JP6901307B2 - User authentication system and user authentication method - Google Patents

Description

The present invention relates to a user authentication system and a user authentication method for authenticating the correctness of a user.

Conventionally, a user authentication system that allows entry into a building is well known if the fingerprint registered in advance by the fingerprint sensor is collated with the fingerprint input at the time of personal authentication and if these match and authentication is established. (See Patent Document 1 etc.).

Japanese Unexamined Patent Publication No. 2003-193723

In this type of user authentication system, for example, when biometric authentication using a fingerprint is established, it is assumed that an operation of keeping a personal authentication device such as an electronic key in an effective state for a certain period of time is taken. However, in this case, if the activated electronic key is lost by dropping it, there is a possibility that the electronic key may be illegally used by a third party who picks up the electronic key.

An object of the present invention is to provide a user authentication system and a user authentication method that can ensure security against loss of an electronic key.

The user authentication system that solves the above problems includes a first bioauthentication unit that authenticates the biometric information input to the electronic key and a second biometric information that authenticates the biometric information input to the communication partner capable of communicating with the electronic key. When the authentication unit, the authentication of the first bio-authentication unit and the authentication of the second bio-authentication unit are established, the authentication for confirming the correctness of the electronic key is performed, and if the authentication is established, the communication partner It is equipped with a key authentication unit that permits operation.

According to this configuration, when operating a communication partner with an electronic key, not only biometric authentication performed by inputting biometric information into the electronic key but also biometric authentication performed by inputting biometric information into the communication partner is established. You will need it. Therefore, when the electronic key is dropped and lost, even if the electronic key is picked up by a third party, the third party cannot establish biometric authentication at the communication partner. The communication partner will not be used illegally. Therefore, it is possible to ensure security against loss of the electronic key.

In the user authentication system, it is preferable that the second biometric authentication unit obtains the biometric information input to the communication partner from the communication partner to the electronic key, and authenticates the biometric information with the electronic key. According to this configuration, since the biometric information is authenticated on the electronic key side, it is advantageous to simplify the configuration of the communication partner.

In the user authentication system, it is preferable that the first biometric authentication unit activates the operating state of the electronic key for a certain period of time when the authentication of the biometric information is established. According to this configuration, even if the authentication of biometric information is established, the valid state is limited to a certain period of time, which is more advantageous for ensuring security against loss of the electronic key.

In the user authentication system, in the authentication of the biometric information, it is preferable to execute personal identification based on the biometric information. According to this configuration, it is possible to identify the user who has input the biometric information, so that, for example, the communication partner can execute an operation peculiar to each user. Therefore, it is possible to improve the convenience of the user when operating the communication partner with the electronic key.

In the user authentication system, the validity / invalidity of the electronic key is determined based on the function off condition input as a condition for turning off the function of the electronic key, and when the function off condition is satisfied, the electronic It is preferable to include a valid determination unit that invalidates the operating state of the key. According to this configuration, if the function off condition is input to the electronic key, the electronic key that has been switched to the valid state can be arbitrarily returned to the invalid state.

In the user authentication system, the key authentication unit can identify an electronic key ID unique to each key registered in the electronic key, authentication data required for cryptographic authentication, and a user who has input the biometric information. It is preferable to transmit the data from the electronic key to the communication partner to perform key authentication. According to this configuration, it is possible to more accurately determine the correctness of the electronic key by the authentication for confirming the electronic key ID and the authentication data. In addition, it is possible to personally identify the user by the personal identification data calculated by the electronic key.

In the user authentication system, the key authentication unit associates an electronic key ID specified by biometric authentication among a plurality of electronic key IDs registered in the electronic key with the electronic key ID for use in cryptographic authentication. It is preferable to transmit the authenticated authentication data from the electronic key to the communication partner to execute key authentication. According to this configuration, it is possible to more accurately determine the correctness of the electronic key by the authentication for confirming the electronic key ID and the authentication data. Further, when identifying the individual user, for example, it is not necessary to notify the communication partner of the personal identification data from the electronic key, so that the amount of transmitted data can be suppressed accordingly.

The user authentication method for solving the above problems includes a step of authenticating the biometric information input to the electronic key by the first biometric authentication unit and a second biometric information input to the communication partner capable of communicating with the electronic key. When the step of authenticating by the authentication unit, the authentication of the first bio-authentication unit and the authentication of the second bio-authentication unit are established, the key authentication unit performs the authentication for confirming the correctness of the electronic key, and the authentication is performed. If established, the key authentication unit includes a step of permitting the operation of the communication partner.

According to the present invention, security against loss of an electronic key can be ensured.

The block diagram of the user authentication system of one Embodiment. Flowchart of processing executed at the time of user authentication. Explanatory drawing which shows the processing outline of a key authentication. Explanatory drawing which shows the processing outline of the key authentication of another example.

Hereinafter, an embodiment of the user authentication system and the user authentication method will be described with reference to FIGS. 1 to 3.
As shown in FIG. 1, the vehicle 1 includes a user authentication system 2 for confirming the correctness of a user who uses the vehicle 1. The user authentication system 2 of this example executes user authentication by performing ID verification for authenticating the correctness of the electronic key 3 and biometric authentication for authenticating the biometric information D of the user of the electronic key 3. When the user authentication system 2 confirms that the user authentication is established, the user authentication system 2 permits or executes the operation of the in-vehicle device 4. The in-vehicle device 4 is preferably, for example, a door lock device or an engine of the vehicle 1.

The user authentication system 2 executes ID verification by radio between the vehicle 1 and the electronic key 3 through a key operation free system that wirelessly performs ID verification by communication from the vehicle 1. When the electronic key 3 receives the wake signal transmitted from the vehicle 1, the key operation free system switches the electronic key 3 to the activated state and executes ID verification (smart verification) between the vehicle 1 and the electronic key 3. In this ID verification, for example, verification for confirming the electronic key ID unique to the key registered in the electronic key 3 and authentication for confirming the correctness of the electronic key 3 using the authentication data K (for example, challenge response authentication) are executed. To.

The electronic key 3 determines whether or not the operation of the electronic key 3 is valid, the input unit 8 capable of inputting the user's biometric information D1 in the electronic key 3, the biometric authentication unit 9 that authenticates the correctness of the biometric information D1. It includes a valid determination unit 10 and a communication unit 11 that performs wireless communication with the vehicle 1. The vehicle 1 performs wireless communication between the input unit 12 capable of inputting the biometric information D2 of the user in the vehicle 1, the key authentication unit 13 that performs key authentication for confirming the correctness of the electronic key 3, and the electronic key 3. It includes a communication unit 14.

The input units 8 and 12 are composed of sensors capable of detecting physical characteristics as biological information D, for example. The biological information D includes, for example, a fingerprint, a voiceprint, an iris, a pulse, a face shape, and the like. The input unit 12 of the vehicle 1 is preferably arranged in the driver's seat, for example, in a steering wheel, an instrument panel, or the like.

The biometric authentication unit 9 is the biometric information input to the first biometric authentication unit 17 that authenticates the biometric information D1 input to the electronic key 3 and the communication partner 18 (in this example, the vehicle 1) that can communicate with the electronic key 3. It is provided with a second biometric authentication unit 19 that authenticates D2. When the first biometric authentication unit 17 and the second biometric authentication unit 19 input the biometric information D (D1, D2), the first biometric authentication unit 17 and the second biometric authentication unit 19 refer to the biometric information database 20 provided in the electronic key 3 to refer to the biometric information D (D1, D2). To authenticate. The biometric information D (user A is Da, user B is Db) of each user registered in the electronic key 3 is stored in the biometric information database 20, and the input biometric information D1 and D2 are stored in each of the biometric information databases 20. By comparing with the biological information Da and Db, the user who has input the biological information D1 and D2 is personally identified.

The validity determination unit 10 determines whether the electronic key 3 is valid or invalid based on the function-off condition input as a condition for turning off the function of the electronic key 3. In the case of this example, the function-off condition is input through the input unit 8 and is stored in the function-off condition database 23 provided in the electronic key 3. The valid determination unit 10 invalidates the use of the electronic key 3 when the function off condition input to the electronic key 3 is satisfied.

The communication units 11 and 14 transmit and receive radio waves between the vehicle 1 and the electronic key 3 when the user authentication system 2 performs user authentication. The communication unit 14 can transmit radio waves in the LF (Low Frequency) band, for example, and can receive radio waves in the UHF (Ultra High Frequency) band. Further, the communication unit 11 can receive the LF radio wave and can transmit the UHF radio wave. In this way, the user authentication system 2 of this example executes user authentication through bidirectional communication of LF-UHF.

The key authentication unit 13 executes verification for confirming the correctness of the electronic key ID registered in the electronic key 3 and authentication for confirming the electronic key 3 using each other's authentication data K. In the case of this example, the authentication using the authentication data K, that is, the authentication through encryption is preferably, for example, challenge response authentication or rolling code authentication.

Challenge-response authentication is performed by, for example, sending a challenge code to the other party of communication to calculate a response code using an encryption key, and comparing the response code calculated by itself with the response code calculated by the other party. , It authenticates whether the other party is legitimate. Further, the rolling code authentication authenticates whether or not the other party is legitimate by confirming the rolling code whose value changes each time communication is performed.

Next, the operation and effect of the user authentication system 2 according to the embodiment of the present invention will be described with reference to FIGS. 2 and 3.
In step 101, the operating state of the electronic key 3 is normally in the invalid state (key function off state). At this time, the electronic key 3 does not respond even if it receives an operation input trigger (for example, a button operation of the electronic key 3 or reception of a radio wave by the electronic key 3), and nothing operates.

In step 102, when the user presents the biometric information (biological information on the electronic key 3 side) D1 to the input unit 8, the first biometric authentication unit 17 inputs the biometric information D1 from the input unit 8.
In step 103, when the first biometric authentication unit 17 inputs the biometric information D1 in the input unit 8, the first biometric authentication unit 17 authenticates the biometric information D1. In the case of this example, the first biometric authentication unit 17 confirms whether or not the input biometric information D1 exists as registered data by referring to the biometric information database 20. Then, if the biometric authentication at this time is established, the process proceeds to step 104, and if the biometric authentication is not established, the process returns to step 101.

By the way, in the biological information database 20, the biological information Da and Db of each user are registered in association with each user. Therefore, for example, when the "user A" presents the biometric information Da to the input unit 8, the biometric authentication is established by the "user A" because the biometric information Da of the "user A" exists in the biometric information database 20. It is personally identified as being present. Further, for example, when the "user B" presents the biometric information Db to the input unit 8, the biometric authentication is established as the "user B" because the biometric information Db of the "user B" exists in the biometric information database 20. Is personally identified.

In step 104, when the biometric authentication in the electronic key 3 is established, the first biometric authentication unit 17 switches the operating state of the electronic key 3 to the first valid state. The first valid state of this example is preferably a state in which, for example, the power of the electronic key 3 is turned on, but does not respond to a radio wave received from the vehicle 1 (a state in which key authentication is not started). ..

In step 105, the validity determination unit 10 determines whether or not the elapsed time from switching the operating state of the electronic key 3 to the first valid state is within a certain period. At this time, if the elapsed time is less than a certain period, the process proceeds to step 106, and if the elapsed time is longer than a certain period, the process returns to step 101.

Further, the validity determination unit 10 determines whether or not the first valid state of the electronic key 3 is within the valid period, and also determines whether or not the function off condition for returning the operating state of the electronic key 3 to the invalid state is satisfied. .. When the function off condition is input to the input unit 8 and the function off condition is satisfied, the valid determination unit 10 returns to step 101, and if the function off condition is not satisfied, the process proceeds to step 106.

In step 106, when the user who has moved to the vehicle 1 presents the biometric information (biological information on the vehicle 1 side) D2 to the input unit 12, the vehicle 1 inputs the biometric information D2 from the input unit 12.

In step 107, the vehicle 1 transmits the biometric information D2 acquired by the input unit 12 of the vehicle 1 to the electronic key 3 through the communication unit 14. The biological information D2 is preferably transmitted to the electronic key 3 by LF radio waves through the communication network of the key operation free system.

In step 108, when the second biometric authentication unit 19 receives the biometric information D2 from the vehicle 1, it authenticates the biometric information D2. In the case of this example, the second biometric authentication unit 19 confirms whether or not the biometric information D2 acquired from the vehicle 1 exists as the registered data by referring to the biometric information database 20. Then, if the biometric authentication at this time is established, the process proceeds to step 109, and if the biometric authentication is not established, the process returns to step 105.

In step 109, when the biometric authentication using the biometric information D2 acquired by the vehicle 1 is established, the second biometric authentication unit 19 switches the operating state of the electronic key 3 to the second valid state. The second effective state of this example is preferably a state in which all the functions of the electronic key 3 can be used, that is, a state in which the key function is on.

In step 110, the key authentication unit 13 transmits the biometric information D2 to the electronic key 3, and then confirms the existence of the electronic key 3. In the existence confirmation of the electronic key 3, it is confirmed whether or not the electronic key 3 exists around the vehicle 1 (communication unit 14) in order to perform key authentication between the vehicle 1 and the electronic key 3. In the case of this example, for example, an authentication start request for calling the electronic key 3 to start key authentication is periodically LF transmitted from the communication unit 14.

In step 111, when the communication unit 11 receives the authentication start request transmitted from the vehicle 1, the electronic key 3 starts key authentication if it is in the second valid state (key function on state). As described above, in the case of this example, the key is provided on the condition that both the biometric authentication of the biometric information D1 input to the electronic key 3 and the biometric authentication of the biometric information D2 input to the vehicle 1 are established. Authentication is performed.

As shown in FIG. 3, in the case of this example, the electronic key 3 is specified from the electronic key ID registered in the electronic key 3 at the time of key authentication, the authentication data K used for authentication through encryption, and the biometric information D. The personal identification data R of the user is transmitted. The authentication data K is, for example, a challenge code when the authentication through encryption is challenge response authentication, and a rolling code when the authentication through encryption is rolling code authentication. Further, the personal identification data R is preferably index information that can identify individual users.

Returning to FIG. 2, in step 112, the key authentication unit 13 determines whether or not key authentication is established with the electronic key 3. The key authentication unit 13 of this example determines whether or not the verification for confirming the electronic key ID registered in the electronic key 3 and the authentication for confirming the correctness of the electronic key 3 using the authentication data K are established. judge. When the key authentication unit 13 confirms that these verifications and authentications are established, the key authentication unit 13 processes the key authentication as successful. Here, if the key authentication is established, the process proceeds to step 113, and if the key authentication is not established, the process is forcibly terminated.

Further, the key authentication unit 13 executes personal identification of the user based on the personal identification data R transmitted from the electronic key 3 at the time of key authentication. For example, if the personal identification data R is the index information of the user A, it is determined that the user who is trying to operate the vehicle 1 is the "user A", and if the personal identification data R is the index information of the user B, it is determined. It is determined that the user who is about to use the vehicle 1 is "user B".

In step 113, when the key authentication unit 13 confirms that the key authentication is established, the key authentication unit 13 permits or executes the operation of the in-vehicle device 4. As a result, for example, locking / unlocking of the vehicle door is permitted or executed, and a power transition operation (engine starting operation) by operating an engine switch (not shown) provided in the driver's seat is permitted. Further, the usage mode of the vehicle 1 (for example, the position of the seat or the steering wheel) is set to the user specifications specified by the personal identification data R.

By the way, in the case of this example, when operating the vehicle 1 with the electronic key 3, not only the biometric authentication performed by inputting the biometric information D1 into the electronic key 3 but also the biometric authentication performed by inputting the biometric information D2 into the vehicle 1. Is required to be established. Therefore, when the electronic key 3 is dropped and lost, even if the electronic key 3 is picked up by a third party, the third party cannot establish biometric authentication in the vehicle 1, so that the third party The vehicle 1 will not be used illegally by a person. Therefore, security against loss of the electronic key 3 can be ensured.

In this example, when operating the vehicle 1 with the electronic key 3, biometric authentication for switching the electronic key 3 to the first valid state having a long valid state and the second valid state for switching the electronic key 3 to a short valid state. The user will be required to perform two authentications, one with biometrics to switch to. From this point as well, it can be said that it is advantageous for ensuring security when the electronic key 3 is lost. Further, since the biological information D is stored only in the electronic key 3 (biological information database 20), the biological information D can be aggregated in one place.

The second biometric authentication unit 19 causes the electronic key 3 to acquire the biometric information D2 input to the vehicle 1, and authenticates the biometric information D2 with the electronic key 3. Therefore, since the authentication of the biological information D2 is performed on the electronic key 3 side, it is advantageous to simplify the configuration of the vehicle 1.

When the authentication of the biometric information D1 is established, the first biometric authentication unit 17 sets the operating state of the electronic key 3 to the valid state (in this example, the first valid state) for a certain period of time. Therefore, even if the authentication of the biometric information D1 is established, the valid state is limited to a certain period of time, which is more advantageous for ensuring the security against the loss of the electronic key 3.

In the authentication of the biological information D (D1, D2), the individual identification is executed based on the biological information D (D1, D2). Therefore, since it is possible to identify the user who has input the biometric information D (D1, D2), it is possible to execute an operation peculiar to each user in the vehicle 1, for example. Therefore, it is possible to improve the convenience of the user when operating the vehicle 1 with the electronic key 3.

When the function off condition is satisfied, the valid determination unit 10 switches the operating state of the electronic key 3 to the invalid state. Therefore, if the function off condition is input to the electronic key 3, the electronic key 3 that has been switched to the valid state can be arbitrarily returned to the invalid state.

The key authentication unit 13 obtains an electronic key ID unique to each key registered in the electronic key 3, authentication data K required for cryptographic authentication, and personal identification data R capable of identifying the user who has input the biometric information D. It is transmitted from the electronic key 3 to the vehicle 1 to perform key authentication. As described above, in the case of this example, the correctness of the electronic key 3 can be more accurately determined by the authentication for confirming the electronic key ID and the authentication data K. In addition, the user can be personally identified by the personal identification data R calculated by the electronic key 3.

The embodiment is not limited to the configuration described so far, and may be changed to the following aspects.
-As shown in FIG. 4, when a plurality of electronic key IDs (for example, ID1 and ID2) are registered in the user authentication system 2, when the user is identified by the biometric information D, the electronic key ID of the user is calculated. , The combination of the electronic key ID and the authentication data K (ID1 + K1 or ID2 + K2) may be transmitted from the electronic key 3 to the vehicle 1. In this case, since it is not necessary to notify the vehicle 1 of the personal identification data R from the electronic key 3 when identifying the individual user, the amount of transmitted data can be suppressed accordingly.

-In the electronic key 3, the biometric information D and the function off condition may be input at different places.
-The biometric information D input to the vehicle 1 may be authenticated on the vehicle 1 side, and only the authentication result may be notified to the electronic key 3.

-The function off condition may be a condition for invalidating the second enabled state. Thereby, for example, when the electronic key 3 is in the second valid state and the function off condition for invalidating the second valid state is satisfied, the electronic key 3 can be returned to the original invalid state.

-The first effective state is not limited to the ready state, and may be a state in which communication with the vehicle 1 which is the communication partner 18 is possible.
-The use may be restricted so that the second valid state is allowed only for a certain period of time.

The second valid state is not limited to the key function on state, and may be a state in which communication with the vehicle 1 which is the communication partner 18 is possible (a state in which authentication communication is possible).
-The first valid state may be set to the key function on state, and the process of step 109 (the process of switching the electronic key 3 to the second valid state) may be omitted.

-The function of personally identifying a user may be omitted.
-Key authentication may be executed at any timing, and the trigger for starting authentication may be changed in various modes.

-Key authentication is not limited to the process of confirming the electronic key ID and the authentication data K, and can be changed to various modes.
-The key operation free system may appropriately change the frequency used, the communication method, the antenna configuration, the number of antennas, and the like.

-The key operation free system may be configured using Bluetooth (Bluetooth: registered trademark).
-The electronic key 3 may be changed to another terminal such as a high-performance mobile phone.

-The communication partner 18 may be changed to something other than the vehicle 1.
-The in-vehicle device 4 may be changed to a device other than the door lock device or the engine.
-The user authentication system 2 is not limited to being applied to the vehicle 1, and may be used for other devices and devices.

1 ... Vehicle, 2 ... User authentication system, 3 ... Electronic key, 10 ... Validity judgment unit, 13 ... Key authentication unit, 17 ... 1st biometric authentication unit, 18 ... Communication partner, 19 ... 2nd biometric authentication unit, D ( D1, D2, Da, Db) ... Biometric information, K ... Authentication data, R ... Personal identification data.

Claims (8)

The first biometric authentication unit that authenticates the biometric information entered in the electronic key,
A second biometric authentication unit that authenticates the biometric information input to the communication partner capable of communicating with the electronic key, and
When the authentication of the first biometric authentication unit and the authentication of the second biometric authentication unit are established, the authentication for confirming the correctness of the electronic key is performed, and if the authentication is established, the operation of the communication partner is permitted. Equipped with a key authentication unit
The key authentication unit is a user authentication system characterized in that the period of valid state of the authentication result in the first biometric authentication unit is longer than the period of valid state of the authentication result in the second biometric authentication unit. The user authentication system according to claim 1, wherein the second biometric authentication unit causes the electronic key to acquire biometric information input to the communication partner, and authenticates the biometric information with the electronic key. The user authentication system according to claim 1 or 2, wherein the first biometric authentication unit activates the operating state of the electronic key for a certain period of time when the authentication of the biometric information is established. The user authentication system according to any one of claims 1 to 3, which performs personal identification based on the biometric information in the biometric information authentication. Based on the function-off condition input as the condition for turning off the function of the electronic key, the validity / invalidity of the electronic key is determined, and when the function-off condition is satisfied, the operating state of the electronic key is invalidated. The user authentication system according to any one of claims 1 to 4, further comprising a valid determination unit for making a state. The key authentication unit electronically obtains an electronic key ID unique to each key registered in the electronic key, authentication data required for cryptographic authentication, and personal identification data capable of identifying the user who has input the biometric information. The user authentication system according to any one of claims 1 to 5, which is transmitted from a key to the communication partner to execute key authentication. The key authentication unit combines an electronic key ID specified by biometric authentication among a plurality of electronic key IDs registered in the electronic key and authentication data associated with the electronic key ID for use in cryptographic authentication. The user authentication system according to any one of claims 1 to 5, which is transmitted from the electronic key to the communication partner to execute key authentication. The step of authenticating the biometric information entered in the electronic key by the first biometric authentication unit,
A step of authenticating the biometric information input to the communication partner capable of communicating with the electronic key by the second biometric authentication unit, and
When the authentication of the first biometric authentication unit and the authentication of the second biometric authentication unit are established, the key authentication unit performs authentication for confirming the correctness of the electronic key, and if the authentication is established, the key authentication unit Provided a step of permitting the operation of the communication partner .
The key authentication unit is a user authentication method characterized in that the period of valid state of the authentication result in the first biometric authentication unit is made longer than the period of valid state of the authentication result in the second biometric authentication unit.

Images