Authentication method, authentication system, in-vehicle device, and authentication apparatus

• US 8,918,643 B2
• Filed: 11/13/2008
• Issued: 12/23/2014
• Est. Priority Date: 11/16/2007
• Status: Active Grant

• Current Assignee: Fujitsu Ten Limited (DENSO Corporation)
• Original Assignee: Fujitsu Ten Limited (DENSO Corporation)
• Inventors: Okude, Kazuhiro
• Primary Examiner(s): Chao, Michael
• Assistant Examiner(s): Gao, Shu Chun
• Application Number:
  US12/743,053
• Publication Number:
  US 20100241857A1
• Time in Patent Office: 2,231 Days
• Field of Search: 380/44, 380/255, 713/168
• US Class Current: 713/168
• CPC Class Codes: B60R 2325/101 Bluetooth
• CPC Class Codes: B60R 25/24 using electronic identifiers containing a code not memorised by the user
• CPC Class Codes: G09C 5/00 Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/77 Graphical identity
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

An authentication system includes an in-vehicle device that generates an authentication key, and displays on a display unit, a two-dimensional code including the generated authentication key and a URL indicating a predetermined WEB page on a network. A portable terminal device acquires the authentication key and the URL from the two-dimensional code by reading the two-dimensional code via an imaging unit, downloads a communication program for communicating with the in-vehicle device from the WEB page indicated by the URL, and transmits the authentication key to the in-vehicle device by causing the downloaded communication program to operate.

Claims

1. An authentication device for performing authentication of a user based on information received from a portable terminal owned by the user, the authentication device comprising:

a communication unit that establishes a communication connection with the portable terminal;

a storage unit that stores registration information for authentication of the user of the portable terminal, the registration information including first authentication information and second authentication information;

an authenticating unit that performs a registration process of storing, in the storage unit, the first authentication information acquired from the portable terminal and the second authentication information generated by the authenticating unit for the portable terminal, and transmitting to the portable terminal the second authentication information to be stored therein, and performs authentication by comparing the first authentication information and the second authentication information stored in the storage unit with the first authentication information and the second authentication information received from the portable terminal, respectively, wherein

the communication unit permits the communication connection with the portable terminal when the first authentication information stored in the storage unit matches the first authentication information received from the portable terminal, and

the authenticating unit performs authentication after the communication connection is permitted, by comparing the second authentication information stored in the storage unit with the second authentication information received from the portable terminal.

2. The authentication device according to claim 1, wherein

the first authentication information includes a plurality of items, and

when a number of items for which a result of a comparison as unmatched is one, a value of an item for which the result is unmatched among the registration information corresponding to the portable terminal is updated to a value of the item included in the information received from the portable terminal.

3. The authentication device according to claim 1, wherein

the communication unit detects a portable terminal which enters a communication range, and

the authenticating unit starts an authentication process automatically, when the communication unit detects a portable terminal which enters the communication range.

4. The authentication device according to claim 3, wherein

the first authentication information includes a unique name of a portable terminal and

the authenticating unit performs control, when the communication unit detects more than one portable terminal entering the communication range after the registration process is activated, to display unique names of the detected portable terminals on the display unit, accepts selection of a unique name by a user, and performs the registration process of a portable terminal which corresponds to the unique name selected by the user.

5. An in-vehicle device comprising:

the authentication device according to claim 1, and

a control unit that limits operations based on a result of authentication by the authentication device.

6. The in-vehicle device according to claim 5, wherein

the control unit holds setting information of each one of portable terminals, and controls operations based on setting information corresponding to a portable terminal which is authenticated by the authentication device.

7. The in-vehicle device according to claim 6, wherein

the control unit performs a predetermined operation-restricting process when a communication connection with a portable terminal for which the authentication succeeds is terminated.

8. An authentication system comprising:

the authentication device according to claim 1;

a portable terminal that transmits information for user authentication to the authentication device; and

a server that manages registration information of the portable terminal to be used for user authentication, wherein

the portable terminal accesses the server using identification information for identifying the portable terminal, transmits the registration information corresponding to the portable terminal after the access, and prohibits reading of the registration information from an application of a device other than the authentication device, and

the server stores transmitted registration information in association with the identification information.

9. The authentication system according to claim 8, wherein

when another portable terminal other than the portable terminal which has transmitted the registration information performs access using identification information identical with the stored identification information, and requests transmission of registration information, the server transmits registration information corresponding to the identification information to the other portable terminal.