JP5521764B2 - Information processing apparatus, authentication system, authentication method, authentication program, and recording medium - Google Patents

Description

  The present invention relates to an information processing device, an authentication system, an authentication method, an authentication program, and a recording medium, and more specifically, an information processing device, an authentication system, an authentication method, an authentication program, and a recording medium that perform personal authentication using proximity wireless communication. About.

  In recent years, ensuring confidentiality of information has become an important issue, and near field communication (NFC) has become widespread. For example, a copying apparatus, a printer apparatus, a composite apparatus, etc. Even in information processing devices such as devices and computers, the user ID is stored in an IC card (Integrated Circuit Card) using NFC, and the information processing device is equipped with an NFC reader / writer and uses the information processing device. A user ID of an IC card carried by a user to be read is read to control whether or not the information processing apparatus can be used.

  However, in such an authentication method using an IC card, if the IC card is passed to a malicious third party due to theft or the like, the information processing apparatus may be illegally used. In other words, in the conventional confidentiality technology, since the user of an NFC device such as an IC card is regarded as a registrant of certificate information etc., a malicious user at the time of theft or loss of the NFC device If an unauthorized use is attempted, the NFC can be used to impersonate the original registrant and easily access the information processing apparatus, and information in the information processing apparatus can be easily stolen or altered. There was a fear.

  Therefore, in a conventional system that uses an IC card for storing electronic value and a portable terminal with an IC card function to use a service terminal or perform a maintenance operation, the portable card with an IC card function for storing authority information for performing the maintenance operation. Only when the terminal acquires the authority information from the authority information issuing server, and the service terminal communicates with the mobile terminal with an IC card function to acquire and verify the authority information and permits maintenance operation. A technique for unlocking and operating in a maintenance operation mode has been proposed (see Patent Document 1).

  However, in the above prior art, it is necessary to cooperate with the authority information issuing server in order to confirm the authority information of the portable terminal with the IC card function. As a result, it is necessary to construct a complex backbone network system, and it is necessary to connect to the backbone network, resulting in high costs and a large size and poor usability as a system for maintaining confidentiality of information. was there.

  SUMMARY An advantage of some aspects of the invention is that it provides an information processing apparatus, an authentication system, an authentication method, an authentication program, and a recording medium that reliably and inexpensively authenticate a user who requests use.

  In order to achieve the above object, the present invention provides a short-range communication device including a memory for storing user authentication information and a user terminal ID for identifying a communication terminal having other portability associated with the user. Short-distance communication, obtaining authentication information from the short-range communication device, and collating the authentication information with the registered authentication information of the authentication information storage means for storing the authentication information of the user permitted to use as registered authentication information If the primary authentication process is successful and the primary authentication is successful, the short-range communication is performed to obtain the terminal ID of the communication terminal from the communication terminal, and the terminal ID of the communication terminal is compared with the use terminal ID. The secondary authentication process is performed, and when the authentication is successful in the secondary authentication process, the use of the information processing apparatus is permitted.

  ADVANTAGE OF THE INVENTION According to this invention, the authentication of the user who has requested | required utilization can be performed reliably cheaply.

1 is a system configuration diagram of an authentication system to which an embodiment of the present invention is applied. The system block diagram of another authentication system. The block block diagram of an NFC device. The block block diagram of a compound apparatus. The principal part functional block block diagram of a compound apparatus. The functional block block diagram regarding recognition processing. The flowchart which shows a recognition process. The figure which shows an example of a notification screen. The flowchart which shows a first time registration process.

  Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In addition, since the Example described below is a suitable Example of this invention, various technically preferable restrictions are attached | subjected, However, The range of this invention is unduly limited by the following description. However, not all the configurations described in the present embodiment are essential constituent elements of the present invention.

  1 to 9 are diagrams showing an information processing apparatus, an authentication system, an authentication method, an authentication program, and a recording medium according to an embodiment of the present invention. FIG. 1 is a system configuration diagram of an authentication system 1 to which an embodiment of a method, an authentication program, and a recording medium are applied.

  In FIG. 1, the authentication system 1 includes a composite device (information processing device) 2 having an NFC reader / writer (NFC R / W) 3, and the NFC reader / writer (near field communication means) 3 can communicate. While communicating with the NFC device 4 existing at a short distance, the mobile communication terminal 5 (RFID (Radio Frequency-Identification) shown in FIG. 3) 5a and the IC card 5b are NFC compatible communication terminals at a short distance. Etc.).

  As shown in FIG. 2, the authentication system 1 includes a composite device 2 connected to a wired / wireless network NW such as the Internet, a WAN (Wide Area Network), and a LAN (Local Area Network). May be connected to an access point device 6, an electronic mail server 7, a CA (certificate authority) 8, and the like. In the case of FIG. 2, only one multifunction device 2 is connected, but a plurality of devices may be connected.

  The certificate authority (CA) 8 issues authentication information for authenticating the user in response to a request from the user who uses the composite apparatus 2.

  The e-mail server 7 exchanges e-mails among users of the composite apparatus 2, a certificate authority (CA) 8, an administrator of the authentication system 1, and the like.

  The access point device 6 is a wireless / wired access point to the network NW.

  As shown in FIG. 3, the NFC device 4 includes a communication unit 11, an NFC controller unit 12, an antenna unit 13, and the like. The NFC controller unit 12 includes a control unit 14, a plurality of memories 15a to 15n, and the like. Yes. The memories 15a to 15n include association information necessary for network settings, certificate information (authentication information) for each individual or each device, a use terminal ID of the mobile communication terminal 5 for specifying a user who operates the composite apparatus 2, and the like. Is stored, the communication unit 11 communicates with the peripheral NFC reader / writer 3 and the like via the antenna 13, and the NFC controller unit 12 reads the data in the memories 15a to 15n to read the NFC reader / writer 3 and the like. The data received from the NFC reader / writer 3 of the communication partner is written in the memories 15a to 15n.

  As shown in FIG. 4, the multifunction apparatus 2 includes a controller 100, an operation unit 101, a fax control unit, a fax control unit 102, a plotter 103, a scanner 104, and other hardware resources 105 that are other hardware resources. The NFC reader / writer 3 is connected to the controller 100.

  The controller (control means) 110 includes a CPU (Central Processing Unit) 111, a timer 112, a ROM (Read Only Memory) 113, a RAM (Random Access Memory) 114, an ASIC (Application Specific Integrated Circuit) 115, a RAM 116, an HDD (Hard Disk). Drive) 117, serial bus I / F 118, NIC (Network Interface Card) 119, WLAN I / F 120, USB (Universal Serial Bus) device I / F 121, USB host 122, memory card I / F 123, and the like.

  The operation unit 101 is connected to the ASIC 115 of the controller 100, and the fax control unit 102, the plotter 103, the scanner 104, and other hardware resources 105 are connected to the ASIC 115 of the controller 100 via a PCI (Peripheral Component Interconnect) bus. Yes. The serial bus I / F 118, NIC 119, WLAN 120, USB device 121, USB host 122, and memory card I / F 1223 are connected to the ASIC 115 of the controller 100 via the PCI bus.

  In the controller 110, the CPU 111 uses the RAM 114 as a work memory based on a program in the ROM 113 and the HDD 117 to control each unit of the multifunction device 2, and executes basic processing as the multifunction device 2, and will be described later. The authentication control process of the present invention is executed.

  That is, the composite device 2 includes a ROM, an EEPROM (Electrically Erasable and Programmable Read Only Memory), an EPROM, a flash memory, a flexible disk, a CD-ROM (Compact Disc Read Only Memory), a CD-RW (Compact Disc Rewritable), a DVD ( The ROM 113 and the hard disk 117 are read by reading an authentication program for executing the authentication method of the present invention recorded on a computer-readable recording medium such as a digital versatile disk (SD), a secure digital (SD) card, or an MO (Magneto-Optical Disc). And the like, it is constructed as an information processing apparatus that executes an authentication method for reliably authenticating a user who is permitted to operate the composite apparatus 2 described later. This authentication program is a computer-executable program written in a legacy programming language such as assembler, C, C ++, C #, Java (registered trademark) or an object-oriented programming language, and is stored in the recording medium. Can be distributed.

  The timer 112 includes an oscillator, a frequency divider, and the like, measures the current time, notifies the CPU 111, and generates a clock for taking the operation timing of each unit of the composite device 2.

  The ASIC 115 is an IC for image processing applications having hardware elements for image processing, and also has a role of a bridge for connecting each device.

  A RAM 116 is used to temporarily store programs and intermediate processing data when the ASIC 115 performs processing, and an HDD (authentication information storage means) 117 is a control program executed by the CPU 111, image data, document data, fonts. In addition to storing various data such as data and form data, user authentication information (certificate information) or the like in user authentication (primary authentication) using NFC, which will be described later, is stored as registered authentication information.

  The serial bus I / F 118 serially connects the multifunction device 2 and a peripheral device (not shown), and the NIC 119 is an expansion card connected to an expansion slot (not shown) and the like, and is an interface for LAN connection. Communicates with complex devices and servers.

  The USB device I / F 121 communicates with the peripheral device by connecting the multifunction peripheral 2 and a USB-compatible peripheral device (not shown) with a USB cable.

  The NFC reader / writer 3 is connected to the USB host 122 by a USB cable, and the USB host 122 has a function for controlling a physical / electrical I / F for communicating with the NFC reader / writer 3 and a USB protocol. It has a function to control and communicates with the NFC reader / writer 3.

  A memory card (not shown) such as a compact flash memory (registered trademark), a memory stick (MS), or smart media is connected to the memory card I / F 123, and the memory card I / F 123 stores data to the connected memory card. Provides an interface for writing and reading data from the memory card.

  The operation unit (warning means) 101 includes various operation keys, a display, and the like, receives input operations from the various operation keys by the user, and displays various information on the display to the user. In particular, the operation unit 101 performs an input operation of user information or the like in an authentication process described later.

  The fax control unit 102 is connected to a telephone line or the like, and transmits / receives a facsimile document to / from a device having a facsimile communication function such as a counterpart facsimile device based on G3 and G4 communication programs.

  The plotter 103 records and outputs an image on a sheet based on image data to be printed by a predetermined printing method, for example, an electrophotographic method. The plotter 103 is not shown in the case of the electrophotographic system, but is necessary for recording and outputting the image data on the paper by the electrophotographic system using a laser, such as a photoconductor, an optical writing unit, a developing unit, a charging unit. Part and a cleaning part. The plotter 103 operates the optical writing unit according to the image data and the control signal to form an electrostatic latent image on the photosensitive member, and the developing unit supplies toner to the photosensitive member and develops it to form a toner image. . The plotter 103 feeds the paper between the photosensitive member and the transfer unit from the paper feeding unit via the paper conveyance path, transfers the toner image on the photosensitive member to the paper, and the paper on which the toner image is transferred. Is transferred to the fixing unit and heated and pressurized by the fixing unit to fix the toner image on the paper, thereby printing out the image on the paper.

  The scanner 104 performs main scanning and sub-scanning on the document image, reads the document image at a predetermined resolution, and acquires image data.

  Other hardware resources 105 are external hardware and the like.

  The NFC reader / writer 3 is connected to the USB host 122 and communicates with the NFC device 4 and the portable communication terminal 5 at a predetermined short distance based on the NFC standard under the control of the CPU 111 via the USB host 122. Then, transfer and exchange data. The composite device 2 permits association information necessary for network settings stored in the memories 15a to 15n of the NFC device 4 and operation of the composite device 2 through communication between the NFC reader / writer 3 and the NFC device 4. Authentication information (user authentication information) such as the user's certificate information, the user terminal ID that identifies the user's mobile communication terminal 5 and data such as key information for accessing the user authentication information. Acquire or update the data.

  Further, the NFC reader / writer 3 communicates with the mobile communication terminal 5 equipped with the NFC function at a predetermined short distance based on the NFC standard for each predetermined time under the control of the CPU 111, and the mobile communication terminal 5 The use terminal ID of the mobile communication terminal 5 stored in the memory is acquired and passed to the CPU 111 of the controller 100.

  The CPU 111 checks whether or not the terminal ID acquired by the NFC reader / writer 3 matches the use terminal ID registered in the NFC device 4. Authentication that prohibits the operation of the multifunction device 2 when the user who possesses 4 permits the operation of the multifunction device 2 and both terminal IDs do not match or when the terminal ID cannot be obtained from the mobile communication terminal 5 continues for a predetermined time Process.

  The NFC-compatible mobile communication terminal 5 is not limited in any way, but it is desirable that the NFC-compatible mobile communication terminal 5 has a high degree of portability and a size that does not allow communication from a malicious third party. As such a mobile communication terminal 5, for example, an NFC-compatible IC card 5a, an RFID terminal 5b, an NFC-equipped mobile phone, or the like can be used.

  The composite apparatus 2 performs NFC communication with the NFC device 4 and the portable communication terminal 5 by the CPU 111 transmitting a command to the NFC reader / writer 3 via the USB host 122. And the NFC reader / writer 3 are connected by a USB cable, and thus access the network association information, individual certificate information, user authentication information, terminal ID, and user authentication information in the USB communication path. In order to prevent leakage of data such as key information for monitoring the USB bus, the transmission and reception of commands and data on the USB bus are encrypted. In order to perform encryption, authentication between the USB host 122 and the NFC reader / writer 3 is necessary. Therefore, before performing encryption, first, between the USB host 122 and the NFC reader / writer 3. Authentication is performed, a common key is generated based on the authentication result, and encryption (and decryption) is performed using the common key, thereby ensuring the safety of communication using the USB bus.

  Then, the multifunction device 2 is constructed with the basic program and the authentication program of the present invention installed, and thus a functional block as shown in FIG. 5 is constructed.

  5, the composite apparatus 2 includes an application module layer 210, a service module layer 220, and a hardware layer 300 that are activated on an operating system (hereinafter referred to as OS) 200 such as UNIX (registered trademark). The application module layer 210 and the service module layer 220 are functionally connected by an API (Application Program Interface), and the OS 200 and the hardware layer 300 can exchange information through the engine I / F.

  The application module layer 210 includes programs for performing unique processes related to image formation such as copy, fax, printer, scanner, and Web. The copy application 211 realizes a function related to copying, and a function related to fax transmission / reception. A fax application 212 for realizing the above, a printer application 213 for realizing a function relating to printer output, a web application 214 for realizing a function relating to web (Web) communication, and the like.

  The service module layer 220 includes service modules such as a system control service 221, a fax control service 222, an engine control service 223, a memory control service 224, an operation unit control service 225, a network control service 226, and an authentication control service 227.

  The service module layer 220 interprets the processing request from the application module layer 210 and generates a hardware resource 300 acquisition request.

  The hardware resource 300 includes the plotter engine 103, the scanner engine 104, other hardware resources 105, and the like, and an engine control board 301 that secures and controls these hardware.

  The OS 200 executes the software of the application module layer 210 and the service module layer 220 in parallel as processes.

  The system control service 221 performs processing such as management of the applications 211 to 214, control of the operation unit 101, system screen display, LED (Light Emitting Diode) display, management of hardware resources 300, interrupt application control, etc., and fax control. The service 222 is a module that realizes a facsimile function. The engine control service 223 is a module that controls the plotter engine 103, the scanner engine 104, and other hardware resources 105.

  The memory control service 224 is a module that performs memory control, and the operation unit control service 225 is a module that controls the operation unit 101.

  The network control service 226 provides a service that can be used in common for applications that require network I / O. The network control service 226 distributes data received from the network side according to each protocol to the applications 211 to 214, Also, mediation is performed when data from each of the applications 211 to 214 is transmitted to the network side. For example, the network control service 226 controls data communication with network devices connected via the network, such as host devices and servers.

  The authentication control service 227 performs user authentication for using each of the above-described applications 211 to 214, specifically, authentication information of the NFC device 4 and the mobile communication terminal 5 using the NFC reader / writer 3, and the terminal User authentication processing by ID is executed.

  Then, the multifunction device 2 further constructs a functional block as shown in FIG. That is, the composite apparatus 2 requires authentication using NFC by the authentication control service 227 in order to use each of the applications 211 to 214 of the application module layer 210, and to execute authentication processing by the authentication control service 227. NFC resource manager 231, NFC reader / writer (NFC R / W) device driver 232, USB host device driver 233, network library 234, wireless driver 235, address book database (DB) 236, file system 237, HDD driver 238, The drawing processing module 239 and the graphic driver 240 are used.

  That is, when the authentication control service 227 using NFC receives an authentication request or a pairing or association request with the NFC device 4 and the mobile communication terminal 5 from each of the applications 211 to 214, the rendering processing module 239 and the graphic driver 240 are activated. A predetermined authentication-related information display process is performed on the operation unit (operation panel) 101 via the route. The authentication control service 227 communicates with the NFC device 4 and the portable communication terminal 5 through the NFC R / W device driver 232 and the USB host device driver 233 that control the NFC reader / writer 3 connected via USB via the NFC resource manager 231. Communication is performed to obtain setting information and association information for association or pairing, and a terminal ID for identifying the mobile communication terminal 5, and the obtained certificate information is used for an authentication address book provided in the HDD 117. A DB (not shown) is inquired through the file system 237 and the HDD driver 238 using the address book DB module 236 for managing this address book DB, or the WLAN I / O is used through the network library 234. F120, NIC119, etc. The wireless driver 235 is used to make an inquiry to the external certificate authority (CA) 8 connected to the network NW via the access point device 6 or directly. The authentication control service 227 outputs to the applications 211 to 214 whether the primary authentication has succeeded or failed as detailed information in the middle of the inquiry or as a result of the inquiry.

  The authentication control service 227 communicates with the mobile communication terminal 5 at a short distance via the NFC resource manager 231, the NFC reader / writer (NFC R / W) device driver 232, and the USB host device driver 233 at predetermined time intervals. The user who possesses the NFC device 4 is authorized depending on whether or not communication with the mobile communication terminal 5 having the terminal ID that matches the use terminal ID acquired from the NFC device 4 is possible. Secondary authentication processing is performed to determine whether or not the user is a user.

  Here, the NFC resource manager 231 provides a resource management function corresponding to NFC, and enables allocation of various hardware resources among a plurality of applications according to priority. The USB host device driver 233 determines whether or not a USB-connected device is a control target, and the NFC R / W device driver 232 initializes the USB-connected NFC reader / writer 3 or performs a predetermined setting. Or do. The HDD driver 238 is a device driver that drives and controls the HDD 117, and the file system 237 is a program that manages files stored in the HDD 117 and has functions such as security and reliability assurance. Note that in the authentication address book DB, when registered certificate information (authentication information) and certificate information are provided for each user, the user's e-mail address is included in the certificate information. Stored in association with each other, the use terminal ID of the mobile communication terminal 5 associated with the NFC device 4 is stored.

  Next, the operation of this embodiment will be described. The authentication system 1 of this embodiment is permitted to be used on the condition that a user who intends to use the composite apparatus 2 has both the NFC device 4 and the portable communication terminal 5 together.

  In other words, the composite apparatus 2 is a terminal registered in the NFC device 4 indicating user authentication (primary authentication) by the NFC device 4 using NFC and whether the owner of the NFC device 4 is a legitimate owner. Confirmation is performed by secondary authentication as to whether or not the user possesses the portable communication terminal 5 of the ID.

  Therefore, the composite apparatus 2 allows the user who intends to use the composite apparatus 2 to connect the NFC device 4 in which the association information necessary for network setting and the certificate information for each individual or each device are registered in the memories 15a to 15n. When it is held and held over the NFC reader / writer 3 prior to the use of the composite device 2, the composite device 2 controls the NFC reader / writer 3 via the USB host 122 under the control of the CPU 11 based on the authentication program. To start communication with the NFC device 4 to perform network association or pairing and primary authentication processing (step S101).

  When the primary authentication is normally completed, the composite apparatus 2 acquires the use terminal ID of the mobile communication terminal 5 stored in the memories 115a to 15n of the authenticated NFC device 4. The NFC device 4 can store a plurality of use terminal IDs according to the capacities of the memories 15a to 15n.

  The multifunction device 2 refers to whether or not the NFC device 4 is stored in the memories 15a to 15n of the NFC device 4 or the access information of the database (DB). It is determined whether the use terminal ID is registered in 15n (step S102).

  When the NFC device 4 is used for the first time (first use) (NO in step S102), the first registration process of the use terminal ID of the mobile communication terminal 5 is performed (step S103), and the NFC device 4 It is checked whether the registered use terminal ID can be acquired from (step S104). The initial registration process will be described later.

  If the use terminal ID cannot be acquired from the NFC device 4 in step S104, the multifunction apparatus 2 determines that the device is an unauthorized NFC device and ends the process.

  In this case, the multifunction apparatus 2 displays a notification screen G as shown in FIG. 8 on the display of the operation unit 101, for example.

  If the use terminal ID registered in the NFC device 4 can be acquired from the NFC device 4 in step S104, the composite apparatus 2 stores the acquired use terminal ID in the HDD 117 or the like, and from the NFC reader / writer 3 A signal is skipped toward the mobile communication terminal 5 and it is determined whether the signal from the mobile communication terminal 5 has been acquired within a preset setting period (step S105).

  When the signal is received within the set period in step S105, the composite apparatus 2 encodes the received signal, acquires the terminal ID of the mobile communication terminal 5 from the signal, and acquires the terminal ID acquired from the mobile communication terminal 5 Is coincident with the use terminal ID acquired from the NFC device 4 (step S106).

  When the composite apparatus 2 acquires the encrypted terminal ID from the mobile communication terminal 5, the terminal ID of the mobile communication terminal 5 is encrypted in order to improve security. The terminal used to decrypt the ID using the encryption key stored and managed in the HDD 117, etc., obtain the terminal ID received from the mobile communication terminal 5 and decrypted from the NFC device 4, and store it in the HDD 117, etc. Check if the IDs match.

  If the two terminal IDs do not match in step S106, the composite apparatus 2 returns to step S105, and performs the same processing as described above from checking whether the terminal ID is received from the mobile communication terminal 5 within the set period (step S105, S106) If the signal from the portable communication terminal 5 is not acquired within the set period in step S105 without receiving the matching terminal ID, the processing is terminated assuming that the authentication by NFC4 is an unauthorized authentication. .

  In this case, the multifunction apparatus 2 displays a notification screen G as illustrated in FIG. 8 on the display of the operation unit 101, for example.

  In addition, since the user in this case may be a person who is not an authorized owner of the NFC device 4 (a malicious third party or the like), the user is notified with a warning sound, and the network NW The alarm processing such as contacting the administrator of the multifunction apparatus 2 or the owner of the NFC device 4 registered in the database through e-mail or the like may be performed. In this case, a mechanism for generating sound and a mechanism for transmitting electronic mail function as warning means.

  If the two terminal IDs match in step S106, the multifunction apparatus 2 enables use of the application of the multifunction apparatus 2 under the control of the controller 100 (step S107), and is set in advance to permit use of the application. In each monitoring period, a signal is skipped from the NFC reader / writer 3 to the NFC device 4 to check whether communication with the NFC device 4 is possible (step S108).

  If communication with the NFC device 4 is possible in step S108, the multifunction device 2 continues to permit use of the multifunction device 2, and repeatedly checks whether communication with the NFC device 4 is possible again every monitoring period. (Steps S107 and S108).

  In step S108, when the state in which communication with the NFC device 4 is impossible exceeds the monitoring period, it is determined that the use of the multifunction device 2 by the authenticated user has ended, and the security of the multifunction device 2 is ensured. Then, the use of the applications 211 to 214 of the composite apparatus 2 is prohibited, and the process ends.

  In order to improve security in step S108, the user confirmation is not limited to the communication confirmation with the NFC device 4, but, for example, the mobile communication terminal 5 registered in advance in the NFC device 4 is connected to the NFC device 4. It is possible to check whether the user who has the mobile communication terminal 5 is nearby, or communicate with both the NFC device 4 and the mobile communication terminal 5 to perform primary authentication and secondary authentication. Both authentications may be performed.

  As described above, the portable communication terminal 5 is desirably small and wearable (rich in portability). That is, if the mobile communication terminal 5 is wearable, when the user ends the use of the composite device 2, the user forgets to place the NFC device 4 on the composite device 2 or the like and leaves the site. Even if a third party takes away the NFC device 4, if the user carrying the mobile communication terminal 5 is far enough to receive a signal from the composite device 2, communication with the mobile communication terminal 5 is interrupted. The third party cannot use the application of the composite apparatus 2. If the composite apparatus 2 cannot be used, the encrypted terminal IDs in the memories 15a to 15n of the NFC device 4 cannot be decrypted, and the mobile phones registered in the memories 15a to 15n of the NFC device 4 The communication terminal 5 cannot be specified. In addition, if the mobile communication terminal 5 is small, even if someone else sees authentication for using the composite device 2, the mobile communication terminal 5 used for authentication is identified depending on vision. Security can be further improved.

  Then, the multifunction apparatus 2 executes the initial registration process in step S103 as shown in FIG. That is, in order to register the portable communication terminal 5 with the NFC 4 using the composite apparatus 2, the user holds the NFC device 4 over the NFC reader / writer 3 to authenticate the NFC device 4, and When the authentication of 4 is completed, a registration request for the mobile communication terminal 5 is made by the authentication program. When the multifunction device 2 is requested to register the terminal ID of the mobile communication terminal 5 to the NFC device 4 for the first time, the CPU 111 transmits the NFC reader / writer 3 to the peripheral mobile communication terminals 5 via the USB host 122. Signals are transmitted and received (step S201), and the mobile ID received from the mobile communication terminal 5 is displayed on the display of the operation unit 101, and the user requests selection of the registration target terminal ID (step S202). In this case, if the user receives from a plurality of mobile communication terminals 5, there is a possibility that a user other than the mobile communication terminal intended by the user may be registered. Therefore, the environment can be received only from one mobile communication terminal 5. It is desirable to do in.

  When the registration target terminal ID is selected, the multifunction apparatus 2 encrypts the selected terminal ID, writes it in the NFC device 4 as the user terminal ID, and completes the registration process. The composite apparatus 2 manages this encryption key with the HDD 117 or the like.

  If the authentication of the NFC device 4 is completed, the multifunction device 2 performs ID update processing such as deletion, addition, or change of the use terminal ID of the mobile communication terminal 5 registered in the NFC device 4. In addition, a plurality of use terminal IDs can be registered. Further, when deleting the used terminal ID used by the NFC device 4, the composite apparatus 2 registers the new terminal ID as the used terminal ID, and then deletes the used terminal ID that has been used. The terminal ID can be changed while continuing the use of 2.

  If the multifunction device 2 cannot be used due to theft, loss, damage, etc. of the NFC device 4, the administrator prepares a new NFC device 4 and rewrites the HDD 117 database of the multifunction device 2. Do. If the multifunction device 2 becomes unusable due to theft, loss, damage, etc. of the communication device, the administrator rewrites the database of the HDD 117 so that the corresponding NFC device 4 can be used for the first time. The communication terminal 5 can be re-registered.

  As described above, the authentication system 1 according to the present embodiment is a memory in which the composite apparatus 2 stores the user authentication information and the user terminal ID for identifying the portable communication terminal 5 having other portability associated with the user. NFC device 4 which is a short-range communication device having 15a to 15n and NFC reader / writer 3 for short-range communication, obtaining authentication information from NFC device 4, and using the authentication information for permitting use When the primary authentication process is performed by comparing the authentication information of the user with the registered authentication information in the HDD (authentication information storage means) 117 that stores the authentication information as registration authentication information and the primary authentication is successful, the NFC reader / writer 3 Communication is performed to obtain the ID of the communication terminal from the communication terminal, the terminal ID of the communication terminal is compared with the use terminal ID, the secondary authentication process is performed, and the authentication is performed in the secondary authentication process. If successful, it has allowed the use of the composite device 2.

  Therefore, if both the NFC device 4 and the portable communication terminal 5 are not in a complete state, the use of the composite apparatus 2 cannot be started, the security of the composite apparatus 2 can be improved, and the portable device having portability. Since the communication terminal 5 is used, it is difficult for a malicious third party to know that it is used for authentication, and security can be further improved.

  That is, even if a malicious user forgets to place the NFC device 4 on the multifunction device 2 and the malicious third party obtains the NFC device 4, the third party registers the terminal ID in the NFC device 4. Since the mobile communication terminal 5 is not carried, the composite device 2 cannot be used, and improper use of the composite device 2 due to impersonation using the NFC device 4, leakage of information, alteration, etc. are prevented. Thus, the security of the composite apparatus 2 can be ensured.

  Further, in the authentication system 1 of the present embodiment, the NFC device 4 stores the use terminal IDs of the plurality of mobile communication terminals 5 used for the secondary authentication in the memories 15a to 15n. When the NFC reader / writer 3 acquires the terminal ID of the mobile communication terminal 5 that matches one or more of the used terminal IDs, the secondary authentication is successful.

  Therefore, even if one mobile communication terminal 5 is damaged, lost, stolen, etc., the other mobile communication terminal 5 can be easily used to use the composite apparatus 2 and the usability can be improved. In addition, since the composite apparatus 2 can be used, it is possible to appropriately cope with deletion of the use terminal ID registered in the HDD 117 of the damaged mobile communication terminal 5.

  Furthermore, the authentication system 1 according to the present embodiment performs near field communication using the NFC reader / writer 3 on the condition that the composite apparatus 2 succeeds in the primary authentication using the authentication information (NFC) acquired from the NFC device 4. The acquired terminal ID of the mobile communication terminal 5 is registered as a terminal ID in the NFC device 4 that has been primarily authenticated.

  Therefore, the form communication terminal 5 used for the secondary authentication can be registered in an appropriate and security state, and the usability can be improved and the security can be improved.

  Further, the authentication system 1 according to the present embodiment displays the notification screen G1 on the operation unit 101 when the composite apparatus 2 fails in the secondary authentication process using the mobile communication terminal 5 within a predetermined time after the successful primary authentication. Or a predetermined warning such as sending an e-mail to the administrator.

  Therefore, when the user forgets to place the NFC device 4 on the composite apparatus 2, the fact can be notified to the user instantly, and the usability can be improved and the third party can be notified of NFC. The device 4 can be prevented from being taken away and security can be improved.

  Furthermore, the authentication system 1 of the present embodiment communicates with the NFC device 4 and / or the mobile communication terminal 5 at a predetermined time interval after successful secondary authentication using the mobile communication terminal 5 and permission of use. The authentication information or / and the terminal ID are acquired, and primary authentication or secondary authentication for the acquired authentication information or / and the terminal ID fails, or the NFC device 4 or / and the mobile communication terminal If the communication with 5 fails, the permitted use is not permitted.

  Therefore, even if one of the NFC device 4 and the mobile communication terminal 5 is left behind and separated from the composite apparatus 2, it is possible to prevent the composite apparatus 2 from being used by a third party, and security can be improved.

  Further, the authentication system 1 of the present embodiment displays a notification screen G1 on the operation unit 101 when authentication fails at every predetermined time interval or when communication with the NFC device 4 and / or the mobile communication terminal 5 fails. , A predetermined warning is generated that an e-mail is sent to the administrator.

  Therefore, when the user forgets to place the NFC device 4 on the composite apparatus 2, the fact can be notified to the user instantly, and the usability can be improved and the third party can be notified of NFC. The device 4 can be prevented from being taken away and security can be improved.

  The invention made by the present inventor has been specifically described based on the preferred embodiments. However, the present invention is not limited to that described in the above embodiments, and various modifications can be made without departing from the scope of the invention. It goes without saying that it is possible.

  The present invention can be used for an information processing apparatus such as a composite apparatus, a facsimile apparatus, an image forming apparatus, and a computer with improved security, an authentication system, an authentication method, an authentication program, and a recording medium.

1 Authentication System 2 Compound Device 3 NFC Reader / Writer (NFC R / W)
4 NFC device 5 Mobile communication terminal 5a RFID
5b IC card NW network 6 Access point device 7 E-mail server 8 Authentication station 11 Communication unit 12 NFC controller unit 13 Antenna unit 14 Control unit 15a to 15n Memory 100 Controller 101 Operation unit 102 Fax control unit Fax control unit 103 Plotter 104 Scanner 105 Other hardware resources 111 CPU
112 Timer 113 ROM
114 RAM
115 ASIC
116 RAM
117 HDD
118 Serial bus I / F
119 NIC
120 WLAN I / F
121 USB device I / F
122 USB host 123 Memory card I / F
200 Operating System (OS)
210 Application module layer 211 Copy application 212 Fax application 213 Printer application 214 Web application 220 Service module layer 221 System control service 222 Fax control service 223 Engine control service 224 Memory control service 225 Operation unit control service 226 Network control service 227 Authentication control service 231 NFC resource manager 232 NFC reader / writer (NFC R / W) device driver 233 USB host device driver 234 network library 235 wireless driver 236 address book database (DB)
237 File system 238 HDD driver 239 Rendering processing module 240 Graphic driver 300 Hardware layer

JP 2006-99200 A

Claims (14)

In an information processing device that permits use under the condition of authentication,
Short-distance communication means for short-distance communication with a short-distance communication device having short-distance communication provided with a memory for storing user authentication information and a use terminal ID for identifying another portable communication terminal associated with the user When,
Authentication information storage means for storing authentication information of a user permitted to be used as registered authentication information;
Primary authentication means for performing primary authentication processing by collating the authentication information acquired by the short-range communication means from the short-range communication device with registration authentication information of the authentication information storage means;
When the primary authentication means succeeds in the primary authentication, the short-range communication means performs short-range communication to acquire a terminal ID of the communication terminal from a communication terminal, and the terminal ID of the communication terminal is used as the use terminal ID. A secondary authentication means for performing a secondary authentication process by collating;
When the secondary authentication means has succeeded in authentication, a control means for permitting use;
An information processing apparatus comprising: The near field communication device, prior to texture memory, and storing the user terminal ID of the plurality of communication terminals to be used for the secondary authentication,
In the secondary authentication process, when the terminal ID of the communication terminal that matches one or more of the plurality of used terminal IDs is acquired by the short-range communication unit in the secondary authentication process, the secondary authentication means The information processing apparatus according to claim 1. The information processing apparatus includes:
On condition that the primary authentication by the primary authentication means is successful, the terminal ID of the communication terminal acquired by the short-range communication means by the short-range communication is registered as the use terminal ID in the short-range communication device that has been primarily authenticated. The information processing apparatus according to claim 1, further comprising an ID registration unit. The information processing apparatus includes:
Provided with predetermined warning means,
The control means causes the warning means to generate a predetermined warning when the secondary authentication processing fails within a predetermined time after the primary authentication by the primary authentication means has succeeded. The information processing apparatus according to claim 3. The control means includes
After successful secondary authentication by the secondary authentication means and permitting the use, the short-range communication means communicates with the short-range communication device or / and the communication terminal at a predetermined time interval, and the authentication is performed. Information or / and the terminal ID are acquired, and the authentication by the primary authentication means or the secondary authentication means for the acquired authentication information or / and the terminal ID fails, or the short-range communication device or / and the 5. The information processing apparatus according to claim 1, wherein if the communication with the communication terminal fails, the permitted use is not permitted. The information processing apparatus includes:
Provided with predetermined warning means,
The control means includes
Or fails the authentication in each of the predetermined time intervals, failure to communicate with the near field communication device or / and said communication terminal, according to claim 5, wherein the generating a predetermined warning in the warning means Information processing device. A communication terminal that has portability and stores a terminal ID in an internal memory for near field communication;
A short-range communication device that includes a memory for storing user authentication information and a use terminal ID for identifying the communication terminal associated with the user and performs short-range communication;
An information processing apparatus that includes a short-range communication unit that performs short-range communication with the short-range communication device and the communication terminal;
With
The information processing apparatus includes:
Authentication information storage means for storing authentication information of a user permitted to be used as registered authentication information;
Primary authentication means for obtaining authentication information from the short-range communication device by the short-range communication means, and performing primary authentication processing by comparing the authentication information with registered authentication information in the authentication information storage means;
When the primary authentication means succeeds in the primary authentication, the short-range communication means performs short-range communication to acquire a terminal ID of the communication terminal from a communication terminal, and the terminal ID of the communication terminal is used as the use terminal ID. A secondary authentication means for performing a secondary authentication process by collating;
When the secondary authentication means has succeeded in authentication, a control means for permitting use;
An authentication system characterized by comprising: The near field communication device, prior to texture memory, and storing the user terminal ID of the plurality of communication terminals to be used for the secondary authentication,
In the secondary authentication process, when the terminal ID of the communication terminal that matches one or more of the plurality of used terminal IDs is acquired by the short-range communication unit in the secondary authentication process, the secondary authentication means The authentication system according to claim 7, wherein: The information processing apparatus includes:
On condition that the primary authentication by the primary authentication means is successful, the terminal ID of the communication terminal acquired by the short-range communication means by the short-range communication is registered as the use terminal ID in the short-range communication device that has been primarily authenticated. 9. The authentication system according to claim 7, further comprising ID registration means. The information processing apparatus includes:
Provided with predetermined warning means,
The control means causes the warning means to generate a predetermined warning when the secondary authentication processing fails within a predetermined time after the primary authentication by the primary authentication means is successful. The authentication system according to claim 9. The information processing apparatus includes:
After the control means succeeds in the secondary authentication by the secondary authentication means and permits the use, the control means communicates with the near field communication device and / or the communication terminal at a predetermined time interval. Accordingly, the authentication information or / and the terminal ID are acquired, and the authentication by the primary authentication means or the secondary authentication means for the acquired authentication information or / and the terminal ID fails or the short-range communication is performed. The authentication system according to any one of claims 7 to 10, wherein if the communication with the device and / or the communication terminal fails, the permitted use is not permitted. The information processing apparatus includes:
Provided with predetermined warning means,
The control unit causes the warning unit to generate a predetermined warning when the authentication fails at each predetermined time interval or when communication with the near field communication device or / and the communication terminal fails. 請 Motomeko 1 1 Symbol placement authentication system of you. An authentication program in an information processing apparatus that permits use on the condition of authentication ,
On the computer,
A near field communication processing to near-field communication device and short-range communication with a memory for storing a user terminal ID for identifying the communication terminal having other portability which relates to the user authentication information and the user,
The short-range communication processed by obtains authentication information from the near-field communication device, the authentication information, the registration authentication information of the authentication information storage means for storing authentication information of the user to allow use as registration authentication information and the primary authentication processing to perform the primary authentication process against the,
When the primary authentication is successful in the primary authentication process , the short-range communication is performed in the short-range communication process , the terminal ID of the communication terminal is acquired from the communication terminal, and the terminal ID of the communication terminal is set as the use terminal ID. and the secondary authentication processing to perform a secondary authentication process by matching,
Upon successful authentication with the secondary authentication processing, a control processing for permitting use of the information processing apparatus,
Certification program for the execution. A computer-readable recording medium on which the authentication program according to claim 13 is recorded .

Images