KR20200130104A - Method, apparatus and program for detection of usage by users for shared object - Google Patents

Abstract

The present invention relates to a method for detecting a use result for each user for a shared object to correctly and quickly authenticate a user who uses the shared object and an apparatus and a program thereof. According to the present invention, the method comprises: an authentication module preparation step of registering an authentication module used for detecting a use result to an authentication server, registering user′s raw biometric information to the authentication module, and registering raw hash information generated from the raw biometric information to the authentication module by the authentication module; a biometric information input step of newly inputting current user′s instantaneous biometric information to the authentication module through a biometric sensor of the authentication module connected to a sensor unit of the shared object; a module-inside processing step of comparing the raw biometric information with the instantaneous biometric information when both of the raw biometric information and the instantaneous biometric information are stored in the authentication module and are not transmitted to the outside in the authentication module, and outputting a biometric matching signal from the authentication module when a matching degree is within a predetermined range; an instantaneous hash information generation step of allowing the authentication module to generate the instantaneous hash information from the raw biometric information used for comparison and transmit the same to the authentication server; a server-inside processing step of comparing the raw hash information with the instantaneous hash information while both the raw hash information and the instantaneous hash information are stored in the authentication server, and performing a hash matching determination in the case of matching; an authentication confirmation processing step of outputting an authentication confirmation signal from the authentication server when the biometric matching signal is inputted and the hash matching determination is performed; and a use result detection step of allowing a processing server receiving the authentication confirmation signal to process count of the use result of the user.

Description

Detecting method, device, and program for each user's usage performance for shared objects {METHOD, APPARATUS AND PROGRAM FOR DETECTION OF USAGE BY USERS FOR SHARED OBJECT}

The present invention relates to a method, an apparatus, and a program for detecting the usage performance of each user for a shared object, and in more detail, when a plurality of users share and use a device, vehicle, or place as a shared object, The present invention relates to a method and apparatus for accurately and conveniently detecting and processing the usage records of each of these users, and to a program in which such a method is implemented.

In general, certain devices, vehicles, places, and the like are targets for use by users. As such a use object, it is not limited to a device, a vehicle, or a place, and, for example, an animal or plant may be used in the case of horseback riding or rental, for example.

Such use targets are sometimes used by a single user, but are often used by multiple users. In the sharing economy business, which has become an issue recently, it is assumed that the use object is used by a plurality of users, but even before the emergence, various types of use of the object to be shared have existed.

First, take a sharing device as an example. For example, a factory worker working in front of a conveyor is required to take turns with other workers at the end of the working hours, so the work place is a shared relationship by a plurality of workers. As another example, in the case of a part-time clerk, the office desk is shared with other part-time clerks by time-sharing. And as another example, a photocopier installed in an office is usually shared and used by several office workers. In the case of device rental, rental, or lease, the device is time-divided to a plurality of customers for each contract period, and use rights are granted.

Next, take a shared vehicle as an example. For example, passengers of a bus share a vehicle called a bus. The same is true of other public transport such as taxis, trains, trains, aircraft, and bicycles. On the other hand, bus drivers belonging to the bus company also use the bus jointly when working in shifts. The same is true of other public transportation such as taxi drivers, train drivers, and train drivers. In the rental car, each user can use the vehicle for a specified time. In recent vehicle-sharing services such as Uber, time-sharing is granted to a plurality of users with the right to use a private vehicle.

And take a shared place as an example. For example, accommodation facilities such as hotels and condos are spaces in which a plurality of current or potential users share the right to use for a contracted period. The golf course can be used by each user for a predetermined time. School classrooms (classrooms) are also spaces where time-sharing is shared with multiple lecturers and students in multiple subjects, unless they are exclusive classrooms. In addition, in recent space sharing services such as Airbnb, the right to use private spaces is given time-sharing to a plurality of users.

Hereinafter, various objects that can be shared by a plurality of users, such as a sharing device, a shared vehicle, and a shared place, will be collectively referred to as a'sharing object'.

According to the conventional patent document,'In a method executed through an operation server interlocking with an application server that provides a vehicle sharing service that shares driving rights to operate a designated shared vehicle for a certain period of time to a number of users. , N vehicle information for N (N≥1) shared vehicles that can share driving rights for a certain period of time to multiple users and N vehicle phone numbers uniquely assigned to each of the N shared vehicles are mapped one-to-one. A first step of storing in the designated number management D/B; When applying for a vehicle sharing service through an app of a random sharing applicant's wireless terminal, vehicle information of the shared vehicle to be shared to the sharing applicant via a designated route, the sharing time information to be shared with the sharing applicant, and the sharing requester's wireless terminal A second step of receiving a mobile phone number of; A third step of inquiring a number management D/B based on vehicle information of a shared vehicle to be shared with the sharing applicant to check a vehicle phone number of a designated number system assigned to a shared vehicle other than a calling device; A fourth step of mapping the mobile phone number of the sharing applicant's wireless terminal, the vehicle phone number assigned to the shared vehicle, and sharing time information for sharing the shared vehicle in a designated storage medium; When the sharing start time of the stored sharing time information has not arrived, the call forwarding function of the vehicle phone number of the shared vehicle mapped with the mobile phone number of the sharing applicant's wireless terminal is inactive (or maintained in an inactive state), and the sharing is started. A fifth step of processing a call connection request to the vehicle phone number to be forwarded to the mobile phone number when the time has come; A sixth step of checking whether a sharing end time for ending sharing of the shared vehicle has elapsed based on the stored sharing time information; And a seventh step of deactivating (or canceling) the call forwarding function of the vehicle phone number assigned to the shared vehicle when the sharing end time of the shared vehicle has elapsed. It is disclosed.

Registered Patent No. 10-1783555

The technology of the above patent document specifies a sharer who is a driver using the mobile phone number of the wireless terminal of the share applicant. That is, the mobile phone number of the wireless terminal of the sharing applicant serves as an ID.

However, an ID or mobile phone number is just'knowledge' that can be given to others. Since it is a piece of knowledge, there may be cases in which the person actively informs others of the ID or mobile phone number, and there are cases where the ID or mobile phone number is stolen by others against their will.

At this time, if another person who has acquired the knowledge makes a request for a sharing service, there is a fear that the application name user (the person) and the actual user (other person) who have applied for the sharing object will be different. For this reason, the performance for each user may be erroneously calculated, and furthermore, there is a fear that the shared object may be abused for crime.

In addition, ID or mobile phone number is an authentication method that is inconvenient to input into the device by typing or the like. Therefore, in the case of temporary user change, such as when the user temporarily changes due to typing inconvenience, for example, when a factory worker entrusts the conveyor work to a worker next to him to go to the toilet for a while, the ID or mobile phone number for user change There are cases where typing is not performed, and there is a fear of authentication failure due to mistyped even when typing is performed.

On the other hand, there are cases where biometric information is used for user authentication. Since such biometric information corresponds to extremely important personal information, strict management is required. In particular, when the biometric information is configured to be transmitted/received through a network, an accident may occur in which biometric information is leaked due to hijacking of the network signal or the like. Of course, there may be cases in which hardware containing biometric information, such as a server, terminal, module, etc., is hacked and biometric information is stolen. Furthermore, if the biometric information registered in the server, terminal, module, etc. can be modified without permission, the other person is authenticated by the biometric information after modifying the biometric information of another person other than the originally registered user. There is also a fear that an operation such as a crime may occur that takes advantage of the authentication of the originally registered user.

The present invention is to solve the problem of the technology in the above patent documents, and the user who uses the shared object is accurately informed by the authentication method in which the person is not actively informed to others or is not stolen by others against his or her intention. It is intended to provide a method, apparatus, and program for detecting the usage performance of each user for a shared object that can be quickly authenticated.

In addition, in the case of user authentication using biometric information, it is intended to provide a method, an apparatus, and a program for detecting the usage performance of each user for a shared object so that authentication is performed in a state in which biometric information is not transmitted or received through a network.

In addition, it is intended to provide a method, an apparatus, and a program for detecting the usage performance of each user for a shared object, which can prevent the occurrence of a crime of stealing the authentication effect of others due to alteration of biometric information.

The method of the present invention for achieving the above object is a method of detecting a usage record for each user for a shared object used by a plurality of users, wherein an authentication module to be used for detecting the usage record is registered in an authentication server, and the An authentication module preparation step in which the original biometric information of the user is registered in the authentication module, and the original hash information generated from the original biometric information by the authentication module in a predetermined manner is registered in the authentication server; A biometric information input step of newly inputting instantaneous biometric information of a current user to the authentication module through a biosensor of the authentication module detachably connected to the sensor unit of the sharing object; When both the original biometric information and the instantaneous biometric information are provided in the authentication module and are not transmitted to the outside, the original biometric information and the instantaneous biometric information are compared within the authentication module, and the original biometric information A module internal processing step of outputting a predetermined biometric matching signal from the authentication module when the matching degree between the instantaneous biometric information and the instantaneous biometric information falls within a predetermined range; An instantaneous hash information generating step in the authentication module, generating instantaneous hash information from the original biometric information used for comparison, and transmitting it to the authentication server; In a state in which both the original hash information and the instantaneous hash information are provided in the authentication server, the comparison result of the original hash information and the instantaneous hash information is matched in the authentication server, and the authentication server provides the biometric matching signal An authentication confirmation processing step of outputting a predetermined authentication confirmation signal from the authentication server upon receiving the input; And a use record detection step of performing a predetermined process including a count of the user's use record in the processing server receiving the authentication confirmation signal.

Here, in the intra-module processing step, it is preferable that the matching degree is determined while the original biometric information and the instantaneous biometric information are loaded into a secure memory that can be read only inside the authentication module.

In addition, it is preferable that the original biometric information is stored in an encrypted state, and then decrypted and processed immediately before the match degree in the processing step inside the module is determined.

In addition, it is preferable that the instantaneous biometric information is completely deleted so as to be irrecoverable immediately after determining the matching degree.

In addition, the sensor unit is provided with an article sensor that detects an article held by a user and outputs an article detection signal, and the activation of the processing step inside the module is preferably performed by triggering the article detection signal. .

And, when the location of the location sensor held by the user is within a predetermined range from the location of the shared object or the sensor unit, activation of the processing step inside the module is performed by a predetermined location detection signal output from the location sensor. It is preferable that it is configured to be made.

On the other hand, the device of the present invention for achieving the above object is a device for detecting the usage performance of each user for a shared object used by a plurality of users, and while an authentication server is connected to the outside, one side is a sensor of the shared object. It is detachably connected to the unit, the other side is connected to a biosensor, and the original biometric information of the user is registered and provided therein, and the original hash information generated in a predetermined manner from the original biometric information is transferred to the authentication server. In the registered state, instantaneous biometric information of the current user is newly input through the biosensor, so that both the original biometric information and the instantaneous biometric information are provided inside and are not transmitted to the outside. , The original biometric information and the instantaneous biometric information are internally compared, and if the degree of correspondence between the original biometric information and the instantaneous biometric information falls within a predetermined range, a predetermined biometric matching signal is output while the An authentication module for generating instantaneous hash information from the original biometric information and transmitting it to the authentication server; In a state in which the original hash information is registered from the authentication module, the instantaneous hash information is received together with the biometric matching signal from the previously registered authentication module, and both the original hash information and the instantaneous hash information are stored in the authentication server. while it is provided, the authentication server is that the instantaneous hash information and the information compared to the original hash in, that a given authentication signal output with a match determination is yirueojim hash if a matching authentication server; And a processing server that performs a predetermined process including counting the user's usage record upon receiving the authentication confirmation signal.

On the other hand, the program of the present invention for achieving the above object is a program for detecting the usage performance of each user for a shared object, and an information processing device recording a program for executing each step of the method described above in an information processing device. It is a program recorded on a storage medium that can be read by.

According to the present invention, a user for a shared object capable of accurately and quickly authenticating a user who uses the shared object by an authentication method in which the person is not actively notifying others or is not stolen by others against his or her intention The detection method, device and program of each use performance are provided.

In addition, in the case of user authentication using biometric information, a method, an apparatus, and a program for detecting the usage performance of each user for a shared object are provided so that authentication is performed without biometric information being transmitted or received through a network.

In addition, there is provided a method, apparatus, and program for detecting the usage record of each user for a shared object, which can prevent the occurrence of a crime to steal the authentication effect of others due to alteration of biometric information.

1 is a block diagram of an embodiment of an apparatus in which a method for detecting a usage record for each user for a shared object according to the present invention is to be implemented.
2 is a flowchart of the method.

Hereinafter, a method, an apparatus, and a program for detecting a usage record for each user for a shared object according to the present invention will be described in detail with reference to the accompanying drawings. However, for members having the same function by the same configuration, the same reference numerals are maintained even if the drawings are different, and thus detailed description thereof may be omitted.

In addition, the relationship in which other members are arranged or connected to the front, rear, left and right sides, top and bottom of a certain member includes a case where a separate member is inserted in the middle. Conversely, when a member is said to be'right' before, left, or above and below the other member, it means that there is no separate member in the middle. And, when a part is said to'include' other components, it means that other components may be further included, rather than excluding other components unless otherwise stated.

In addition, the classification of the names of the configurations into first, second, etc. is for classifying the configurations in the same relationship, and is not necessarily limited to the order. In addition, terms such as'unit','means','unit','member', and'module' described in the specification mean a unit of a comprehensive structure that performs at least one function or operation. In addition, information processing devices such as terminals and servers described in the specification basically mean hard wiring, which means hardware in which a specific function or operation is implemented, but should not be interpreted to be limited to specific hardware. It does not exclude soft wiring made up of software that is driven to enable specific functions or operations to be implemented. That is, the terminal or the server may be a device or software installed on a device, such as an app.

In addition, the size and thickness of each component shown in the drawings are arbitrarily shown for convenience of description, so the present invention is not necessarily limited to those shown in the drawings, and in order to clearly express various parts and regions such as layers and regions In some cases, the thickness is exaggerated and enlarged or reduced.

<Basic configuration-method>

The method of the present invention is a method of detecting a usage record for each user for a shared object 10 used by a plurality of users. The shared object 10 may be, for example, a device such as a factory conveyor, an office desk, or a photocopier, and may be a vehicle such as a bus, a taxi, a train, a rental car, or Uber for a driver or passenger. For example, a hotel, a condo, a golf course , Classroom, or Airbnb. However, it is not limited to these, and an object that can be used by a plurality of users may be the sharing object 10 of the present invention without limitation.

The method of the present invention, the authentication module preparation step (S10) and; Biometric information input step (S20) ; A module internal processing step (S40) ; Instantaneous hash information generation step (S45) ; Server internal processing step (S50 front end) and; An authentication verification processing step (after S50) ; It is characterized in that the use record detection step (S60) ; is included.

In the authentication module preparation step (S10) , the authentication module 12 to be used for detection of the use record is registered in the authentication server 20, and the original biometric information of the user 14 is registered in the authentication module 12. In addition, the original hash information generated in a predetermined manner from the original biometric information by the authentication module 12 is registered in the authentication server 20.

The authentication server 20 is a server configured to output a predetermined signal corresponding to the input of a predetermined signal. In other words, unlike a typical server in the related art, advanced computational processing such as comparison processing is not required. Therefore, it is possible to increase the processing speed while reducing errors.

The authentication server 20 is preferably configured to respond only to a signal from the authentication module 12 registered in advance. Therefore, the authentication module 12 must be registered in the authentication server 20 in advance prior to transmission and reception of signals. When registering the authentication module 12 with the authentication server 20, it is possible to undergo a security verification, for example, by a public certificate or a private certificate. Whether to register may be determined by a unique identification code of the authentication module 12, for example, a serial number or ID.

The original biometric information is biometric information that is used for authentication. The original biometric information may be acquired and input through the biometric sensor 13 connected to the authentication module 12. However, it is not limited to this. For example, the original biometric information may be input by being transmitted from another device (not shown) without going through the biometric sensor 13.

On the other hand, in order to confirm whether the original biometric information is hacked, the original hash information is generated in a predetermined manner by the authentication module 12 for the original biometric information, and is transmitted to the authentication server 20 to be registered. have. This original hash information is data stored in advance to be used for verifying whether the original biometric information is hacked when comparing biometric information later. Here, the hash information may be set as, for example, a hash function value, but is not limited thereto, and may be set as, for example, a predetermined processing value for the hash function value. Hereinafter, the hash function value or its processed value is collectively referred to as hash information.

When the original hash information is transmitted from the authentication module 12 to the authentication server 20, it is transmitted in an encrypted state. If the original hash information is a hash function value, all hash function values may be transmitted, or through other methods, the server processes the hash value for the biometric information to have all or part of it. The authentication server 20 safely stores the original hash information.

The biometric information input step (S20 ), through the biometric sensor 13 of the authentication module 12, which is detachably connected to the sensor unit 11 of the sharing object 10, the authentication module 12 In this step, instantaneous biometric information of the current user 14 is newly inputted.

The sensor unit 11 is a unit that contributes to the processing of functions according to the present invention in addition to the basic functions of the shared object 10. The sensor unit 11 may be included in the sharing object 10 and may be configured integrally. However, it is not limited to this. The sensor unit 11 may be configured in a detachable manner so as to be detachable from the sharing object 10.

The authentication module 12 may be integrally installed and included in the sensor unit 11. In this case, with a stable electrical connection, an optimized configuration is possible.

However, it is preferable that the authentication module 12 is configured to be detachably fastened to the sensor unit 11. The method of attaching and detaching is possible regardless of wired or wireless, for example, a case in which the authentication module 12 in the form of a USB dongle is physically attached to and detached from the sensor unit 11 having a terminal of the USB interface. As another example, the Bluetooth method There is a case in which the sensor unit 11 and the authentication module 12 having a wireless means are paired with each other within the accessible range. In the case of such a detachable type, the authentication module 12 may be configured to be connected to several shared objects 10. Therefore, it is possible to increase the degree of freedom of connection. In addition, when not in use, the authentication module 12 may be separated from the sensor unit 11 and stored in a safer place such as a safe.

In particular, the authentication module 12 may be configured to consist of a plurality. In this case, each of the plurality of authentication modules 12 may be for individuals assigned to each user 14. In this case, the authentication module 12 of each user 14 is preferably configured such that the original biometric information of each user 14 is registered. By doing so, each authentication module 12 is thoroughly personalized, and is used only for authentication of each individual user 14. And this personal authentication module 12, can be used for a number of sharing targets (10).

Instantaneous biometric information is biometric information input to be compared with the original biometric information. This is acquired from the biometric sensor 13 connected to the authentication module 12. The biometric sensor 13 may be included in the authentication module 12 and installed integrally. By doing so, security can be enhanced. However, it is not limited to this. The biometric sensor 13 may be of a detachable type that is detachably connected to the authentication module 12. By doing this, there is an advantage that a newly developed sensor and a different type of sensor can be replaced and mounted, and the sensor itself can be separated and managed.

In the module internal processing step (S40) , in a state in which both the original biometric information and the instantaneous biometric information are provided in the authentication module 12 and not transmitted to the outside, the authentication module 12 When the original biometric information and the instantaneous biometric information are compared and the degree of correspondence between the original biometric information and the instantaneous biometric information falls within a predetermined range, a predetermined biometric matching signal is output from the authentication module 12.

Here, it is preferable that the original biometric information and the instantaneous biometric information are loaded in a secure memory (not shown ) that can be read only inside the authentication module 12, and the matching degree is determined. The secure memory cannot be accessed from the outside of the authentication module 12. Therefore, it is not possible to hack through data access to the authentication module 12, and security is greatly improved.

In addition, it is preferable that the original biometric information is stored in an encrypted state and then decrypted immediately before the matching degree is determined, so that the matching degree determination and the like are processed. Thus, even if an attempt to hack the biometric information in the authentication module 12 occurs, security is greatly improved due to the original biometric information in an encrypted state.

In addition, it is preferable that the instantaneous biometric information is completely deleted so as to be irrecoverable immediately after determining the matching degree. Thus, even if a hacking attempt occurs for the biometric information used for determining the degree of matching in the authentication module 12, the security is extremely improved since it has already been completely deleted so as not to be recovered.

The determination of the degree of correspondence may use a conventional technique for determining the degree of correspondence or degree of similarity with respect to the pattern of biometric information. To balance security and speed, the predetermined range can be adjusted.

The biometric matching signal output as a result of determining the degree of matching is a signal predetermined between the authentication server 20 and the authentication module 12 registered in the authentication server 20. The biometric matching signal is transmitted directly from the authentication module 12 to the authentication server 20 or from the authentication module 12 to the authentication server 20 through the sensor unit 11.

The instantaneous hash information generation step (S45) is a step in which instantaneous hash information is generated from the original biometric information used for comparison in the authentication module 12 and transmitted to the authentication server 20.

When the authentication module 12 checks the degree of correspondence of the biometric information by comparing the original biometric information and the instantaneous hash information (when performing user verification), after confirming the degree of correspondence through biometric authentication, the authentication module 12, this time, Instantaneous hash information (eg, hash function value) for the original biometric information data used in the performed comparison is calculated. This instantaneous hash information is generated by the authentication module 12 and transmitted to the authentication server 20 in the same manner as when the original biometric information is registered and the original hash information is registered in the authentication module preparation step (S10).

In the authentication verification processing step (S50) , in a state in which both the original hash information and the instantaneous hash information are provided in the authentication server 20, the original hash information and the instantaneous hash in the authentication server 20 This is a step of outputting a predetermined authentication confirmation signal from the authentication server 20 when the result of the comparison of the information is matched and the authentication server 20 receives the biometric matching signal.

By comparing the original hash information stored in the authentication server 20 with the instantaneous hash information generated and transmitted during this comparison of the biometric information, the original biometric information registered and stored in the authentication module 12 has not been forged. I can confirm.

The predetermined authentication confirmation signal is a signal predetermined between the authentication server 20 and the authentication module 12 registered in the authentication server 20, and the processing server 30 in the authentication server 20 It is a signal that is predetermined to be transmitted to ). Accordingly, the processing server 30 is waiting for input of the authentication confirmation signal.

The usage record detection step S60 is a step of performing a predetermined process including a count of the user's usage record in the processing server 30 receiving the authentication confirmation signal.

The counting process is performed by a counter 31 that records the start and end of use for each user in a database for systematically storing the use record, for example, the use record of the users 14 for the sharing object 10. Can be done. Thereby, for example, as soon as the use of the user 14 in the past has ended, the start of use of the current user 14 can be counted.

However, there may be a case where an unused period (a pause period) exists between the start of use of the current user 14 and the end of the use of the past user 14. In order to handle this, the start of use of the current user 14 is counted by authentication through the authentication module 12 and the authentication server 20, and the same method for the end of use of the past user 14 It may be configured to be through authentication of, or by a separate authentication or signal by pressing a switch (not shown).

Follow-up processing for each user 14 according to the count result, for example, work diary, time and attendance management, performance, evaluation, salary, etc., among personnel management, transportation expenses, accommodation expenses, and usage fee processing among billing processing, are processed by the processing module 32. Can be done.

<Effect>

For example, in the case of a shift from a worker (past user) 14 to another worker (current user) 14 working on a factory conveyor that is the shared object 10, the current user 14 is The detachable authentication module 12 is fastened to (11), and instantaneous biometric information is inputted by the biometric sensor 13 built into the authentication module 12. Then, the degree of correspondence between the original biometric information and the instantaneous biometric information is determined inside the authentication module 12, and if it falls within a predetermined range, a biometric matching signal is output. The authentication server 20 receiving the biometric matching signal outputs an authentication confirmation signal, which is input to the processing server 30. In the processing server 30, the start of use of the current server 14 is counted by the counter 31, and such counts are collected for all users, thereby detecting the usage performance for each user. The processing module 32 can perform processing such as greetings or billing according to the usage performance of each user.

In this way, since the usage record of the shared object 10 is detected by biometric authentication, problems of user identification based on knowledge such as mobile phone number or ID are avoided, and it is possible to accurately and easily identify a true user. In particular, since the degree of correspondence of the biometric information is determined only inside the authentication module 12, there is no external leakage of the biometric information. In addition, since only a predefined signal is output as a result of determining the matching degree, there is no leakage of biometric information.

Further, the attempt to hack is completely blocked by configurations such as instantaneous biometric information is stored in a secure memory, original biometric information is stored in an encrypted state, and instantaneous biometric information is deleted after the match degree is determined.

In addition, when the authentication module 12 is detachable, is a plurality of assigned to each user, and is for personal use, it is possible to connect to various sharing targets 10 with high degree of freedom.

In addition, since the authentication module 12 generates original hash information for the original biometric information registered in the authentication module 12 and registers it in the authentication server 20, it is possible to check whether the registered original biometric information is hacked. Can be judged. That is, when instantaneous biometric information is subsequently input and compared with the original biometric information as described above, the authentication module 12 newly generates instantaneous hash information of the original biometric information used for the comparison, and the authentication server 20 Will be sent to. The authentication server 20 compares the original hash information registered in advance with the instantaneous hash information transmitted this time, and determines the hash match only when they match. This hash match determination becomes evidence that the original biometric information registered in the authentication module 12 has not been hacked. Therefore, even if the hacker replaces the original biometric information of the original user of the authentication module 12 with the biometric information of another person, the biometric matching signal of the result of inputting and comparing the instantaneous biometric information of the other person is according to the present invention. According to this, since the hash matching determination is not received by the authentication server 20 according to the comparison of the hash information, it is possible to prevent theft.

<Product trigger configuration>

On the other hand, there may be an attempt to obtain an unfair result by tricking the biometric sensor 13 by means of a photograph or a model. In order to prevent such a case, in addition to biometrics, there is a case where it is necessary to detect whether a separate condition is satisfied, and to activate biometrics only when the condition is satisfied.

To this end, the sensor unit 11 is provided with an article sensor 15 that detects the article 16 held by the user 14 and outputs an article detection signal, and the module internal processing step (S40) The activation of the product is preferably configured to be performed by triggering the article detection signal (S30).

Thereby, only when the RFID sensor recognizes the user's 14's possession tag 16, such as an RFID tag, or when, for example, the user's 14's possession 16, such as a company badge, is recognized by the image processing camera, Alternatively, for example, only when the Bluetooth interface of the smartphone terminal 16 of the user 14 is paired with the Bluetooth interface of the product sensor, the module internal processing step S40 may be activated. In this way, attempts to bypass biometrics can be neutralized.

<Position trigger configuration>

In addition, when the user 14 is available only when the user 14 is in the vicinity of the sharing object 10, it is necessary to limit the activation of the module internal processing step S40 according to the location.

To this end, when the location of the location sensor 17 held by the user 14 is within a predetermined range from the location of the sharing object 10 or the sensor unit 11, the output from the location sensor 17 It is preferable that the module internal processing step (S40) is activated by a predetermined position detection signal (S30).

Here, the location sensor 17 may be, for example, a smartphone terminal having a GPS function. Accordingly, when the position sensor 17 of the true user 14 is not within a predetermined range, biometric authentication is not performed, and security is enhanced.

<device>

The apparatus of the present invention is an apparatus for detecting a usage record for each user for a shared object 10 used by a plurality of users 14. The apparatus of the present invention includes an authentication module 12 ; An authentication server 20 ; Processing server 30 ; characterized in that it is made.

The authentication module 12 is connected to the sensor unit 11 of the sharing target 10 with the authentication server 20 connected to the outside, and the original biometric information of the user 14 is registered therein. , A module that newly receives instantaneous biometric information of the current user 14 and outputs a predetermined biometric matching signal when the matching degree between the original biometric information and the instantaneous biometric information falls within a predetermined range.

The authentication server 20 is a server that outputs a predetermined authentication confirmation signal when the biometric matching signal is input from the authentication module 12 registered in advance.

The processing server 30, upon receiving the authentication confirmation signal, counts the end of use of the user 14 in the past for the sharing object 10 and at the same time counts the start of use of the current user 14. , It is a server that calculates usage performance for each user.

<Program>

The program for detecting the usage performance of each user for a shared object of the present invention is a program recorded in a storage medium that can be read by an information processing device in which a program for executing each step of the method is recorded in an information processing device.

Although the preferred embodiments of the present invention have been described above, the present invention is not limited to the disclosed embodiments, but is implemented by modifying in various forms different from within the scope of the claims, the detailed description of the invention, and the accompanying drawings. It can be practiced, and other equivalent embodiments are possible, and it is natural to those of ordinary skill in the art that this also falls within the scope of the present invention, and only the embodiments are intended to make the disclosure of the present invention complete, and the present invention It is provided to completely inform the scope of the invention to those of ordinary skill in the art to which it belongs, and the invention is only defined by the scope of the claims.

The present invention can be used in industries related to a method, apparatus, and program for detecting the usage performance of each user for a shared object used by a plurality of users.

10: What to share
11: sensor unit
12: authentication module
13: biometric sensor
14: user
15: article sensor
16: article
17: position sensor
20: authentication server
30: processing server
31: counter
32: processing module

Claims (8)

As a method of detecting the usage performance of each user for a shared object used by a plurality of users,
Original hash information generated in a predetermined manner from the original biometric information by the authentication module while the authentication module to be used for detecting the usage record is registered in the authentication server, and the user's original biometric information is registered in the authentication module An authentication module preparation step of being registered in the authentication server;
A biometric information input step of newly inputting instantaneous biometric information of a current user to the authentication module through a biosensor of the authentication module detachably connected to the sensor unit of the sharing object;
When both the original biometric information and the instantaneous biometric information are provided in the authentication module and are not transmitted to the outside, the original biometric information and the instantaneous biometric information are compared within the authentication module, and the original biometric information A module internal processing step of outputting a predetermined biometric matching signal from the authentication module when the matching degree between the instantaneous biometric information and the instantaneous biometric information falls within a predetermined range;
An instantaneous hash information generating step in the authentication module, generating instantaneous hash information from the original biometric information used for comparison, and transmitting it to the authentication server;
In a state in which both the original hash information and the instantaneous hash information are provided in the authentication server, the comparison result of the original hash information and the instantaneous hash information is matched in the authentication server, and the authentication server provides the biometric matching signal An authentication confirmation processing step of outputting a predetermined authentication confirmation signal from the authentication server upon receiving the input;
A usage record detection step of performing a predetermined process including a count of the usage record of the user in the processing server receiving the authentication confirmation signal;
A method of detecting the usage performance of each user for a shared object, characterized in that it includes. The method according to claim 1,
In the module internal processing step, the matching degree is determined while the original biometric information and the instantaneous biometric information are loaded into a secure memory that can be read only inside the authentication module.
A method of detecting usage performance for each user for a shared object, characterized in that. The method according to claim 1 or 2,
The original biometric information is stored in an encrypted state, and then decrypted and processed immediately before the matching degree in the processing step inside the module is determined.
A method of detecting usage performance for each user for a shared object, characterized in that. The method according to claim 1 or 2,
The instantaneous biometric information is completely deleted irrecoverably immediately after the determination of the matching degree
A method of detecting usage performance for each user for a shared object, characterized in that. The method according to claim 1 or 2,
The sensor unit is provided with an article sensor that detects an article held by a user and outputs an article detection signal,
The activation of the processing step inside the module is performed by triggering the article detection signal.
A method of detecting usage performance for each user for a shared object, characterized in that. The method according to claim 1 or 2,
When the location of the location sensor held by the user is within a predetermined range from the location of the sharing object or the sensor unit, the module internal processing step is activated by a predetermined location detection signal output from the location sensor. Constructed
A method of detecting usage performance for each user for a shared object, characterized in that. As a device for detecting the usage performance of each user for a shared object used by a plurality of users,
With the authentication server connected to the outside, one side is detachably connected to the sensor unit of the sharing target, the other side is connected to the biometric sensor, and the original biometric information of the user is registered and provided inside, and the original In a state in which original hash information generated from biometric information in a predetermined manner is registered in the authentication server, instantaneous biometric information of the current user is newly input through the biosensor, so that the original biometric information and the instantaneous biometric information Is provided inside and is not transmitted to the outside, so that the original biometric information and the instantaneous biometric information are compared inside, so that if the matching degree between the original biometric information and the instantaneous biometric information falls within a predetermined range, , An authentication module for outputting a predetermined biometric matching signal, generating instantaneous hash information from the original biometric information used for comparison, and transmitting it to the authentication server;
In a state in which the original hash information is registered from the authentication module, the instantaneous hash information is received together with the biometric matching signal from the previously registered authentication module, and both the original hash information and the instantaneous hash information are stored in the authentication server. while it is provided, the authentication server is that the instantaneous hash information and the information compared to the original hash in, that a given authentication signal output with a match determination is yirueojim hash if a matching authentication server;
A processing server that, upon receiving the authentication confirmation signal, performs a predetermined process including a count of the user's usage record;
A device for detecting the usage performance of each user for the target to be shared, characterized in that it includes. As a program for detecting the usage performance of each user for the shared object,
A program recorded on a storage medium readable by an information processing device, in which a program for executing each step of the method according to claim 1 or 2 is recorded on an information processing device.

Images