JP2015088804A - Control apparatus and control method using authentication device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To control the propriety of operating a control target apparatus depending on a distance from an authentication device.SOLUTION: A control method for controlling the propriety of operating a control target apparatus by using an authentication device includes the processes of: validating operation to the control target apparatus by using a certificate after an authentication device and the control target apparatus perform first communication within a first range by using first communication; keeping the operation to the control target apparatus being in a valid state after detecting that the authentication device is within a second range wider than that of the first communication, by communicating with the authentication device by using second communication which is wireless communication having a range longer than that of the first communication; and invalidating the operation to the control target apparatus by invalidating the certificate when detecting, using the second communication, that the authentication device is not within the second range.

Description

  The present invention relates to a technique for controlling an electronic certificate in a device.

  There is a technology for safely using an Internet service using an electronic certificate such as SSL-VPN (Secure Sockets Layer-Virtual Private Network). The user performs electronic signature and communication encryption using the electronic certificate.

  There is a system in which a user carries this electronic certificate in a state where it is stored in a dedicated device, and when using the certificate, a terminal acquires and uses the certificate from the device storing the certificate.

  For example, in Patent Document 1, wireless communication authentication by a USB device storing a certificate is possible.

JP 2009-267458 A

  In Patent Literature 1, since it is necessary to carry a wireless USB master device for performing wireless communication in addition to the USB device slave device, the connection method becomes complicated.

  In order to solve the above-described problem, in the present invention, when it is determined that the authentication device exists in the near-field effective area for the control target device, the certificate is validated and the authentication device is controlled for the control target device. Invalidates the certificate if it is determined that exists outside the long-distance valid area.

  According to the present invention, it is possible to realize control according to the distance of the authentication device.

It is explanatory drawing which shows the whole structure which concerns on the Example of this invention. It is a block diagram which shows the internal structure of the operating device which concerns on the Example of this invention. It is a block diagram which shows the internal structure of the authentication device which concerns on the Example of this invention. It is a figure which shows the management information of the certificate concerning the Example of this invention. It is explanatory drawing of the communication range which concerns on the Example of this invention. It is a flowchart which shows the process at the time of invalidating the certificate which concerns on the Example of this invention. It is a sequence diagram which shows the process at the time of validating the certificate which concerns on the Example of this invention. It is a sequence diagram which shows the process at the time of validating the certificate which concerns on the Example of this invention. It is a flowchart which shows the process at the time of invalidating the certificate which concerns on the Example of this invention. It is a sequence diagram which shows the process at the time of invalidating the certificate which concerns on the Example of this invention. It is a figure which shows the information of the signal strength of the communication concerning the Example of this invention. It is explanatory drawing of the communication range which concerns on the Example of this invention. It is a figure which shows the management information of the certificate which concerns on the Example of this invention.

  Embodiments of the present invention will be described below with reference to the drawings.

  In this embodiment, when a device that uses a certificate holds the certificate inside and determines that the authentication device exists within a certain distance, the certificate is validated and it is determined that the authentication device does not exist within a certain distance. An example of revoking a certificate in the case where the certificate is invalidated will be described. FIG. 1 is an explanatory diagram showing the overall configuration. FIG. 2 is a configuration diagram showing an internal configuration of a device using a certificate. FIG. 3 is a configuration diagram showing the internal configuration of the authentication device carried by the user. FIG. 4 is a diagram illustrating information held by a device recognition unit of a device that uses a certificate. FIG. 5 is a sequence diagram showing processing when validating a certificate. FIG. 6 is a sequence diagram illustrating a process for invalidating a certificate. FIG. 7 is a flowchart showing a process for validating a certificate. FIG. 8 is a flowchart showing a process for invalidating a certificate.

  FIG. 1 is a diagram illustrating a configuration including an operation device using a certificate, an authentication device carried by a user, and a server that is a target for communication with the operation device. The operation device 100 is a diagram illustrating a device that uses a certificate. The authentication device 200 is a diagram showing a device carried by the user. The server 300 is a diagram illustrating a server with which the operation device A100 communicates using a certificate. The authentication device 200 to be authenticated is registered in the operation device 100 in advance, and information that associates the authentication device 200 with the certificate is held. When the operation device 100 determines that the authentication device 200 registered as an authentication target is in the valid area, the operation device 100 validates the certificate associated with the authentication device 200 in the operation device 100. The operation device 100 communicates with the server 300 using the validated certificate.

  FIG. 2 is a diagram illustrating an internal configuration of the operation device 100. The operation device 100 includes a power supply unit 101 that supplies power to each unit, a control unit 102 that performs various types of device control, a storage unit 103 that records information in which a device to be authenticated and a certificate are associated, and a device screen A display unit 104 that performs display, an input / output unit 105 that performs input to and output from the device, a communication unit 106 that communicates with other apparatuses and servers, and a device recognition unit 107 that recognizes a device to be authenticated. A certificate control unit 108 that controls the validation and invalidation of the certificate in the operation device, and a certificate storage unit 109 that stores the certificate. As the operation device 100, a dedicated device is used, or software is installed in a general terminal (PC, tablet, smartphone, mobile phone, etc.), and the processor and storage device are connected to the device recognition unit 107, the certificate control unit 108, It can be realized by functioning as the certificate storage unit 109 or by adding these as external devices. Further, in this embodiment, the embodiment will be described as an operation device that communicates with the server. However, a control object that communicates with the authentication device 200 and performs lock setting / release (operation availability change) is an automobile (door opening). It can be applied to various devices such as keys / locks, engine / motors and accessories can be started), buildings (door opening / locking, entrance / exit management), and various terminals and devices (starts and operations are possible).

  FIG. 3 is a diagram illustrating an internal configuration of the authentication device 200. The authentication device 200 includes a power supply unit 201 that supplies power to each unit, a control unit 202 that performs various control of the device, a storage unit 203 that records information, a display unit 204 that displays a screen of the device, and an input to the device And an input / output unit 205 for outputting from the device and a communication unit 206 for communicating with other devices and servers. As the authentication device 200, software or an external device can be added to a general portable terminal, or an intelligent key, IC card, or RFID tag can be used as a dedicated device. In this case, the display unit 204 can be a lamp, and the display unit 204 and the input / output unit 205 can be omitted.

  FIG. 4 is a diagram illustrating information in which the operation device 100 associates an authentication device to be authenticated with a certificate corresponding to the authentication device. The certificate management information 400 is stored in the storage unit 103 and includes a device ID 401 and a certificate ID 402. The device ID 401 stores the device ID of the device to be authenticated by the device A. The certificate ID 402 stores an ID unique to the certificate corresponding to the device ID. For example, when the certificate ID indicating the user's certificate is 10000, information in which the device ID 11111 of the authentication device carried by the user is associated with the certificate ID 10000 is stored. The PIN 403 stores a PIN (Personal Identification Number) when validating the certificate.

  FIG. 5 shows the relationship of the communication distance used between the operation device 100 and the authentication device 200. Two communication ranges are set for the operation device 100. The first communication range 601 is a communication distance for the operation device 100 and the authentication device 200 to perform authentication. The second communication range 602 is wider than the first communication range 601. When the authentication device 200 is in this range, the operation device 100 is unlocked and can be operated. When the operation device 100 detects that the authentication device 200 is out of the second communication range, the operation device 100 is locked and does not accept the operation. The first communication performed in the first communication range 601 and the second communication performed in the second communication range 602 may be different communication methods, or the distance determination may be changed using the same communication method. Further, it is possible to change only the communication strength. The second communication is wireless communication, but the first communication may be wireless communication or wired communication (contact communication). As an example of the communication method, a method using Wi-Fi (Wireless Fidelity, registered trademark) is one mode. As another method, a method using Bluetooth (registered trademark) is also an embodiment. In addition, a method using Zigbee (registered trademark) is also an embodiment. Furthermore, a method of using NFC as the first communication and combining the communication methods as the second communication is also an aspect. FIG. 6 is a flowchart showing a process for enabling a certificate to be operated by an operation device. In the process of FIG. 6, the process starts in step S3000. At this time, if necessary, a work for turning on the power and communication of the operation device 100 and the authentication device 200 and a work for starting an application for authentication and control may be performed. Then, the process proceeds to step S3001.

  In step S3001, the operation device transmits a device ID inquiry to its surroundings, and the process advances to step S3002.

  If it is determined in step S3002 that the authentication device receives an inquiry from the operating device and responds, and the operating device receives the response signal, the process advances to step S3003. If the operation device 100 cannot receive a response signal from the authentication device 200, the process advances to step S3001.

  In step S3003, the operation device 100 determines whether the device ID of the authentication device included in the acquired response signal is registered in the certificate management information 400 stored in the storage unit 103. If the device ID has already been registered, the process proceeds to step S3004. If the device ID is not registered, the process proceeds to step S3001. In step S3004, the certificate management information 400 is referred to, the certificate corresponding to the device ID is validated, and the process proceeds to step S3005 and ends. Up to this point, communication is performed using the first communication with a short communication distance. Since the communication distance is short, the possibility of interception is low and it is easy to handle highly confidential information. After this, since the second communication with a long communication distance is performed, the setting of the communication rule (encryption or the like) of the second communication may be communicated in the first communication before that. This communication rule may be changed at every authentication.

  FIG. 7A also shows a process for validating a certificate in the device A in a sequence diagram. Device A repeatedly makes a device ID inquiry 1000 to device B. When the device B receives the device ID inquiry 1000, the device B sends a device ID response 1001 to the device A. If the received device ID is registered in the certificate management information 400, the certificate validation 1002 for the corresponding certificate ID is performed.

  FIG. 7B is a sequence diagram when the device B stores the certificate. To the figure (a), a certificate request transmission 1003 from the device A to the device B after receiving the device ID and a certificate transmission 1004 from the device B to the device A corresponding thereto are added.

  FIG. 8 is a flowchart showing processing for invalidating a certificate in the operation device. In the process of FIG. 8, the process starts in step S4000 and proceeds to step S4001. In step S4001, the operating device inquires about the device ID, and the process advances to step S4002. If it is determined in step S4002 that the authentication device has received a response from the operation device, the process advances to step S4001. If the operating device does not receive a response from the authentication device, the process advances to step S4003. In step S4003, the certificate corresponding to the validated authentication device is revoked and locked so that the operation device 100 cannot be operated, and the process proceeds to step S4004.

  FIG. 9 is a sequence diagram showing processing for invalidating a certificate on the operation device. The operation device repeatedly makes a device ID inquiry 2000 to the authentication device. When the authentication device receives the device ID inquiry 2000, the authentication device sends a device ID response 2001 to the operation device. When the authentication device does not receive the device ID inquiry 2000, the operation device determines that the authentication device has moved out of the valid area (second communication range) and performs certificate invalidation 2002.

  The operation device 100 may detect that the authentication device 200 is in the vicinity based on the signal strength from the authentication device in addition to the presence / absence of a response from the authentication device. FIG. 10 is a diagram illustrating signal intensity threshold information 500 stored in the storage unit 103 of the operation device 100. The signal strength information 500 is stored in the storage unit 203 of the authentication device, and is configured with a signal strength 501. The signal strength 501 stores a threshold value of a signal strength used when determining whether or not a device that uses a certificate is present at a certain distance with respect to the authentication device. For example, when the signal strength for determining that the device for which the device ID is inquired exists within a certain distance is 120 or more, a value of 120 is stored in the signal strength. In this case, even if a signal from the operating device is received, if the signal strength is less than 120, it is determined that the operating device is not nearby. Further, the operation device 100 may store the signal strength information 500 and apply a signal strength threshold to the device ID response.

  Further, as the distance determination between the device A and the device B, in addition to the presence / absence of the received radio wave and the intensity of the received radio wave, a change in the transmission intensity of the radio wave and a change in the type of communication method to be transmitted / received may be combined .

  The operational effects of the present embodiment will be described. In the present embodiment, the first communication distance for communication for validating the device certificate is shorter than the second communication distance for communication for not invalidating the device certificate. Therefore, at the time of device authentication, highly confidential information can be included in communication performed between the operation device 100 and the authentication device 200, and it is possible to suppress interception by others. In this embodiment, highly confidential information is a device ID or certificate for validating a certificate. Further, when there are a plurality of devices in the vicinity, it is easy to specify a device to be authenticated because the communication range is narrow. At the time of device authentication, it is assumed that the user holds the authentication device in his hand and approaches the operation device. In addition, there is an effect of preventing the user from inadvertently operating the operation device.

  On the other hand, the second communication distance for communication for not invalidating the device certificate is longer than the first communication distance for communication for validating the device certificate. For this reason, it is possible to use communication with lower confidentiality of communication at the time of use than at the time of authentication. For example, if a communication rule is set for each re-authentication, the damage when a signal from the second communication is intercepted is small. This is because it does not include information with low substitutability such as device IDs and certificates, and the communication rule has substitutability. In addition, when the user is using the operation device, it is assumed that the authentication device is carried, for example, in a strap, clip or pocket of clothes, and the distance between the operation device and the authentication device is secured for convenience. There must be. Therefore, when the user leaves the operation device, the operation device and the authentication device are separated from each other, and the operation device can be locked.

  A second embodiment of the present invention will be described. In the first embodiment, device authentication is performed so that the operation device 100 can be operated, and the authentication device 200 is released and the operation device 100 is locked. In the present embodiment, a description will be given of an operation from when the authentication device carried by the user approaches the operation device again after being locked until the operation device is unlocked.

  FIG. 11 shows a schematic diagram of a communication range used in this embodiment. In addition to the first communication range 601 and the second communication range 602 used in the first embodiment, a third communication range 603 is used. The third communication range is larger than the first communication range. Further, it may be the same as or smaller than the second communication range range.

  In the present embodiment, device authentication is performed as in the first embodiment, and after the authentication device is locked away from the operation device, the device A is approached again and the lock is released again. The certificate management information 400 used in the present embodiment is shown. The device ID 401 and the certificate ID 402 are the same as in the first embodiment, and although omitted, the PIN 403 may be included. In this embodiment, an authentication flag 404 is further provided. The authentication flag 404 is attached when the authentication device 200 is authenticated by the operation device 100 and becomes operable (becomes 1), and only when the authentication device 200 is outside the second communication range 602 of the operation device. , Not deleted (becomes 0). When the authentication device 200 moves out of the second communication range 602 and a predetermined time elapses or when the operation device 100 is turned off, the authentication flag is deleted (becomes 0). When there is an authentication flag, the authentication device 200 moves from outside the second communication range 602 into the third communication range 603, thereby unlocking the operation device 100 and making it operable. That is, the operation lock can be easily released as compared with the case where there is no authentication flag.

  The flowchart of this embodiment is the same as FIG. 6, the sequence is the same as FIG. 7A, and detailed description thereof is omitted. The difference is that in the first embodiment, the operation device 100 recognizes that the authentication device 200 is close when it is within the first communication range, and in this embodiment, it is close when it is within the third communication range. It is a point to recognize.

  The third communication range may be the same as or narrower than the second communication range. Also, the reason why the third communication range is wider than the first communication range is for convenience. For example, at the time of the first authentication, even if the user must hold the device B in his / her hand and approach the first communication range, when the user leaves the operation device 100 and locks the operation device back, the user Can approach the second communication range while wearing the authentication device 200 and unlock the operation device. Therefore, the convenience of the authentication device 200 is improved.

100 operation device 101 power supply unit 102 control unit 103 storage unit 104 display unit 105 input / output unit 106 communication unit 107 device recognition unit 108 certificate control unit 109 certificate storage unit 200 authentication device 201 power supply unit 202 control unit 203 storage unit 204 display Unit 205 input / output unit 206 communication unit 207 signal strength detection unit 300 server

Claims (9)

In the control method for controlling whether or not the control target device can be operated by the authentication device,
A first communication step in which the authentication device and the device to be controlled perform a first communication within a first range by a first communication;
The control target device uses a second communication that is a wireless communication having a longer distance than the first communication while enabling the operation to the control target device based on the first communication with a certificate. An operation step of communicating with the authentication device to detect that the authentication device is within a second range wider than the first communication and maintaining an operation on the control target device in an effective state;
A lock step of invalidating the certificate and invalidating an operation on the control target device when the control target device detects that the authentication device is not within the second range by the second communication. When,
Control method. In claim 1,
The control target apparatus acquires the information of the authentication device through the first communication, determines whether the operation is possible based on the information of the authentication device, and validates the operation when it is determined that the operation is possible. A control method characterized by validating a certificate for use. In claim 2,
The control method characterized in that, based on the first communication, the operation target device validates the operation by validating a certificate stored therein. In claim 2,
In the first communication step, a certificate for validating the operation is transmitted from the authentication device to the device to be controlled. In claim 1,
The control method, wherein the first communication and the second communication are different communication methods. In claim 1,
After invalidating the operation, when it is detected that it is in a third range larger than the first range, the invalidated certificate stored in the operation device is validated to be operable. A control method characterized by that. In claim 6,
The control method, wherein the third range is smaller than the second range. In claim 1,
The control method according to claim 1, wherein the certificate is a certificate used by the device to be controlled to communicate with a server connected via a network. In a control system comprising an authentication device and a control target device, and controlling whether or not the control target device can be operated,
The controlled system is
A first communication step of performing a first communication with the authentication device within a first range by a first communication;
Based on the first communication, the operation to the device to be controlled is validated, and the second communication which is a wireless communication having a longer distance than the first communication is used to communicate with the authentication device and An operation step of detecting that the authentication device is within a second range wider than the first communication and maintaining an operation on the control target device in an effective state;
A lock step of invalidating an operation to the control target device when it is detected by the second communication that the authentication device is not within the second range;
Do the control system.

Images