JP2024080777A - Authentication method, authentication system and program for information holder - Google Patents

Abstract

To provide an authentication method, an authentication system, and a program for an information holder, which enable an orderer to immediately use the information holder if the orderer receives the information holder from a deliverer and satisfies a prescribed condition (receipt reception and registration of server).SOLUTION: The authentication method for the information holder comprises: an order reception step of receiving order information of a physical information holder having identification information for passage from a user terminal through a gate via a network by a server; a delivery information recording step of recording delivery information for delivering the information holder to an orderer of the user terminal; and a receipt information reception step of receiving receipt information on arrival or delivery of the information holder to the orderer from at least one of the user terminal and a delivery business terminal via the network. After the receipt information reception step, authentication is enabled between the information holder and an authentication device.SELECTED DRAWING: Figure 1

Description

The present invention relates to a method, system, and program for authenticating an information holder possessed by a resident of a house when the resident's user terminal orders the information holder via a network.

Patent document 1 describes a card key system for unlocking doors in a building, which includes a card key 10 bearing identification information for identifying a user, a reader 20 installed in the building that extracts the identification information from the card key 10 through contactless communication when the card key 10 comes within a specified communication range to identify the user, and a locking device 30 installed in the building that switches between locking and unlocking the door 1 only when the reader 20 is able to identify the user.

Figure 2 of Patent Document 1 shows a configuration including a door (gate) 1 installed in a building, an electric lock 60 which is an example of a locking device installed on the gate, a current supply means 35 for the electric lock, a card key 10 which is an example of an information holder having identification information for passing through the gate, a reader 20 which reads the identification information when the card key 10 is held over it, and a controller (electric lock control device) 30 which includes authentication means for authenticating whether the identification information of the card key 10 matches the registered information (reference symbols are those in Patent Document 1).

The above configuration has the advantage that even if an intruder obtains a card key, the reader 20 is hidden in an appropriate location inside the door (gate) 1, making it difficult for the intruder to easily find the location of the reader 20, and as a result, the intruder cannot easily enter the building, thereby improving crime prevention. Note that the card key 10, which is an example of an information holder, the reader 20, and the electric lock control device including the authentication means are well known technologies (for example, Figure 1 and paragraph 0006 of JP Patent Publication No. 5-156850, and Figure 2 and specification of JP Patent Publication No. 2011-202362).

As is clear from the above-mentioned well-known technologies, when passing through the gate of a building, for example an apartment building, each resident as a user carries a registered physical information holder (such as a small terminal that substitutes a key, an IC tag, an ID key, a non-contact IC key, a card key, a portable electronic key, etc.), and when passing through the entrance to the common area of the apartment building, for example, or when entering a private area, authentication is performed within the range of a security zone reached by radio waves between a reading device (such as an authentication reader, a card reader, an electric lock control device, etc.) and the information holder. Note that Patent Document 2 describes an IC tag that substitutes a key as an example of a physical information holder, and the IC tag that substitutes a key is also well-known technology (Patent Documents 2 and 3).

For example, when a resident of an apartment building wants to have a physical information holder that can be carried around freely in one hand, conventionally, even if a company that handles information holders delivers a new information holder (for example, an object called an ID key that has a physical form), the resident cannot use it immediately. The reason for this is that in order to use a new information holder, the ID key setting and registration company must register it to the apartment control device installed in the apartment building (on-site), for example. After the registration work to the apartment control device is completed, the authentication management server must then register it to the authentication management server upon receiving a notification from the setting and registration company that the information has been registered.

Therefore, even if a dealer of a new information holder delivers the physical information holder to the resident in a timely manner, for example by requesting a delivery company, the resident cannot immediately use the information holder until the identification information of the information holder is additionally registered in the memory unit of the authentication management server. Therefore, although it is for a short period of time, it is inconvenient for the resident.

In consideration of the above inconveniences, it is desirable that when a new information holder is delivered by a delivery company or the like to an orderer who possesses a user terminal, the physical information holder is already in a state in which it can be properly authenticated, and that the resident can immediately use it with a reading device.
However, when an information carrier that can be authenticated legitimately is delivered to a resident who has placed an order via a delivery means, a delivery person, or the like, the following situation may occur.
(a) Unintended authentication: If a "packaged information carrier in a legitimate authentication state" responds to a reader within the range of a security zone, an automatic door at the entrance to a common area of an apartment building may open or a locking device may be unlocked without the intention of a delivery person, manager, or the like. This may allow an unauthorized person to pass through the entrance to the common area (inadvertent use).
(b) Possibility of Unauthorized Use If a "packaged information-holding device in a properly authenticated state" is stolen during delivery, or if the package bearing the name and address of the user is lost, there is a possibility that an unauthorized person could pass through the entrance to the common area (possibility of malicious or careless use).

The applicant proposes the present invention to overcome the problems of careless and malicious exploitation mentioned above.

JP 2004-68483 A JP 2019-2269 A Patent No. 5563772

The main objective of the present invention is to propose, in consideration of the problems in the background art, an authentication method, authentication system, and program for an information holder that allows an orderer to immediately use the information holder when the orderer receives the information holder from the delivery person and satisfies certain conditions (receipt by the server and its registration).

The method for authenticating an information holder of the present invention includes an order receiving step in which a server receives order information for a physical information holder having identification information for passing through a gate from a user terminal via a network, a delivery information recording step in which delivery information for delivering the information holder to the orderer at the user terminal is recorded, and a receipt information receiving step in which receipt information indicating that the information holder has arrived or been delivered to the orderer is received from at least one of the user terminal or the delivery company terminal via the network, and is characterized in that authentication is possible between the information holder and the authentication device after the receipt information receiving step.

The information holder authentication system of the present invention is an information holder authentication system for receiving identification information from a physical information holder having the identification information for passing through a gate and unlocking the lock device of the gate, the information holder authentication system includes a server, either a user terminal or a delivery company terminal connected to the server via a network, and an authentication device, the server includes an order receiving means for receiving order information of the information holder from the user terminal via the network, a delivery information recording means for recording delivery information for delivering the information holder to the orderer of the user terminal, and a receipt information receiving means for receiving receipt information indicating that the information holder has arrived or been delivered to the orderer via the network from at least one of the user terminal or the delivery company terminal, and after the receipt information receiving means receives the receipt information, authentication is possible between the information holder and the authentication device.

The program of the present invention further comprises a computer that executes an order receiving process in which a server having identification information in a storage unit that identifies a physical information holder receives order information for a physical information holder having the identification information for passing through a gate from a user terminal via a network, a delivery information recording process in which delivery information for delivering the information holder to the orderer of the user terminal is recorded, a receipt information receiving process in which receipt information indicating that the information holder has arrived or been delivered to the orderer is received from at least one of the user terminal or the delivery company terminal via the network, and each process that enables authentication between the information holder and an authentication device after the receipt information receiving process.

It should be noted that "physical information holder" here includes items such as IC tags, ID keys, contactless IC keys, card keys, portable electronic keys, etc., but does not include commonly used rectangular smartphones or similar tablet devices.
Moreover, here, the "authentication execution process" also includes "authentication enabling," and the "authentication enabling" includes, for example, authentication enabling (process or device) which is a preparatory act prior to the execution of authentication of a user terminal at a gate, which is also included in the infringement. A typical example is when authentication is made possible between a lock control device (including an authentication device) installed in a building or gate, etc., in front of the gate through which a resident holding an information holder passes. Therefore, the "authentication enabling process" and the "authentication execution process" are essentially the same.

The present invention can propose an information holder authentication method, authentication system, and program that allows an orderer to immediately use an information holder when the orderer receives the information holder from a delivery person and satisfies certain conditions (reception by a server via a network and its registration). In some embodiments, the components related to the validation of the information holder's identification information can be further limited, and for example, in view of problems in the background art, problems of careless or malicious use can be overcome.

In addition, the present invention of the first embodiment can eliminate the above-mentioned problems of (a) unintended authentication and (b) the possibility of fraudulent use, even if an order for a "physical information holder" is received over a network and, for example, a physical information holder manufactured in a factory is delivered to the user (orderer) via a delivery company, etc. Furthermore, the present invention of the second embodiment can register identification information of a physical information holder in a server and an authentication device substantially simultaneously using a network, so that the orderer can immediately use the information holder received by the authentication device.
In other words, when the server receives specified information such as "It has arrived" (in the case of the person himself) or "It has been delivered" (in the case of another person) via the network from the person himself or a terminal authorized by the person himself to receive receipt notification, the server provides the identification information of the genuine information holder to the authentication device approximately at the same time as registering the specified information, or immediately thereafter, so that the orderer (resident, etc.) can use the information holder as a storage medium for authentication when desired.

1 to 8 are explanatory views showing a first embodiment and a second embodiment of the present invention.
4A to 4C are process diagrams showing a first embodiment of an authentication method X for an information holder. FIG. 11 is a block diagram showing a case where the authentication method for an information holder according to the first embodiment is replaced with an authentication system X1 for an information holder. FIG. 2 is an explanatory diagram showing a main server and a sub server. FIG. 13 is an explanatory diagram of a case where a user terminal transmits order information and receipt information to a server. FIG. 13 is a block diagram showing a modification X2 of the authentication system for an information holder according to the first embodiment (a delivery company terminal is involved in the transmission of receipt information). 13A to 13C are process diagrams showing a second embodiment of an authentication method Y for an information holder. FIG. 13 is a block diagram showing a case where the authentication method for an information holder according to the second embodiment is replaced with an authentication system Y1 for an information holder. FIG. 13 is a block diagram showing a modified example Y2 of the authentication system for an information holder according to the second embodiment (a delivery company terminal is involved in the transmission of receipt information).

Figures 1 to 8 are explanatory diagrams showing the first and second embodiments of the present invention. The specific requirement common to the first and second embodiments is that "the server is provided with an order receiving process for receiving order information for a physical information carrier having identification information for passing through a gate from a user terminal via a network, a delivery information recording process for recording delivery information for delivering the information carrier to the orderer at the user terminal, and a receipt information receiving process for receiving receipt information indicating that the information carrier has arrived or been delivered to the orderer from at least one of the user terminal or the delivery company terminal via a network, and authentication is possible between the information carrier and the authentication device after the receipt information receiving process."

First, the authentication method X of an information holder will be described with reference to FIG. 1, FIG. 3, FIG.
In FIG. 1, 1 denotes a server (also referred to here as an "authentication management server"). There may be one or more servers 1. The location of the server 1 does not matter. FIG. 1 shows a linking server 1a in addition to the main server 1. The linking server (subordinate server 1) 1a plays the role of, for example, receiving order information, storing order information, manufacturing information, etc., manufacturing a meta-physical information holder 4 based on the order information, directly or indirectly delivering the manufactured information holder 4 to the user, and notifying the main server (authentication management server 1) of the identification information and delivery information of the information holder 4.

In addition, since the linking server (subordinate server) 1a is a subordinate server that constitutes the factory system M, it notifies the authentication management server 1 directly or indirectly of at least the identification information a of the information holder 4 manufactured in the factory system M. When the authentication management server 1 receives the identification information a from the linking server 1a, it registers the identification information a in the memory unit. Therefore, a group of records of the identification information a exists in the memory unit.

As will be described later, there is a first linking server (subordinate server) 1b, a second linking server (subordinate server) 1c, etc., and the linking server (subordinate server) 1b is an online shopping site that accepts order information from orderer P and has the role of notifying the authentication management server 1 of the order information and notifying orderer P of order completion information (see Figure 3).

2 is a network, which includes regional and wide-area communication networks, with the Internet being a typical example of network 2. Since networks are standard technology, we will not go into detail here.

3 is a user terminal owned by orderer P. Orderer P is, for example, a resident of an apartment building. A typical example of user terminal 3 is a smartphone. Therefore, user terminal 3 is equipped with a touch panel having the functions of an operation unit and a display unit, a terminal control unit, a memory unit, a registration unit, an authentication key identification unit, a communication unit, a timing unit, a discrimination means, etc. (Since the configuration of the control unit, memory unit, etc. is well known or is standard technology, detailed explanations and detailed drawings will be omitted.)

4 is a physical information holder sent from the server 1, such as the non-touch key described in Patent Document 3, which has a communication unit, control unit, memory unit, power supply unit, etc. (Since this is a well-known technology, detailed explanation and detailed drawings will be omitted.)

5 is an apartment control device installed, for example, in an apartment building (on-site). For convenience, it is referred to as the on-site "authentication device." The on-site authentication device 5 is installed in an appropriate location, such as in a building or on a site. 6 is a lock control device installed in a security zone S including a gate. The lock control device 6 controls the unlocking and locking of a lock device (not shown). Note that the authentication device 5 and lock control device 6 may be integrated or separate.

In FIG. 1, the lock control device 6 is connected to the network 2. Therefore, the authentication device 5 may be installed on the network 2. In the latter embodiment, when an unlocking request comes from the physical information holder 4 together with the identification information, the authentication device 5 on the network 2 executes authentication, and if authentication is successful, it instructs the lock control device 6 to unlock via the network 2. The lock control device 6 then operates the lock device (opens the gate, unlocks the gate, etc.). Note that a is identification information, b is delivery information, 3a is order information, and 3b is receipt information.

First, A is an order acceptance process. In this order acceptance process A, the server 1 accepts order information for a physical information holder 4 with a mechanical key having identification information a for passing through the gate of a building from a user terminal 3 via a network 2. For example, when a resident of an apartment building wants to have an information holder 4 that has a physical form that can be freely carried in one hand or worn on the body, he or she orders a new physical information holder 4 using the first mail order site screen (application input form) 3A displayed on the display unit of the user terminal (e.g., smartphone, laptop, etc.) 3. At this time, the orderer (resident: user) who occupies (possesses) the user terminal 3 inputs the delivery destination or delivery destination specific information into the first mail order site screen 3A (see FIG. 4). The delivery destination specific information is information necessary to identify the gate, such as property information, email address, telephone number, address, name, etc., and the gate specific information is based on the order information 3a. Therefore, the gate specific information is appropriately associated with, for example, the identification number of the lock device, the identification number of the lock control device, the user's room number, their address, name, etc.

The gate identification information is appropriately associated with an identification number, room number, etc. for each gate, but since the technical means for identifying a gate is identification information assigned to each user to identify each gate, the identification information used as a search key for identifying a gate may be some or all of the above-mentioned identification information, room number, etc.

Next, B is the information holder manufacturing process. In this information holder manufacturing process B, after the order acceptance process A, the manufacturer (factory) on the server 1 side manufactures the information holder 4 that can be freely carried in one hand or worn on the body. The information holder 4 of the embodiment has a flat shape that can be freely carried in one hand, similar to a non-touch key for a vehicle. Of course, it is not limited to this. In the embodiment, an order is accepted via the mail order site of the subordinate server 1b shown in FIG. 3, and the linked server 1a that receives the order information 3a from the mail order site notifies the factory system M including a server, and the information holder 4 is manufactured in the factory system M. Inside the cover of the information holder 4 manufactured in the factory, there is an IC chip that stores a control unit, a memory unit, a wireless unit, etc., and the memory unit is provided with identification information a for passing through the gate of the building.

In addition, regarding the manufacturing and handling of the identification information a in the information holder manufacturing process B, in addition to manufacturing from scratch as described above, there are also cases where multiple information holders with no identification information stored in the memory unit are stocked in advance, and after an order is received, arbitrary identification information is stored in the memory unit. Also, the information holder manufacturing process B does not necessarily have to be performed after the order receiving process. There are also cases where multiple information holders with identification information stored in advance are stocked, and after an order is received, an arbitrary information holder is selected from the multiple information holders.

Next, C is an identification information receiving process. In this identification information receiving process C, prior to the receipt information receiving process E described below, the authentication device 5 directly or indirectly receives the identification information a of the information holder 4 manufactured in the information holder manufacturing process from the server 1 via the network 2. The identification information a of the information holder 4 is not yet in a state where it can be used for authentication unless it goes through the receipt information receiving process E described below. "A state where it cannot be used for authentication" refers to a state where the identification information a is invalidated, for example, a state where the identification information a is in a dormant or frozen state, and is unable to respond to the authentication device 5.

Next, D is a delivery information recording process. In this delivery information recording process D, the delivery destination or delivery destination specific information (simply illustrated as "delivery information b") for delivering the information holder 4 to the orderer P who occupies the user terminal 3 is recorded. The recorded delivery information is the same as the delivery destination specific information of the orderer P, and preferably also includes the identification information of the delivery company. Therefore, the recorded delivery information b overlaps part or all of the identification information a for passing through the gate of the building.

Next, E is the receipt information receiving step. In this receipt information receiving step E, the server 1 receives receipt information 3b from the user terminal 3 via the network 2, indicating that the information holder 4 has arrived at the orderer P. In this receipt information receiving step E, the orderer P who occupies the user terminal 3 uses the second mail order site screen (receiving input form) 3B displayed on the display unit of the user terminal 3 to send receipt information indicating that the information holder 4 has arrived at the orderer P to the main server or the intermediary server (see FIG. 4). In the first embodiment, the orderer P clicks the receipt button b2 on the second mail order site screen 3B, not from the delivery company terminal 1c. Then, the receipt information 3b is sent directly or indirectly (via the intermediary server) to the authentication management server 1 via the network 2. When the authentication management server 1 receives the receipt information 3b, it registers the receipt information 3b in its storage device 12 and performs the next identification information activation step F.

Next, F is the identification information activation process. As described above, in the authentication method X for the information holder 4 in the first embodiment, unless receipt information 3b is received from the user terminal 1 indicating that the information holder 4 has arrived, for example, even if the local authentication device 5 receives identification information a of the information holder 4 manufactured in the information holder manufacturing process B from the server 1 via the network 2, the identification information a cannot yet be used for authentication unless it goes through the receipt information reception process E (herein referred to as the "invalidated state").

Therefore, in this identification information activation process F, the server control device changes the identification information a in the information holder 4 from an invalid state to a valid state at least after the received information receiving process has been completed, and preferably after the received information has been registered in the storage device of the server 1. Specifically, it makes it possible to use the identification information a in a dormant or frozen state. When the server 1 changes the identification information a from an invalid state to a valid state, it immediately provides the validity information to the authentication device 5 on-site or on the network.

Next, G is the authentication execution process (including enabling). In this authentication execution process G, after the identification information activation process F, the identification information a stored in the authentication device 5 becomes available for use (authentication enabled state), so authentication is executed between the information holder 4 and a local authentication device installed in the building or an authentication device 5 on a network. The authentication is performed, for example, within the range of the security zone S, by a non-contact method such as by communicating between the information holder 4 and the local authentication device 5 and placing a card key on a card reader.

Note that "security zone S" refers to an occupied space that is divided based on the gates for entering the premises of a building such as an apartment complex, office, or commercial facility, the automatic doors for entering the entrance, the automatic doors for entering an elevator, and the doors for entering private areas. Therefore, the occupied space may be singular or plural.

Next, FIG. 2 is a block diagram (invention of a product) in which the information holder authentication method X of the first embodiment is replaced with an information holder authentication system X1. In the following explanation of other embodiments such as the information holder authentication system X1, for convenience, components that are the same as those in the information holder authentication method X are given the same or similar reference numerals and duplicate explanations are omitted. In addition, explanations of the configurations using the same terms are used as is.

The information holder authentication system X1 is an information holder authentication system that receives identification information a from a physical information holder 4 that has the identification information a for passing through a gate of a building (not shown) and unlocks the lock device 7 of the gate installed at the entrance of the building. The gate refers to an opening and closing device for shielding the building.

The locking device 7 of the gate is not only an electric lock that has a cylinder lock or thumbturn lock on the lock body and can be locked or unlocked mechanically or electrically, but also includes a drive device that has a drive motor, power transmission means, etc. and opens the shielding opening/closing body in the horizontal or vertical direction using the driving force of the drive motor. Therefore, "operation" here includes cases where the locking state of the locking means for the so-called deadbolt is released when the shielding opening/closing body is stationary, where the deadbolt moves in the unlocking direction, and where the shielding opening/closing body moves in the opening direction using the driving force of the drive motor.

Thus, the authentication system X1 for an information holder comprises a server 1, a user terminal 3 connected to the server via a network 2, and an on-site authentication device or an authentication device (authentication execution means) 5 on the network. The server 1 comprises an order receiving means A1 for receiving order information for the information holder from the user terminal 3 via the network 2, an information holder manufacturing means B1 for manufacturing an information holder 4 that can be carried freely in one hand or worn on the body by a manufacturer (factory) on the server 1 side after the order is received, and an authentication device 5 for receiving the information before receiving receipt information 3b by a receipt information receiving means E1 described later. The authentication device 5 includes an identification information receiving means C1 that receives identification information a of the information holder 4 manufactured by the information holder manufacturing means B1 from the server 1 via the network 2, a delivery information recording means D1 that records delivery information b for delivering the information holder 4 to the orderer P of the user terminal 3, a receipt information receiving means E1 that receives receipt information 3b from the user terminal 3 via the network 2 that the information holder 4 has arrived at the orderer P, and an identification information validating means F1 that changes the identification information a of the information holder 4 from an invalid state to a valid state after at least the receipt information receiving step, preferably after the receipt of the receipt information is registered in the memory unit of the server 1. The identification information validating means F1 changes the identification information a stored in the authentication device 5 from an invalid state to a valid state.

The information holder authentication system X1 further includes the authentication execution means 5 that executes authentication between the information holder 4 and the authentication device 5 after the receipt information receiving means E1 receives the receipt information 3b.

Therefore, the information holder authentication system X1 is composed of the same components as the information holder authentication method X, and can therefore achieve the same objectives.
Next, Fig. 3 is an explanatory diagram showing a main server and a subordinate server. As mentioned above, the server 1 may be either a single server or multiple servers, but in this embodiment, the server 1 is composed of a main server 1, a subordinate server 1a, a subordinate server 1b, a subordinate server 1c, etc. Of course, the number of servers 1 can be increased or decreased as desired.

Now, in the embodiment, the main server 1 has an order receiving means A1, an identification information receiving means C1, a delivery information recording means D1, a receipt information receiving means E1, and an identification information validating means F1. Generally, a server is equipped with a control unit, a communication unit, a memory unit, etc. In FIG. 3, the identification information receiving means C1, the delivery information recording means D1, the receipt information receiving means E1, and the identification information validating means F1 are applied to the communication device, the storage device, and the identification information validating means F1 of the main server 1. Here, the control device, the communication device, the storage device, etc. are simply labeled, and the configuration is briefly explained. The control device 10 controls each device and means of the main server 1. As is well known, the control device 10 has a CPU, a program stored in a memory, and a clocking means for counting the current time, and executes the program. The communication device 11 has receiving means 1 to n and transmitting means 1 to n, and transmits and receives various information or data between, for example, a user terminal 3, a secondary server 1a, etc. The storage device 12 is composed of a hard disk or the like, and stores a user management table, an information holder management table, a secondary server management table, a delivery information management table, a receipt information management table, etc. The identification information validation means F1 validates the identification information a stored in the information holder management table.

Therefore, the control device 10 of the main server 1 executes various functions of each device and means based on information in the storage device (herein also referred to as the "storage unit") 12. In addition, the functions (control) of the main server 1 include, in addition to the function of recording the identification information a of the information holder received by the receiving means in the storage device 12 as described above, a reception function in which the receiving means of the communication device 11 receives order information 3a, a function of recording the order information 3a in the storage device 12, a function of the receiving means receiving delivery information b, a function of recording the delivery information b in the storage device 12, a function of the receiving means receiving receipt information 3b, a function of recording the receipt information 3b in the storage device 12, etc., and also a function of transmitting order completion information from the transmitting means, a function of transmitting valid information in which the identification information a is validated from the transmitting means, etc.

The subordinate servers 1a, 1b, and 1c are shown to the right of the main server 1, and the server 1a has an information holder manufacturing means (manufacturing device) B1, a communication device, and a storage device. The server 1b is, for example, a mail order site, and as shown in FIG. 4, provides a first mail order site screen 3A, a second mail order site screen 3B, and the like to a user terminal 3. The subordinate server 1c is a delivery company terminal whose main business is home delivery, and the delivery status of the packaged information holder (in delivery, delivered, delivered to the delivery box, etc.) can also be obtained from this delivery company terminal 1c. The first mail order site screen 3A has an application button b1, and when the application button b1 is clicked, order information 3a is sent. On the other hand, the second mail order site screen 3B has a receipt button b2, and when the receipt button b2 is clicked, receipt information 3b is sent. The main server 1 may also include subordinate servers 1a, 1b, 1c, and the like.

Next, FIG. 5 is a block diagram showing a modified example X2 of the authentication system X1 for an information holder of the first embodiment. The main difference between this modified example X2 and the authentication system X1 is that the delivery company terminal 1c shown in FIG. 3 is connected to the network 2, and the delivery company terminal 1c notifies the server 1 of receipt information 3b such as "delivered" or "delivered to a delivery box" on behalf of the user terminal 3. In modified example X2, the order information 3a is notified to the server 1 from the user terminal 3 via the network 2, just like in the embodiment of FIG. 2, but it is assumed that, for example, when the orderer P is absent, the packaged information holder 4 may be placed in a delivery box equipped with a lock.

In the above case, in order to improve convenience, the delivery company terminal (including the mobile terminal held by the delivery person) 1c notifies the server 1 of the receipt information 3b on behalf of the orderer P. In addition, in the above-mentioned modified example X2, the secondary server 1a of the factory system may notify the primary server 1 of the receipt information 3b on behalf of the orderer P, provided that it can monitor the mailbox of the orderer P. Alternatively, the management office of the apartment complex may be requested by the orderer P to notify the primary server 1 of the receipt information 3b on behalf of the orderer P, provided that it can act on behalf of the orderer P. In short, when the secondary server 1a of the factory system or the terminal of the management office of the apartment complex is given the authority to send the receipt information by proxy, the effect of the proxy belongs to the person himself, so in such a case, the server 1 may notify the server 1 of the receipt information 3b such as "delivered" on behalf of the user terminal 3.

Next, FIG. 6 is a process diagram showing authentication method Y of the information holder 4 of the second embodiment. The main difference between authentication method Y of the information holder 4 and authentication method X of the first embodiment described above is that there is no identification information activation process F, as can be understood by comparing FIG. 1 and FIG. 6.

In other words, in the authentication method X of the first embodiment, before the receipt information receiving process E, the authentication device 5 includes an identification information receiving process C in which the authentication device 5 receives the identification information a of the information holder 4 from the server 1 via the network 2, and the identification information a of the information holder 4 cannot be used for regular authentication until the receipt information receiving process E is passed.

In contrast, the authentication method Y of the information holder 4 of the second embodiment is characterized in that after the received information receiving process E, the authentication device 5 includes an identification information receiving process C in which the authentication device 5 receives the identification information a of the information holder 4 from the server 1 via the network 2, and the identification information a of the information holder registered in the memory unit is currently in a state that can be used for regular authentication. In addition, after the received information receiving process E, there is an identification information receiving process C in which identification information a that can be used for authentication is obtained, and there is no identification information activation process F.

Therefore, to summarize the authentication method (X, Y) of the information holder 4 of the first and second embodiments, the authentication method of the information holder of the present invention includes an order acceptance process A in which the server 1 accepts order information for a physical information holder 4 having identification information for passing through the gate of a building from a user terminal 3 via a network 2, a delivery information recording process D in which delivery information for delivering the information holder to the orderer of the user terminal is recorded, a receipt information receiving process in which receipt information 3b indicating that the information holder 4 has arrived or been delivered to the orderer P is received via the network 2 from at least one of the user terminal 3 or the delivery company terminal 1c, and an authentication execution process (including enabling) G in which authentication is executed between the information holder 4 and the authentication device 5 after the receipt information receiving process, and depending on the embodiment, the constituent element of the identification information activation method F1 is limited.

Next, Fig. 7 is a block diagram in which the authentication method Y of the information holder 4 of the second embodiment is replaced with an authentication system Y1 of the information holder, which is similar to the authentication system X1 of the information holder of Fig. 2. Fig. 8 is a block diagram showing a modified example Y2 of the authentication system of the information holder of the second embodiment, which is similar to the modified example X2 of the authentication system of the information holder of Fig. 5.
In the embodiment of Fig. 8, the delivery company terminal 1c is involved in the receipt information 3bc, as in Fig. 5, but as described above, detailed explanations will be omitted here to avoid duplication. The configuration of the server 1 in the second embodiment is based on the configuration of Fig. 3.

When the server 1 receives specified information such as "It has arrived" (if it is the person himself) or "It has been delivered" (if it is someone else) via the network 2 from the person himself or a terminal authorized by the person himself, the server preferably immediately provides the identification information of the genuine information holder to the authentication device at approximately the same time as the specified information is registered. Therefore, the orderer (resident, etc.) can immediately use the information holder as a storage medium for authentication. Therefore, whether or not the identification information is validated and whether the receipt information is received from the user terminal 3 or the delivery company terminal can be said to be substantially the same invention from the perspective of achieving the objectives of this invention, as explained in Appendix 1 etc.

<Additional Note 1> In the information holder authentication method X and information holder authentication system X1 of the first embodiment, the condition for validating the identification information a is that the user terminal (orderer P) 2 receives receipt information 3b such as "It has arrived" from the server 1, but as described above, the condition for validating the identification information may also be that the delivery company terminal (delivery company) 1c receives a notification of receipt information 3b such as "It has been delivered" from the server 1. The invention is substantially the same even if the delivery company terminal (delivery company) 1c or the like notifies the server 1 of receipt information 3b such as "It has been delivered" on behalf of or on behalf of the user terminal (orderer P) 2.

<Supplementary Note 2> In the information holder authentication method Y and information holder authentication system Y1 of the second embodiment, the identification information activation condition (trigger) is the receipt of receipt information 3b such as "It has arrived" from the user terminal (orderer P) 2 to the server 1. However, as described above, the identification information activation condition may also be the notification of receipt information 3b such as "It has been delivered" from the delivery company terminal (delivery company) 1c to the server 1. The invention is substantially the same even if the delivery company terminal (delivery company) 1c or the like notifies the server 1 of the receipt information 3b such as "It has been delivered" on behalf of or on behalf of the user terminal (orderer P) 2.

<Appendix 3> Although not specifically shown, in an embodiment in which the server 1 includes an online shopping site, an intermediary server may be provided and order information for each user may be stored in the database of the intermediary server. Then, for example, the intermediary server may notify the user terminal 3 of order completion information.

<Additional Note 4> In the method (X, Y) for authenticating an information holder of the present invention, the following program is stored in the storage unit, and the control unit processes each step.
"A program for causing a computer to execute each of the processes of an order receiving step A in which a server 1 having identification information for identifying a physical information holder in a storage unit receives, via a network 2, from a user terminal 3, order information for a physical information holder 4 having identification information a for passing through a gate of a building; a delivery information recording step D in which delivery information for delivering the information holder to the orderer of the user terminal is recorded; a receipt information receiving step E in which, via the network, from at least one of the user terminal or the delivery company terminal, receipt information 3b indicating that the information holder has arrived or been delivered to the orderer; and an authentication execution step (including enablement) G in which regular authentication is executed between the information holder and an authentication device after the receipt information receiving step."

The present invention can be used in the fields of authentication methods, authentication systems, and programs for information holders held by residents of a house, when the resident's user terminal orders the information holder via a network.

X, Y: authentication method of information holder,
X1, X2, Y1, Y2... information holder authentication system,
1...Server,
1a, 1b, 1c...subordinate servers,
1c...Delivery company terminal,
2. Network,
3...user terminal,
3A…First online shopping site screen,
3a…Order information,
3B: Second online shopping site screen,
3b…Receipt information,
4...Physical information carrier,
a...identification information,
M: Factory system,
b…Shipping information,
5 (G)...Authentication device,
6...Lock control device,
7...Gate locking device,
10...Control device,
11...Server communication device,
12...Server storage device,
A: Order acceptance process,
B... Information carrier manufacturing process,
D... Delivery information recording step,
E... Receipt information receiving step,
C...Identification information receiving step,
G: Authentication execution process (including enablement),
A1...Order receiving means,
B1: Information holder manufacturing means (server side),
C1...Identification information receiving means,
D1...delivery information recording means,
E1...receipt information receiving means,
F1...Identification information validation means.

Claims (5)

An information holder authentication method comprising an order acceptance process in which a server accepts order information for a physical information holder having identification information for passing through a gate from a user terminal via a network, a delivery information recording process in which delivery information for delivering the information holder to the orderer at the user terminal is recorded, and a receipt information receiving process in which receipt information is received from at least one of the user terminal or the delivery company terminal via the network to the effect that the information holder has arrived or been delivered to the orderer, and in which authentication is possible between the information holder and an authentication device after the receipt information receiving process. In the method for authenticating an information holder according to claim 1, the authentication device includes an identification information receiving step of receiving identification information of the information holder from the server via the network before the received information receiving step, and the identification information of the information holder is in a state in which it cannot be used for authentication unless it has gone through the received information receiving step. In the method for authenticating an information holder according to claim 1, after the received information receiving step, the authentication device includes an identification information receiving step for receiving identification information of the information holder from the server via the network, and the identification information of the information holder registered in the memory unit is in a state that can be used for authentication. An authentication system for an information holder for receiving identification information for passing through a gate from a physical information holder having the identification information and unlocking a lock device of the gate, comprising:
The authentication system for the information holder includes a server, a terminal which is either a user terminal or a delivery company terminal connected to the server via a network, and an authentication device;
the server has an order receiving means for receiving order information for the information holder from the user terminal via the network;
a delivery information recording means for recording delivery information for delivering the information holder to the orderer of the user terminal;
An information holder authentication system comprising a receipt information receiving means for receiving receipt information indicating that the information holder has arrived or been delivered to the orderer from at least one of the user terminal or the delivery company terminal via the network, and after the receipt information receiving means receives the receipt information, authentication becomes possible between the information holder and an authentication device. A program that causes a computer to execute an order acceptance process in which a server having identification information in a storage unit that identifies a physical information holder accepts order information for a physical information holder having the identification information for passing through a gate from a user terminal via a network, a delivery information recording process that records delivery information for delivering the information holder to the orderer of the user terminal, a receipt information receiving process that receives receipt information indicating that the information holder has arrived or been delivered to the orderer from at least one of the user terminal or the delivery company terminal via the network, and each process that enables authentication between the information holder and an authentication device after the receipt information receiving process.

Images