since the codes do not match, the authentication systems 1a to 1c can effectively invalidate the unauthorized login authentication and guarantee the security of the security on the network.

Further, in the authentication systems 1a to 1c, the user information possessed by any of the location code authentication and smart meter management server 30s, the location code authentication and ID password authentication server 80s, or the location code authentication server 100. Identity verification can be reliably performed by determining whether or not the user information received from the bank counter 110 or the bank server 110s matches.

<Other embodiments>
Although the preferred embodiment of the present invention has been described above, the present invention is not limited to the authentication system 1 according to the above embodiment, and all aspects included in the concept of the present invention and the scope of claims. including. In addition, each configuration may be selectively combined as appropriate so as to achieve at least a part of the above-mentioned problems and effects. For example, the arrangement, combination, and the like of each component in the above embodiment can be appropriately changed depending on the specific usage mode of the present invention.

1, 1a, 1b, 1c ... Authentication system, 20 ... Smart meter (power meter), 21 ... Power consumption measurement unit, 22 ... Smart meter storage unit, 25 ... Communication processing unit, 30 ... Smart meter management server, 30s ... location code authentication and smart meter management server, 40 ... location code generator, 40M ... location code generator (master unit), 40S ... location code generator (slave unit), 41 ... Storage unit, 42 ... Control unit, 42a ... Location code generation unit, 42b ... Activate processing unit, 42c ... Alive signal generation unit, 43 ... Communication processing unit, 43a ... Radio signal conversion unit, 43b ... Ultrasonic conversion unit, 43c ... Sound processing unit, 45 ... Speaker, 46 ... Microphone, 60 ... Electronic terminal (electronic terminal), 80 ... ID password authentication server, 80a ... Communication processing unit, 80b ... storage unit, 80c ... authentication processing unit, 80s ... location code authentication and ID password authentication server, 90 ... distribution board, 100 ... location code authentication server, 110 ... bank counter, 110s ... bank Server, D1, D2 ... LPC device, rt1 to rt4 ... Router.

Claims (8)

With a digital electricity meter
A location code generator that generates a unique location code by a predetermined function expression based on the unique watt hour meter identification information assigned to the watt-hour meter, and a communication process that transmits the location code by a predetermined communication method. Location code generator with a part and
A first authentication server that receives the location code from the electronic terminal that has received the location code transmitted by the communication processing unit and authenticates the electronic terminal based on the location code.
It is integrated or separate from the first authentication server, has user information associated with the location code, and determines whether or not the user information matches the user information received from the bank counter or an external server. The second authentication server to do
An authentication system characterized by being equipped with. In addition to the watt hour meter identification information, the location code generation unit receives unique location code generation device identification information assigned to the location code generation unit and salt information supplied from the first authentication server. The authentication system according to claim 1, wherein the location code is generated based on the function formula. The authentication system according to claim 1 or 2, wherein the communication processing unit transmits the location code to the electronic terminal by ultrasonic communication. In a state where the watt hour meter, the location code generator, and the electronic terminal are activated, the alive signal generated by the location code generator is the watt hour meter, the location code generator, and the like. Further, when the electronic terminal is transmitted / received between the three parties, the first authentication server transmits salt information to the location code generator when the existence of the alive signal can be confirmed. The authentication system according to claim 2. The first authentication server, the alive signal, Yu chromatography The ID and password, the location code, to claim 4, wherein the authenticating the electronic device based on the unique device identification information of the electronic device The listed authentication system. The second authentication server sends a numbered PIN code to a user, and determines whether or not the PIN code returned by the user matches the numbered PIN code. The authentication system according to any one of 5 to 5. A location code generation step in which the location code generator generates a unique location code by a predetermined function formula based on the unique watt hour meter identification information assigned to the digital watt-hour meter.
A transmission step in which the location code is transmitted by the communication processing unit by a predetermined communication method, and
An authentication step of receiving the location code from an electronic terminal that has received the location code transmitted by the communication processing unit and authenticating the electronic terminal with the first authentication server based on the location code.
Whether or not the user information associated with the location code matches the user information received from the bank counter or an external server is determined by a second authentication server integrated with or separate from the first authentication server. Steps to do and
An authentication method characterized by having. A claim comprising a step of sending a PIN code issued by the second authentication server to a user and determining whether or not the PIN code returned from the user matches the issued PIN code. Item 7. The authentication method according to item 7.