AUTHENTICATION METHOD, AUTHENTICATION SYSTEM, IN-VEHICLE DEVICE, AND AUTHENTICATION APPARATUS

• US 20100241857A1
• Filed: 11/13/2008
• Published: 09/23/2010
• Est. Priority Date: 11/16/2007
• Status: Active Grant

• Current Assignee: Fujitsu Ten Limited (DENSO Corporation)
• Original Assignee: Fujitsu Ten Limited (DENSO Corporation)
• Inventors: Okude, Kazuhiro, Kitahara, Toshio
• Granted Patent: US 8,918,643 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: B60R 2325/101 Bluetooth
• CPC Class Codes: B60R 25/24 using electronic identifiers containing a code not memorised by the user
• CPC Class Codes: G09C 5/00 Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/77 Graphical identity
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

An authentication system is configured such that: an in-vehicle device generates an authentication key, and displays on a display unit, a two-dimensional code including the generated authentication key and a URL indicating a predetermined WEB page on a network; and a portable terminal device acquires the authentication key and the URL from the two-dimensional code by reading the two-dimensional code via an imaging unit, downloads a communication program for communicating with the in-vehicle device from the WEB page indicated by the URL, and transmits the authentication key to the in-vehicle device by causing the downloaded communication program to operate.

Claims

1. An authentication method for authenticating a communication device and a portable terminal device with each other by exchanging an authentication key on connecting the communication device and the portable terminal device via communication, the method comprising:

generating the authentication key by the communication device;

displaying on a display unit by the communication device, a two-dimensional code including the authentication key generated in the generating;

acquiring the authentication key from the two-dimensional code by reading the two-dimensional code via an imaging unit of the portable terminal device; and

transmitting the authentication key acquired in the acquiring by the portable terminal device to the communication device.

2. An authentication method for authenticating a communication device and a portable terminal device with each other by exchanging an authentication key on connecting the communication device and the portable terminal device via communication, the method comprising:

generating the authentication key by the communication device;

displaying on a display unit by the communication device, a two-dimensional code including the authentication key generated in the generating and a URL indicating a predetermined WEB page on a network;

acquiring the authentication key and the URL from the two-dimensional code by reading the two-dimensional code via an imaging unit of the portable terminal device;

downloading a communication program for the portable terminal device to communicate with the communication device from the WEB page indicated by the URL; and

transmitting the authentication key to the communication device by causing the communication program downloaded to the portable terminal device in the downloading to operate.

3. The authentication method according to claim 2, wherein

the downloading includes transmitting the authentication key to the WEB page indicated by the URL by the portable terminal device, and downloading the communication program in which the authentication key is set as a response, and

the transmitting includes transmitting the authentication key set in the communication program to the communication device by causing the communication program downloaded to the portable terminal device to operate.

4. The authentication method according to claim 2, wherein

the transmitting includes setting the authentication key acquired in the acquiring in the communication program downloaded to the portable terminal device, and transmitting the authentication key to the communication device by causing the communication program to operate.

5. An authentication system for authenticating a communication device and a portable terminal device with each other by exchanging an authentication key on connecting the communication device and the portable terminal device via communication, wherein

the communication device includes

a generating unit that generates the authentication key, and

a display unit that displays a two-dimensional code including the authentication key generated by the generating unit on a display, and

the portable terminal device includes

an acquiring unit that acquires the authentication key from the two-dimensional code by reading the two-dimensional code via an imaging unit, and

a transmitting unit that transmits the authentication key acquired by the acquiring unit to the communication device.

6. An in-vehicle device for authenticating a portable terminal device by exchanging an authentication key on connecting with the portable terminal device via communication, the device comprising:

a generating unit that generates the authentication key; and

a display unit that displays a two-dimensional code including the authentication key generated by the generating unit on a display.

7. An authentication device for performing user authentication based on information received from a portable terminal, the device comprising:

a communication unit that establishes communication connection with the portable terminal;

a storage unit that stores registration information for user authentication for each portable terminal;

an authenticating unit that performs a registration process of storing in the storage unit, the registration information which includes first authentication information that is unique information generated for each portable terminal and second authentication information generated for each portable terminal, and that compares the registration information stored in the storage unit with information received from the portable terminal, wherein

the communication unit permits the communication connection with the portable terminal for which authentication based on the first authentication information succeeds, when the authentication based on the first authentication information succeeds, and

the authenticating unit performs authentication based on the second authentication information after the communication connection is permitted.

8. The authentication device according to claim 7, wherein

the first authentication information includes a plurality of items, and

when the number of items for which result of comparison is unmatched is one, a value of the item for which the result of comparison is unmatched among the registration information corresponding to the portable terminal is updated to a value of the item included in the information received from the portable terminal.

9. The authentication device according to claim 7, wherein

the communication unit detects a portable terminal which enters a communication range, and

the authenticating unit starts an authentication process automatically, when the communication unit detects a portable terminal which enters the communication range.

10. The authentication device according to claim 9, wherein

the first authentication information includes a unique name of a portable terminal and

the authenticating unit performs control, when the communication unit detects more than one portable terminals entering the communication range after the registration process is activated, to display unique names of the detected portable terminals on the display unit, accepts selection of a unique name by a user, and performs the registration process of a portable terminal which corresponds to the unique name selected by the user.

11. An in-vehicle device comprising:

the authentication device according to claim 7, and

a control unit that limits operations of own device based on a result of authentication by the authentication device.

12. The in-vehicle device according to claim 11, wherein

the control unit holds setting information of each portable terminal, and controls the own device based on setting information corresponding to a portable terminal which is authenticated by the authentication device.

13. The in-vehicle device according to claim 12, wherein

the control unit performs a predetermined operation-restricting process when communication with a portable terminal for which the authentication succeeds is cut.

14. An authentication system comprising:

the authentication device according to claim 7;

a portable terminal that transmits information for user authentication to the authentication device; and

a server that manages registration information of each portable terminal to be used for user authentication, wherein

the portable terminal accesses the server using identification information for identifying the portable terminal, transmits the registration information corresponding to own terminal after the access, and prohibits reading of the registration information from an application of a device other than the authentication device, and

the server stores transmitted registration information in association with the identification information.

15. The authentication system according to claim 14, wherein

when another portable terminal other than the portable terminal which has transmitted the registration information makes access using identification information identical with the stored identification information, and requests transmission of registration information, the server transmits registration information corresponding to the identification information to the another portable terminal.