TWI466528B - Authentication system - Google Patents

Description

Certification system

The present invention relates to an authentication system used in a place requiring authentication, such as opening and closing of an entrance or exit of a collective house or a building.

Conventional technology, an electronic lock system is installed in an entrance and exit permitting entry and exit personnel as a judgment authentication system, and a system for authenticating an identity certificate (hereinafter referred to as an ID) for a user who permits a specific electronic lock to be unlocked is known. It is stored in advance in the authentication device, and when the card ID in which the authentication ID is stored is read via the dedicated input device, it is determined whether or not it is a previously stored ID.

Such a system is a card that needs to be created as a memory authentication ID, and it takes time and expense for production and distribution, and the user cannot perform authentication if he forgets to carry the card.

In this regard, a system is known in which a user terminal device such as a mobile phone can be used instead of the authentication ID of the user.

Specifically, the permission to unlock the user's mobile phone number is pre-registered in the authentication server, and when the user accesses the server by telephone, the phone number of the mobile phone used for the specific access may be This phone number is compared to the pre-registered phone number.

As described above, if the user's mobile phone number is used as the ID, the user can no longer carry a dedicated card for authentication with the authentication ID, and there is no need to separately set the device for reading the ID from the card at the entrance and exit.

In the above-mentioned authentication system using a mobile phone, as long as the mobile phone makes a call to the authentication server, the user can be authenticated and the electronic lock can be unlocked.

However, for the authentication server, the call can be made from anywhere, so if you are a pre-registered user, you can call the server to unlock the electronic lock no matter where you are. Therefore, the user who logs in may deliberately unlock the electronic lock multiple times even if the user is not in the vicinity of the entrance and exit of the electronic lock. In this way, people other than the login user may also enter and exit.

Further, if an unauthorized user other than the legitimate user registered in advance knows the telephone number of the authentication server, the call can be made to the authentication server. Of course, an unauthorized user will not be authenticated even if he or she dials the authentication server with his or her mobile phone. For example, there is no case where the electronic lock is unlocked.

However, if an unauthorized user continually makes a call to the telephone number and the telephone line for accessing the authentication server is busy, there is a problem that the legitimate user cannot make a call to the authentication server.

Moreover, the authentication of the user is based only on the agreement between the telephone number of the user terminal device and the registered number, so the security is also relatively low in the case of forging an unauthorized user.

[Patent Document 1] Japanese Patent Laid-Open Publication No. 2009-263892

[Patent Document 2] Japanese Patent Laid-Open No. 2011-094468

The present invention provides an authentication system that can utilize the ID of a user terminal device such as a telephone number, which not only improves user convenience, but is also difficult to be mischievous or forged, and can also improve security.

According to a first aspect of the present invention, an authentication system includes: a data processing unit; a memory unit coupled to the data processing unit; and an access ID composed of a plurality of telephone numbers or email addresses for accessing the data processing unit. a group; an access ID output device that outputs an access ID transmitted from the data processing unit.

The data processing unit has a function of transmitting a specific arbitrary access ID from the access ID group to the access ID output device on the condition that a request signal for requesting a specific access ID is input; The specific access ID corresponds to the access ID output device and is stored in the function of the memory unit; if an access ID from the access user group is used from the specific user terminal device to the data processing unit When the communication has been performed, the user terminal device ID that has been communicated can be obtained, whether the access ID is the specific access ID, and whether the obtained user terminal device ID is pre-registered. The function of the user terminal device ID; outputting the function of the determination result; and outputting the selected one of the access IDs to the access ID output device, and releasing the memory memorized by the memory unit at a predetermined timing The function of taking the correspondence between the ID output device and the specific access ID.

Furthermore, the order in which the data processing unit specifies an arbitrary access ID from the access ID group is not limited. For example, an access ID can be randomly selected, or according to the advance The order of the decision specific access ID can be used.

Further, although the output of the access ID is conditional on the input of the request signal, the specificity of the access ID is not limited to the input of the request signal. For example, a specific access ID is specified every fixed time, and when a request signal is input, a specific access ID may be output at that time.

According to the second aspect of the invention, the first aspect of the invention provides a control unit that is connected to the data processing unit and controls the control target, and the data processing unit has a function of outputting the determination result to the control unit. The control unit has a function of controlling the control target based on the determination result of the data processing unit.

According to a third aspect of the present invention, in the second aspect of the invention, the control target is an electronic switch mechanism, the access ID output device integrally formed with the electronic switch mechanism, or the access ID output device adjacent to the electronic switch mechanism .

According to a fourth aspect of the present invention, in the second aspect of the invention, the content server is provided with a content storage unit for storing one or a plurality of contents, and one or more accesses are connected to the data processing unit. The ID output device simultaneously stores the output device ID of the access ID output device in the memory unit to which the data processing unit is coupled.

And the data processing unit determines that the communication from the specific user terminal device is the specific access ID, and determines that the acquired user terminal device ID matches the registered terminal device ID of the user terminal device ID registered in advance. Simultaneously with the judgment result, the control unit outputs the user terminal device ID or the user terminal device ID And the control unit outputs the user terminal device ID or the content server to the content server according to the determination result and the control signal for causing the content server to act according to the determination result. Either or both of the output device IDs corresponding to the user terminal device ID, and the content server has either or both of the output device ID and the user terminal device ID output from the data processing unit. The function of selecting content from the content storage unit and outputting the selected content.

In the first aspect of the invention, the user is authenticated, and not only the user terminal device ID of the user terminal device and the registered terminal device ID are matched, but the access ID used by the user in communication is set. The specific access ID output by the access ID output device needs to be the same, and the user terminal device ID and the login terminal device ID are identical, so that it is safer than the case where only the user terminal device ID is used. More sexual.

Moreover, the access ID corresponding to the user terminal device ID of the user terminal device is re-outputted when the access ID is requested every time, and it has the validity of the time limit.

In other words, when the user requesting authentication communicates with the data processing unit, the access ID output by the access ID output device must be used within the valid period, and even if the user who is logged in is used, the learned information cannot be used once. Take the ID to request multiple authentications.

In this way, in the key used for authentication, the access ID is different each time, so that the security can be further improved.

Moreover, the effective access ID for communicating to the data processing unit is not fixed. Therefore, improper user access cannot be deliberately concentrated and will not be hampered by legitimate users.

According to the authentication system of the second to fourth inventions, the control object can be controlled in accordance with the determination result formed by the authentication method with high security as described above.

In the third aspect of the invention, the electronic switch mechanism is used as a control target, and an access ID output device integrally formed with the electronic switch mechanism or an access ID output device provided adjacent to the electronic switch mechanism is provided. Therefore, in order to access the data processing unit, the user must be located beside the electronic switching mechanism. In other words, the electronic switch mechanism cannot be turned on or off in a place away from the entrance or exit where the electronic switch mechanism is installed.

Therefore, it is possible to surely prevent the unregistered user from improperly entering and exiting the entrance and exit of the electronic switch mechanism, and also prevent the login user from deliberately turning the electronic switch mechanism on and off.

According to the fourth invention, content can be provided to the authenticated user. In particular, the content server may provide content related to the installation location of the access ID output device based on the output device ID, and provide content for the specific user based on the user terminal device ID.

In the first embodiment shown in FIGS. 1 to 3, the electronic lock 2 provided in the door 1 is controlled by the authentication system of the present invention. And the electronic lock 2 is an electronic switch mechanism which is a control object of the present invention.

As shown in FIG. 1, the system includes a center server 3, and the center server 3 includes a control unit 4 that controls the electronic lock 2, a data processing unit 5 that connects the control unit 4, and a memory unit 6. The center server 3 is disposed at a location different from the door 1, such as an administrator of the authentication system of the present embodiment.

On the other hand, next to the door 1, an ID request key 7 for outputting the access ID request signal of the present invention and an ID display unit 8 as an access ID output means are provided. The ID request key 7 and the ID display 8 are connected to the data processing unit 5 of the center server 3.

Further, in the first embodiment, the ID request key 7 and the ID display 8 are respectively set to correspond to the electronic lock 2 in a one-to-one manner, and the correspondence relationship is previously registered in the memory unit 6 of the center server 3. . Therefore, the correspondence between the three ID request keys 7, the ID display 8, and the electronic lock 2 can be specified.

Further, in the authentication system, when the user who has registered in advance performs communication with the user terminal device 9 by the data processing unit 5, the data processing unit 5 can perform the user terminal device ID of the user terminal device 9 based on the user terminal device ID. The user's authentication; and the control unit 4 unlocks the electronic lock 2 according to the result of the authentication.

Hereinafter, the authentication system of the first embodiment will be described in detail.

The memory unit 6 of the center server 3 can store and store the access ID group of the data processing unit 5 of the access center server 3.

In addition, the access ID refers to an ID required for the user to communicate with the center server 3 by using the user terminal device 9 such as a mobile phone, and is a phone number or Email address, etc. In the first embodiment, the user terminal device 9 is a mobile phone, and the access ID is the telephone number of the data processing unit 5.

However, the user terminal device 9 is not limited to a mobile phone, and may be a mobile terminal device having an e-mail function. When the communication from the user terminal device 9 to the material processing unit 5 is processed based on the electronic mail, the electronic mail address of the data processing unit 5 is used as the access ID of the present invention.

Further, the memory unit 6 uses the telephone number as the registration terminal device ID, which is the user terminal device ID of the user terminal device 9 used by the user who has permitted the electronic lock 2 to be unlocked, and registers the terminal device ID. The key number of the ID request key 7 set beside the electronic lock 2 that is permitted to be unlocked is correspondingly memorized.

Furthermore, as described above, in addition to the correspondence between the ID request key 7 and the ID display 8, the memory unit 6 pre-stores the ID request key 7 and the ID display 8 and the electronic lock 2 as the control object. Correspondence relationship. Therefore, as shown in FIG. 2, instead of registering the terminal device ID and the ID request key 7, the terminal device ID and the ID display 8 or the electronic lock 2 may be correspondingly registered in the storage unit 6.

Further, the correspondence between the button number and the registered terminal device stored in the storage unit 6 is not limited to the one-to-one correspondence, and may correspond to a plurality of registered terminal device IDs for one button number. That is to say, a door 1 can permit a plurality of users to enter and exit. For example, the memory unit 6 is as shown in FIG. 2, and the a1, a2, a3, ... of the button number of the ID request key 7 are correspondingly registered by the user corresponding to the ID request key 7 and permitting the electronic lock 2 to be unlocked. Terminal device ID y1, y2, y3,... Post-memory, but here, a1 of a button number corresponds to y1, y2 of two login terminal device IDs.

Further, in Fig. 1, although only one electronic lock 2 is connected to the control unit 4 of the center server 3, the number of electronic locks 2 controlled by the control unit 4 can be large. In the first embodiment, a plurality of electronic locks 2, not shown, and an ID request key 7 and an ID display device 8 corresponding to the electronic locks 2 are connected to the center server 3.

In addition, when a specific user can unlock the electronic locks 2 of the plurality of different doors 1 , the memory unit 6 uses a login terminal ID corresponding to the plurality of button numbers and memorizes.

The ID request key 7 is provided, and when it is pressed, the data processing unit 5 transmits a function of accessing the ID request signal.

Further, the ID display 8 has a function of displaying an access ID transmitted from the material processing unit 5 in response to an ID request signal.

Secondly, according to the authentication of the specific user, the central function of the data processing unit 5 is described in the control sequence of the electronic lock 2.

First, when the user presses the ID request key 7 next to the door 1, the ID request key 7 is transmitted from the ID request key 7, and the access ID request signal is transmitted to the data processing unit 5. When the data processing unit 5 inputs the access ID request signal and uses it as a starter, an access ID, such as an access ID s1, is randomly selected from the access ID group memorized by the storage unit 6.

The data processing unit 5 transmits the selected specific access ID s1 to the ID display 8 corresponding to the ID request key 7, and then the ID display 8 displays the received storage. Take the s1 of the ID.

Further, the material processing unit 5 associates the specific access ID s1 with the ID request key 7, and simultaneously makes the login terminal device ID corresponding to the ID request key 7 and the ID request key 7, and access. The correspondence between the three s1 of the ID is stored in the memory unit 6.

When the ID request key 7 is the button number a1, as shown in FIG. 3, the index table of the s1 corresponding to the access ID is stored for the button number a1 of the ID request key 7 corresponding to the registered terminal device ID. Here, the key number a1 of the ID request key 7 corresponds to y1 and y2 of the second login end ID. In the index table of FIG. 3, the data corresponding to the button number a1 is described as one column, and the memory unit 6 stores the correspondence between the button number a1, the y1 of the registered terminal device ID, and the s1 of the access ID. And the correspondence between the button number a1, the y2 of the registered terminal device ID, and the s1 of the access ID.

On the other hand, the user who previously pressed the ID request key 7 uses the user terminal device 9 to make a call to the specific access ID S1 displayed on the ID display 8.

Furthermore, the user terminal device ID of the telephone number of the user terminal device 9 is set to y1, and the ID is stored in the memory unit 6 as the login terminal device ID.

Thus, if the user terminal device 9 makes a call to the s1 of the access ID, the data processing unit 5 is the user terminal device of the user terminal device 9 that is specifically dialed. The y1 of the ID simultaneously determines the correspondence between the s1 of the access ID and the y1 of the user terminal device ID of the user terminal device 9, and the selected access ID and the registered terminal device ID registered by the storage unit 6. Whether the correspondence between the two is consistent.

Specifically, it is determined whether or not there is information on the s1 of the registered terminal device ID corresponding to the specific access ID s1 in the index table shown in FIG.

When the data processing unit 5 determines that the correspondence relationship is the same, the control unit 4 outputs a command signal for unlocking the control electronic lock 2 corresponding to the button number a1 corresponding to the ID, according to the result of the determination.

As described above, in the index table of FIG. 3, whether or not there is a s1 corresponding to the specific access ID of the y1 of the registered terminal device ID means that the access ID used by the user to communicate with the data processing unit 5 is The specific access ID is s1, and the user terminal device ID used for communication is the login terminal device ID. That is, the user is authenticated.

The control unit 4 controls the electronic lock 2 to be unlocked based on the command signal input from the data processing unit 5.

Further, the data processing unit 5 deletes the data corresponding to the s1 of the access ID from the storage unit 6 after the determination of the correspondence relationship. That is, in the first embodiment, the time point after determining the correspondence between the user terminal device ID and the access ID is a timing set in advance in the present invention to release the selected access. The correspondence between the ID and the access request device or the access output device, and thereafter, even if the selected access ID is used, it cannot be authenticated, thereby obtaining the one-time acquisition. You cannot use the ID multiple times.

However, the timing of releasing the correspondence is not limited to the judgment time point.

For example, the data processing unit 5 may be configured to transmit the selected one of the access IDs to the access ID output device such as the ID display 8, and then cancel the correspondence after a fixed time has elapsed. If so set, the user may request the access ID without performing the communication using the user terminal device 9, and the selected access ID may not be effective at any time.

As described above, in the authentication system of the first embodiment, the authentication accuracy can be increased to improve the security by changing the access ID used by the data processing unit 5 of the user access center server 3 each time.

In particular, since the ID request key 7 and the ID display 8 are disposed beside the door 1, it is possible to prevent the electronic lock 2 from being deliberately locked and unlocked from a position away from the door 1.

Further, in the first embodiment described above, the ID request key 7 of the access ID requesting device and the ID display 8 of the access ID output device are separately provided, but these may be integrally provided. For example, a device such as a touch panel screen having an access ID requesting device and an access ID output device may be used.

Further, in the first embodiment, the electronic lock 2 constitutes the electronic switch mechanism of the present invention, but the automatic door may be used as an electronic switch mechanism instead of the electronic lock 2, and controlled by the control unit 4.

Further, as in the first embodiment described above, in the case where the mobile phone is used as the key of the door, the function as the key can be stopped as long as the function of the mobile phone is stopped. E.g, When you accidentally lose your phone, you just need to stop the phone function, and people who pick up the phone can't use it improperly. When the key for directly unlocking the lock provided by the door is lost, in order to prevent it from being improperly used, it is necessary to replace the key of all the locks of the door at the same time, but this is not necessary in the first embodiment described above.

The second embodiment shown in FIGS. 4 to 6 controls the object to be the authentication system of the content server 10.

The content server 10 includes a server of the content data processing unit 11 and the content storage unit 12, and has a content selected from the content storage unit 12 displayed on the display 13 based on a command signal from the control unit 4 of the center server 3. Features.

In the second embodiment, the system is provided to the user who has registered in advance via the specific display 13.

In addition, the same components as those of the above-described first embodiment are denoted by the same reference numerals as those in FIG. 1.

In the system of the second embodiment, the center server 3 includes the data processing unit 5, the control unit 4, and the storage unit 6, and the data processing unit 5 is connected to the ID request key 7 of the access ID requesting device and the display 13. The components of the center server 3 and the ID request key 7 perform the same functions as those of the first embodiment described above, and therefore will not be described in detail.

However, the display 13 has a function of displaying the content transmitted from the content server 10, and is also a function of the access ID output device of the present invention, and is disposed beside the corresponding ID request key 7, and will be The corresponding relationship is remembered in the memory 6.

In addition, in FIG. 4, the ID request key 7 and the display 13 are each displayed only in one part, but are provided in a plurality of ID request keys 7 and 13 which are not shown.

In the memory unit 6, as in the first embodiment, the memory access ID group also stores the button number of the requesting device ID for identifying each request key 7, and the correspondence between each case number and the display 13. .

Further, in the storage unit 6, the registered terminal device ID formed by the telephone number of the user terminal device 9 registered in advance is stored in association with the display number (see FIG. 5).

As described above, in the second embodiment, the terminal device ID is registered in the display number of the display 13 of the access ID output device. However, as in the above-described first embodiment, the terminal device ID may be registered in association with the ID request key 7.

The data processing unit 5 of the second embodiment is configured to authenticate the user with the same function as the data processing unit 5 of the first embodiment. On the other hand, the content server 10 is controlled based on the result of the judgment, and the content is transmitted to the specific display 13, the order of which is explained below.

First, if the user who wants to display the content on the specific display 13 presses the ID request key 7 provided adjacent to the display 13, the access ID request signal is transmitted to the data processing unit 5. .

The data processing unit 5 uses the input of the access ID request signal as a starter, randomly selects an access ID from the access ID group memorized by the storage unit 6, and displays the access ID to the display 13 of the access ID output device. Transfer. Display 13 shows the received The specific access ID, such as the s1 of the access ID.

Further, when the data processing unit 5 inputs the access request signal, the ID request key 7 of the source of the access ID request signal is specified to have a function of which one, corresponding to the specific ID request key 7 The display 13 can transmit the selected access ID.

Further, the data processing unit 5, that is, the specific access ID transmitted to the display 13, corresponds to the corresponding display number, for example, b1, and the registered terminal device ID, for example, y1, as shown in FIG. 6.

On the other hand, the user who previously pressed the ID request key dials the call to the center server 3 by the user terminal device 9 for the specific access ID s1 displayed on the display 13.

Here, the user terminal device ID as the telephone number of the user terminal device 9 is set to y1, and the user terminal device ID is registered in the memory unit 6 as the registered terminal device ID.

When the user terminal device 9 makes a call to the access ID s1, the data processing unit 5 specifies the y1 of the user terminal device ID of the user terminal device 9 that is dialed, and the access ID s1 and The correspondence between the user terminal device ID y1 of the user terminal device 9 and the correspondence between the selected access ID registered by the storage unit 6 and the registered terminal device ID are determined to be identical.

The determination order is the same as that of the first embodiment, and the data processing unit 5 determines that the correspondence relationship is the same, that is, when the user communicates with the data processing unit 5 When the access ID is the specific access ID, and the user terminal device ID used for communication is the login terminal device ID, the display number b1 corresponding to the access ID is used to display the content. The command signal outputs the display number b1 to the control unit 4.

The control unit 4 outputs the control signal of the command signal input from the data processing unit 5 to the content data processing unit 11 of the content server 10. The control signal includes a display number b1 specific to the display 13.

The content data processing unit 11 of the content server 10 that receives the control signal transmits the content to the display 13 specified by the input display number b1. At this time, the content material processing unit 11 can select and transmit the content corresponding to the installation location of the specific display 13 from the content storage unit 12. However, when the content corresponding to the installation location of the display 13 is transmitted in this manner, the content storage unit 12 of the content server 10 must first memorize the content corresponding to the installation location of each display 13.

Further, after the data processing unit 5 authenticates the user, the user's registered terminal device ID may be set to be output to the content server 10 via the control unit 4 simultaneously with the control signal. If the content server 10 adds the attribute information corresponding to the registered terminal device ID and memorizes the recorded user, the content data processing unit 11 may select the content corresponding to the attribute information of the recorded user and transmit the content.

Further, the content server 10 transmits both the display number and the registered terminal device ID, and the content data processing unit 11 can select and transmit the content corresponding to both the display number and the registered terminal device ID.

As such, the second embodiment can provide the location of the display 13 and the content corresponding to the user.

Further, after the data processing unit 5 transmits the selected access ID s1 to the display 13, the corresponding data of the access ID s1 is obtained from the storage unit at any setting timing. 6 delete.

Therefore, in the second embodiment, the access ID that has been acquired cannot be used multiple times, and the accuracy of authentication can be improved.

Further, in the second embodiment described above, the display 13 for displaying the content also serves as the access ID output device of the present invention, but an access ID output device may be separately provided in addition to the display 13.

Further, a key for transmitting an access ID request signal or the like is displayed on the display 13, and the display 13 can also serve as an access ID requesting means and an access ID output means.

In addition to the display, the display 13 of the content may additionally use a device such as a touch panel screen, and also serve as an access ID requesting device and an access ID output device.

In the first and second embodiments described above, the data processing unit 5, the storage unit 6, and the control unit 4 are provided in the central server 3, but the data processing unit 5, the storage unit 6, and the control unit are provided. 4 can also be individual devices, or they can be connected via a communication device.

Fig. 7 shows a system in which the third embodiment is installed in an entrance and exit of a collective house such as an apartment, and is authenticated in order to temporarily lock the lock of the delivery box 14 of the delivered goods.

In the third embodiment, the same components as those in the above-described first embodiment are denoted by the same reference numerals as those in FIG. 1 and will not be described in detail.

The house compartment 14 is divided into a plurality of units, and a door and an electronic lock are provided in each unit. The lock and unlock box control device 15 for controlling the electronic locks is connected to the home box 14.

In the system of the third embodiment, the data processing unit 5, the control unit 4, and the central server 3 of the storage unit 6 perform authentication of the user. However, the control signal from the control unit 4 is based on the result of the determination. The controlled object to be controlled is the box control device 15.

In the house box 14, a screen 16 is provided which is connected to the box control device 15.

The screen 16 is a touch panel screen having the function of the data input/output device of the box control device 15, and the required information can be input to the box control device 15 via the screen 16.

In addition to the function of locking and unlocking the electronic locks of the units of the housing box 14, the box control device 15 has a function of storing data input via the screen 16.

Further, the screen 16 is also provided with a screen for accessing the ID requesting device and the access ID output device, and is connected to the data processing unit 5 via the box control device 15. Therefore, when the access ID request key displayed on the screen 16 is touched, the access ID request signal is input to the material processing unit 5, and the specific access ID output from the material processing unit 5 is displayed on the screen 16.

Hereinafter, the procedure for using the house compartment 14 in the system of the third embodiment will be described.

Here, a case where the goods sent to the 101-room households are placed in the house-box unit of the unit number c1 will be described as an example.

If the delivery company comes to deliver the goods, the goods are placed in the unit number c1, and the correspondence between the unit number c1 and the house number 101 is input via the screen 16. This data is stored in the box management device 15 as an index table as shown in FIG.

After the data is entered, the delivery company will record the subpoena of the message that the goods have been placed in the house, and put it in the mailbox of Room 101. Or inform the tenants in Room 101 by phone or email of the delivered goods. After the above process, the delivery is completed.

The user of the present invention in the room 101 of the home after returning home transmits the access ID request signal to the data processing unit 5 of the center server 3 by the screen 16.

The data processing unit 5 specifies an access ID from the access ID group stored in the storage unit 4 and displays it on the screen 16 in the same manner as the above-described other embodiments, and corresponds to the specific access ID to the screen 16 or the box control. Device 15 is remembered.

The user uses his own user terminal device 9 to make a call to the central server 3 with the telephone number of the specific access ID memorized by the screen 16.

Furthermore, the user terminal device ID of the user is set to correspond to the screen 16 as the registered terminal device ID, and is registered in advance in the storage unit 6. However, in the third embodiment, the screen 16 corresponds to the box control device 15, and the registered terminal device ID can also be registered in correspondence with the box control device 15.

Thus, if a call is made from the user terminal device 9, the data processing unit 5 The user terminal device ID of the user terminal device 9 that is dialed, and the access ID used by the communication is corresponding to the screen 16 and is stored in the specific access ID of the memory unit 6, and the user The terminal device ID is determined by the login terminal device ID corresponding to the screen 16. The determination order is the same as that of the first embodiment described above. When the correspondence between the access ID and the user terminal device ID and the specific access ID match the login terminal device ID, the data processing unit 5 The control unit 4 outputs a determination result.

However, the data processing unit 5 transmits the user's house number of the user terminal device ID to the control unit 4 not only as a result of the determination of the user terminal device ID of the user terminal device 9 that has dialed the call, but also And the specific information of the screen 16 corresponding to the login terminal device ID.

Further, in the control unit 4, when the screen 16 corresponds to the user terminal device ID registration as the login terminal device ID, the user's house number is also stored in correspondence.

Here, the control unit 4 transmits the unlocking command of the specific house number, and therefore unlocks the unit corresponding to the house number input by the data processing unit 5 by the box control device 15.

The box control device 15 that receives the unlock signal transmits the unit from the index table shown in FIG. 8 registered by the delivery company using the unit number corresponding to the specific house number by the unlock signal. In this way, the user can receive the goods sent to him.

When the data processing unit 5 of the center server 3 determines that the authentication condition is met, after a predetermined time elapses, for example, after outputting the determination result to the control unit 4, the data processing unit 5 cancels the specific access ID and the registered terminal device ID. Correspondence relationship.

The same is true for the box control device 16. If the specific unit is unlocked, the corresponding data between the unit number and the house number is deleted.

The authentication system of the third embodiment does not require a card or the like for canceling each unit of the housing box 14, and the user terminal device 9 can perform authentication. However, the access ID for communicating with the data processing unit 5 is changed every time, so that it is difficult to be mischievous, and the specific access ID is used as the authentication key, so that part of the security is also improved.

In addition, if the registered terminal device ID registered by the control unit 4 is individually registered in the same family, the goods that are sent to the individual can be individually delivered, and the privacy can be maintained between the families.

In the third embodiment, the delivery company registers the data of the specific unit number in the box control device 15 provided in the house box 14 when the goods are built in the house box 14, but the data can also be stored in the center server. The memory unit 6 can also be disposed outside the center server 3.

Further, the system for controlling the house compartment 14 can be applied to, for example, a management system of a coin-operated locker, a room rental management system of a hotel, a management of a guest room of a collective house, and the like.

And the house with the door opened and closed by the certification system is set up, and it is temporarily prohibited. At the time of entry and exit, the data processing unit 5 may stop the process of outputting the specific access ID to the access ID output device for a fixed period. The data processing unit 5 can easily close the door as long as the access ID request signal is input, as long as the specific access ID is not output.

In the above-described first to third embodiments, the determination result of the user authentication is output to the control unit 4, and the authentication system to be controlled is controlled in accordance with the result. However, the data processing unit 5 is provided with the center server 3. The data processing unit 5 may directly output the control signal corresponding to the determination result to the control object.

Further, the control object controlled by the authentication system of the present invention is not limited to the above embodiment. For example, when using the bank's withdrawal device or the online banking system, the devices can be controlled according to the judgment result.

Further, the data processing unit 5 outputs the output target of the determination result, and is not limited to the control unit 4 and the control target, and may be used anywhere. For example, a system that outputs to the screen or the printer and displays only the judgment result of the material processing unit 5 and prints without controlling a specific control object is also included in the authentication system of the present invention.

Therefore, the authentication system of the present invention can be utilized in various places where authentication is required.

1‧‧‧

2‧‧‧Electronic lock

3‧‧‧Center server

4‧‧‧Control Department

5‧‧‧ Data Processing Department

6‧‧‧Memory Department

7‧‧‧ID request button

8‧‧‧ID display

9‧‧‧User terminal equipment

10‧‧‧Content Server

11‧‧‧Content Data Processing Department

12‧‧‧Content Memory Department

13‧‧‧ display

14‧‧‧Housement box

15‧‧‧ box control device

16‧‧‧ screen

Fig. 1 is a block diagram of the authentication system of the first embodiment.

Fig. 2 is a view showing an example of the data stored in advance by the memory device in association with the registered terminal device ID of the first embodiment and the access ID requesting device.

Fig. 3 is a view showing an example of the data of Fig. 2 corresponding to the access ID selected by the data processing unit.

Fig. 4 is a block diagram of the authentication system of the second embodiment.

Fig. 5 is a view showing an example of data stored in the memory unit of the second embodiment.

Fig. 6 is a view showing an example of the information of the access ID selected by the data processing unit in the data of Fig. 5.

Fig. 7 is a block diagram of the authentication system of the third embodiment.

Fig. 8 is an example of data stored in the box control device of the third embodiment.

1‧‧‧

2‧‧‧Electronic lock

3‧‧‧Center server

4‧‧‧Control Department

5‧‧‧ Data Processing Department

6‧‧‧Memory Department

7‧‧‧ID request button

8‧‧‧ID display

9‧‧‧User terminal equipment

Claims (4)

An authentication system having: a data processing unit; a memory unit connected to the data processing unit; and an access identification certificate group composed of a plurality of telephone numbers or email addresses for accessing the data processing unit; and accessing the identity certificate And an output device that outputs an access identity certificate transmitted from the data processing unit; wherein the data processing unit has a function of: inputting a request signal for requesting a specific access identity certificate from the access identity certification group a function of transmitting the specific access identity certificate to the access identity certification output device; the function of the specific access identity certificate corresponding to the access identity certification output device and being memorized in the memory portion; When the user terminal device uses the access identity certificate in the access identity group to communicate with the data processing unit, the user terminal device obtains the identity of the user terminal device that has communicated, and determines whether the access identity certificate is For the specific access identity certificate, and determining whether the obtained user terminal device identity certificate is pre-registered a function of the user terminal device identity certificate; a function of outputting the result of the determination; and outputting the selected access identity certificate to the access identity certification output device, and releasing the memory memorized by the memory portion at a preset timing The access identity certificate The function of the correspondence between the output device and the specific access identity certificate. The authentication system according to claim 1, further comprising: a control unit connected to the data processing unit and configured to control the control target, wherein the control unit includes the control target according to the determination result of the data processing unit Control function. The authentication system of claim 2, wherein the control object is an electronic switch mechanism, and the access identity certification output device integrally formed with the electronic switch mechanism is disposed, or the access is adjacent to the electronic switch mechanism Identity certification output device. For example, in the authentication system described in claim 2, the control object is a content server having a content storage unit for storing one or more contents, and the data processing unit is connected to one or more access identity certification outputs. And the device, in the memory unit connected to the data processing unit, memorizing the output device identity certificate of the access identification certificate output device, and the data processing unit determines that the communication from the specific user terminal device is the specific access And when it is determined that the obtained user terminal device identity certificate is identical to the registered terminal device identity certificate of the user terminal device identity certificate registered in advance, the control terminal outputs the user terminal device identity at the same time as the determination result. And the controller or the two of the output device identity certificates corresponding to the user terminal device identity certificate, the control unit is configured to serve the content simultaneously with the control signal for causing the content server to act according to the determination result Outputting the user terminal device identity certificate or the user terminal device identity certificate corresponding to Either or both of the output device identity certificates, on the other hand, the content server has an output device identity certificate and a user based on output from the data processing unit The function of selecting the content from the content storage unit and outputting the selected content, either or both of the terminal device identity certificates.