JP7096329B2 - Mobile terminal device - Google Patents

Description

The present invention relates to a mobile terminal device .

A system has been proposed in which a user simply carries a smartphone and walks to an authentication place to complete authentication before arrival and automatically perform unlocking processing or the like upon arrival (for example, Non-Patent Document 1). In this type of system, for example, a beacon transmission device that constantly transmits a beacon signal within a range of about 20 meters around is installed near the authentication location. When the smartphone enters the transmission range of the beacon signal transmitted from the beacon transmission device, the smartphone transmits an authentication request to an authentication device such as a Web server device. When the authentication device receives an authentication request from the smartphone, it authenticates the owner of the smartphone.

Asuka Oniki, Shinosuke Kimura, Hideki Shimada, Kenya Sato, "Automatic Personal Authentication Using User's Walking Motion and Location Information", Proceedings of Information Science and Technology Forum, vol. 13 (4), pp. 237-238, 2014

In the conventional system that starts authentication when the smartphone enters the transmission range of the beacon signal transmitted from the beacon transmission device, authentication cannot be started until the smartphone reaches the transmission range of the beacon signal. That is, in the conventional system, the range in which the pre-authentication that authenticates the user in advance is executed is limited to the transmission range of the beacon signal. Therefore, it is not always convenient for the user.

In order to solve the above problems, the mobile terminal device according to the preferred embodiment of the present invention includes a prediction unit that predicts the destination of the user based on the position information indicating the position of the user and the action history of the user. When the authentication of the user is executed by the authentication device at the destination predicted by the prediction unit, the pre-authentication that authenticates the user in advance before the user arrives at the destination is referred to as the authentication device. It is equipped with an authentication unit that is executed between.

According to the present invention, it is possible to improve the usability of the system for authenticating the user.

It is a block diagram which shows the whole structure of the authentication system which concerns on 1st Embodiment of this invention. It is explanatory drawing which shows an example of the memory content of the behavior management table shown in FIG. It is explanatory drawing which shows an example of the storage contents of the place management table shown in FIG. It is a flowchart which shows an example of the operation of the user apparatus shown in FIG. It is a block diagram which shows the whole structure of the authentication system which concerns on 2nd Embodiment of this invention. It is a sequence chart which shows an example of the operation of the authentication system shown in FIG. It is a block diagram which shows the whole structure of the authentication system which concerns on 3rd Embodiment of this invention. It is a sequence chart which shows an example of the operation of the authentication system shown in FIG. 7. It is a block diagram which shows the whole structure of the authentication system which concerns on 4th Embodiment of this invention. It is a sequence chart which shows an example of the operation of the authentication system shown in FIG. It is a block diagram which shows the whole structure of the authentication system which concerns on 5th Embodiment of this invention. It is a sequence chart which shows an example of the operation of the authentication system shown in FIG.

[1. First Embodiment]
FIG. 1 is a block diagram showing an overall configuration of the authentication system 10 according to the first embodiment of the present invention. The authentication system 10 shown in FIG. 1 executes user authentication of a service that requires user authentication to authenticate the user.

As illustrated in FIG. 1, the authentication system 10 includes a user device 100 owned by the user, a network NW, and an authentication server 200 for authenticating the user. The number of each of the user device 100 and the authentication server 200 is not limited to one. For example, the authentication system 10 may have a plurality of user devices 100, a network NW, and a plurality of authentication servers 200. The user device 100 is an example of a mobile terminal device, and the authentication server 200 is an example of an authentication device.

In the following description, a portable information terminal such as a smartphone or a tablet terminal is assumed as the user device 100. However, as the user device 100, any portable information processing device can be adopted, and for example, a notebook computer, a wearable terminal, or the like may be used.

The user device 100 is realized by a computer system including a processing device 110, a storage device 120, a communication device 130, a display device 140, an operation device 150, and a GPS (Global Positioning System) device 160. A plurality of elements of the user apparatus 100 are connected to each other by a single unit or a plurality of buses. In addition, in this specification, the term "device" in a processing device, a storage device, a communication device, a display device, an operation device, a GPS device and a timekeeping device described later shall be read as other terms such as a circuit, a device or a unit. You may. Further, each of the plurality of elements of the user apparatus 100 may be configured by a single device or a plurality of devices. Alternatively, some elements of the user apparatus 100 may be omitted.

The processing device 110 is a processor that controls the entire user device 100, and is composed of, for example, a single or a plurality of chips. The processing device 110 is composed of, for example, a central processing unit (CPU) including an interface with peripheral devices, an arithmetic unit, registers, and the like. In addition, a part or all of the functions of the processing device 110 are realized by hardware such as DSP (Digital Signal Processor), ASIC (Application Specific Integrated Circuit), PLD (Programmable Logic Device), FPGA (Field Programmable Gate Array). You may. The processing device 110 executes various processes in parallel or sequentially.

The prediction unit 112 and the authentication unit 118 shown in the processing device 110 of FIG. 1 are an example of a functional block that executes pre-authentication that pre-authenticates a user. For example, the processing device 110 functions as the prediction unit 112 and the authentication unit 118 by reading the control program PR1 from the storage device 120 and executing the control program PR1. The prediction unit 112 predicts the user's destination based on the position information indicating the user's position and the user's action history. For example, the position information indicating the position of the user apparatus 100 possessed by the user indicates the position of the user. The user's action history is registered in the action management table TBLa, which is a part of the action history table TBL stored in the storage device 120. In the example shown in FIG. 1, the behavior history table TBL includes a behavior management table TBLa and a location management table TBLb. The stored contents of the behavior management table TBLa are described in FIG. 2, and the stored contents of the location management table TBLb are described in FIG. When the authentication server 200 needs to authenticate the user at the destination predicted by the prediction unit 112, the authentication unit 118 performs pre-authentication to authenticate the user before the user arrives at the predicted destination. Execute with. Instead of the prediction unit 112, an external device of the user device 100 (for example, the profile server 300 shown in FIG. 5) determines the user's destination based on the position information indicating the user's position and the user's action history. You may predict. In this case, the user device 100 acquires the user's destination predicted based on the position information indicating the user's position and the user's action history from the external device.

The storage device 120 is a recording medium that can be read by the processing device 110, and stores a plurality of programs including the control program PR1 executed by the processing device 110, various data used by the processing device 110, and an action history table TBL. .. The storage device 120 is composed of, for example, one or more types of storage circuits such as ROM (Read Only Memory), EPROM (Erasable Programmable ROM), EEPROM (Electrically Erasable Programmable ROM), and RAM (Random Access Memory).
The action history table TBL may be generated by, for example, the processing device 110. Alternatively, an external device of the user device 100 (for example, the profile server 300 shown in FIG. 5) may generate the action history table TBL. When the action history table TBL is generated by a device external to the user device 100, the user device 100 acquires the action history table TBL from the device outside the user device 100 and stores it in the storage device 120.

The communication device 130 is a device that communicates with another device via a mobile communication network or a network NW such as the Internet. The communication device 130 is also referred to as, for example, a network device, a network controller, a network card, or a communication module. The communication device 130 can communicate with, for example, the authentication server 200 via the network NW. Further, the communication device 130 includes a function of transmitting a beacon signal using BLE (Bluetooth (registered trademark) Low Energy) or the like and a function of receiving the beacon signal.

The display device 140 displays various images under the control of the processing device 110. For example, various display panels such as a liquid crystal display panel and an organic EL (Electro Luminescence) display panel are suitably used as the display device 140.

The operation device 150 is a device for inputting information used by the user device 100 to the processing device 110, and accepts operations by the user. Specifically, the operation device 150 accepts an operation for inputting a code such as a number and a character into the processing device 110 and an operation for selecting an icon displayed by the display device 140. For example, a touch panel that detects contact with the display surface of the display device 140 is suitable as the operation device 150. The operation device 150 may include a plurality of operators that can be operated by the user. Further, the operation device 150 may include a microphone or the like that accepts a voice input operation. The operation device 150 is an example of an operation unit.

The GPS device 160 receives radio waves from a plurality of satellites and generates position information from the received radio waves. Then, the GPS device 160 notifies the processing device 110 of the generated position information. Further, when the action history table TBL is generated by an external device of the user device 100, the GPS device 160 may transmit the position information to the external device that generates the action history table TBL.
The position information may be in any format as long as the position can be specified. The position information indicates, for example, the latitude and longitude of the user device 100. In this example, it is exemplified that the position information is obtained from the GPS device 160, but the user device 100 may acquire the position information by any method. For example, the location information may be acquired using the cell ID assigned to the base station to which the user apparatus 100 communicates. The cell ID is identification information that uniquely identifies the base station. Further, when the user apparatus 100 communicates with an access point of a wireless LAN (Local Area Network), the identification address (MAC (Media Access Control) address) on the network assigned to the access point and the actual address (location) are further present. ) And may be referred to the database which is associated with each other to acquire the location information.

The authentication server 200 executes user authentication for a user to use a service provided by a service providing device (not shown) installed at a predetermined location, for example. For example, the authentication server 200 may be included in a service providing device installed at a predetermined location. Alternatively, the authentication server 200 may be installed in a place different from the predetermined place and communicate with the service providing device installed in the predetermined place via the network NW.

The authentication server 200 includes a processing device 210, a storage device 220, a communication device 230, and a timekeeping device 240. The processing device 210 is a processor that controls the entire authentication server 200, and is configured in the same manner as the processing device 110 of the user device 100 described above. The storage device 220 is a recording medium that can be read by the processing device 210, and stores a plurality of programs including the control program PR2 executed by the processing device 210, and various data used by the processing device 210. Similar to the storage device 120 described above, the storage device 220 is composed of one or more types of storage circuits such as ROM, EPROM, EEPROM, and RAM.

The communication device 230 is a device that communicates with other devices via a mobile communication network or a network NW such as the Internet, and is configured in the same manner as the above-mentioned communication device 130. The communication device 230 can communicate with, for example, the user device 100 via the network NW. The communication device 230 may have a function of transmitting a beacon signal and a function of receiving the beacon signal.

The timekeeping device 240 generates date and time information indicating the current date and time. Specifically, the timekeeping device 240 generates date and time information by counting pulse signals obtained by dividing a clock signal generated by a crystal oscillator or the like. The date and time information includes time information and date information. The time information indicates the time. Time means the time of day. For example, it is 11:10:30 and does not include the date.

FIG. 2 is an explanatory diagram showing an example of the stored contents of the behavior management table TBLa shown in FIG. In the example shown in FIG. 2, the behavior management table TBLa is a user's weekday behavior pattern BPw (BPw1, BPw2, BPw3, BPw4 and BPw5) and holiday behavior pattern BPh (BPh1, BPh2, BPh3, BPh4, BPh5 and BPh6). Remember. The number of each of the behavior patterns BPw and BPh stored in the behavior management table TBLa is not limited to the example shown in FIG. For example, the number of behavior patterns BPw stored in the behavior management table TBLa may be 1 or more and 4 or less, or 6 or more. Further, the number of behavior patterns BPh stored in the behavior management table TBLa may be 1 or more and 5 or less, or 7 or more. Alternatively, the total of the number of behavior patterns BPw and the number of behavior patterns BPh stored in the behavior management table TBLa may be 1 or more.

For example, the behavior management table TBLa divides 24 hours a day into a plurality of time zones, and stores the staying place where the user stayed in each time zone as the user's behavior pattern BP (BPw and BPh). The place of stay where the user was staying is specified based on the position information of the user device 100. In the example shown in FIG. 2, the 24 hours on weekdays are the time zone from 5:00 to 8:00, the time zone from 8:00 to 9:00, the time zone from 9:00 to 18:00, and the time zone from 18:00 to 19:00. It is divided into eight time zones: a time zone from 19:00 to 20:00, a time zone from 20:00 to 21:00, a time zone from 21:00 to 22:00, and a time zone from 22:00 to 5:00. .. In addition, the 24-hour holidays are the time zone from 5:00 to 9:00, the time zone from 9:00 to 12:00, the time zone from 12:00 to 13:00, the time zone from 13:00 to 15:00, and 15:00. It is divided into eight time zones: a time zone from 18:00 to 18:00, a time zone from 18:00 to 20:00, a time zone from 20:00 to 22:00, and a time zone from 22:00 to 5:00.

The "movement" of the behavior management table TBLa indicates that the user has moved to one place without staying for a certain period of time or more. When the user is moving, information indicating the means of transportation such as a train may be stored in the behavior management table TBLa together with the information indicating the movement. Further, the "day of the week with high frequency of occurrence" in the behavior management table TBLa indicates a day of the week in which the rate of execution of the corresponding behavior pattern BP is higher than that of other days. The symbol "-" in the "Frequently occurring days" column indicates that the corresponding behavior pattern BP is executed regardless of each day of the week, or is executed regardless of each day of the holiday.

The weekday behavior pattern BPw1 shown in FIG. 2 shows the behavior pattern of leaving the home in the morning and going to the office, and leaving the office in the evening after work and returning to the home. Higher than the day of the week. In addition, the behavior pattern BPw4 on weekdays shows the behavior pattern of leaving home in the morning and going to the office, leaving the office in the evening after work, stopping at the gym and tavern, and then returning to the home. Is higher than other days. In addition, the holiday behavior pattern BPh1 shows a behavior pattern of leaving home at noon, going to the zoo, eating at dining room B in the evening, and then returning home.

The following four methods will be described as examples of methods for predicting a destination using the behavior management table TBLa, but a well-known technique can be adopted as a method for predicting a destination from the user's past behavior history. .. In the first example, the prediction unit 112 shown in FIG. 1 estimates the user's behavior pattern as the behavior pattern BPw4 when the position indicated by the location information obtained at 17:00 on Friday is a company, and next to the user. Predict the destination as Jim. In the second example, the prediction unit 112 estimates the user's current state based on the positional relationship indicated by the two position information indicating the user's position at different times, and the estimated user's current state and the user's current state. The user's destination is predicted based on the behavior pattern BP. For example, when the prediction unit 112 estimates that the current state of the user (for example, the state around 8 o'clock) is the state of leaving the home and moving, the prediction unit 112 predicts the destination of the user as a company.

In the third example, in the prediction unit 112, the position indicated by the position information of the earlier time is the company among the two position information indicating the positions of the users at different times, and the position indicated by the position information of the later time is indicated. When indicates outside the company, the direction in which the user is moving is specified based on the positional relationship indicated by the two location information, and it is predicted whether the user is heading to the home, the cafeteria A, or the gym. In the fourth example, the prediction unit 112 identifies the direction in which the user is moving based on the positional relationship indicated by the two position information indicating the user's position at different times, for example, from the office to the home or the dining room. Predict whether you are heading to A or Jim.

FIG. 3 is an explanatory diagram showing an example of the stored contents of the location management table TBLb shown in FIG. As shown in FIG. 3, the location management table TBLb stores the stay location, the location information, and the address of the authentication server in association with each other. The staying place indicates a place where the user has stayed in the past, and indicates a staying place of the user registered in the behavior management table TBLa shown in FIG. The location information is information indicating the location of the user's place of stay, and is given by, for example, latitude and longitude. The address of the authentication server indicates the address of the authentication server 200 that executes user authentication for the user to use the service provided at each location. The address is, for example, an IP (Internet Protocol) address, a URL (Uniform Resource Locator), or the like. The code "-" in the "Authentication server address" column indicates that the service provided at the corresponding place of stay does not require authentication or there is no service provided. In addition, in this embodiment and each embodiment described later, in order to make the explanation easy to understand, the authentication server 200 corresponding to one of the staying places stored in the place management table TBLb is illustrated.

Here, the staying place stored in the place management table TBLb may be specified based on the map information obtained by digitizing the map and the position information of the user apparatus 100, or may be specified based on the staying time of the user. May be good. For example, in the method of specifying the place of stay based on the time of stay of the user, the position indicated by the position information obtained at midnight is specified as the home, and a plurality of places obtained in the time zone from about 10 o'clock to about 15 o'clock are obtained. Identify the location (location) where you have stayed the longest among the locations indicated by the location information as the company.

FIG. 4 is a flowchart showing an example of the operation of the user apparatus 100 shown in FIG. The operation shown in FIG. 4 is an example of a user authentication method. The processing device 110 functions as a prediction unit 112 in step S100, and functions as an authentication unit 118 in steps S120 and S140.

In step S100, the prediction unit 112 predicts the user's destination based on the position information indicating the user's position and the user's action history. For example, the prediction unit 112 predicts the destination of the user based on the position information received from the GPS device 160 and the action history table TBL stored in the storage device 120. When an external device of the user device 100 predicts the user's destination, the user device 100 predicts the user's destination based on the position information indicating the user's position and the user's action history in step S100. From an external device. In this case, the user device 100 uses the user's destination predicted by the external device in step S120.

Next, in step S120, the authentication unit 118 acquires the destination predicted in step S100, and determines whether or not authentication by the authentication server 200 is necessary at the acquired destination. For example, the authentication unit 118 determines that authentication by the authentication server 200 is necessary when user authentication is required when the user uses the service provided at the destination. When authentication by the authentication server 200 is required, the operation of the user apparatus 100 proceeds to step S140. On the other hand, when the authentication by the authentication server 200 is not required, the user apparatus 100 ends the user authentication process without executing the pre-authentication that authenticates the user in advance.

In step S140, the authentication unit 118 executes pre-authentication with the authentication server 200 before the user arrives at the destination. For example, the authentication unit 118 receives information indicating the authentication method of pre-authentication from the authentication server 200. Then, the authentication unit 118 acquires the information necessary for the authentication method received from the authentication server 200 from the user and transfers it to the authentication server 200. For example, when the pre-authentication is an authentication method for confirming a user by using a user ID and a password, the authentication unit 118 displays a screen for the user to input the user ID and the password on the display device 140. Then, the authentication unit 118 transfers the user ID and password obtained from the user via the operation device 150 to the authentication server 200. The authentication server 200 authenticates the user by using the user ID and the password.

Further, for example, when the legitimate owner of the user device 100 registered in advance is authenticated as a user of the service, the authentication unit 118 authenticates the user by an authentication method preset by the user. The authentication method preset by the user may be authentication using a password or the like, or biometric authentication such as a fingerprint, and a well-known authentication technique can be adopted. The user device 100 transfers an authentication result indicating whether or not the user is a legitimate owner of the user device 100 to the authentication server 200. The user apparatus 100 ends the user authentication process by completing the process in step S140.

As shown in FIG. 4, when the authentication unit 118 needs to authenticate the user by the authentication server 200 at the destination predicted by the prediction unit 112, the authentication server 200 performs pre-authentication before the user arrives at the destination. Execute with. Therefore, the user can use the service as soon as he / she arrives at the destination.

For example, the user device 100 constantly transmits a beacon signal including a terminal ID that identifies the user device 100. Then, when the service providing device installed at the destination includes the authentication server 200, when the authentication server 200 receives the beacon signal including the terminal ID of the user device 100, the service providing device immediately performs post-login processing or post-login processing. , Unlocking and other services are provided to users.

Alternatively, when the authentication server 200 is installed at a location different from the service providing device, the authentication server 200 notifies the service providing device of the terminal ID that identifies the user device 100 that has executed the pre-authentication and the pre-authentication result. Then, upon receiving the beacon signal including the terminal ID of the user device 100, the service providing device immediately provides the user with services such as post-login processing and unlocking. Alternatively, when the authentication server 200 receives a user authentication request from the service providing device that has received the beacon signal including the terminal ID of the user device 100, the authentication server 200 notifies the service providing device that the user authentication has been completed. Even in this case, the service providing device can provide the user with services such as post-login processing or unlocking immediately after the user arrives at the destination.

The user apparatus 100 can execute pre-authentication with the authentication server 200 via the network NW even outside the transmission range of the beacon signal. Therefore, the usability of the authentication system 10 can be improved. As a result, the usability of the service that uses the authentication system 10 can be improved. For example, since the user can perform pre-authentication using the user device 100 before arriving at the destination, the authentication work at the destination can be reduced. Further, when a plurality of users use the authentication system 10, pre-authentication can be executed before the plurality of users arrive at the destination, so that the number of users who execute the authentication work at the destination can be reduced, and the destination can be reduced. It is possible to reduce the congestion of the authentication location.

As described above, in the first embodiment, the prediction unit 112 predicts the user's destination based on the position information indicating the user's position (position information of the user device 100) and the user's action history (behavior history table TBL). .. Further, when the authentication device (authentication server 200) authenticates the user at the destination predicted by the prediction unit 112, the authentication unit 118 authenticates the user in advance before the user arrives at the destination. Perform pre-authentication with the authentication device. Therefore, the user can perform pre-authentication using the user device 100 before arriving at the destination without being limited to the transmission range of the beacon signal. Therefore, the user device 100 can reduce the user authentication work at the destination and improve the usability of the authentication system 10. As a result, the usability of the service that uses the authentication system 10 can be improved.

[2. Second Embodiment]
The main difference between the second embodiment and the first embodiment described above is that the processing device 110 also functions as a determination unit 114 for determining whether or not the user can operate the operation device 150, and a prediction unit. 112A predicts the arrival time of the destination, and the timing at which the authentication unit 118A executes the pre-authentication is determined based on the determination result of the determination unit 114.

FIG. 5 is a block diagram showing the overall configuration of the authentication system 10A according to the second embodiment of the present invention. The authentication system 10A shown in FIG. 5 executes user authentication of a service that requires user authentication to authenticate the user. The same or similar elements as those described with reference to FIGS. 1 to 4 are designated by the same reference numerals, and detailed description thereof will be omitted. In the authentication system 10A, the profile server 300 is added to the authentication system 10 shown in FIG. Further, the authentication system 10A has a user device 100A instead of the user device 100 shown in FIG. Other configurations of the authentication system 10A are the same as or similar to the authentication system 10 shown in FIG. For example, the authentication system 10A includes a single or a plurality of user devices 100A, a network NW, a single or a plurality of authentication servers 200, and a single or a plurality of profile servers 300. The user device 100A is an example of a mobile terminal device.

The user device 100A has the same or the same configuration as the user device 100 shown in FIG. For example, the user device 100A is realized by a computer system including a processing device 110, a storage device 120, a communication device 130, a display device 140, an operation device 150, and a GPS device 160. A plurality of elements of the user device 100A are connected to each other by a single unit or a plurality of buses. Further, each of the plurality of elements of the user apparatus 100A may be configured by a single device or a plurality of devices. Alternatively, some elements of the user device 100A may be omitted.

The processing apparatus 110 shown in FIG. 5 is the same as or similar to the processing apparatus 110 shown in FIG. 1 except that the control program PR1A is executed in place of the control program PR1 shown in FIG. The prediction unit 112A, the determination unit 114, and the authentication unit 118A shown in the processing device 110 of FIG. 5 are examples of functional blocks for executing pre-authentication. For example, the processing device 110 functions as a prediction unit 112A, a determination unit 114, and an authentication unit 118A by reading the control program PR1A from the storage device 120 and executing the control program PR1A.

The prediction unit 112A predicts the destination of the user based on the position information of the user device 100A and the action history table TBL. Further, the prediction unit 112A predicts the arrival time when the user arrives at the destination based on the time when the user was at the position indicated by the position information, the position information, and the action history table TBL. For example, when the prediction unit 112A predicts that the destination of the user who has left the company is a gym, the prediction unit 112A arrives at the destination gym one hour after leaving the company based on the behavior patterns BPw3 and BPw4 shown in FIG. I predict that. It should be noted that a well-known technique can be adopted as a method of predicting the destination and the arrival time from the past behavior history of the user. The prediction unit 112A is the same as or similar to the prediction unit 112 shown in FIG. 1, except that it predicts the arrival time.

The determination unit 114 determines whether the user can operate the operation device 150 of the user device 100A. For example, when the determination unit 114 determines that the user is on the train based on the map information, the position information of the user apparatus 100A, and the like, the determination unit 114 determines that the operation device 150 of the user apparatus 100A can be operated. Alternatively, when the determination unit 114 determines that the user is driving a car based on the map information, the position information of the user apparatus 100A, and the like, the determination unit 114 determines that the operation device 150 of the user apparatus 100A is not in an operable state. When the user device 100A has a sensor such as an acceleration sensor, is the determination unit 114 in a state where the user can operate the operation device 150 of the user device 100A by using the information obtained from the sensor? May be determined.

When the authentication unit 118A needs to authenticate the user by the authentication server 200 at the destination predicted by the prediction unit 112A, the authentication unit 118A executes the pre-authentication with the authentication server 200 at the timing satisfying the condition for executing the pre-authentication. do. The timing for satisfying the condition for executing the pre-authentication is, for example, a predetermined time or more before the arrival time predicted by the prediction unit 112A, and the determination unit 114 allows the user to operate the operation device 150 of the user device 100A. It is a period determined to be. The predetermined time is, for example, the time required for the authentication work when the user executes the pre-authentication. The authentication unit 118A sets the condition for executing the pre-authentication to at least a predetermined time before the arrival time predicted by the prediction unit 112A, so that the user arrives at the destination as compared with the case where the condition is not set. It can be reduced that the pre-authentication is not completed by the time.

Further, the authentication unit 118A sets the condition for executing the pre-authentication to at least a period in which the determination unit 114 determines that the operation device 150 of the user device 100A can be operated, so that the user's state can be changed. The pre-authentication can be executed during a period suitable for operating the operation device 150 of the user device 100A to execute the pre-authentication.

The storage device 120 shown in FIG. 5 is the same as or similar to the storage device 120 shown in FIG. 1 except that the control program PR1A is stored in place of the control program PR1 shown in FIG. That is, the storage device 120 stores a plurality of programs including the control program PR1A executed by the processing device 110, various data used by the processing device 110, and an action history table TBL transferred from the profile server 300.

The profile server 300 generates an action history table TBL based on the position information of the user device 100A received from the GPS device 160. For example, the profile server 300 includes a processing device 310, a storage device 320, a communication device 330, and a timekeeping device 340.

The processing device 310 is a processor that controls the entire profile server 300, and is configured in the same manner as the processing device 110 of the user device 100A. For example, the processing device 310 reads the control program PR3 from the storage device 320 and executes it to generate the action history table TBL.

The storage device 320 is a recording medium that can be read by the processing device 310, a plurality of programs including the control program PR3 executed by the processing device 310, various data used by the processing device 310, and actions generated by the processing device 310. Store the history table TBL. Similar to the storage device 120, the storage device 320 is composed of one or more types of storage circuits such as ROM, EPROM, EEPROM, and RAM.

The communication device 330 is a device that communicates with other devices via the network NW, and can, for example, communicate with the user device 100A via the network NW. The communication device 330 is also referred to as, for example, a network device, a network controller, a network card, or a communication module. The timekeeping device 340 has the same configuration as the timekeeping device 240 of the authentication server 200 shown in FIG. For example, the profile server 300 transfers the action history table TBL generated by the processing device 310 from the storage device 320 to the user device 100A via the communication device 330 and the network NW.

Next, the operation of the authentication system 10A will be described.
FIG. 6 is a sequence chart showing an example of the operation of the authentication system 10A shown in FIG. The operation shown in FIG. 6 is an example of a user authentication method.

First, in step S20, the profile server 300 generates the action history table TBL based on the position information received from the user device 100A, the date and time information generated by using the timekeeping device 340, and the like. For example, the profile server 300 receives the position information of the user device 100A from the user device 100A as the position information indicating the position of the user. Then, the profile server 300 identifies the user's staying place based on the map information and the position information of the user apparatus 100, and generates the place management table TBLb shown in FIG. The profile server 300 may specify the user's place of stay based on the position information of the user device 100 and the stay time.

Further, the profile server 300 specifies, for example, the user's staying place in each time zone of the behavior management table TBLa shown in FIG. 2 based on the location information, the date and time information, and the like, and the user's behavior pattern BP (BPw and BPh). It is stored in the behavior management table TBLa. Note that the profile server 300 may acquire location information using the cell ID assigned to the base station to which the user apparatus 100 communicates, and use the acquired location information as location information indicating the user's location. good. That is, the profile server 300 may specify the position information of the user device 100A from the cell ID of the base station instead of receiving the position information from the user device 100.

The action history table TBL generated by the profile server 300 is transferred to the user device 100A and stored in the storage device 120 of the user device 100A. The profile server 300 newly generates the action history table TBL, and then updates the action history table TBL at an arbitrary timing.

Next, in step S110, the processing device 110 of the user device 100A functions as the prediction unit 112A and predicts the destination and arrival time of the user. For example, the prediction unit 112A predicts the destination of the user based on the position information received from the GPS device 160 and the action history table TBL stored in the storage device 120. The operation of the prediction unit 112A when predicting the destination of the user is, for example, the same as step S100 described in FIG.

Further, the prediction unit 112A determines the arrival time when the user arrives at the destination based on the position information of the user device 100A, the action history table TBL, and the time when the user is at the position indicated by the position information of the user device 100A. Predict. The time when the user is at the position indicated by the position information of the user device 100A is, for example, the time when the GPS device 160 receives radio waves from a plurality of satellites and generates the position information.

Next, in step S120, the processing device 110 of the user device 100A functions as the authentication unit 118A, and determines whether or not authentication by the authentication server 200 is necessary to use the service supplied at the destination predicted in step S110. do. The operation of the authentication unit 118A in step S120 shown in FIG. 6 is, for example, the same as step S120 described in FIG.

When the authentication by the authentication server 200 is not required, the user apparatus 100A ends the user authentication process without executing the pre-authentication. On the other hand, when authentication by the authentication server 200 is required, the user apparatus 100A transmits a pre-authentication request requesting pre-authentication to the authentication server 200. Then, the user apparatus 100A executes the determination process in step S130 after receiving the pre-authentication permission notification from the authentication server 200 that permits the pre-authentication. The pre-authentication request or the like may be transferred from the user device 100A to the authentication server 200 via a service providing device (not shown) installed at the destination.

In step S130, the processing device 110 of the user device 100A functions as a determination unit 114, and determines whether or not the timing is suitable for pre-authentication. In the operation shown in FIG. 6, the timing suitable for pre-authentication is the timing that satisfies the condition for executing the pre-authentication described in FIG. Therefore, as described in FIG. 5, the determination unit 114 determines whether or not the user can operate the operation device 150 of the user device 100A. Further, the determination unit 114 determines whether or not the current time is a predetermined time or more before the arrival time predicted by the prediction unit 112A.

The determination unit 114 is suitable for pre-authentication when the current time is a predetermined time or more before the arrival time predicted by the prediction unit 112A and the user can operate the operation device 150 of the user device 100A. It is determined that the timing has been reached. If the timing is not suitable for pre-authentication, the operation of the determination unit 114 returns to the determination process in step S130. On the other hand, when the timing is suitable for pre-authentication, the processing device 110 of the user device 100A executes the pre-authentication with the authentication server 200 in step S140a. That is, the processing device 110 of the user device 100A waits for the execution of the pre-authentication until the timing suitable for the pre-authentication comes.

If the user cannot operate the operation device 150 of the user device 100A by a time before a predetermined time from the arrival time, the user device 100A ends the user authentication process without executing the pre-authentication. The user device 100A may prompt the user to execute pre-authentication when the user can operate the operation device 150 of the user device 100A after a predetermined time has passed from the arrival time. ..

In steps S140 (S140a and S140b), the processing device 110 of the user device 100A functions as the authentication unit 118A and performs pre-authentication with the authentication server 200. The operation of the authentication unit 118A in step S140a is, for example, the same as step S140 described with reference to FIG. After the pre-authentication is completed, the user device 100A ends the user authentication process. Further, after the pre-authentication is completed, the authentication server 200 stores the result of the pre-authentication in association with the terminal ID of the user device 100A in step S150.

Next, in step S160, when the authentication server 200 detects the pre-authenticated terminal ID, the authentication server 200 ends the authentication process for authenticating the user who possesses the user device 100A indicated by the terminal ID. For example, when the service providing device installed at the destination receives the beacon signal including the terminal ID of the user device 100A, the authentication server 200 notifies the service providing device of the result of pre-authentication and ends the authentication process. When the authentication system 10A authenticates the user by pre-authentication, the user can receive the service as soon as he / she arrives at the destination.

As described above, the same effect as that of the first embodiment can be obtained in the second embodiment. Further, in the second embodiment, the prediction unit 112A predicts the destination of the user, and further, based on the time when the user was at the position indicated by the position information, the position information, and the action history (behavior history table TBL). Predict the arrival time when the user arrives at the destination. Further, the authentication unit 118A executes pre-authentication with the authentication device (authentication server 200) at a time equal to or more than a predetermined time before the arrival time predicted by the prediction unit 112A. That is, the condition for the authentication unit 118A to execute the pre-authentication is that the execution time of the pre-authentication is at least a predetermined time or more before the arrival time predicted by the prediction unit 112A. In the second embodiment, the condition for executing the pre-authentication by the authentication unit 118A is that the execution time of the pre-authentication is at least a predetermined time before the arrival time predicted by the prediction unit 112A. It is possible to reduce the fact that the pre-authentication is not completed by the time the user arrives at the destination, as compared with the case where the above is not provided.

Further, in the second embodiment, the determination unit 114 determines whether the user can operate the operation unit (operation device 150). Then, the authentication unit 118A performs pre-authentication by the authentication device (authentication server) during the period before the arrival time by a predetermined time or more and the determination unit 114 determines that the operation unit can be operated by the user. Execute with 200). That is, the condition for the authentication unit 118A to execute the pre-authentication is at least a period during which the determination unit 114 determines that the user can operate the operation unit. In the second embodiment, the pre-authentication is performed by setting the condition for the authentication unit 118A to execute the pre-authentication to be at least a period during which the determination unit 114 determines that the user can operate the operation unit. Pre-authentication can be performed at the right time. For example, the user can perform pre-authentication using the user device 100A during a period suitable for operating the operating device 150 to perform pre-authentication.

[3. Third Embodiment]
The main differences between the third embodiment and the second embodiment described above are that the determination unit 114 is omitted from the functions realized by the processing device 110, the prediction unit 112B predicts the movement route to the destination, and the movement route to the destination is predicted. The authentication unit 118B identifies a specific section in which the user's state is in a state in which the operating device 150 can be operated from the movement route, and executes pre-authentication in the specified specific section.

FIG. 7 is a block diagram showing the overall configuration of the authentication system 10B according to the third embodiment of the present invention. The authentication system 10B shown in FIG. 7 executes user authentication of a service that requires user authentication to authenticate the user. The same or similar elements as those described with reference to FIGS. 1 to 6 are designated by the same reference numerals, and detailed description thereof will be omitted. The authentication system 10B is the same as or similar to the authentication system 10A shown in FIG. 5, except that it has the user apparatus 100B instead of the user apparatus 100A shown in FIG. For example, the authentication system 10B includes a single or a plurality of user devices 100B, a network NW, a single or a plurality of authentication servers 200, and a single or a plurality of profile servers 300. The user device 100B is an example of a mobile terminal device.

The user device 100B has the same or the same configuration as the user device 100A shown in FIG. For example, the user device 100B is realized by a computer system including a processing device 110, a storage device 120, a communication device 130, a display device 140, an operation device 150, and a GPS device 160. A plurality of elements of the user device 100B are connected to each other by a single unit or a plurality of buses. Further, each of the plurality of elements of the user apparatus 100B may be configured by a single device or a plurality of devices. Alternatively, some elements of the user device 100B may be omitted.

The processing apparatus 110 shown in FIG. 7 is the same as or similar to the processing apparatus 110 shown in FIG. 5, except that the control program PR1B is executed in place of the control program PR1A shown in FIG. The prediction unit 112B and the authentication unit 118B shown in the processing device 110 of FIG. 7 are examples of functional blocks for executing pre-authentication. For example, the processing device 110 functions as the prediction unit 112B and the authentication unit 118B by reading the control program PR1B from the storage device 120 and executing the control program PR1B.

The prediction unit 112B predicts the user's destination and arrival time in the same manner as the prediction unit 112A shown in FIG. Further, the prediction unit 112B predicts the movement route to the destination based on the position information of the user device 100B, the action history table TBL, and the destination. For example, when the prediction unit 112B predicts the user's destination as the dining room A based on the behavior management table TBLa shown in FIG. 2, the prediction unit 112B predicts the movement route from the company to the dining room A based on the map information and the like. When the information indicating the transportation means such as a train is stored in the behavior management table TBLa in association with the information indicating the movement of the user, the prediction unit 112B stores the movement means and the map information stored in the behavior management table TBLa. You may predict the movement route to the destination based on the above. The prediction unit 112B is the same as or similar to the prediction unit 112A shown in FIG. 5, except that the movement route to the destination is predicted.

The authentication unit 118B specifies a specific section in which the user's state can operate the operation device 150 of the user device 100B from the movement route predicted by the prediction unit 112B. For example, in the authentication unit 118B, when the section in which the user is moving on the train is included in the movement route predicted by the prediction unit 112B, the user can use the section in which the user is moving on the train. The operation device 150 of the device 100B is specified as an operable specific section. Then, the authentication unit 118B executes pre-authentication with the authentication server 200 when the user possessing the user device 100B is in a specific section. That is, the condition for the authentication unit 118B to execute the pre-authentication is that at least the position indicated by the position information of the user device 100B is included in the specific section.

The authentication unit 118B sets the condition for executing the pre-authentication to be at least a period in which the position indicated by the position information of the user device 100B is included in the specific section, so that the user state operates the operation device 150 of the user device 100B. The pre-authentication can be performed during a period suitable for performing the pre-authentication.

The storage device 120 shown in FIG. 7 is the same as or similar to the storage device 120 shown in FIG. 5, except that the control program PR1B is stored in place of the control program PR1A shown in FIG. That is, the storage device 120 stores a plurality of programs including the control program PR1B executed by the processing device 110, various data used by the processing device 110, and an action history table TBL transferred from the profile server 300.

Next, the operation of the authentication system 10B will be described.
FIG. 8 is a sequence chart showing an example of the operation of the authentication system 10B shown in FIG. 7. The operation shown in FIG. 8 is an example of a user authentication method. The operation shown in FIG. 8 is the same as or similar to the operation shown in FIG. 6 except that the user apparatus 100B executes steps S122 and S132 instead of the step S130 shown in FIG. In FIG. 8, the points different from the operation shown in FIG. 6 will be mainly described, and the description of the same or similar operation as that shown in FIG. 6 will be omitted.

When the user apparatus 100B determines in step S120 that authentication by the authentication server 200 is necessary, the user apparatus 100B sends a pre-authentication request to the authentication server 200, receives a pre-authentication permission notification from the authentication server 200, and then processes in step S122. To execute.

In step S122, the processing device 110 of the user device 100B functions as the prediction unit 112B and the authentication unit 118B, and specifies a specific section suitable for executing the pre-authentication from the movement route. In the operation shown in FIG. 8, the specific section suitable for pre-authentication is a section in which the user's state is in a state in which the operation device 150 of the user device 100B can be operated, as described in FIG. 7. For example, the prediction unit 112B predicts the movement route to the destination based on the position information of the user device 100B, the action history table TBL, and the destination. Then, the authentication unit 118B specifies a section in which the user's state can operate the operation device 150 of the user device 100B from the movement route predicted by the prediction unit 112B as a specific section suitable for pre-authentication. ..

Next, in step S132, the processing device 110 of the user device 100B functions as the authentication unit 118B, and determines whether or not the position of the user device 100B is within the specific section. For example, the authentication unit 118B determines whether or not the position indicated by the position information of the user device 100B is included in the specific section. If the position of the user device 100B is not within the specific section, the operation of the authentication unit 118B returns to the determination process in step S132. On the other hand, when the position of the user device 100B is within the specific section, the processing device 110 of the user device 100B executes pre-authentication with the authentication server 200 in step S140a. That is, the processing device 110 of the user device 100B waits for the execution of the pre-authentication until the position of the user device 100B is within the specific section.

If the position of the user device 100B is not within the specific section by the time before the arrival time, the user device 100B ends the user authentication process without executing the pre-authentication. Note that the user device 100B may prompt the user to execute pre-authentication when the position of the user device 100B falls within a specific section after a predetermined time has passed from the arrival time.

As described above, the same effect as that of the first embodiment can be obtained in the third embodiment as well. Further, in the third embodiment, the prediction unit 112B predicts the destination of the user and the arrival time at which the user arrives at the destination, and further determines the movement route to the destination as position information and action history (behavior history table TBL). ) And make predictions based on the destination. Further, the authentication unit 118B specifies a specific section in which the user's state can operate the operation unit (operation device 150) from the movement route predicted by the prediction unit 112B.

Then, the authentication unit 118B performs pre-authentication by the authentication device (authentication device) during the period before the arrival time by a predetermined time or more and the position indicated by the user's position information (position information of the user device 100B) is included in the specific section. It is executed with the server 200). That is, the condition for the authentication unit 118B to execute the pre-authentication is that at least the position indicated by the user's position information (position information of the user device 100B) is included in the specific section. In the third embodiment, the condition for the authentication unit 118B to execute the pre-authentication is at least a period in which the position indicated by the user's position information (position information of the user device 100B) is included in the specific section. Pre-authentication can be executed at the appropriate timing. For example, the user can perform pre-authentication using the user device 100B during a period suitable for operating the operating device 150 to perform pre-authentication.

[4. Fourth Embodiment]
The main difference between the fourth embodiment and the first embodiment described above is that the learning unit 115 learns for each destination with the position where the processing device 110 has executed the pre-authentication for each of the plurality of destinations as the authentication position. Also functions, and the authentication unit 118C urges the user to perform pre-authentication based on the authentication position learned by the learning unit 115.

FIG. 9 is a block diagram showing the overall configuration of the authentication system 10C according to the fourth embodiment of the present invention. The authentication system 10C shown in FIG. 9 executes user authentication of a service that requires user authentication. The same or similar elements as those described with reference to FIGS. 1 to 8 are designated by the same reference numerals, and detailed description thereof will be omitted. In the authentication system 10C, the same or similar profile server 300 as the profile server 300 shown in FIG. 5 is added to the authentication system 10 shown in FIG. Further, the authentication system 10C has a user device 100C instead of the user device 100 shown in FIG. Other configurations of the authentication system 10C are the same as or similar to the authentication system 10 shown in FIG. For example, the authentication system 10C includes a single or a plurality of user devices 100C, a network NW, a single or a plurality of authentication servers 200, and a single or a plurality of profile servers 300. The user device 100C is an example of a mobile terminal device.

The user device 100C has the same or the same configuration as the user device 100 shown in FIG. For example, the user device 100C is realized by a computer system including a processing device 110, a storage device 120, a communication device 130, a display device 140, an operation device 150, and a GPS device 160. A plurality of elements of the user device 100C are connected to each other by a single unit or a plurality of buses. Further, each of the plurality of elements of the user apparatus 100C may be configured by a single device or a plurality of devices. Alternatively, some elements of the user device 100C may be omitted.

The processing device 110 shown in FIG. 9 is the same as or similar to the processing device 110 shown in FIG. 1 except that the control program PR1C is executed in place of the control program PR1 shown in FIG. The prediction unit 112, the learning unit 115, and the authentication unit 118C shown in the processing device 110 of FIG. 9 are examples of functional blocks that execute pre-authentication. For example, the processing device 110 functions as a prediction unit 112, a learning unit 115, and an authentication unit 118C by reading the control program PR1C from the storage device 120 and executing the control program PR1C.

The prediction unit 112 shown in FIG. 9 is the same as or similar to the prediction unit 112 shown in FIG. For example, the prediction unit 112 predicts the destination of the user based on the position information of the user device 100C and the action history table TBL.

The learning unit 115 learns for each destination using the position where the pre-authentication is executed as the authentication position, and manages the authentication position in association with the destination. For example, the learning unit 115 stores the destination predicted by the prediction unit 112 and the position information of the user device 100C when the user operates the operation device 150 of the user device 100C to execute pre-authentication in association with each other. Store in device 120.

The authentication unit 118C is the same as or similar to the authentication unit 118 shown in FIG. 1, except that the user is prompted to perform pre-authentication when the user arrives within a predetermined range from the authentication position corresponding to the destination. When the user arrives within a predetermined range (for example, 10 m) from the authentication position corresponding to the destination predicted by the prediction unit 112, the authentication unit 118C prompts the user for pre-authentication. The predetermined range is not limited to 10 m.

For example, the authentication unit 118C identifies the authentication position corresponding to the destination predicted by the prediction unit 112 based on the correspondence relationship between the authentication position learned by the learning unit 115 and the destination. Then, when the position indicated by the position information of the user apparatus 100C is included in a predetermined range from the authentication position corresponding to the destination, the authentication unit 118C outputs information prompting the user for pre-authentication. The method of outputting the information prompting the user for pre-authentication to the user is not particularly limited. For example, the method of outputting information prompting the user for pre-authentication may be a method of displaying a login screen or the like on the display device 140, a method of outputting various sounds such as voice and sound effects, or a method of outputting various sounds such as voice and sound effect. A method of vibrating the device 100C may also be used. Since the authentication unit 118C prompts the user to execute the pre-authentication based on the learning result of the pre-authentication position executed in the past, the pre-authentication can be executed at a timing suitable for the pre-authentication.

The storage device 120 shown in FIG. 7 is the same as or similar to the storage device 120 shown in FIG. 1 except that the control program PR1C is stored in place of the control program PR1 shown in FIG. That is, the storage device 120 stores a plurality of programs including the control program PR1C executed by the processing device 110, various data used by the processing device 110, and an action history table TBL transferred from the profile server 300.

Next, the operation of the authentication system 10C will be described.
FIG. 10 is a sequence chart showing an example of the operation of the authentication system 10C of the fourth embodiment. The operation shown in FIG. 10 is an example of a user authentication method. Since steps S20, S120, S140 (S140a and S140b), S150 and S160 are the same as or similar to the operations described in FIG. 6, detailed description thereof will be omitted.

First, in step S20, the profile server 300 generates the action history table TBL based on the position information of the user device 100C, the date and time information generated by using the timekeeping device 340, and the like.

Next, in step S100, the processing device 110 of the user device 100C functions as the prediction unit 112 to predict the destination of the user. The operation of the prediction unit 112 in step S100 shown in FIG. 10 is, for example, the same as step S100 described in FIG.

Next, in step S120, the processing device 110 of the user device 100C functions as the authentication unit 118C, and determines whether or not authentication by the authentication server 200 is necessary to use the service supplied at the destination predicted in step S110. do. The operation of the authentication unit 118C in step S120 shown in FIG. 10 is, for example, the same as step S120 described in FIG.

When the authentication by the authentication server 200 is not required, the user apparatus 100C ends the user authentication process without executing the pre-authentication. On the other hand, when authentication by the authentication server 200 is required, the user apparatus 100C sends a pre-authentication request to the authentication server 200, receives a pre-authentication permission notification from the authentication server 200, and then executes the determination process in step S134. ..

In step S134, the processing device 110 of the user device 100C functions as the authentication unit 118C, and determines whether or not the authentication position corresponding to the destination predicted in step S100 has been learned. For example, the authentication unit 118C determines whether or not the authentication position corresponding to the destination predicted in step S100 is stored in the storage device 120. If the authentication position corresponding to the destination has already been learned, the authentication unit 118C executes the determination process in step S136. On the other hand, if the authentication position corresponding to the destination has not been learned, the authentication unit 118C executes pre-authentication with the authentication server 200 in step S140a.

Next, in step S136, the processing device 110 of the user device 100C functions as the authentication unit 118C, and determines whether or not the position of the user device 100C is within a predetermined range from the learned authentication position corresponding to the destination. do. For example, the authentication unit 118C determines whether or not the position indicated by the position information of the user device 100C is included in a predetermined range from the learned authentication position corresponding to the destination.

If the position of the user device 100C is not within a predetermined range from the learned authentication position corresponding to the destination, the operation of the authentication unit 118C returns to the determination process of step S136. On the other hand, when the position of the user device 100C is within a predetermined range from the learned authentication position corresponding to the destination, the processing device 110 of the user device 100C executes pre-authentication with the authentication server 200 in step S140a. do. That is, when the authentication position corresponding to the destination has been learned, the processing device 110 of the user device 100C has previously learned the position of the user device 100C until the position of the user device 100C is within a predetermined range from the learned authentication position corresponding to the destination. Wait for authentication to execute.

For example, when the position of the user device 100C is included in a predetermined range from the learned authentication position corresponding to the destination, the authentication unit 118C prompts the user for pre-authentication. The user who is prompted for pre-authentication operates, for example, the operation device 150 of the user device 100C in order to execute the pre-authentication. The user apparatus 100C that has received this operation executes pre-authentication with the authentication server 200 in step S140a.

In steps S140 (S140a, S140b), the processing device 110 of the user device 100C functions as the authentication unit 118C and executes pre-authentication with the authentication server 200. The operation of the authentication unit 118C in step S140a is, for example, the same as step S140 described with reference to FIG. After the pre-authentication is completed, the user device 100C learns the authentication position in step S142 and ends the user authentication process. Therefore, when the authentication system 10C authenticates the user by pre-authentication, the user can receive the service immediately upon arriving at the destination.

Further, after the pre-authentication is completed, the authentication server 200 stores the result of the pre-authentication in association with the terminal ID of the user device 100A (S150), and ends the authentication process when the pre-authenticated terminal ID is detected (S150). S160). The operation of the authentication server 200 in steps S150 and S160 shown in FIG. 10 is the same as or similar to that of steps S150 and S160 described in FIG.

In step S142, the processing device 110 of the user device 100C functions as the learning unit 115 and learns the authentication position where the pre-authentication has been executed. For example, the learning unit 115 stores the position of the user device 100C when the pre-authentication is executed in step S140a in the storage device 120 in association with the destination predicted in step S100. As a result, the authentication position corresponding to the predicted destination in step S100 is learned.

In the operation shown in FIG. 10, the processing device 110 learns the authentication position for each destination each time the pre-authentication is executed, and manages the authentication position in association with the destination. Then, when the processing device 110 has already learned the authentication position corresponding to the predicted destination, the processing device 110 prompts the user to execute the pre-authentication based on the learned authentication position. Authentication can be performed.

As described above, the same effect as that of the first embodiment can be obtained in the fourth embodiment. Further, in the fourth embodiment, the learning unit 115 learns for each destination with the position where the pre-authentication is executed as the authentication position, and manages the authentication position in association with the destination. Then, when the user arrives within a predetermined range from the authentication position corresponding to the destination predicted by the prediction unit 112, the authentication unit 118C prompts the user for pre-authentication. Therefore, in the fourth embodiment, the user can be urged to perform pre-authentication at a timing suitable for pre-authentication. As a result, the user can execute the pre-authentication using the user device 100C at a timing suitable for operating the operation device 150 of the user device 100C to execute the pre-authentication. That is, also in the fourth embodiment, the pre-authentication can be executed at the timing suitable for the pre-authentication.

[5. Fifth Embodiment]
The main difference between the fifth embodiment and the fourth embodiment described above is that the processing device 110 functions as a setting unit 116 that sets an authentication position for each destination instead of the learning unit 115, and authentication. The point 118D prompts the user for pre-authentication based on the authentication position set by the setting unit 116.

FIG. 11 is a block diagram showing the overall configuration of the authentication system 10D according to the fifth embodiment of the present invention. The authentication system 10D shown in FIG. 11 executes user authentication of a service that requires user authentication to authenticate the user. The same or similar elements as those described with reference to FIGS. 1 to 10 are designated by the same reference numerals, and detailed description thereof will be omitted. The authentication system 10D is the same as or similar to the authentication system 10C shown in FIG. 9, except that it has the user apparatus 100D in place of the user apparatus 100C shown in FIG. For example, the authentication system 10D includes a single or a plurality of user devices 100D, a network NW, a single or a plurality of authentication servers 200, and a single or a plurality of profile servers 300. The user device 100D is an example of a mobile terminal device.

The user device 100D has the same or the same configuration as the user device 100C shown in FIG. For example, the user device 100D is realized by a computer system including a processing device 110, a storage device 120, a communication device 130, a display device 140, an operation device 150, and a GPS device 160. A plurality of elements of the user device 100D are connected to each other by a single unit or a plurality of buses. Further, each of the plurality of elements of the user apparatus 100D may be configured by a single device or a plurality of devices. Alternatively, some elements of the user device 100D may be omitted.

The processing apparatus 110 shown in FIG. 11 is the same as or similar to the processing apparatus 110 shown in FIG. 9, except that the control program PR1D is executed in place of the control program PR1C shown in FIG. The prediction unit 112, the setting unit 116, and the authentication unit 118D shown in the processing device 110 of FIG. 11 are examples of functional blocks for executing pre-authentication. For example, the processing device 110 functions as a prediction unit 112, a setting unit 116, and an authentication unit 118D by reading the control program PR1D from the storage device 120 and executing the control program PR1D.

The prediction unit 112 shown in FIG. 11 is the same as or similar to the prediction unit 112 shown in FIG. For example, the prediction unit 112 predicts the destination of the user based on the position information of the user device 100D and the action history table TBL.

The setting unit 116 sets the position where the pre-authentication is executed as the authentication position for each destination. For example, the user operates the operation device 150 and inputs the authentication position for executing the pre-authentication to the processing device 110 for each destination. Then, the setting unit 116 sets the authentication position for each destination by, for example, storing the destination and the authentication position received from the operation device 150 in the storage device 120 in association with each other.

The authentication unit 118D is the same as or similar to the authentication unit 118C shown in FIG. 9, except that the authentication position set by the user is used instead of the learned authentication position. For example, the authentication unit 118D prompts the user for pre-authentication when the user arrives within a predetermined range (for example, 10 m) from the authentication position corresponding to the destination predicted by the prediction unit 112. The predetermined range is not limited to 10 m.

For example, the authentication unit 118D identifies the authentication position corresponding to the destination predicted by the prediction unit 112 based on the correspondence relationship between the authentication position set by the setting unit 116 and the destination. Then, when the position indicated by the position information of the user device 100D is included in a predetermined range from the authentication position corresponding to the destination, the authentication unit 118D outputs information prompting the user for pre-authentication. Since the authentication unit 118D prompts the user to execute the pre-authentication based on the authentication position desired by the user set by the setting unit 116, the pre-authentication can be executed at a timing suitable for the pre-authentication.

The storage device 120 shown in FIG. 11 is the same as or similar to the storage device 120 shown in FIG. 9, except that the control program PR1D is stored in place of the control program PR1C shown in FIG. That is, the storage device 120 stores a plurality of programs including the control program PR1D executed by the processing device 110, various data used by the processing device 110, and an action history table TBL transferred from the profile server 300.

Next, the operation of the authentication system 10D will be described.
FIG. 12 is a sequence chart showing an example of the operation of the authentication system 10D according to the fifth embodiment. The operation shown in FIG. 12 is an example of a user authentication method. In the operation shown in FIG. 12, the process of step S10 executed by the user apparatus 100D is added to the operation shown in FIG. Further, in the operation shown in FIG. 12, the user apparatus 100D executes steps S135 and S137 instead of steps S134 and S136 shown in FIG. Other sequences of operation shown in FIG. 12 are the same as or similar to the operation shown in FIG. In FIG. 12, the points different from the operation shown in FIG. 10 will be mainly described, and the description of the same or similar operation as that shown in FIG. 10 will be omitted.

First, in step S10, the processing device 110 of the user device 100D functions as the setting unit 116 and sets the authentication position for each destination. Note that FIG. 12 shows an example of first executing the process of setting the authentication position for each destination in order to make the explanation easy to understand, but the process of setting the authentication position for each destination is executed. The timing is not limited to the example shown in FIG. Since steps S20, S100, and S120 are the same as or similar to the operations described in FIG. 10, the description thereof will be omitted.

When the authentication by the authentication server 200 is not required, the user apparatus 100D ends the user authentication process without executing the pre-authentication as described with reference to FIG. On the other hand, when authentication by the authentication server 200 is required, the user apparatus 100D sends a pre-authentication request to the authentication server 200, receives a pre-authentication permission notification from the authentication server 200, and then executes the determination process in step S135. ..

In step S135, the processing device 110 of the user device 100D functions as the authentication unit 118D, and determines whether or not the authentication position corresponding to the destination predicted in step S100 has been set. For example, the authentication unit 118D determines whether or not the authentication position corresponding to the destination predicted in step S100 is stored in the storage device 120. When the authentication position corresponding to the destination is set, the authentication unit 118D executes the determination process in step S137. On the other hand, when the authentication position corresponding to the destination is not set, the authentication unit 118D executes pre-authentication with the authentication server 200 in step S140a.

Next, in step S137, the processing device 110 of the user device 100D functions as the authentication unit 118D, and determines whether or not the position of the user device 100D is within a predetermined range from the set authentication position corresponding to the destination. do. For example, the authentication unit 118D determines whether or not the position indicated by the position information of the user device 100D is included in a predetermined range from the set authentication position corresponding to the destination.

If the position of the user device 100D is not within a predetermined range from the set authentication position corresponding to the destination, the operation of the authentication unit 118D returns to the determination process of step S137. On the other hand, when the position of the user device 100D is within a predetermined range from the set authentication position corresponding to the destination, the processing device 110 of the user device 100D executes pre-authentication with the authentication server 200 in step S140a. do. That is, when the authentication position corresponding to the destination is set, the processing device 110 of the user device 100D waits in advance until the position of the user device 100D is within a predetermined range from the set authentication position corresponding to the destination. Wait for authentication to execute.

For example, when the position of the user device 100D is included in a predetermined range from the set authentication position corresponding to the destination, the authentication unit 118D prompts the user for pre-authentication. The user who is prompted for the pre-authentication operates, for example, the operation device 150 of the user device 100D to execute the pre-authentication (S140a). After the pre-authentication is completed, the user device 100D ends the user authentication process. Since steps S140 (S140a, S140b), S150, and S160 are the same as or similar to the operations described in FIG. 10, the description thereof will be omitted. When the authentication system 10C authenticates the user by pre-authentication, the user can receive the service as soon as he / she arrives at the destination.

In the operation shown in FIG. 12, when the processing device 110 has already set the authentication position corresponding to the predicted destination, the processing device 110 prompts the user to execute the pre-authentication based on the set authentication position, so that the pre-authentication is performed. Pre-authentication can be performed at the right time.

As described above, the same effect as that of the first embodiment can be obtained in the fifth embodiment as well. Further, in the fifth embodiment, the setting unit 116 sets the position where the pre-authentication is executed as the authentication position for each destination. Then, when the user arrives within a predetermined range from the authentication position corresponding to the destination predicted by the prediction unit 112, the authentication unit 118D prompts the user for pre-authentication. Therefore, in the fifth embodiment, the user can be urged to perform pre-authentication at a timing suitable for pre-authentication. As a result, the user can execute the pre-authentication using the user device 100D at a timing suitable for operating the operation device 150 to execute the pre-authentication. That is, also in the fifth embodiment, the pre-authentication can be executed at the timing suitable for the pre-authentication.

[6. Modification example]
The present invention is not limited to the embodiments exemplified above. Specific modes of modification are illustrated below. Two or more embodiments arbitrarily selected from the following examples may be merged.

[First modification]
In each of the first to fifth embodiments described above, an example is shown in which the action history table TBL includes the action management table TBLa and the location management table TBLb, but the configuration of the action history table TBL is shown in FIG. It is not limited to the example shown in. Further, the stored contents of the behavior management table TBLa and the location management table TBLb are not limited to the examples shown in FIGS. 2 and 3. For example, when the behavior management table TBLa stores the staying place, the location information corresponding to the staying place and the address of the authentication server may be stored together. That is, one table in which the behavior management table TBLa and the location management table TBLb are integrated may be adopted as the behavior history table TBL.

[Second modification]
In the first embodiment described above, an example is shown in which the user device 100 executes pre-authentication with the authentication server 200 without predicting the arrival time, but the user device 100 predicts the destination and the arrival time. Then, pre-authentication may be executed with the authentication server 200. For example, the prediction unit 112 may predict the arrival time when the user arrives at the destination, similar to the prediction unit 112A shown in FIG. When the prediction unit 112 predicts the arrival time of the destination, it may be a condition of the timing at which the authentication unit 118 executes the pre-authentication that it is at least a predetermined time or more before the arrival time predicted by the prediction unit 112. In this case, it is possible to reduce the fact that the pre-authentication is not completed by the time the user arrives at the destination, as compared with the case where no condition is set.

[Third modification example]
In the first embodiment described above, the authentication system 10 that does not include the profile server 300 is illustrated, but the authentication system 10 may have the profile server 300. In this case, the user apparatus 100 may use the action history table TBL generated in the profile server 300.

[Fourth variant]
In each of the second to fifth embodiments described above, the authentication system 10A, 10B, 10C or 10D including the profile server 300 is exemplified, but the profile server 300 is the authentication system 10A, 10B, 10C. It may be omitted from each of the 10Ds. In this case, each of the user devices 100A, 100B, 100C, and 100D generates the action history table TBL.

[Fifth variant]
In the second embodiment and the third embodiment described above, an example in which the user device 100A or 100B predicts the arrival time is shown, but the user device 100A or 100B performs pre-authentication without predicting the arrival time of the destination. It may be executed with the authentication server 200. In this case, the user device 100A performs pre-authentication with the authentication server 200 even when the user can operate the operation device 150 of the user device 100A after a predetermined time has passed from the arrival time. You may execute it with. Further, the user apparatus 100B may execute pre-authentication with the authentication server 200 when the position of the user apparatus 100B is within the specific section after the time before the arrival time has passed. According to the fifth modification, a series of processes for executing the pre-authentication can be simplified as compared with the second embodiment and the third embodiment.

[Sixth variant]
In the second embodiment described above, the determination unit 114 for determining whether or not the user can operate the operation device 150 is exemplified, but the determination unit 114 instead of determining the user's state, surrounds the user. You may determine if the situation is suitable for the method used in pre-authentication. For example, the determination unit 114 is suitable for the method in which the method used in the pre-authentication is voice authentication, and when the user is in a noisy place such as under an elevated railway track, the situation around the user is used in the pre-authentication. It is determined that there is no such thing. Further, for example, the determination unit 114 determines that the method used in the pre-authentication is voice authentication, and when the user is in the park, the situation around the user is suitable for the method used in the pre-authentication.

Further, for example, in the determination unit 114, the method used in the pre-authentication is authentication using a password, and when there is a person near the user, the situation around the user is not suitable for the method used in the pre-authentication. Is determined. That is, the determination unit 114 determines that the method used in the pre-authentication is authentication using a password, and when there is no person near the user, the situation around the user is suitable for the method used in the pre-authentication. do. The determination unit 114 may estimate the situation around the user based on the map information, the position information of the user device 100A, or the like, or may estimate the situation based on the information obtained from the sensor of the user device 100A. ..

In the sixth modification, the condition for the authentication unit 118A to execute the pre-authentication is at least a period in which the determination unit 114 determines that the situation around the user is suitable for the method used in the pre-authentication. .. That is, the authentication unit 118A executes the pre-authentication with the authentication server 200 during the period when the determination unit 114 determines that the situation around the user is suitable for the method used in the pre-authentication. Therefore, according to the sixth modification, the pre-authentication can be executed at the timing suitable for the pre-authentication as in the second embodiment.

[7th variant]
In the third embodiment described above, the authentication unit 118B for specifying a specific section in which the user's state is in a state in which the operation device 150 can be operated is exemplified from the movement route, but the authentication unit 118B is a specific section based on the user's state. Instead of specifying, you may specify a specific interval where the situation around the user is suitable for the method used in pre-authentication. In this case, the authentication unit 118B identifies a specific section from the movement route predicted by the prediction unit 112B, in which the situation around the user becomes a situation suitable for the method used in the pre-authentication.

For example, the method used in pre-authentication is authentication using a password, and authentication is performed when the travel route includes a noisy section such as under an elevated railroad track, a section where a user is traveling on a train, a park, and a sidewalk. Section 118B specifies a section in which the user is traveling on a train and a park as a specific section. Further, for example, the method used in pre-authentication is voice authentication, and authentication is performed when the movement route includes a noisy section such as under an elevated railroad track, a section where a user is traveling on a train, a park, and a sidewalk. Part 118B specifies the park as a specific section.

In the seventh modification, the condition for the authentication unit 118A to execute the pre-authentication is that at least the position indicated by the position information of the user device 100B is included in the specific section. That is, the authentication unit 118B executes pre-authentication with the authentication server 200 when the user possessing the user device 100B is in a specific section. Therefore, according to the seventh modification, the pre-authentication can be executed at the timing suitable for the pre-authentication as in the third embodiment.

[8th variant]
Each authentication system 10, 10A, 10B, 10C, 10D in the above-described embodiment is a user device 100, 100A, 100B, 100C, 100D and a user device in each of the first to seventh modifications. It may be mixed and possessed.
[9th variant]
In FIGS. 6, 8, 10, and 12 described above, an example is shown in which the user devices 100A, 100B, 100C, and 100D execute the prediction of the user's destination, but the prediction of the user's destination and the like are shown. External devices of the user devices 100A, 100B, 100C, 100D may execute. For example, the profile server 300 performs all or part of the processes executed by the user devices 100A, 100B, 100C, and 100D described in FIGS. 6, 8, 10, and 12 except for the pre-authentication. You may do it. In this case, the profile server 300 periodically or irregularly acquires the position information (position information of the user device 100A or the like) indicating the position of the user. That is, the user devices 100A, 100B, 100C, and 100D may acquire the destination predicted by the profile server 300 from the profile server 300. Alternatively, the user devices 100A, 100B, 100C, 100D may acquire the destination predicted by the prediction units 112A, 112B.

[7. others]
(1) In the above-described embodiment, the storage device 120 is a recording medium that can be read by the processing device 110, and examples thereof include a ROM and a RAM. Disks, Blu-ray® discs), smart cards, flash memory devices (eg cards, sticks, key drives), CD-ROMs (Compact Disc-ROMs), registers, removable discs, hard disks, floppy (registered trademarks). ) Disks, magnetic strips, databases, servers and other suitable storage media. The program may also be transmitted from the network via a telecommunication line. The program may also be transmitted from the communication network via a telecommunication line.

(2) The above-described embodiments include LTE (Long Term Evolution), LTE-A (LTE-Advanced), SUPER 3G, IMT-Advanced, 4G, 5G, FRA (Future Radio Access), and W-CDMA (registered trademark). , GSM (registered trademark), CDMA2000, UMB (Ultra Mobile Broadband), IEEE 802.11 (Wi-Fi), IEEE 802.16 (WiMAX), IEEE 802.20, UWB (Ultra-WideBand), Bluetooth (registered trademark) ), Other systems that utilize appropriate systems and / or may be applied to next-generation systems that are extended based on them.

(3) In the above-described embodiment, the specific operation (for example, identification of the position information by the base station) that is supposed to be performed by the base station may be performed by its upper node (upper node) in some cases. In a network containing one or more network nodes having a base station, various operations performed for communication with a terminal are performed on the base station and / or other network nodes other than the base station (eg, for example. It is clear that it can be done by (but not limited to) MME or S-GW. Although the case where there is one network node other than the base station is illustrated above, it may be a combination of a plurality of other network nodes (for example, MME and S-GW).

(4) In the embodiments described above, the information, signals and the like described may be represented using any of a variety of different techniques. For example, data, instructions, commands, information, signals, bits, symbols, chips, etc. that may be referred to throughout the above description are voltages, currents, electromagnetic waves, magnetic fields or magnetic particles, light fields or photons, or any of these. It may be represented by a combination of.
The terms described in the present specification and / or the terms necessary for understanding the present specification may be replaced with terms having the same or similar meanings.

(5) In the above-described embodiment, the input / output information and the like may be stored in a specific place (for example, a memory) or may be managed by a management table. Information to be input / output may be overwritten, updated, or added. The output information and the like may be deleted. The input information or the like may be transmitted to another device.

(6) In the above-described embodiment, the determination may be made by a value represented by 1 bit (0 or 1) or by a boolean value (Boolean: true or false). , May be done by numerical comparison (eg, comparison with a given value).

(7) The order of the processing procedures, sequences, flowcharts, etc. exemplified in the above-described embodiment may be changed as long as there is no contradiction. For example, the methods described herein present elements of various steps in an exemplary order and are not limited to the particular order presented.

(8) Each of the functions exemplified in FIGS. 1, 5, 7, 9 and 11 is realized by any combination of hardware and software. Further, each function may be realized by a single device, or may be realized by two or more devices configured as separate bodies from each other.

(9) The program exemplified in the above-described embodiment may be called a software, firmware, middleware, microcode or hardware description language, or may be called by another name, an instruction, an instruction set, a code, a code segment, It should be broadly interpreted to mean program code, subprograms, software modules, applications, software applications, software packages, routines, subroutines, objects, executable files, execution threads, procedures or functions, etc.
Further, software, instructions, and the like may be transmitted and received via a transmission medium. For example, the software may use wired technology such as coaxial cable, fiber optic cable, twist pair and digital subscriber line (DSL) and / or wireless technology such as infrared, wireless and microwave to website, server, or other. When transmitted from a remote source, these wired and / or wireless technologies are included within the definition of transmission medium.

(10) In each of the above-mentioned forms, the terms "system" and "network" are used interchangeably.

(11) In the above-described embodiment, the base station can accommodate one or more (for example, three) cells (also referred to as sectors). When a base station accommodates multiple cells, the entire base station coverage area can be divided into multiple smaller areas, each smaller area being a base station subsystem (eg, a small indoor base station RRH: Remotee). Communication services can also be provided by Radio Head). The term "cell" or "sector" refers to a portion or all of the coverage area of a base station and / or base station subsystem that provides communication services in this coverage. Further, the terms "base station", "eNB", "cell", and "sector" may be used interchangeably herein. A base station may also be referred to by terms such as fixed station, NodeB, eNodeB (eNB), access point, femtocell, and small cell.

(12) In the above-described embodiment, the user devices 100, 100A, 100B, 100C, and 100D include the case where they are mobile stations. Mobile stations can be used by those skilled in the art as subscriber stations, mobile units, subscriber units, wireless units, remote units, mobile devices, wireless devices, wireless communication devices, remote devices, mobile subscriber stations, access terminals, mobile terminals, wireless. It may also be referred to as a terminal, remote terminal, handset, user agent, mobile client, client, or some other suitable term.

(13) In the embodiments described above, the term "connected", or any variation thereof, means any direct or indirect connection or connection between two or more elements and to each other. It can include the presence of one or more intermediate elements between two "connected" elements. The connection between the elements may be physical, logical, or a combination thereof. As used herein, the two elements are by using one or more wires, cables and / or printed electrical connections, and, as some non-limiting and non-comprehensive examples, radio frequencies. It can be considered to be "connected" to each other by using electromagnetic energies such as electromagnetic energies having wavelengths in the region, microwave region and light (both visible and invisible) regions.

(14) In the embodiments described above, the statement "based on" does not mean "based on" unless otherwise stated. In other words, the statement "based on" means both "based only" and "at least based on".

(15) As long as "inclusion," "comprising," and variations thereof in the embodiments described above are used herein or within the scope of the claims, these terms are terms. As with "preparing", it is intended to be inclusive. Moreover, the term "or" as used herein or in the claims is intended to be non-exclusive.

(16) In the whole of the present application, if articles are added by translation, for example a, an and the in English, unless the context clearly indicates that these articles are not. Includes multiple.

(17) It will be apparent to those skilled in the art that the invention is not limited to the embodiments described herein. The present invention can be implemented as modifications and modifications without departing from the spirit and scope of the present invention, which is determined based on the description of the scope of claims. Therefore, the description herein is for purposes of illustration and has no limiting implications for the present invention. In addition, a plurality of embodiments selected from the embodiments exemplified herein may be combined.

10, 10A, 10B, 10C, 10D ... Authentication system, 100, 100A, 100B, 100C, 100D ... User device, 110 ... Processing device, 112, 112A, 112B ... Prediction unit, 114 ... Judgment unit, 115 ... Learning unit, 116 ... Setting unit, 118, 118A, 118B, 118D ... Authentication unit, 120 ... Storage device, 130 ... Communication device, 140 ... Display device, 150 ... Operation device, 160 ... GPS device, 200 ... Authentication server, 210 ... Processing device , 220 ... storage device, 230 ... communication device, 240 ... time measuring device, 300 ... profile server, 310 ... processing device, 320 ... storage device, 330 ... communication device, 340 ... time measuring device.

Claims (3)

A prediction unit that predicts the destination of the user based on the position information indicating the position of the user and the action history of the user.
When the authentication of the user is executed by the authentication device at the destination predicted by the prediction unit, pre-authentication to authenticate the user before the user arrives at the destination is executed with the authentication device. Authentication department and
It is equipped with an operation unit that accepts operations by the user.
The prediction unit predicts the movement route to the destination based on the position information, the action history, and the destination.
The authentication unit identifies a specific section in which the user's state is in a state in which the operation unit can be operated from the movement path predicted by the prediction unit.
The condition for the authentication unit to execute the pre-authentication is that at least the position indicated by the position information is included in the specific section.
A mobile terminal device characterized by that . A prediction unit that predicts the destination of the user based on the position information indicating the position of the user and the action history of the user.
When the authentication of the user is executed by the authentication device at the destination predicted by the prediction unit, pre-authentication to authenticate the user before the user arrives at the destination is executed with the authentication device. Equipped with a certification unit
The prediction unit predicts the movement route to the destination based on the position information, the action history, and the destination.
The authentication unit identifies a specific section from the travel path predicted by the prediction unit so that the situation around the user becomes a situation suitable for the method used in the pre-authentication.
The condition for the authentication unit to execute the pre-authentication is that at least the position indicated by the position information is included in the specific section.
A mobile terminal device characterized by that. A prediction unit that predicts the destination of the user based on the position information indicating the position of the user and the action history of the user.
When the authentication of the user is executed by the authentication device at the destination predicted by the prediction unit, pre-authentication to authenticate the user before the user arrives at the destination is executed with the authentication device. Authentication department and
It is provided with a learning unit that learns each of the plurality of destinations by using the position where the pre-authentication is executed as the authentication position and manages the authentication position in association with each destination.
When the user arrives within a predetermined range from the authentication position corresponding to the destination predicted by the prediction unit, the authentication unit executes the pre-authentication with the authentication device.
A mobile terminal device characterized by that.

Images