JP6836145B2 - Authentication system, authentication method, and location code generator - Google Patents

Description

The present invention relates to an authentication system using an electronic terminal.

Conventionally, a two-step authentication method or a one-time password authentication method (see, for example, Patent Document 1) is generally well known for user authentication (personal authentication) using a mobile terminal. For example, in the one-time password authentication method, not only the elements known only to the user such as the user ID and password, but also the second element, that is, no one can predict and is valid only once for each login. User authentication is performed by combining these with a unique one-time password.

JP-A-2002-278929

However, in the user authentication method such as the one-time password authentication method described above, the one-time password is transmitted from the authentication server via the portable electronic terminal owned by the user, so that the user ID and password are stolen. In addition, if even the electronic terminal is stolen by a malicious third party, there is a risk that so-called spoofing will be performed in user authentication.

Therefore, in view of such a problem, an object of the present invention is to provide an authentication system, an authentication method, and a location code generator that can effectively prevent so-called spoofing in user authentication.

In order to achieve the above object, in the authentication system of the present invention, a unique location by a predetermined function formula based on a digital watt-hour meter and unique watt-hour meter identification information assigned to the watt-hour meter. From a location code generator having a location code generator that generates a code, a communication processing unit that transmits the location code by a predetermined communication method, and an electronic terminal that receives the location code transmitted by the communication processing unit. It is characterized by including an authentication server that receives the location code and authenticates the electronic terminal based on the location code.

In the present invention, the location code generation unit, in addition to the watt hour meter identification information, unique location code generation device identification information assigned to the location code generation unit, and salt information supplied from the authentication server. The location code is generated by the function formula based on the above.

In the present invention, the communication processing unit is characterized in that the location code is transmitted to the electronic terminal by ultrasonic communication.

In the present invention, in a state where the watt hour meter, the location code generator, and the electronic terminal are activated, the alive signal generated by the location code generator is the watt hour meter, the location. When the code generator and the electronic terminal are transmitted and received, and when the authentication server can confirm the existence of the alive signal, the salt information is transmitted to the location code generator. To do.

In the present invention, the authentication server is characterized in that the electronic terminal is authenticated based on the alive signal, the user ID and password, the location code, and the unique device identification information of the electronic terminal.

In the authentication method of the present invention, the location code generation step of generating a unique location code by the location code generator by a predetermined function formula based on the unique watt hour meter identification information assigned to the digital watt-hour meter. , The transmission step of transmitting the location code by the communication processing unit by a predetermined communication method, and the location code received from the electronic terminal receiving the location code transmitted by the communication processing unit, and the location code is based on the location code. It is characterized by having an authentication step of authenticating an electronic terminal by an authentication server.

In the location code generator of the present invention, a location code generation unit that generates a unique location code by a predetermined function formula using the unique watt hour meter identification information assigned to the digital watt-hour meter, and the location. It is characterized by including a communication processing unit that transmits a code to an electronic terminal.

In the present invention, in addition to the watt hour meter identification information, the location code generation unit uses the unique location code generator identification information assigned to the location code generation unit and the salt information supplied from the authentication server. Based on the above, the location code is generated by the function formula.

In the present invention, the communication processing unit is characterized in that the location code is transmitted by ultrasonic communication.

According to the present invention, so-called spoofing can be effectively prevented in user authentication.

It is a block diagram which shows the whole structure of the authentication system which concerns on embodiment of this invention. It is a block diagram which shows the other example (1) with respect to the whole structure of the authentication system which concerns on embodiment of this invention. It is a block diagram which shows the other example (2) with respect to the whole structure of the authentication system which concerns on embodiment of this invention. It is a block diagram which shows the structure of the smart meter which concerns on embodiment of this invention. It is a schematic diagram which shows the unique information which each of the smart meter and the location code generation apparatus which concerns on embodiment of this invention has. It is a block diagram which shows the structure of the location code generation apparatus which concerns on embodiment of this invention. It is a schematic diagram provided for the explanation of the salt answer information generated by the location code generation apparatus which concerns on embodiment of this invention. It is a schematic diagram provided for the explanation of the alive signal transmitted and received between the smart meter, the location code generator, and the electronic terminal which concerns on embodiment of this invention. It is a block diagram which shows the structure of the ID password authentication server which concerns on embodiment of this invention. The schematic diagram provided for explaining the relationship between the location code generated by the location code generator according to the embodiment of the present invention and the location code that the ID password authentication server is expected to be generated by the location code generator. is there. FIG. 5 is a schematic diagram showing a network topology constructed between a smart meter management server, a smart meter, a location code generator, an electronic terminal, and an ID password authentication server according to an embodiment of the present invention. In the embodiment of the present invention, it is a schematic diagram provided for explaining the correspondence between the smart meter associated with the user ID and the password and the location code generator, which is recognized by the ID password authentication server. In the embodiment of the present invention, it is a schematic diagram provided for the description of the activation process of the location code generator and the electronic terminal. FIG. 5 is a schematic diagram provided for explaining the activation process of the location code generator and the smart meter in the embodiment of the present invention. In the embodiment of the present invention, it is a schematic diagram provided for the description of the activation process of the location code generator and the second electronic terminal. In the embodiment of the present invention, it is a flowchart which shows the procedure of the activation process of the location code generator and the 1st and 2nd electronic terminals. In the embodiment of the present invention, it is a flowchart which shows the procedure of the activation process of a location code generator and a smart meter. It is a sequence chart which shows the authentication processing sequence in the authentication system which concerns on embodiment of this invention. FIG. 5 is a schematic diagram provided for explaining a series of flows from the generation of an alive signal to the generation of salt answer information in the embodiment of the present invention. FIG. 5 is a schematic diagram provided for explaining the four elements of the authentication process in the embodiment of the present invention. It is a flowchart which shows the authentication processing procedure by the ID password authentication server in embodiment of this invention. FIG. 5 is a schematic diagram provided for explaining an example in which login authentication is not permitted when the latest alive signal cannot be obtained in the embodiment of the present invention. FIG. 5 is a schematic diagram provided for explaining an example in which login authentication is not permitted when the latest alive signal cannot be obtained and the salt answer information does not match in the embodiment of the present invention. Schematic diagram provided for explaining an example in which login authentication is not permitted when the latest alive signal cannot be obtained, the salt answer information does not match, and the device identification information of the electronic terminal does not match in the embodiment of the present invention. Is. In the embodiment of the present invention, when the latest alive signal cannot be obtained, the salt answer information does not match, the device identification information of the electronic terminal does not match, the user ID and password do not match, and the smart meter It is a schematic diagram provided to explain an example in which login authentication is not permitted in the case of theft. FIG. 5 is a configuration diagram showing an overall configuration (1) of an authentication system using both the A route and the B route in the embodiment of the present invention. FIG. 5 is a configuration diagram showing an overall configuration (2) of an authentication system using both the A route and the B route in the embodiment of the present invention. FIG. 5 is a configuration diagram showing an overall configuration (3) of an authentication system using both the A route and the B route in the embodiment of the present invention. FIG. 5 is a schematic diagram provided for explaining an authentication process by an authentication system using both the A route and the B route in the embodiment of the present invention.

<Embodiment of the present invention>
Hereinafter, embodiments of the present invention will be described with reference to the drawings.

<Overall configuration of authentication system>
As shown in FIG. 1, the authentication system 1 according to the embodiment of the present invention includes a smart meter 20, a smart meter management server 30, a location code generator 40, an electronic terminal 60, and an ID password authentication server 80. ..

The smart meter 20 is wirelessly connected to the smart meter management server 30 via a first communication path called the so-called A route, and is wirelessly connected to the location code generator 40 via a second communication path called the so-called B route. It is connected.

Here, the A route is data corresponding to the power consumption measured by the smart meter 20 with respect to the smart meter management server 30 prepared by the electric power company (hereinafter, this is also referred to as "power usage data"). It is a communication path of the access system network that directly transmits.).

In the connection between the smart meter 20 and the smart meter management server 30 via the A route, a plurality of smart meters 20 transmit data by wireless multi-hop communication to a concentrator (aggregator) (not shown) while performing a so-called bucket relay. Then, the concentrator may be connected to the smart meter management server 30 via a WAN (Wide Area Network) line and a router.

In addition, the B route is a wireless system in which a HEMS (Home Energy Management System) terminal in a building and a smart meter 20 are connected as a physical layer using a 920 MHz band (Wi-SUN), and the power of the smart meter 20 is used. This is a communication path of a home communication network that transmits quantity data to the HEMS terminal. Therefore, the smart meter 20 can communicate with the location code generator 40 via the B route connected to the HEMS terminal in the building.

As shown in FIG. 2, the smart meters 20A and 20B may be connected to a distribution board 90 connected to home appliances such as an indoor air conditioner, and the smart meters 20B to the distribution board 90 may be connected to the smart meters 20B. The smart meter 20A may be connected in series. Further, the smart meters 20A and 20B do not necessarily have to be separate from the location code generation device 40, and may have an integrated configuration incorporating the location code generation device 40.

Further, as shown in FIG. 3, when the distance from the smart meter 20 to the location code generation device 40M (master unit) is long, the smart meter 20 has a first PLC (Power Line Communication) device D1 and a second It is possible to connect to the location code generation device 40M (master unit) via the PLC device D2.

In this case, the smart meter 20 is wirelessly connected to the location code generator 40S (slave unit), and the location code generator 40S (slave unit) is connected to the first PLC device D1. The location code generation device 40M (master unit) is connected to the second PLC device D2.

The first PLC device D1 and the second PLC device D2 are connected to a power line via outlets C1 and C2, and the first PLC device D1 and the second PLC device D2 communicate with each other by power line communication (for example,). Both are connected by G3-PLC). However, the present invention is not limited to this, and the first PLC device D1 and the second PLC device D2 may be connected to each other via the distribution board 90 (FIG. 2). The smart meter 20 may have an integral structure with the first PLC device D1, and the location code generation device 40 may have an integral structure with the second PLC device D2.

In this case, a power supply unit such as an outlet C1 is arranged near the installation location of the smart meter 20, and power is supplied from the outlet C1 to the smart meter 20.

<Smart meter>
The smart meter 20 is generally a digital watt-hour meter that is individually attached to each minimum unit of consumers who pay electricity charges for each household, each store, and the like. The smart meter 20 has an arithmetic processing function and a communication function for communicating with the outside. However, for example, when a smart meter 20 is provided for each floor and each store, such as a building, and the owner of the building is the minimum unit for paying electricity charges, the owner owns a plurality of smart meters 20. Sometimes.

However, as shown in FIG. 2, as in the smart meters 20A and 20B, although the smart meter 20A is owned by the consumer who pays the electricity charge, the smart meter 20B has nothing to do with the payment of the electricity charge. It is also possible to newly provide it personally in order to construct this authentication system 1. That is, the smart meter 20 can be purchased and installed as a private property separately from the electric power company in order to construct the authentication system 1 regardless of the payment of the electricity charge.

The smart meter 20 is a unique watt-hour meter that is different from each other. Therefore, each of the plurality of smart meters 20 has different unique smart meter identification information (hereinafter, this is also referred to as "SM identification information"). The SM identification information assigned to the smart meter 20 is unique information that cannot be rewritten.

As shown in FIG. 4, the smart meter 20 includes a power consumption measuring unit 21, a smart meter storage unit 22, and a communication processing unit 25. The power consumption measuring unit 21 is a functional unit that measures and holds the power consumption when power is used, and is based on the measured values measured by a current sensor that measures current, a voltage sensor that measures voltage, and the like. Performs arithmetic processing to calculate power usage data.

The power consumption measuring unit 21 is composed of, for example, a CPU (Central Processing Unit), a memory, an MCU (Micro Control Unit) including an interface, and the like. The power consumption measuring unit 21 stores the activate ID and the initial password for the location code generation device 40 and the smart meter 20 to activate in the smart meter storage unit 22. Here, activate means to enable devices connected to each other.

The smart meter storage unit 22 is a functional unit that stores the unique SM identification information assigned to the smart meter 20 in a non-rewritable state. The smart meter storage unit 22 includes, for example, a ROM (Read Only Memory) or the like. That is, as shown in FIG. 5A, the smart meter 20 has unique SM identification information that is unique and non-rewritable.

The communication processing unit 25 is a functional unit that transmits power usage data supplied from the power usage measuring unit 21 to the outside, and is configured by, for example, a wireless LSI (Large-Scale Integration) compatible with 920 MHz. The communication processing unit 25 wirelessly transmits the power usage data to the smart meter management server 30 via the A route, for example, every 30 minutes. However, the communication processing unit 25 may transmit the power usage data by wire via the A route. Further, the communication processing unit 25 modulates a 920 MHz carrier wave based on the SM identification information of the smart meter 20 stored in the smart meter storage unit 22, for example, and generates a location code using the modulated signal obtained as a result as a radio wave. Radio transmission is performed to the device 40 via the B route.

<Smart meter management server>
The smart meter management server 30 (FIG. 1) is a server that has a CPU, a large-capacity storage, a network interface, and the like, and manages a large number of smart meters 20.

The smart meter management server 30 centrally manages the location (address, etc.) where the smart meter 20 is installed, the SM identification information of the smart meter 20, and the personal information of the contractor of the smart meter 20. The smart meter management server 30 is connected to the ID password authentication server 80, which will be described later, via a network NT such as the Internet.

The smart meter management server 30 always maintains a communication connection state with the smart meter 20, and if the smart meter 20 breaks down or is stolen and removed, communication with the smart meter 20 is performed. It is possible to detect that the connection state is no longer maintained, and it is possible to determine that the connection state is abnormal. In this case, the smart meter management server 30 can notify the ID password authentication server 80 that the smart meter 20 is in an abnormal state via a network such as the Internet.

<Location code generator>
The location code generator 40 is wirelessly connected to the smart meter 20 and the electronic terminal 60, and is particularly connected to the electronic terminal 60 by an ultrasonic communication method. However, the present invention is not limited to this, and optical communication methods having high directivity (straightness) such as infrared communication and visible light communication with respect to the electronic terminal 60, Bluetooth (registered trademark), WLAN (Wireless Local Area Network), etc. It may be connected by the short-range wireless communication method of.

As shown in FIG. 6, the location code generation device 40 includes a storage unit 41, a control unit 42, and a communication processing unit 43.

The storage unit 41 is a functional unit that stores unique identification information (hereinafter, also referred to as “LC identification information”) assigned in advance to the location code generation device 40, and is a rewritable ROM (Read). Only Memory), for example, consists of flash memory. However, since the storage unit 41 has a unique connection relationship between the location code generator 40 and the smart meter 20, it is possible to store the SM identification information of the smart meter 20 in advance in addition to the LC identification information. In that case, it may consist of a non-rewritable ROM or the like.

That is, as shown in FIG. 5B, the location code generation device 40 has unique LC identification information in advance. Further, the storage unit 41 does not store the SM identification information in advance, but receives the SM identification information from the smart meter 20 via the communication processing unit 43, and stores the SM identification information together with the LC identification information. Is also possible.

In addition to the application program for performing ultrasonic communication between the communication processing unit 43 and the electronic terminal 60, a dedicated application program for generating a location code or the like is pre-installed in the storage unit 41. The communication processing unit 43 performs ultrasonic communication with the electronic terminal 60 based on this application program.

The control unit 42 is composed of an MCU including a CPU, a memory, and an interface. By collaborating with the MCU and an application program, the location code generation unit 42a, the activate processing unit 42b, the alive signal generation unit 42c, and the like are combined. Each functional part is built.

The location code generation unit 42a is a functional unit that generates a code related to the location to which the smart meter 20 and the location code generation device 40 are attached (hereinafter, this is also referred to as a “location code”). Specifically, the location code generation unit 42a stores a predetermined salt answer function expression provided in advance from the ID password authentication server 80 in the storage unit 41.

That is, the location code generation unit 42a uses the salt information (some arbitrary data) given from the ID password authentication server 80, the LC identification information stored in the storage unit 41, and the SM identification information to provide a salt answer by a salt answer function formula. Generate an informative location code.

Here, the salt answer function expression is a salt answer information (encrypted data such as a hash value) generated by a hash function or the like in which lossy processing is performed when salt information is given from the ID password authentication server 80. It is a function expression that does. The salt information is data that is input for calculating the salt answer information based on the salt answer function formula. For example, the power consumption data can be used as the salt information. However, the data is not limited to the power consumption data, and various arbitrary data such as a set value of prime numbers, a random value, and the like can be used.

This salt answer function expression is provided in advance from the ID password authentication server 80 as a unique function expression that differs for each location code generation device 40. That is, as shown in FIG. 5C, the location code generation device 40 holds a unique salt answer function expression. The ID password authentication server 80 stores the correspondence between the location code generator 40 and the salt answer function expression.

In this way, the location code generation unit 42a stores a unique salt answer function expression, and uses salt information, LC identification information, and SM identification information to form a location consisting of serial data by the salt answer function expression. Generate code as salt answer information.

However, the location code generation unit 42a does not have to generate the location code by the salt answer function formula using all the salt information, the LC identification information, and the SM identification information, and at least the location code generation unit 42a uses the SM identification information to salt. The location code may be generated by the answer function expression, or the location code may be generated by arbitrarily combining the salt information, the LC identification information, and the SM identification information.

As shown in FIG. 7, for example, even if there are two location code generators 40a and 40b and the same salt information (for example, [XKH48269PIM]) is provided by the ID password authentication server 80, the location code generator 40a , 40b have different salt answer function formulas, different LC identification information (AA-BB-CC) and different LC identification information (ZZ-YY-XX), and different SM identification information. ..

Therefore, even if the salt information is the same, the location code generation unit 42a of the location code generator 40a generates a unique location code (for example, [POPPNNJRFFSS]) as salt answer information, and the location code of the location code generator 40b. The generation unit 42a generates a unique location code (for example, [TPGVELNWPS]) as salt answer information.

The activate processing unit 42b is a functional unit that performs activation processing of the location code generator 40, the electronic terminal 60, and the smart meter 20. The activate processing unit 42b internally stores the activate ID, the initial password, and the like, and activates the location code generator 40 and the electronic terminal 60 using the activate ID and the initial password to activate the location code generator 40. Activate the 40 and the smart meter 20.

When the alive signal generation unit 42c receives the power usage charge data wirelessly transmitted via the communication processing unit 25 of the smart meter 20 at intervals of 30 minutes by the communication processing unit 43 described later, the alive signal generation unit 42c is based on the power usage charge data. This is a functional unit that generates an alive signal at predetermined time intervals (for example, every 1 second) and transmits it to the smart meter 20 again via the communication processing unit 43.

Here, as shown in FIG. 8, the alive signal AL is the location code generator 40 in an activated state in which the location code generator 40, the smart meter 20, and the electronic terminal 60 are effectively connected. 40-> smart meter 20-> location code generator 40-> electronic terminal 60-> location code generator 40-> smart meter 20-> ... The transmission is performed without interruption while patrolling between the three parties. The existence of this alive signal AL means that the network topology by the regular three parties is established.

The communication processing unit 43 establishes (activates) wireless communication with the smart meter 20 via the B route according to the application program of the storage unit 41, and SM identification information of the location code generation device 40 from the smart meter 20. It is possible to receive. The communication processing unit 43 exchanges the alive signal AL with the smart meter 20 and the electronic terminal 60.

Further, the communication processing unit 43 can receive the salt information and the alive signal AL from the ID password authentication server 80 as ultrasonic waves from the electronic terminal 60 by the microphone 46, and is generated by the location code generation unit 42a. It is possible to authenticate the location code as ultrasonic waves from the speaker 45 to the electronic terminal 60.

As shown in FIG. 6, the communication processing unit 43 includes a radio signal conversion unit 43a, an ultrasonic conversion unit 43b, and an acoustic processing unit 43c. The wireless signal conversion unit 43a has the same configuration as the communication processing unit 25 of the smart meter 20. Therefore, the wireless signal conversion unit 43a demodulates the radio wave received from the smart meter 20, restores the SM identification information and the alive signal AL, and modulates the alive signal AL to be wirelessly transmitted to the smart meter 20. It is possible to do. The wireless signal conversion unit 43a stores the SM identification information obtained from the smart meter 20 in the storage unit 41.

The radio signal conversion unit 43a can also transmit the location code generated by the location code generation unit 42a from the smart meter 20 to the smart meter management server 30 by the so-called A route. In that case, for example, the location code. The carrier wave is modulated based on the above, and wirelessly transmitted to the smart meter 20 as radio waves.

When the ultrasonic conversion unit 43b receives the location code or the alive signal AL composed of the serial data generated by the location code generation unit 42a via the radio signal conversion unit 43a, the ultrasonic conversion unit 43b outputs the location code as ultrasonic waves from the speaker 45. It is a functional part that converts into an ultrasonic signal of.

The sound processing unit 43c generates an ultrasonic sound source corresponding to the ultrasonic signal supplied from the ultrasonic conversion unit 43b and outputs it from the speaker 45, and receives the ultrasonic sound output from the speaker of the electronic terminal 60 by the microphone 46. It is a functional unit that outputs an ultrasonic signal to the ultrasonic conversion unit 43b. For example, when the sound processing unit 43c receives salt information as ultrasonic waves from the ID password authentication server 80 via the electronic terminal 60, or receives the alive signal AL as ultrasonic waves from the electronic terminal 60, the ultrasonic signal is received. It is output to the location code generation unit 42a via the ultrasonic conversion unit 43b and the radio signal conversion unit 43a.

Here, the reason for performing ultrasonic communication between the location code generator 40 and the electronic terminal 60 is that the location code generator 40 and the electronic terminal 60 do not require complicated processing to establish a communication link as compared with radio communication. This is because it is easy to establish a communication link with the terminal 60 and the confidentiality at the time of data transmission is high. For ultrasonic waves, it is only necessary to convert the signal sent to the other device into ultrasonic waves, oscillate from the speaker, and receive it with the microphone of the other device, which is easy with software without the need for special hardware configuration. It is a feasible communication method.

In addition, ultrasonic waves have a transmission speed as slow as one millionth of electricity and light, have a limited reach, and have strong directivity, so the installation interval between the location code generator 40 and the electronic terminal 60 is short. Therefore, the risk of leakage is reduced as compared with the case where the installation interval is long.

<Electronic terminal>
The electronic terminal 60 is wired (or wirelessly connected) to the ID password authentication server 80 via routers rt1 and rt2. However, the electronic terminal 60 and the ID password authentication server 80 may be connected to each other without going through the routers rt1 and rt2, or may be wirelessly connected. Here, the electronic terminal 60 is preferably an electronic device including a speaker and a microphone capable of transmitting and receiving at least ultrasonic waves, such as a smartphone, a notebook computer, and a mobile phone.

The electronic terminal 60 is a computer device having a CPU, ROM, RAM, memory, speaker, microphone, camera, and the like. The electronic terminal 60 used in the authentication system 1 is pre-installed with a dedicated application program for performing ultrasonic communication and various dedicated processes with the location code generator 40, and other than that, it is normal. Similar to a smartphone.

When the electronic terminal 60 performs ultrasonic communication with the location code generation device 40, the electronic terminal 60 can perform ultrasonic communication via its own speaker and microphone according to an application program. Specifically, the electronic terminal 60 transmits the salt information from the ID password authentication server 80 to the location code generator 40, or uses the location code, which is the salt answer information generated by the location code generator 40, as ultrasonic waves. It can be received and transmitted to the ID password authentication server 80.

The electronic terminal 60 stores the unique device identification information assigned to itself in the memory in advance, and when a login authentication request is made to the ID password authentication server 80, the device identification information is also sent to the ID password authentication server 80. Send wirelessly. It is assumed that the ID password authentication server 80 also stores the device identification information of the electronic terminal 60 in advance.

<ID password authentication server>
The ID password authentication server 80 is a server having a CPU, a large-capacity storage, a network interface, and the like, and authenticates that the electronic terminal 60 is a legitimate user before the electronic terminal 60 accesses, for example, a content server or the like. Is.

As shown in FIG. 9, the ID password authentication server 80 includes a communication processing unit 80a composed of a network interface, a storage unit 80b composed of a large-capacity storage, and an authentication processing unit 80c composed of a CPU. Each function of the communication processing unit 80a, the storage unit 80b, and the authentication processing unit 80c of the ID password authentication server 80 is performed by the cooperation of these hardware resources and a predetermined authentication program stored in the storage unit 80b. It will be realized.

The communication processing unit 80a is a functional unit that wirelessly transmits and receives data between the ID password authentication server 80 and the electronic terminal 60. The storage unit 80b is a functional unit that stores salt information, a salt answer function formula, SM identification information of the smart meter 20, LC identification information of the location code generation device 40, device identification information of the electronic terminal 60, and the like.

The authentication processing unit 80c includes salt answer information (location code) received from the location code generator 40, an alive signal AL received from the electronic terminal 60, SM identification information of the smart meter 20, a user ID and password from the electronic terminal 60, and , A functional unit that performs login authentication based on device identification information, etc., and details will be described later.

The ID password authentication server 80 can transmit salt information to the electronic terminal 60 by the communication processing unit 80a, and can transmit the salt information to the location code generation device 40 as ultrasonic waves via the electronic terminal 60. Further, the ID password authentication server 80 can receive the salt answer information (location code) from the location code generator 40 and the user ID, password, and device identification information from the electronic terminal 60 by the communication processing unit 80a. ..

As shown in FIG. 10, the ID password authentication server 80 performs the salt information ([XKH48269PIM]) transmitted to the location code generation device 40 and the same salt answer function expression held by the location code generation device 40. It is stored in the storage unit 80b. Therefore, the ID password authentication server 80 can determine the validity of the salt answer information ([POPPNNJRFFSS]), that is, the location code received from the electronic terminal 60 by the authentication processing unit 80c. The authentication processing unit 80c performs login authentication processing using not only the salt answer information (location code) but also the alive signal AL, the user ID and password from the electronic terminal 60, the device identification information, and the like.

<Mutual relationship between smart meters, location code generators, and electronic terminals>
As shown in FIG. 11, in the authentication system 1, the smart meter 20, the location code generation device 40, and the electronic terminal 60 are each physically unique as devices, and the topology of a single network that connects the three parties. Is also unique. Therefore, in the authentication system 1, in addition to these three parties, the entire network topology including the smart meter management server 30 and the ID password authentication server 80 is also unique, and ID password authentication is performed from the smart meter management server 30. Signals can be transmitted and received in the network up to the server 80. That is, the path leads to the entire network.

Therefore, even one unit can be used as a solid combination of the smart meter 20, the location code generator 40, and the electronic terminal 60 that are constructed between the smart meter management server 30 of the authentication system 1 and the ID password authentication server 80. If changes occur, so will the network topology. For example, the ID password authentication server 80 may refuse authentication by the user ID and password from the electronic terminal 60 when this network topology is activated and data based on the rules is not transmitted / received to the entire topology. It will be possible.

As shown in FIG. 12, the ID password authentication server 80 includes a location code generator 40 and a smart meter 20 associated with a user ID and password used when the electronic terminal 60 logs in to the ID password authentication server 80. We are aware of the correspondence with. Therefore, the ID password authentication server 80 cannot link the three parties because the above-mentioned correspondence cannot be established with the combination of the other smart meter 20, the other location code generator 40, and the other user ID and password. It has become like.

The location code generator 40 can be activated with the smart meter 20 and the electronic terminal 60, and when activated, can continuously receive data transmitted from the smart meter 20 and the electronic terminal 60. This makes it possible to transmit the location code and the alive signal AL generated by the user to the smart meter 20 and the electronic terminal 60 being activated.

Further, when the activation with the smart meter 20 is released, the location code generation device 40 limits the data (location code) transmitted to the electronic terminal 60, and the limitation continues until it is activated again.

The combination of the activated location code generator 40 and the smart meter 20 is unique, and the location code generator 40 is limited to the smart meter 20 once it has been activated with the smart meter 20. Can be reactivated. Therefore, the location code generator 40 cannot be activated with a smart meter 20 other than the smart meter 20 that was activated first, and the location code generator 40 cannot be diverted to a connection with another smart meter 20. It will be possible.

The location code generator 40 can activate a plurality of electronic terminals 60, but certain conditions are required to activate the second and subsequent electronic terminals 60. It will be described later.

<Activation of location code generator and smart meter and electronic terminal>
First, before activating the location code generator 40 and the smart meter 20, it is necessary to activate the location code generator 40 and the electronic terminal 60. The reason is that the smart meter 20 and the location code generator 40 may not have an input unit (mouse, keyboard, etc.) and a display unit (liquid crystal screen, etc.) for displaying the input result, and are located between the two. Because there is no way to activate it.

As shown in FIG. 13, when activating the location code generator 40 and the first electronic terminal 60, the electronic terminal 60 inputs an activate ID and an initial password for activating the location code generator 40. Received from the ID password authentication server 80 in advance and stored.

Specifically, since the legitimate user of the location code generator 40 is notified from the ID password authentication server 80 of the activate ID and the initial password to the electronic terminal 60 as being a legitimate user of the authentication system 1, the electronic terminal 60 is notified. The activate ID and the initial password can be stored in the terminal 60.

The electronic terminal 60 reads the activate ID and the initial password according to the operation of the user, and transmits these to the location code generation device 40 by ultrasonic communication. The activate processing unit 42b of the location code generator 40 determines whether or not the activate ID and the initial password from the electronic terminal 60 are correct, and if it is determined to be correct, activates with the first electronic terminal 60. Execute the process. After the activation is completed, the initial password can be changed to an arbitrary value by the user, but the activation ID cannot be changed because it is a unique ID associated with the location code generator 40.

Subsequently, as shown in FIG. 14, when activating the location code generator 40 and the smart meter 20, the electronic terminal 60 uses the activate ID and the initial password used when activating the location code generator 40. Is wirelessly transmitted to the smart meter 20 via the location code generator 40. The power consumption measuring unit 21 of the smart meter 20 determines whether or not the activate ID and the initial password are correct, and if it is determined to be correct, executes the activate process with the location code generator 40.

Next, as shown in FIG. 15, a case where the location code generation device 40 and the second electronic terminal 60s are activated will be described. In order to activate the location code generator 40 with the second electronic terminal 60s, the activation process between the smart meter 20 and the first electronic terminal 60 needs to be completed.

In this case, if the activation process is completed between the location code generator 40 and the first electronic terminal 60, even if the first electronic terminal 60 is currently inactive, two units It is possible to perform an activate process between the electronic terminal 60s of the eye and the location code generator 40.

Subsequently, the procedure when the location code generation device 40 performs the activation process as described above between the electronic terminal 60 and the smart meter 20 will be described.

As shown in the main routine MRT1 of FIG. 16, the control unit 42 of the location code generation device 40 determines in step SP1 whether or not what is received from the electronic terminal 60 via the communication processing unit 43 is an activate request. When the determination is made by the activate processing unit 42b and a negative result is obtained (step SP1: NO), the process proceeds to the next step SP2, and when a positive result is obtained (step SP1: YES), the process proceeds to step SP5.

In step SP2, the activate processing unit 42b of the control unit 42 determines whether or not what is received via the communication processing unit 43 is an activation request from the smart meter 20 by the activate processing unit 42b. Here, since the smart meter 20 does not have an input unit and a display unit, an activation request is made from the smart meter 20 to the location code generator 40 via the electronic terminal 60.

If a negative result is obtained in step SP2 (step SP2: NO), this means that the activate request is not from the legitimate electronic terminal 60 and smart meter 20 associated with the location code generator 40. In this case, the activate processing unit 42b moves to the next step SP3. On the other hand, when an affirmative result is obtained in step SP2 (step SP2: YES), the process proceeds to the next step SP4, and the process proceeds to the activation process with the smart meter 20 as described later.

In step SP3, the activate processing unit 42b notifies the electronic terminal 60 of an error because it is not an activation request from the regular electronic terminal 60 and the regular smart meter 20, and activates the display screen of the electronic terminal 60. Display a bait error and end the activate process.

In step SP5, the activate processing unit 42b determines whether or not the electronic terminal 60 that has received the activate request is the first unit, and if the location code generator 40 is in the non-active state, the electronic terminal 60 Is the first unit, so an affirmative result is obtained (step SP5: YES), and the process proceeds to the next step SP6.

In step SP6, the activate processing unit 42b receives the activate ID for activation and the initial password for activation from the electronic terminal 60, and proceeds to the next step SP7.

In step SP7, the activate processing unit 42b determines whether or not both the activate ID received from the electronic terminal 60 and the activation initial password are correct. Here, in the case of the legitimate electronic terminal 60, the activation ID and the initial password for activation have been received in advance from the ID password authentication server 80, and the activation processing unit 42b of the location code generation device 40 has received the activation ID and the initial password for activation in advance. Also stores the activate ID assigned to the electronic terminal 60 and the initial password for the activate.

When an affirmative result is obtained in step SP7 (step SP7: YES), the activate processing unit 42b has the activate ID stored by itself, the initial password for activation, and the activate received from the electronic terminal 60. Since the ID and the initial password for activation match, it can be recognized as a legitimate electronic terminal 60 having a legitimate connection relationship. Therefore, the activate processing unit 42b moves to the next step SP8, performs the activate processing with the electronic terminal 60, and then returns to the step SP1 again.

On the other hand, if a negative result is obtained in step SP7 (step SP7: NO), the activate processing unit 42b does not match the activate ID and the activation initial password, and has a valid connection relationship. Recognizing that the electronic terminal 60 is not a legitimate electronic terminal 60, the process proceeds to the next step SP9, the activation error is displayed on the electronic terminal 60, and then the process returns to step SP1 again.

By the way, when a negative result is obtained in step SP5 (step SP5: NO), this means that the electronic terminal 60 that has received the activate request is not the first terminal but the second terminal. In this case, the activate processing unit 42b moves to the next step SP10 and performs the activate processing on the second electronic terminal 60s.

In step SP10, the activate processing unit 42b generates a temporary password for the second electronic terminal 60s only when it has already been activated with the first electronic terminal 60, and uses this as the first electronic terminal. It is transmitted to 60 by ultrasonic communication by the communication processing unit 43, and the process proceeds to the next step SP11.

In step SP11, the first electronic terminal 60 displays the received temporary password. In step SP12, the temporary password and the same activate ID as in the case of the first electronic terminal 60 are input from the second electronic terminal 60s. In step SP13, the activate processing unit 42b receives the activate ID and the temporary password, proceeds to the processing of the next steps SP7 to SP9, and based on the activate ID and the temporary password, of the second electronic terminal 60s. Execute the activate process. By the way, the owners of the first electronic terminal 60 and the second electronic terminal 60s can receive the same activation ID from the second electronic terminal 60s as in the case of the first electronic terminal 60. This is because they are the same as long as they are users, and can be said to be the regular second electronic terminal 60s following the regular first electronic terminal 60.

Subsequently, the activation process of the location code generator 40 and the smart meter 20 in step SP4 will be described in detail. As shown in FIG. 17, in step SP41, the activate processing unit 42b of the location code generation device 40 determines whether or not the location code generation device 40 and the first electronic terminal 60 have already been activated. When the determination is made and a negative result is obtained (step SP41: NO), the process returns to step SP1 (FIG. 15), and when a positive result is obtained (step SP41: YES), the process proceeds to the next step SP42.

In step SP42, the activate processing unit 42b wirelessly connects to the smart meter 20 by the communication processing unit 43 in response to a request from the electronic terminal 60 that has already been activated, and moves to the next step SP43.

In step SP43, the activate processing unit 42b replaces the activated ID assigned in advance from the ID password authentication server 80 to the smart meter 20 and the initial password for activation from the activated electronic terminal 60 to the smart meter 20. To determine whether or not it was received. Here, when a negative result is obtained (step SP43: NO), the process returns to step SP43 again, and the activate processing unit 42b receives the activate ID of the smart meter 20 and the initial password for activation from the electronic terminal 60. Wait until you do.

On the other hand, when an affirmative result is obtained in step SP43 (step SP43: YES), the activate processing unit 42b moves to the next steps SP44 to S46, and similarly to the smart meter 20 as in steps SP7 to SP9. Execute the activate process.

That is, when the activate processing unit 42b recognizes that the smart meter 20 has a legitimate connection relationship with the location code generator 40 based on the activate ID and the initial password for activation (step SP44: YES), activate processing with the smart meter 20 in step SP45.

On the other hand, when the activate processing unit 42b recognizes that it is not a legitimate electronic terminal 60 that does not have a valid connection relationship based on the activate ID and the initial activation password (step SP44: NO). In step SP46, after notifying and displaying the electronic terminal 60 that an activating error has occurred between the smart meter 20 and the location code generator 40, the activation process with the smart meter 20 is terminated.

<Authentication processing sequence>
Next, in such an authentication system 1, the authentication processing sequence at the time of login processing by the ID password authentication server 80 using the smart meter 20, the location code generation device 40, and the electronic terminal 60 is described using the sequence chart of FIG. explain.

First, in the processing procedure SK1, the electronic terminal 60 sends the activate ID and the initial password for activation to the location code generator 40 as authentication information from the electronic terminal 60 for activating with the location code generator 40. Send.

In the processing procedure SK2, the location code generation device 40 performs activation processing with the electronic terminal 60 when the authentication of the electronic terminal 60 is successful, and notifies the electronic terminal 60 that the activation has been completed. That is, the location code generation device 40 first completes the activate process with the electronic terminal 60.

After that, the location code generation device 40 completes the activate processing with the smart meter 20 in the processing procedures SK3 and SK4 in the same manner as the activation processing of the electronic terminal 60 (processing procedures SK1 and SK2).

The control unit 42 of the location code generation device 40 has completed the activation processing with both the electronic terminal 60 and the smart meter 20, and the topology by the regular three parties has been established. Therefore, in the processing procedure SK5, the alive signal generation unit 42c Generates an alive signal AL and transmits it to the smart meter 20.

When the communication processing unit 25 of the smart meter 20 receives the alive signal AL transmitted from the location code generation device 40 in the processing procedure SK6, it returns this to the location code generation device 40.

When the location code generation device 40 receives the alive signal AL from the smart meter 20 by the communication processing unit 43 in the processing procedure SK7, the location code generation device 40 transmits the alive signal AL to the electronic terminal 60 by ultrasonic communication via the communication processing unit 43. To do.

When the electronic terminal 60 receives the alive signal AL in the processing procedure SK8, the electronic terminal 60 immediately returns the alive signal AL to the location code generation device 40 by ultrasonic communication. In this way, as shown in FIG. 19, the location code generation device 40 continues to circulate the alive signal AL among the three parties thereafter. However, the direction of circulation of the alive signal AL is opposite to this, that is, the location code generator 40 → the electronic terminal 60 → the location code generator 40 → the smart meter 20 → the location code generator 40 → ... May be good.

In the processing procedure SK9, the electronic terminal 60 has a normal topology established between the location code generator 40 and the smart meter 20, and the alive signal AL can be circulated. Therefore, the alive signal AL can be used as the desired server. The authentication request information including the user ID and password for logging in and the unique device identification information assigned to the electronic terminal 60 is transmitted to the ID password authentication server 80.

The ID password authentication server 80 generates salt information in the processing procedures SK10 and SK11, and transmits the salt information to the location code generation device 40 via the electronic terminal 60 by ultrasonic communication.

When the location code generation device 40 receives the salt information in the processing procedures SK12 and SK13, the location code generation device 40 uses the SM identification information of the smart meter 20, the LC identification information of the location code generation device 40, and the salt information to provide a predetermined salt answer. Unique salt answer information (location code) is generated by a function formula, and this is transmitted from the electronic terminal 60 to the ID password authentication server 80.

The ID password authentication server 80 determines the authenticity of the login request from the electronic terminal 60 in the processing procedure SK14. Specifically, as shown in FIG. 20, the ID password authentication server 80 has a normal and unique network topology recognized by the ID password authentication server 80 by the smart meter 20, the location code generator 40, and the electronic terminal 60. The latest alive signal AL that circulates between the three parties, the user ID and password from the electronic terminal 60, the salt answer information (location code) generated by the location code generator 40, and the uniqueness of the electronic terminal 60. Only when all of the device identification information of the above is correctly prepared, it is determined that the login request from the electronic terminal 60 is true, and login authentication is permitted. The login authentication processing procedure by the ID password authentication server 80 will be specifically described with reference to the flowchart of FIG.

As shown in FIG. 21, the authentication processing unit 80c of the ID password authentication server 80 performs authentication including an alive signal AL, a user ID, a password, and device identification information of the electronic terminal 60 from the electronic terminal 60 in step SP51 of the processing procedure SK14. The communication processing unit 80a determines whether or not the request information has been received, and if a negative result is obtained (step SP51: NO), it waits until the authentication request information is received, and if a positive result is obtained (step SP51: YES). ), Move to the next step SP52.

In step SP52, the authentication processing unit 80c determines whether or not the alive signal AL is the latest one based on the generation time of the alive signal AL included in the authentication request information received from the electronic terminal 60. As described above, since the alive signal AL is generated every second, the authentication processing unit 80c can determine whether or not it is the latest alive signal AL by comparing it with the current time. For example, if the difference between the time when the alive signal AL is generated and the current time is within, for example, 2 seconds, it may be determined that the alive signal AL is the latest alive signal.

In step SP52, the authentication processing unit 80c determines whether or not the latest alive signal AL has been normally received. Here, when a negative result is obtained (step SP52: NO), this means that the smart meter 20, the location code generator 40, and the electronic terminal 60 recognize the regular and unique network topology recognized by the ID password authentication server 80. Indicates that the latest alive signal AL cannot be received without constructing. At this time, the authentication processing unit 80c proceeds to step SP58, transmits non-authentication result information representing "NOT TRUE" to the electronic terminal 60, displays "NOT TRUE" on the electronic terminal 60, and then performs login authentication processing. End the procedure.

On the other hand, when an affirmative result is obtained in step SP52 (step SP52: YES), in the authentication processing unit 80c, the smart meter 20, the location code generator 40, and the electronic terminal 60 are the three parties of the ID password authentication server 80. Recognizing that the normal and unique network topology to be recognized is being constructed, the process proceeds to the next step SP53, and the salt information is transmitted to the electronic terminal 60 by the communication processing unit 80a.

As a result, the electronic terminal 60 transmits the salt information to the location code generation device 40. The location code generation device 40 generates salt answer information (location code) by a salt answer function formula using salt information, SM identification information, and LC identification information, and transmits this from the electronic terminal 60 to the ID password authentication server 80. ..

In step SP54, the authentication processing unit 80c receives the salt answer information (location code) from the location code generation device 40, and proceeds to the next step SP55. In step SP55, the authentication processing unit 80c uses the latest alive signal AL, the user ID and password from the electronic terminal 60, the salt answer information (location code) generated by the location code generator 40, and the device identification of the electronic terminal 60. Only when all four elements of the information are correctly aligned, a positive result is obtained (step SP55: YES), and the process proceeds to the next step SP56.

In step SP56, the authentication processing unit 80c executes a login process for the electronic terminal 60, and in the next step SP57, the authentication result information representing “TRUE” is transmitted to display “TRUE” on the electronic terminal 60. After that, the login authentication processing procedure is completed.

On the other hand, if a negative result is obtained in step SP55 (step SP55: NO), this means that the authentication processing unit 80c cannot allow login because all four elements are not complete. The process proceeds to step SP58, and after transmitting the non-authentication result information to the electronic terminal 60 as described above, the login authentication processing procedure ends.

Here, when a negative result is obtained in step SP55, for example, when only the latest alive signal AL cannot be acquired as shown in FIG. 22, the latest alive signal AL and salt answer information are obtained as shown in FIG. 23. When (location code) cannot be obtained, as shown in FIG. 24, the latest alive signal AL, salt answer information (location code) and device identification information cannot be obtained, and as shown in FIG. 25, four elements. There are cases where not all can be obtained.

However, as shown in FIG. 25, a malicious third party illegally obtains a user ID and password, illegally obtains an electronic terminal 60, illegally obtains a location code generator 40, and a smart meter. If 20 is obtained illegally, it is considered that there is a possibility that a malicious third party may spoof.

However, if the smart meter 20 is removed from its legitimate location and installed elsewhere, communication between both the smart meter management server 30 and the smart meter 20 will be disconnected. Therefore, the smart meter management server 30 determines that the smart meter 20 is not installed at the original location or is in an abnormal state in which a failure has occurred, and ID password authentication is performed via the Internet for abnormal information indicating that the smart meter 20 is abnormal. It is possible to send to the server 80.

As a result, the ID password authentication server 80 performs unauthorized login authentication even if a malicious third party illegally acquires the user ID, password, electronic terminal 60, location code generator 40, and smart meter 20. Can be prevented and unauthorized login authentication by a malicious third party can be effectively invalidated.

In this way, in the authentication system 1, the login authentication process is performed only when the smart meter 20, the location code generator 40, and the electronic terminal 60 have constructed a legitimate and unique network topology recognized by the ID password authentication server 80. Therefore, it is possible to significantly prevent spoofing by a malicious third party as compared with the conventional case, and it is possible to further guarantee the security of the security on the network as compared with the conventional case.

<Authentication system using both A route and B route>
Next, a plurality of authentication systems using both the A route and the B route will be described. As shown in FIG. 26 having the same reference numerals as those corresponding to FIG. 1, the authentication system 1a includes a smart meter 20, a location code authentication and smart meter management server 30s, a location code generator 40, an electronic terminal 60, and It is provided with an ID password authentication server 80. The authentication system 1a is different in that the location code authentication and the smart meter management server 30s are provided.

The location code authentication and smart meter management server 30s can receive the location code generated by the location code generator 40 from the smart meter 20 by the so-called A route.

The location code generator 40 transmits the location code to the ID password authentication server 80 via the electronic terminal 60 by the so-called B route as before, and the ID password authentication server 80 receives the location code received via the B route. It is transmitted to the location code authentication and smart meter management server 30s via the router rt3, the Internet, and the router rt4.

The location code authentication and smart meter management server 30s has basically the same configuration as the configuration of the ID password authentication server 80 (FIG. 9), and the location code received via the A route in the authentication processing unit (not shown). , Matches with the location code received via route B.

If both location codes match, the location code authentication and smart meter management server 30s recognize it as normal login authentication, transmit the authentication result information representing "TRUE" to the smart meter 20 via route A, and further B. The location code generator 40 transmits the authentication result information to the electronic terminal 60 via the route, and the authentication result information is transmitted to the ID password authentication server 80 via the Internet.

As a result, the ID password authentication server 80 can execute the login process using the user ID and password by the electronic terminal 60 based on the location code authentication and the authentication result information received from the smart meter management server 30s.

Further, as shown in FIG. 27 in which the corresponding parts corresponding to those in FIG. 26 are designated by the same reference numerals, the authentication system 1b includes a smart meter 20, a smart meter management server 30, a location code generator 40, an electronic terminal 60, and a location code. It is equipped with an authentication and ID password authentication server 80s. The authentication system 1b is different in that the location code authentication and the ID password authentication server 80s are particularly provided.

In this case, the smart meter management server 30 receives the location code generated by the location code generator 40 from the smart meter 20 by the so-called route A. The smart meter management server 30 transmits the location code to the location code authentication and ID password authentication server 80s via the router rt4, the Internet, and the router rt3. The location code generation device 40 transmits the location code to the location code authentication and ID password authentication server 80s via the electronic terminal 60 by the so-called B route as before.

Therefore, the location code authentication and ID password authentication server 80s matches the location code received via the A route with the location code received via the B route in the authentication processing unit 80c. If both location codes match, the location code authentication and ID password authentication server 80s recognizes it as normal login authentication, transmits the authentication result information representing "TRUE" to the electronic terminal 60, and logs in by the electronic terminal 60. Execute the process. However, the present invention is not limited to this, and the location code authentication and ID password authentication server 80s can also transmit the authentication result information from the smart meter 20 to the electronic terminal 60 via the location code generator 40 via the A route. is there.

Further, as shown in FIG. 28 in which the corresponding parts with those in FIG. 1 are designated by the same reference numerals, the authentication system 1c includes a smart meter 20, a smart meter management server 30, a location code generator 40, an electronic terminal 60, and an ID password authentication server. In addition to the 80, the location code authentication server 100 is provided. The authentication system 1c is different in that the location code authentication server 100 is newly provided. The location code authentication server 100 has basically the same configuration as the configuration of the ID password authentication server 80 (FIG. 9).

In this case, the location code received by the location code authentication server 100 from the smart meter management server 30 via the router rt4 by the so-called A route and the location code received from the ID password authentication server 80 via the router rt3 by the so-called B route. Match with. If both location codes match, the location code authentication server 100 recognizes it as normal login authentication, and transmits the authentication result information representing "TRUE" to the electronic terminal 60 via the A route or the B route.

That is, as shown in FIG. 29, in the authentication systems 1a to 1c, the A route is used in any of the location code authentication and smart meter management server 30s, the location code authentication and ID password authentication server 80s, or the location code authentication server 100. Match the location codes received from both the B route and the B route, and if both location codes match, it is recognized as normal login authentication. In this case as well, authentication is performed using not only the location code but also the latest alive signal AL, the user ID and password from the electronic terminal 60, and the device identification information of the electronic terminal 60.

As a result, if the location code generated by the location code generator 40 is either the A route via the smart meter 20 or the B route via the electronic terminal 60, if a regular network topology is not constructed, the location is located. Since the codes do not match, the authentication systems 1a to 1c can effectively invalidate the unauthorized login authentication and guarantee the security of the security on the network.

<Other embodiments>
Although the preferred embodiment of the present invention has been described above, the present invention is not limited to the authentication system 1 according to the above embodiment, and all aspects included in the concept of the present invention and the scope of claims. including. In addition, each configuration may be selectively combined as appropriate so as to achieve at least a part of the above-mentioned problems and effects. For example, the arrangement, combination, and the like of each component in the above embodiment can be appropriately changed depending on the specific usage mode of the present invention.

1, 1a, 1b, 1c ... Authentication system, 20 ... Smart meter (power meter), 21 ... Power consumption measurement unit, 22 ... Smart meter storage unit, 25 ... Communication processing unit, 30 ... Smart meter management server, 30s ... Location code authentication and smart meter management server 40 ... Location code generator, 40M ... Location code generator (master unit), 40S ... Location code generator (slave unit), 41 ... ... Storage unit, 42 ... Control unit, 42a ... Location code generation unit, 42b ... Activate processing unit, 42c ... Alive signal generation unit, 43 ... Communication processing unit, 43a ... Radio signal conversion unit, 43b ...... Ultrasonic conversion unit, 43c ... Sound processing unit, 45 ... Speaker, 46 ... Microphone, 60 ... Electronic terminal (electronic terminal), 80 ... ID password authentication server (authentication server), 80a ... Communication Processing unit, 80b ... Storage unit, 80c ... Authentication processing unit, 80s ... Location code authentication and ID password authentication server, 90 ... Distribution board, D1, D2 ... LPC device, rt1 to rt4 ... Router.

Claims (8)

With a digital electricity meter
A location code generator that generates a unique location code by a predetermined function based on the unique watt hour meter identification information assigned to the watt-hour meter, and a unique location code generator assigned to the location code generator. A location code generator having a storage unit that stores identification information and a communication processing unit that transmits the location code by a predetermined communication method.
It is provided with an authentication server that receives the location code from the electronic terminal that has received the location code transmitted by the communication processing unit and authenticates the electronic terminal based on the location code.
The location code generation unit performs the function based on the unique location code generator identification information stored in the storage unit and the salt information supplied from the authentication server, in addition to the watt hour meter identification information. An authentication system characterized in that the location code is generated by an expression. The authentication system according to claim 1, wherein the communication processing unit transmits the location code to the electronic terminal by ultrasonic communication. In a state where the watt hour meter, the location code generator, and the electronic terminal are activated, the alive signal generated by the location code generator is the watt hour meter, the location code generator, and the like. and, if the are transmitted and received between three parties of the electronic terminal, if the authentication server can confirm the existence of the alive signal, claim and transmits the salt information to the location code generating device 1 The authentication system described in. The authentication system according to claim 3 , wherein the authentication server authenticates the electronic terminal based on the alive signal, the user ID and password, the location code, and the unique device identification information of the electronic terminal. .. A location code generation step in which the location code generator generates a unique location code by a predetermined function formula based on the unique watt hour meter identification information assigned to the digital watt-hour meter.
A storage step for storing the unique location code generator identification information assigned to the location code generator in the storage unit, and
A transmission step in which the location code is transmitted by the communication processing unit by a predetermined communication method, and
It has an authentication step of receiving the location code from an electronic terminal that has received the location code transmitted by the communication processing unit and authenticating the electronic terminal with an authentication server based on the location code.
In addition to the watt hour meter identification information, the location code generation unit performs the function based on the unique location code generation device identification information stored in the storage unit and the salt information supplied from the authentication server. An authentication method characterized in that the location code is generated by an expression. In addition to the non-rewritable unique watt-hour meter identification information assigned to the digital watt-hour meter, the unique location code generator identification information stored in the storage unit and the salt supplied from the predetermined authentication server. A location code generator that generates a unique location code by a predetermined function expression based on the information,
A location code generation device including a communication processing unit that transmits the location code to an electronic terminal authenticated by the authentication server based on the location code. In addition to the watt hour meter identification information, the location code generation unit performs the function based on the unique location code generation device identification information assigned to the location code generation unit and the salt information supplied from the authentication server. The location code generator according to claim 6, wherein the location code is generated by an equation. The location code generation device according to claim 6 or 7, wherein the communication processing unit transmits the location code by ultrasonic communication.