JP2007207188A - Device and method of managing use - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To realize a state transition control which can transit a plurality of devices into a state where they are usable simultaneously. <P>SOLUTION: A group table to which two or more target devices are registered in advance as one group is stored. When usability information showing usable or unusable is obtained from a target device, the other target devices belonging to the same group as the target device in the group table is retrieved. Then, to the other target devices belonging to the same group and retrieved, state transition information for transiting the devices to be usable or unusable is transmitted. Thus, by performing identifying processing of one target device, the other target devices belonging to the same group as the target device can be transited to to be usable or unusable. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a usage management device and a usage management method, and in particular, a usage management device that manages the availability status of a target device that can be used when authentication processing using information wirelessly transmitted from an electronic key is performed. , Concerning usage management methods.

In the ubiquitous information society of “anytime, anywhere, with anyone”, it is necessary to create a space where information can be exchanged and shared by operating terminal devices with peace of mind.
In Non-Patent Document 1, the concept of a safe space in which a target device (that is, a target device) within a certain distance from an individual who has an electronic key (hereinafter referred to as an electronic key device) can operate is described as Secure Private Cosm ( Hereinafter, it is referred to as SPC). In the technique described in Non-Patent Document 1, authentication is always performed between a pair of objects using two-way wireless communication, and function control based on the distance between the pair of objects is enabled. In this case, authentication processing is performed by transmitting key information from the electronic key device at a predetermined cycle (for example, a cycle of less than 0.1 seconds) and receiving a response thereto.

  Only when the wearable electronic key device and the portable terminal are paired and the pair is within a certain distance, the portable terminal can be activated, that is, transitioned to an available state. Then, there is a space where the target device around the person can be used by the wearable electronic key device, and when the person moves, the SPC space moves together. In order to realize this SPC, it is necessary to store the key information of the electronic key device and the identifier of the target device in advance in association with each other.

If the above technique is used, an electronic key device is built in the employee ID card, and if the target device is a mobile phone terminal, only the user can use the mobile phone terminal. For this reason, even if the mobile phone terminal is stolen or lost, the terminal is not used by others.
Similarly, if the electronic key device is built in the employee ID and the target device is a personal computer (hereinafter abbreviated as a personal computer), only the person can use the personal computer. For this reason, it is possible to prevent a personal computer from being operated without permission by another person.

In addition, the electronic key device can be used as a door key to unlock the entrance and the door of the room or unlock the safe. That is, the door can be opened or the one stored in the safe can be taken out only when the electronic key device is authenticated.
Furthermore, it is possible to control a program recorded on a known hard disk (HDD) recorder so that a specific program (such as a program that a child does not want to show to children) can be viewed only when the electronic key device is nearby. .
“Introduction to SPC technology”, [online], [searched on January 25, 2006], Internet <URL: http://www.spc-c.com/about.html>

However, the above prior art has the following problems.
(1) If a plurality of target devices that require authentication are set up in advance so that one electronic key device can authenticate a plurality of target devices, it is desired to make them available simultaneously ( There is a request to perform authentication processing.
For example, as shown in FIG. 10, an electronic key device K is built in a mobile phone terminal, and a personal computer T1, a safe T2, and an HDD recorder T3, which are target devices, are nearby, but a personal computer T1, a safe T2 Is present in the range where radio waves from the electronic key device K reach, and the HDD recorder T3 is considered to be outside the range where radio waves from the electronic key device K reach.

  In such a case, in the above-described conventional technology, it is necessary to perform authentication processing via radio waves with all target devices, and all target devices cannot be used simultaneously. That is, in the case of the figure, the personal computer T1 and the safe T2 that are target devices can be authenticated with the electronic key device K, but the HDD recorder T3 that is the target device is connected with the electronic key device K. Authentication process cannot be performed with. In addition to this, for example, even when a metal object exists between the target device and the electronic key device even though it is close, the authentication process may not be performed for the target device. There is sex.

(2) Also, when using multiple PCs without limiting the PCs (ie N-to-N use), such as a university PC training room, use authentication using radio waves such as SPC. Then, authentication with a plurality of target devices is performed by the electronic key device of the user who entered the room first, and the user who entered later cannot use the nearby device. Therefore, the current technology cannot use a radio wave authentication method such as SPC in such a usage situation.

  For example, as shown in FIG. 11, when an authentication process is performed between the electronic key device K1 built in the mobile phone terminal of the user who has entered the room and the personal computer T1b and the personal computer T1c, the user However, even if only one of the personal computers is used and the other is not used, authentication processing is performed between the electronic key device K2 incorporated in the mobile phone terminal of the user who entered the room later and the personal computers T1b and T1c. The user cannot use a nearby computer. The present invention has been made in order to solve the above-described problems of the prior art, and its purpose is to change a plurality of devices to a state where they can be used simultaneously, or to use a plurality of devices by an electronic key device of a user who has previously entered the room. By providing a usage management device and usage management method that can implement state transition control that allows a user who has entered the room later to transition to a state in which an unused device can be used even when authentication is performed is there.

  The usage management apparatus according to claim 1 of the present invention manages a usage status of a target apparatus that can be used when authentication processing using key information wirelessly transmitted from an electronic key is performed. A storage unit that stores a group table that registers a plurality of target devices in advance as one group, and an available information acquisition unit that acquires from the target device availability information that indicates whether the target device is available or unavailable. A search unit that searches for another target device belonging to the same group as the target device in the group table when the available information acquisition unit acquires the available information; and the same group searched by the search unit The other target device belonging to the device is either in an available state or unavailable state Characterized in that it comprises a state transition notifying means for transmitting a state transition notification for shifting the state. In this way, by performing the authentication process for one target device, it is possible to shift the other target device belonging to the same group as that device to an available state or an unavailable state.

  The usage management device according to claim 2 of the present invention is the usage management device according to claim 1, wherein when the availability information acquisition means acquires availability information indicating that the usage is available, the state transition notification means is the search means. A state transition notification for causing the target device to transition to an available state is transmitted to all other target devices searched by the above. By doing so, if authentication processing with one device is performed, it is possible to simultaneously shift to a state in which another device belonging to the same group as that device can be used.

  The usage management device according to claim 3 of the present invention is the usage management device according to claim 2, wherein the authentication processing is canceled and the authentication cancellation notification acquisition unit that acquires the authentication cancellation notification from the target device, and the authentication cancellation notification acquisition unit cancels the authentication. An authentication process confirmation unit that confirms whether or not the authentication process is performed on all the other target devices searched by the search unit when the notification is acquired, and the state transition notification unit includes: When it is confirmed by the authentication processing confirmation means that authentication processing has not been performed on all the other target devices, a state transition notification for transitioning the target device and all the other target devices to an unusable state is sent. It is characterized by transmitting. By doing this, when all devices belonging to the same group can be used at the same time, all target devices are transitioned to the unusable state only when authentication processing with all devices is canceled. Can do.

The usage management device according to claim 4 of the present invention is the device according to claim 1, wherein the target device is usable when a user operation is performed after the authentication processing,
When the usable information acquisition unit acquires the usable information indicating that it can be used, the state transition notification unit is used for all the other target devices searched by the searching unit for the authentication process. An authentication rejection notification for rejecting authentication processing using key information wirelessly transmitted from the electronic key is transmitted. By doing this, even when authentication with a plurality of devices is performed by the electronic key of the user who came first, the authentication processing with the target device other than that operated by the user is canceled, and the user who came later It is possible to transition to a state where the device can be used.

  The usage management device according to claim 5 of the present invention is the usage management device according to claim 4, wherein the target device transitions from the available state to the unusable state and obtains usable information indicating that the target device is unusable. When the means obtains, the state transition notification means performs an authentication process using key information wirelessly transmitted from the electronic key used for the authentication process to all other target devices searched by the search means. An authentication permission notification for permitting is transmitted. By doing so, it is possible to return to the original state in which the authentication with the electronic key of the user who has come first is executed as usual for all the target devices belonging to the same group.

  The usage management method according to claim 6 of the present invention is a usage management method for managing an available state of a target device that can be used when authentication processing using key information wirelessly transmitted from an electronic key is performed. A plurality of target devices registered in a group table as a group, an available information acquisition step in which available information indicating whether the target devices are available or unavailable is obtained from the target device, and available When the available information is acquired in the information acquisition step, a search step for searching for another target device belonging to the same group as the target device in the group table, and another search for the other group belonging to the same group searched in the search step Whether the target device can use the device or not Characterized in that it comprises a state transition notification step of transmitting a state transition notification for transitioning Re or the one state. In this way, by performing the authentication process for one target device, it is possible to shift the other target device belonging to the same group as that device to an available state or an unavailable state.

  As described above, according to the present invention, a plurality of target devices are registered in the group table as one group, and authentication processing or authentication processing and user operation of one target device in the group are performed. The other target devices belonging to the same group can be changed to an available state or an unavailable state.

Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the drawings referred to in the following description, the same parts as those in the other drawings are denoted by the same reference numerals.
The use management device according to the present invention is a device that manages the available state of a target device that can be used when authentication processing using key information wirelessly transmitted from an electronic key device is performed.

  FIG. 2 is a diagram illustrating an example of a functional configuration of the usage management apparatus according to the embodiment of the present invention. In the figure, the usage management device of this example includes a storage unit 11 that stores a plurality of target devices in advance as a group and stores a group table 10 and availability information indicating whether the target device is available or unavailable. The available information acquisition means 12 acquired from the above, and the search means 13 for searching for another target device belonging to the same group as the target device in the group table 10 when the available information acquisition means 12 acquires the available information; A state transition notification for transmitting a state transition notification for transitioning the device to one of the available state and the unusable state to another target device belonging to the same group searched by the search means 13 Means 14 and an authentication solution for obtaining an authentication cancellation notification from the target device when the authentication process is canceled A notification acquisition unit 15; and an authentication process confirmation unit 16 that confirms whether or not the authentication process is performed on all other target devices searched by the search unit 13 when the authentication cancellation notification is acquired. It consists of This usage management device can be realized by using, for example, a well-known personal computer having a CPU, a memory, a fixed disk device, a communication interface, and the like.

Hereinafter, an authentication process for the electronic key device and the target device using this usage management device will be described. Here, a simultaneous authentication process that enables simultaneous use of a plurality of target devices and an authentication device limitation process that limits the number of target devices to be authenticated will be described separately.
(Simultaneous authentication processing)
As shown in FIG. 1, in this example, a usage management device 100 is provided, and a group of target devices that can be used simultaneously is stored and registered in a table for management. Further, communication between the usage management device and each target device is made possible by some means. In the case of the figure, wired transmission means is used, but the present invention is not limited to this, and communication may be performed by wireless transmission means. Note that the wired transmission means may be Ethernet (registered trademark) or power line communications (PLC), and the wireless transmission means may be Bluetooth (registered trademark) or a wireless local area network (LAN).
Authentication between the electronic key device and the target device is performed using radio waves, and authentication using SPC, authentication using RFID, authentication using Bluetooth (registered trademark), and the like are possible, but are not limited thereto. It is not something.

(Group table configuration example)
The group table possessed by the usage management apparatus 100 is configured, for example, as shown in FIG. In this example, “PC”, “safe”, and “HDD recorder” are registered in group 1 (Group 1). On the other hand, “electric light” and “door” are registered in group 2 (Group 2). For target devices belonging to these groups 1 and 2, if any one of the target devices belonging to the same group and the usage management device perform authentication processing via radio waves, the other grouped devices When the usage management device notifies the target device, the target device other than the target device that directly performed the authentication process also shifts to a usable state at the same time.

  In the configuration as described above, authentication processing via radio waves is performed between the mobile communication terminal incorporating the electronic key device K1 and a personal computer which is one of the target devices (S1). Then, the use information indicating that the authentication process is available is transmitted from the “personal computer”, which is one of the target apparatuses, to which the authentication process has been performed, to the use management apparatus 100 (S2). The usage management apparatus 100 that has received the availability information searches for a target apparatus belonging to the same group as the “personal computer” from a table stored in the own apparatus (S3). As a result of this search, “safe” and “HDD recorder” are obtained, so the usage management apparatus 100 transmits a state transition notification to these target apparatuses (S4). As a result of the above processing, the “safe” and “HDD recorder” that are target devices that have received the state transition notification transition to the available state.

When other target devices can be used via the usage management device, in order to improve security, not only the state transition notification but also the information including the information of the electronic key device K1 is used to notify the other target devices. An authentication process may be performed as to whether or not the electronic key device K1 may be changed to an available state in the device.
When all target devices in the group are not authenticated with the electronic key device K1 via radio waves, all the target devices in the group transition to an unusable state.

The above operation will be described with further reference to FIGS.
FIG. 3 is a sequence diagram showing an operation when a plurality of target devices are simultaneously transitioned to an available state. In the figure, when an authentication process via radio waves is performed between the electronic key device K1 and the personal computer T1 as the target device (S101), the personal computer T1 transitions to an available state (S102). Then, the personal computer T1, which is the target device, transmits usable information to the usage management device 100 (S103).

  The usage management apparatus 100 that has received the availability information searches the group table for other target devices grouped with the personal computer T1 for the electronic key device K1 (S104). As a result of this search, “safe” and “HDD recorder” are obtained, so the usage management apparatus 100 transmits a state transition notification to these target apparatuses (S105, S107), and these target apparatuses can be used. (S106, S108).

Through the above processing, the safe T2 and the HDD recorder T3, which are target devices that have received the state transition notification, transition to an available state.
On the other hand, FIG. 4 is a sequence diagram showing an operation when the target device transitions from the available state to the unavailable state. In this example, a case will be described in which the personal computer T1, the safe T2, and the HDD recorder T3 transition from the usable state to the unusable state.
In the same figure, when the electronic key device K1 and the personal computer T1 which is the target device are separated from each other and the authentication via the radio wave is canceled (S201), the personal computer T1 which is one of the target devices is transferred to the usage management device 100. An authentication cancellation notification is transmitted (S202).

  The usage management device 100 that has received this authentication cancellation notification searches the group table for other target devices grouped with the personal computer T1 for the electronic key device K1 (S203). As a result of this search, “safe” and “HDD recorder” are obtained, so that the usage management apparatus 100 further confirms whether another apparatus is in an authenticated state with the electronic key device K1 via radio waves (S204). . That is, in this case, an inquiry is made as to whether the safe T2 and the HDD recorder T3 are in an authenticated state (S205, S206). As a result of this inquiry, if all the devices in the same group are not in the authenticated state, an unusable state transition notification is transmitted to each device (S208, S210, S212). These target devices are disabled (S209, S211 and S213).

  FIG. 5 is a diagram showing another example of the group table. In the figure, in the group 1 (Group 1), correspondence between the electronic key device K1 and grouping information composed of “personal computer”, “safe” and “HDD recorder” is registered. On the other hand, in the group 2 (Group 2), the correspondence between the electronic key device K2 and the grouping information including the “personal computer” and the “HDD recorder” is registered. In group 3 (Group 3), correspondence between the electronic key devices K1 and K2 and grouping information including “entrance door” and “light” is registered.

If the group table is configured as described above, a person who has the electronic key device K1 can select “PC”, “safe”, “HDD recorder”, “entrance door”, “light”. Devices in the group can be changed to an available state at the same time. On the other hand, the person who has the electronic key device K2 can change the “PC” and “HDD recorder”, “entrance door”, and “light” to the usable state, but the “safe” is used. Cannot transition to possible state.
Therefore, when the group table of FIG. 5 is used, for example, if the parent possesses the electronic key device K1 and the child possesses the electronic key device K2, the parent can use the “safe”, but the child can use the “safe”. Cannot be used.

(Authentication device only process)
As shown in FIG. 6, in this example, a usage management device 100 is provided, and a group of target devices that should not be used at the same time is stored in a table and registered and managed. Further, communication between the usage management device and each target device is made possible by some means. In the case of the figure, wired transmission means is used, but the present invention is not limited to this, and communication may be performed by wireless transmission means. The above is the same as in the case of FIG.

In this example, when there are a plurality of target devices of the same type, it is assumed that the user may use any of these devices. In this example, it is assumed that a user arbitrarily selected one of the personal computers T1a to T1c, which are target devices, can be used in a university classroom or a company.
There are three states of the personal computers T1a to T1c, which are target devices. That is, there are three states: a waiting state for authentication processing via radio waves, an operation waiting state for waiting for an operation from the user in the authentication state, and a usable state in which a personal computer can be used normally. The standby state and the operation standby state correspond to the “unusable state” described in each claim.

  In the configuration as described above, authentication processing via radio waves is performed between the user's portable communication terminal and the two personal computers of the target device that incorporate the electronic key device K1 (S31a, S31b). Then, the user performs some operation such as password entry on the personal computer T1c (S32). Then, the operated personal computer T1c becomes available, and notifies the usage management apparatus 100 that the own apparatus has been selected (S33). The usage management device 100 that has received this notification notifies the target devices (that is, the personal computers T1a and T1b) other than the selected device (that is, the personal computer T1c) to reject the authentication with the electronic key device K1. (S34). With this control, the personal computer that has been authenticated with the electronic key device K1 but is not selected (that is, the personal computer T1b) can be used by other users by performing authentication processing with another electronic key device.

  In order to realize the above processing, the usage management apparatus 100 is provided with a group table that stores the correspondence between a key (that is, key information) of the electronic key device and a group of devices that are authentication targets and cannot be used at the same time (that is, target devices). In addition, each target device is provided with an authentication rejection target table that stores keys (that is, key information) of the electronic key device, which is a target for rejecting the authentication processing.

The above operation will be described with further reference to FIGS.
FIG. 7 is a sequence diagram showing an operation when the user transitions only one of these devices to an available state when there are a plurality of target devices of the same type. In the figure, when the user who possesses the electronic key device K1 approaches the personal computers T1b and T1c, which are target devices, authentication processing is performed between the personal computers T1b and T1c, respectively (S301, S302). As a result, the personal computers T1b and T1c enter a state waiting for an operation from the user (S303a, S303b).

Thereafter, when the user performs an operation (for example, input of a password) on the personal computer T1c (S304), the personal computer T1c transitions to an available state (S305). Further, a selection notification of the electronic key device K1 is sent from the personal computer T1c to the usage management device 100 (S306).
Receiving this, the usage management apparatus 100 searches the group table for an apparatus that the electronic key device K1 should not use simultaneously with the personal computer T1c (that is, simultaneous authentication) (S307). Further, the usage management device 100 transmits the key information of the electronic key device K1 to the personal computers T1a and T1b obtained as a result of the search (S308, S309), and the personal computers T1a and T1b record them in the authentication rejection target table ( S310, S311). As a result, the personal computer T1b that has been in the operation standby state again shifts to a state of waiting for authentication via radio waves with another electronic key device (S312).

  With the above processing, the target device that has transitioned to the operation standby state because it is close to the electronic key device K1 can be transitioned to the original state. The target device can be set to an available state. That is, the user who has entered the room first authenticates only for one target device, not for a plurality of target devices.

On the other hand, FIG. 8 is a sequence diagram showing an operation when the target device transitions from the available state to the unavailable state. In this example, a case where the personal computer T1c transitions from the available state to the operation waiting state will be described.
In the figure, the limited authentication cancellation process is performed by performing a logoff operation on the personal computer T1c (S401). Then, the personal computer T1c enters a state waiting for an operation by the user (S402). In addition, the personal computer T1c sends a notification of cancellation of limited authentication to the usage management apparatus 100 (S403). Receiving this notification, the usage management device 100 searches the group table for devices that should not be used simultaneously (that is, simultaneously authenticated) with the electronic key device K1 (S404).

The usage management device 100 notifies the personal computers T1a and T1b obtained as a result of the search (S405 and S406), and the personal computers T1a and T1b that have received the notification delete the key information of the electronic key device K1 from the authentication rejection target table. (S407, S408).
Thereafter, since the personal computer T1b is located within a range where the authentication radio wave of the electronic key device K1 reaches, an authentication process is performed between the electronic key device K1 and the personal computer T1b (S409), and the personal computer T1b waits for an operation by the user. A state is entered (S410).
When the user moves away from the site, the distance between the electronic key device K1 and the personal computers T1c and T1b increases, and when the authentication via the radio wave is released, the personal computers T1c and T1b enter a standby state.

(Table example)
FIG. 9A is a diagram illustrating a configuration example of a group table that is stored and managed by the usage management apparatus 100. As shown in the figure, identification information of devices that should not be used at the same time, for example, “device A” to “device D” is stored corresponding to the key information of the electronic key devices K1 to K3. ing.
FIG. 9B is a diagram showing a configuration example of an authentication rejection target table stored and held by each personal computer as the target device. This table stores and holds key information (for example, keys K2, K3, etc.) of the electronic key device.

(Application examples)
The present invention has a function of searching for a group table and an available state control function for causing the target device to transition to one of an available state and an unavailable state based on the search result. These two functions may be realized in the usage management device, or the latter function may be separated and realized in the target device. In that case, it is notified to the other target devices in the group that the electronic key device and a certain target device have been authenticated, and each of the other target devices has an authentication relationship between itself and the electronic key device. In consideration of this, it is determined whether the own apparatus should transition to an available state or an unavailable state.

  Further, the target device may have the function of the usage management device (both of the above two functions). In this case, for example, in the authentication device limiting process, the target device having the function of the usage management device is connected to the electronic key device. When the authentication process makes a transition from the standby state to the operation standby state, and when the user makes a key operation, the target device determines another target device that sends an authentication rejection notification, and the electronic key A command for setting to reject authentication with the apparatus may be transmitted directly to another target apparatus.

(Usage management method)
In the authentication process using the usage management apparatus described above, the following usage management method is realized. In other words, this is a usage management method for managing an available state of a target device that can be used when authentication processing using key information wirelessly transmitted from an electronic key is performed. A step of registering in the group table as one group, an available information acquisition step of obtaining available information indicating whether the information is available or unavailable from the target device, and obtaining the available information in the available information obtaining step A search step for searching for another target device belonging to the same group as the target device in the group table, and a state in which the device can be used for another target device belonging to the same group searched in the search step. To transition to one of the unavailable states Use management method comprising a state transition notification state transition notification step of transmitting is achieved. By adopting such a method, authentication processing of one target device is performed, so that another target device belonging to the same group as that device can be changed to an available state or an unavailable state.

(Additions regarding claims)
The following claims can be derived from the invention.
First, the following claims can be derived for the above-described simultaneous authentication.
(Claim 1) In an authentication method for simultaneously using a plurality of electronic devices using electronic keys via radio waves,
An authentication step in which the electronic key performs authentication processing via radio waves with one electronic device in the plurality of electronic devices, and the one electronic device transitions to an available state; and
An authentication result notification step of notifying the management function of the result authenticated in the authentication step;
Based on the authentication result notified in the authentication result notification step, a search step of searching for another electronic device in which the electronic key is to be simultaneously authenticated in the management function;
A state change notification step for notifying the other electronic device searched in the search step of transition to an available state;
An authentication method, comprising: a state transition step in which the other electronic device transitions to an available state based on the notification of the state change notification step.

(Claim 2) In an authentication cancellation method for canceling simultaneous use with a plurality of electronic devices using an electronic key via radio waves,
An authentication cancellation step in which the electronic key performs an authentication cancellation process via radio waves with one of the plurality of electronic devices;
Deauthentication result notification step of notifying the management function of the deauthentication result in the deauthentication step;
Based on the deauthentication result notified in the deauthentication result notification step, a search step of searching for another electronic device that has been simultaneously authenticated with the electronic key in the management function;
An authentication state confirmation step for confirming whether or not an authentication process has been performed via the electronic key and radio waves for the other electronic device searched in the search step;
In the authentication status confirmation step, when none of the other electronic devices performs authentication processing via the electronic key and radio waves, the one electronic device and the other electronic device are not used. A state change notifying step for notifying transition to a possible state;
An authentication cancellation method, comprising: a state transition step in which the one electronic device and the other electronic device transition to an unusable state based on the notification of the state change notification step.

(Claim 3) In the authentication status confirmation step,
A state continuation notification step of notifying the one electronic device that it remains in an available state when any of the other electronic devices performs authentication processing via the electronic key and radio waves. The authentication cancellation method according to claim 2, wherein:

(Claim 4) In an authentication management apparatus for simultaneously using a plurality of electronic devices using electronic keys via radio waves,
The electronic key performs authentication processing via radio waves with one electronic device in the plurality of electronic devices, and a result receiving means for receiving a result of the one electronic device transitioning to an available state;
Based on the authentication result received by the result receiving means, search means for searching for other electronic devices to be simultaneously authenticated by the electronic key;
An authentication management apparatus comprising: a state change notifying unit for notifying the other electronic device searched by the searching unit of transition to an available state.

(Claim 5) In an authentication management apparatus for canceling simultaneous use with a plurality of electronic devices using an electronic key via radio waves,
A result receiving means for receiving a result of the de-authentication process performed by the electronic key and one electronic device among the plurality of electronic devices via radio waves; and
Search means for searching for other electronic devices that have been simultaneously authenticated by the electronic key based on the authentication cancellation result received by the result receiving means;
Authentication status confirmation means for confirming whether or not authentication processing has been performed via the electronic key and radio waves for the other electronic device searched by the search means;
In the authentication status confirmation means, when none of the other electronic devices performs authentication processing via the electronic key and radio waves, the one electronic device and the other electronic device are not used. An authentication management apparatus comprising state change notification means for notifying transition to a possible state.

(Claim 6) An electronic key using radio waves;
In an authentication system comprising an authentication management device for canceling simultaneous use and simultaneous use with a plurality of electronic devices by electronic keys via the radio waves,
6. The authentication system according to claim 4, wherein the authentication management apparatus is the authentication management apparatus according to claim 4 or 5.

Next, the following claims can be derived for the authentication device limiting process described above.
(Claim 1) In an authentication method for limited use of one electronic device among a plurality of electronic devices using an electronic key via radio waves,
An authentication step of performing authentication processing via radio waves with the plurality of electronic devices in a range where the electronic key reaches radio waves, and the plurality of electronic devices transitioning to an operable state;
A user having the electronic key operates one electronic device among a plurality of electronic devices that have transitioned to the operable state to select an electronic device to be used, and the one electronic device The device selection step to make the
A device selection notification step of notifying the management function of the result selected in the device selection step;
Based on the result notified in the device selection notification step, a search step of searching for other electronic devices that should not be simultaneously authenticated with the electronic key in the management function;
An authentication refusal object notifying step for notifying the other electronic device searched in the searching step of refusing authentication with the electronic key;
Based on the notification of the authentication rejection target notification step, the plurality of electronic devices that are included in the other electronic device and have transitioned to the operable state in the authentication step wait for authentication of other electronic keys. An authentication method comprising a state transition step for transitioning to.

(Claim 2) In the authentication rejection object notification step,
The authentication method according to claim 1, further comprising: an authentication rejection target recording step of recording that the other electronic device that has received the notification rejects the authentication via the radio wave from the electronic key.

(Claim 3) In an authentication cancellation method for canceling limited use of only one electronic device among a plurality of electronic devices using an electronic key via radio waves,
A limited authentication cancellation step in which a limited authentication cancellation process is performed by a user having the electronic key operating on the one electronic device, and the one electronic device transitions to an operable state;
An authentication cancellation result notification step of notifying the management function of the result of the limited authentication cancellation in the limited authentication cancellation step;
Based on the deauthentication result notified in the deauthentication result notification step, a search step of searching for other electronic devices that should not be simultaneously authenticated with the electronic key in the management function;
An authentication release method comprising: an authentication permission change notification step of notifying the other electronic device searched in the search step of changing to permit authentication with the electronic key.

(Claim 4) In the authentication permission change notification step,
The authentication cancellation according to claim 3, further comprising: an authentication rejection target deletion step in which the other electronic device that has received the notification deletes the electronic key from the target from the record of the authentication rejection target recording step. Method.

(Claim 5) In an authentication management apparatus for limited use of one of a plurality of electronic devices using an electronic key via radio waves,
The electronic key performs authentication processing via radio waves with the plurality of electronic devices within the reach of radio waves, and a user having the electronic key operates on one of the plurality of electronic devices. A selection result receiving means for selecting an electronic device to be used and receiving a result of making the one electronic device usable.
Search means for searching for other electronic devices that should not be simultaneously authenticated with the electronic key based on the result received by the selection result receiving means;
An authentication management apparatus comprising: an authentication refusal target notifying unit for notifying the other electronic device searched by the searching unit that the authentication with the electronic key is rejected.

(Claim 6) In an authentication management apparatus for releasing limited use of only one electronic device among a plurality of electronic devices using an electronic key via radio waves,
A deauthentication result for receiving a result of a limited authentication deactivation process performed by a user having the electronic key on the one electronic device and a transition of the one electronic device to an operable state Receiving means;
Based on the result received by the deauthentication result receiving means, search means for searching for other electronic devices that should not be simultaneously authenticated with the electronic key;
An authentication management apparatus comprising: an authentication permission change notification means for notifying the other electronic device searched by the search means to change to permit authentication with the electronic key.

(Claim 7) An electronic key using radio waves;
In an authentication system comprising an authentication management device for releasing a limited use and a limited use of one electronic device among a plurality of electronic devices using an electronic key via the radio wave,
8. The authentication system according to claim 6, wherein the authentication management apparatus is the authentication management apparatus according to claim 6 or 7.

  The present invention can be used when managing an available state of a target device that can be used when authentication processing using information wirelessly transmitted from an electronic key is performed.

It is a figure which shows the structural example in the case of implement | achieving the simultaneous authentication process which performs an authentication process simultaneously with a some target apparatus using the usage management apparatus which concerns on embodiment of this invention. It is a figure which shows an example of a function structure of the usage management apparatus which concerns on embodiment of this invention. It is a sequence diagram which shows operation | movement in case a some target apparatus is changed to an available state simultaneously. It is a sequence diagram which shows operation | movement in case a some target apparatus changes from an available state to an unusable state. It is a figure which shows the other example of a group table. It is a figure which shows the structural example in the case of implement | achieving the authentication apparatus limitation process which limited the number of target apparatuses authenticated using the usage management apparatus which concerns on embodiment of this invention. FIG. 11 is a sequence diagram showing an operation when a user makes a transition to an available state only for one of these devices when there are a plurality of target devices of the same type. It is a sequence diagram which shows operation | movement in case a target apparatus changes from an available state to an unusable state. (A) is a figure which shows the structural example of the group table which the usage management apparatus 100 memorize | stores and manages, (b) shows the structural example of the authentication rejection object table which each personal computer which is a target apparatus memorize | stores and hold | maintains. FIG. It is a figure explaining the problem in the case of authenticating with a plurality of target devices using SPC technology. It is a figure explaining the problem in case authentication with a some apparatus is performed by the electronic key of the user who entered the room previously.

Explanation of symbols

10 Group table 11 Storage means 12 Available information acquisition means 13 Search means 14 State transition notification means K, K1, K2 Electronic key devices T1, T1a, T1b, T1c Personal computer T2 Safe T3 HDD recorder

Claims (6)

  A usage management device that manages an available state of a target device that can be used when authentication processing using key information wirelessly transmitted from an electronic key is performed, and includes a plurality of the target devices. A storage unit that stores a group table registered in advance as a group, an available information acquisition unit that acquires available information indicating whether the table is available or unavailable from the target device, and the available information acquisition unit includes the available information In the group table, the device is used as search means for searching for another target device belonging to the same group as the target device, and as another target device belonging to the same group searched by the search means. A state transition notification for transitioning to either the available state or the unavailable state Use management apparatus which comprises a signal state transition notifying means.   When the usable information acquisition unit acquires the usable information indicating that the device can be used, the state transition notifying unit can use the device in all other target devices searched by the searching unit. The usage management apparatus according to claim 1, wherein a state transition notification for making a transition to is transmitted.   An authentication cancellation notification acquisition unit that acquires the authentication cancellation notification from the target device after the authentication process is canceled, and another target searched by the search unit when the authentication cancellation notification acquisition unit acquires the authentication cancellation notification. The apparatus further includes an authentication process confirmation unit that confirms whether or not the authentication process is performed on all the devices, and the state transition notification unit performs the authentication process on all the other target devices by the authentication process confirmation unit. 3. The usage management apparatus according to claim 2, wherein when it is confirmed that the target device is not present, a state transition notification is transmitted to transition all of the target device and the other target devices to an unusable state. The target device is a device that can be used when a user operation is performed after the authentication process,
When the usable information acquisition unit acquires the usable information indicating that it can be used, the state transition notification unit is used for all the other target devices searched by the searching unit for the authentication process. The usage management apparatus according to claim 1, wherein an authentication rejection notification for rejecting an authentication process using key information wirelessly transmitted from the electronic key is transmitted.   When the target device transitions from an available state to an unusable state and the usable information acquisition unit acquires usable information indicating that the target device is unusable, the state transition notification unit includes the search unit. An authentication permission notification for permitting authentication processing using key information wirelessly transmitted from the electronic key used for the authentication processing is transmitted to all other target devices searched by the method. 4. The use management apparatus according to 4.   A usage management method for managing an available state of a target device that can be used when authentication processing using key information wirelessly transmitted from an electronic key is performed, wherein a plurality of the target devices are combined into one A step of registering as a group in a group table, an available information acquisition step of acquiring available information indicating whether it is available or unavailable from a target device, and the availability information acquired in the available information acquisition step And a search step for searching for another target device belonging to the same group as the target device in the group table, and an availability state and use of the device for other target devices belonging to the same group searched in the search step. State for transitioning to one of the impossible states Use management method characterized by comprising a state transition notification sending a transfer notification.

Images