Authentication system and authentication method

An authentication system is provided with: a first input unit and a second input unit into which authentication information can be input; a first computing unit which performs computation on the basis of the authentication information input into the first input unit and a communication counterpart-side authentication parameter registered in a communication counterpart; a second computing unit which performs computation on the basis of the authentication information input into the second input unit and a portable terminal-side authentication parameter registered in a portable terminal; and authentication units which, if the authentication information has been input into the first or the second input unit, perform authentication on the basis of the result of computation by corresponding computing unit and the portable terminal-side authentication parameter.

TECHNICAL FIELD

The present invention relates to a system and a method for performing authentication through wireless communication between a portable terminal and a communication peer.

BACKGROUND ART

In order to control a vehicle, a conventional authentication system performs authentication through wireless communication between a portable terminal carried by a user and an on-board device installed in the vehicle. A smart verification system is a known authentication system. In a smart verification system, a portable terminal automatically responds to radio waves transmitted from an on-board device and establishes wireless communication with the on-board device to perform identification (ID) verification (smart verification).

In relation to such type of a smart verification system, a relay may be used to perform a malicious act. Such a malicious act is performed using the relay to relay communication from the portable terminal to the on-board device when, for example, the portable terminal is located distant from the on-board device.

Patent Document 1 discloses an authentication system in which authentication is performed using authentication information that is input to an input unit arranged in a vehicle. The authentication system determines whether the authentication information input to the input unit matches authentication information that is registered in advance.

PRIOR ART LITERATURE

Patent Document

SUMMARY OF THE INVENTION

When the authentication system of Patent Document 1 is applied to a smart verification system, security of the smart verification system can be improved by having a user authenticate authentication information. Nonetheless, in this type of authentication system, the authentication information will have to be input to a predetermined input unit whenever authentication is performed. This adversely effects user convenience.

In one aspect of the present disclosure, an authentication system performs authentication through wireless communication between a portable terminal and a communication peer and permits actuation of the communication peer based on an authentication result. The authentication system includes a first input unit, a second input unit, a first calculation unit, a second calculation unit, and an authentication unit. The first input unit and the second input unit are arranged at separate positions and allow for input of authentication information used for the authentication. The first calculation unit performs calculation based on the authentication information input to the first input unit and a communication peer authentication parameter registered to the communication peer. The second calculation unit performs calculation based on the authentication information input to the second input unit and a portable terminal authentication parameter registered to the portable terminal. The authentication unit performs the authentication based on a calculation result of the first calculation unit and the portable terminal authentication parameter when the authentication information is input to the first calculation unit. The authentication unit performs the authentication based on a calculation result of the second calculation unit and the communication peer authentication parameter, when the authentication information is input to the second input unit.

In another aspect of the present disclosure, an authentication method is for performing authentication through wireless communication between a portable terminal and a communication peer and permitting actuation of the communication peer based on an authentication result. The method includes receiving authentication information used for the authentication and input to at least one of a first input unit and a second input unit that are arranged at separate positions. The method further includes performing calculation based on the authentication information input to the first input unit and a communication peer authentication parameter registered to the communication peer; and performing calculation based on the authentication information input to the second input unit and a portable terminal authentication parameter registered to the portable terminal. The method further includes performing the authentication based on the portable terminal authentication parameter and a calculation result calculated from the communication peer authentication parameter when the authentication information is input to the first input unit; and performing the authentication based on the communication peer authentication parameter and a calculation result calculated from the portable terminal authentication parameter when the authentication information is input to the second input unit.

Effects of the Invention

The objective of the present invention is to provide an authentication system and an authentication method that obtain both security and convenience.

MODES FOR CARRYING OUT THE INVENTION

First Embodiment

A first embodiment of a system and a method for performing authentication to control a communication peer will now be described with reference toFIGS.1to3.

In the first embodiment, an authentication system3is applied to a vehicle1serving as a communication peer. The authentication system3includes the vehicle1and a portable terminal2. The vehicle1includes an on-board device4, a verification electronic control unit (ECU)5, and a vehicle communication unit8. For example, the on-board device4includes a door lock device and/or an engine. The authentication system3permits or performs actuation of the on-board device4based on an authentication result. Preferably, the portable terminal2is a high-performance mobile phone that has the functionality of a phone and is configured to establish communication with the vehicle1using near-range wireless communication. In an example, the authentication system3is a near-range wireless communication verification system that performs ID verification when near-range wireless communication is established with the vehicle1. For example, the near-range wireless communication is Bluetooth® communication.

The verification ECU5is configured to perform ID verification. The verification ECU5is connected to the on-board device4by a communication line6in the vehicle. The communication line6is, for example, a Controller Area Network (CAN) or a Local Interconnect Network (LAN).

The verification ECU5includes a memory7that is data-writable and rewritable. The memory7stores an electronic key ID of at least one portable terminal2that is registered to the vehicle1. In an example, ID verification is electronic key ID verification that checks whether the electronic key ID is correct. In the authentication system3, successful electronic key ID verification is one of a number of conditions that need to be satisfied to actuate or permit the actuation of the on-board device4.

The memory7stores an authentication parameter A that is used for authentication by the vehicle1and the portable terminal2. In the authentication system3, successful authentication using the authentication parameter A is one of the conditions that need to be satisfied to actuate or permit actuation of the on-board device4. The authentication parameter A corresponds to a communication peer authentication parameter.

The vehicle communication unit8performs near-range wireless communication with the portable terminal2. For example, the vehicle communication unit8performs Bluetooth Low Energy (BLE) communication as the near-range wireless communication with the portable terminal2. In near-range wireless communication, the portable terminal2is the master, and the vehicle1is a slave. In another example, the portable terminal2may be a slave, and the vehicle1may be the master in near-range wireless communication. The vehicle communication unit8periodically transmits an advertisement message to an area proximate to the vehicle1.

The portable terminal2includes a terminal controller20, a network communication module21, a terminal communication unit22, and a memory23. The terminal controller20controls actuation of the portable terminal2. The network communication module21of the portable terminal2performs network communication. The terminal communication unit22of the portable terminal2performs near-range wireless communication. The memory23is data-writable and rewritable. For example, the terminal communication unit22performs BLE communication as the near-range wireless communication.

In an example, the terminal controller20of the portable terminal2includes a user interface application (not shown) to manage actuation of the authentication system3at the portable terminal2. The terminal controller20uses the user interface application to execute various processes including registration of the portable terminal2to the vehicle1(electronic key registration), locking and unlocking of a vehicle door, starting of the engine of the vehicle1, and a combination of two or more of these tasks.

When the portable terminal2receives an advertisement message from the vehicle1, and the portable terminal2and the vehicle1are connected by establishing near-range wireless communication, the portable terminal2and the vehicle1communicate with each other through near-range wireless communication to automatically perform ID. For example, when the electronic key registration of the portable terminal2is completed, and the vehicle1and the portable terminal2are connected by establishing near-range wireless communication, the verification ECU5and the terminal controller20will exchange the electronic key ID and verify the electronic key ID. The series of ID verification processes are automatically executed without a user operating the portable terminal2or the vehicle1.

In an example, the vehicle1includes a first input unit31that allows data to be input. For example, the first input unit31includes a car navigation system arranged inside the passenger compartment of the vehicle1, an exterior door handle, a lock button arranged on the exterior door handle, other input devices arranged outside the passenger compartment of the vehicle1, and a combination of two or more of these elements. The portable terminal2includes a second input unit32that allows data to be input. For example, the second input unit32is a touch panel display of the portable terminal2. In another example, the first input unit31may be arranged separately from the vehicle1, and the second input unit32may be arranged separately from the portable terminal2. In a further example, the first input unit31and the second input unit32may be a fingerprint sensor, an iris sensor, or a camera.

The vehicle1includes a first calculation unit33that performs calculation based on the authentication information Dc input to the first input unit31and the authentication parameter A. For example, the first calculation unit33is arranged in the verification ECU5of the vehicle1. The first calculation unit33uses the authentication information Dc input to the first input unit31and the authentication parameter A to obtain a calculation result A′ calculated with a predetermined calculation equation (calculation algorithm).

The portable terminal2includes a second calculation unit34that performs calculation based on the authentication information Dc input to the second input unit32and the authentication parameter B. For example, the second calculation unit34is arranged in the terminal controller20of the portable terminal2. The second calculation unit34uses the authentication information Dc input to the second input unit32and the authentication parameter B to obtain a calculation result B′ calculated with a predetermined calculation equation (calculation algorithm).

The authentication system3includes an authentication unit40that performs authentication with the vehicle1and the portable terminal2. When the authentication information Dc is input to the first input unit31, the authentication unit40performs authentication based on the calculation result of the first calculation unit33and the authentication parameter A. When the authentication information Dc is input to the second input unit32, the authentication unit40performs authentication based on the calculation result of the second calculation unit34and the authentication parameter B. In an example, the authentication unit40includes an authentication unit41arranged in the verification ECU5and an authentication unit42arranged in the terminal controller20. When the authentication information Dc is input to the first input unit31, the authentication units41and42perform authentication based on the calculation result A′ of the first calculation unit33and the authentication parameter B. When the authentication information Dc is input to the second input unit32, the authentication units41and42perform authentication based on the calculation result B′ of the second calculation unit34and the authentication parameter A.

The authentication information Dc used for authentication is set, for example, during electronic key registration. Further, the authentication parameter A and the authentication parameter B are generated and linked to the authentication information Dc and respectively registered to the vehicle1and the portable terminal2during the electronic key registration. Furthermore, the calculation equation (calculation algorithm) for obtaining the calculation result A′, B′ is assigned to the user interface application of the terminal controller20and the verification ECU5, for example, when the electronic key is registered.

In an example, when the authentication information Dc is input to the first input unit31, the authentication units41and42check whether the calculation result A′ matches the authentication parameter B. When the authentication information Dc is input to the second input unit32, the authentication units41and42check whether the calculation result B′ matches the authentication parameter A.

The operation and advantages of the authentication system in accordance with the first embodiment will now be described with reference toFIGS.2and3. First, a case where the authentication information Dc is input to the first input unit31for authentication will be described with reference toFIG.2.

As shown inFIG.2, in step S101, the verification ECU5of the vehicle1periodically transmits an advertisement message from the vehicle communication unit8to an area proximate to the vehicle1so as to connect to the portable terminal2by establishing near-range communication. When the terminal controller20of the portable terminal2enters the area proximate to the vehicle1and receives the advertisement message, the terminal controller20connects to the vehicle communication unit8and initiates near-range communication with the vehicle1.

In step S102, the vehicle1and the portable terminal2are operated according to a series of communication connection processes continuing from the advertisement message. When device authentication (for example, address authentication or the like) is accomplished, the vehicle1and the portable terminal2are automatically connected in a manner allowing for communication. The two devices remain connected until the portable terminal2moves out of the range of the near-range wireless communication around the vehicle1.

In step S103, when the vehicle1and the portable terminal2are connected and near-range communication is established, the vehicle1and the portable terminal2initiate ID verification to check whether the electronic key ID is correct. The ID verification includes transmission and reception of the electronic key ID. When ID verification is not accomplished, the verification ECU5prohibits actuation of the vehicle1. When the ID verification is accomplished, the verification ECU5initiates authentication using the authentication information Dc.

In step S104, when the ID verification has been accomplished, the verification ECU5accepts data input to the first input unit31. In this case, the verification ECU5requests the user to input the authentication information Dc and prompts the user to input the authentication information Dc to the first input unit31. For example, the user will be requested to input the authentication information Dc by a voice, a display, or the like. When the authentication information Dc is input to the first input unit31, the verification ECU5proceeds to step S105. When the authentication information Dc is not input to the first input unit31or the second input unit32, the verification ECU5ends the process.

In step S105, the first calculation unit33of the verification ECU5performs calculation based on the authentication information Dc input to the first input unit31and the authentication parameter A to obtain the calculation result A′. The calculation result A′ of the first input unit31is written and stored to the memory7.

In step S106, the authentication unit41generates a challenge code including a random number of which the value differs whenever a challenge code is transmitted. The authentication unit41transmits a challenge signal including the generated challenge code to the portable terminal2.

In step S107, the authentication unit41performs a calculation with the challenge code using the calculation result A′ to generate a response code of the vehicle1.

In step S108, when the authentication unit42of the terminal controller20receives the challenge signal, the authentication unit42performs a calculation with the challenge code included in the challenge signal using the authentication parameter B registered to the portable terminal2to generate a response code of the portable terminal2.

In step S109, the authentication unit42transmits a response signal including the generated response code of the portable terminal2to the vehicle1.

In step S110, when the authentication unit41receives the response signal from the portable terminal2, the authentication unit41checks whether the response codes of the vehicle1and the portable terminal2match. When the response codes of the vehicle1and the portable terminal2match, the authentication unit41determines that authentication has succeeded. When the response codes of the vehicle1and the portable terminal2do not match, the authentication unit41determines that the authentication has not succeeded.

The relationship between the authentication parameter A, B and the calculation result A′, B′ will now be described. Exclusive-OR (XOR) is used as an example of the calculation equation (calculation algorithm) of the first calculation unit33and the second calculation unit34. Specifically, when the authentication information Dc is input to the first input unit31, the first calculation unit33calculates “A XOR Dc” as the calculation result A′. “A XOR Dc” indicates the exclusive-OR of the authentication parameter A and the authentication information Dc. When valid authentication information Dc is input to the first input unit31, the relationship of “A XOR Dc=B” is satisfied. That is, the calculation result A′ matches the authentication parameter B. When the calculation result A′ matches the authentication parameter B, the response code calculated using the calculation result A′ matches the response code calculated using the authentication parameter B. Further, when the authentication information Dc is input to the second input unit32, the second calculation unit34calculates “B XOR Dc” as the calculation result B′. “B XOR Dc” indicates the exclusive-OR of the authentication parameter B and the authentication information Dc. When valid authentication information Dc is input to the second input unit32, the relationship of “B XOR Dc=A” is satisfied. That is, the calculation result B′ matches the authentication parameter A. When the calculation result B′ matches the authentication parameter A, the response code calculated using the calculation result B′ matches the response code calculated using the authentication parameter A. That is, the calculation equation of the first calculation unit33is configured to generate the calculation result A′ that matches the authentication parameter B when calculated using valid authentication information Dc and the authentication parameter A. The calculation equation of the second calculation unit34is configured to generate the calculation result B′ that matches the authentication parameter A when calculated using valid authentication information Dc and the authentication parameter B.

In step S111, when determining that authentication was successful, the verification ECU5permits actuation of the on-board device4. For example, the verification ECU5permits locking or unlocking of the door lock or starting of the engine.

Next, a case where the authentication information Dc is input to the second input unit32will be described with reference toFIG.3.

As shown inFIG.3, in step S201, when the vehicle1is connected with the portable terminal2through near-range communication and ID verification is accomplished, the terminal controller20proceeds to step S202.

In step S202, the terminal controller20accepts the data input to the second input unit32. In this case, the terminal controller20requests the user through the user interface application to input the authentication information Dc and prompts the user to input the authentication information Dc to the second input unit32. When the authentication information Dc is input to the second input unit32, the terminal controller20proceeds to step S203. The terminal controller20accepts inputs to the second input unit32until the authentication process is ended by the verification ECU5.

In step S203, the second calculation unit34of the terminal controller20performs a calculation based on the authentication information Dc input to the second input unit32and the authentication parameter B to obtain the calculation result B′. The calculation result B′ is stored in the memory23.

In step S204, the terminal controller20transmits an acknowledgement signal to the vehicle1to notify the vehicle1that the authentication information Dc has been input to the second input unit32.

In step S205, the authentication units41and42initiate authentication using the calculation result. The authentication using the calculation result corresponds to the processes in steps S106to S111shown inFIG.2. Here, the authentication unit42transmits a response signal including the response code of the portable terminal2, which is calculated using the calculation result B′, to the vehicle1. The authentication unit41checks whether the response code of the portable terminal2matches the response code of the vehicle1, which is calculated using the authentication parameter A. When the response code of the vehicle1matches the response code of the portable terminal2, the authentication unit41determines that authentication is successful.

In this manner, in the present example, the authentication system3includes the first input unit31, the second input unit32, the first calculation unit33, and the second calculation unit34. The first calculation unit33obtains the calculation result A′ based on the authentication information Dc input to the first input unit31and the authentication parameter A. The second calculation unit34obtains the calculation result B′ based on the authentication information Dc input to the second input unit32and the authentication parameter B. Further, the authentication system3includes the authentication unit40that performs authentication based on the calculation result A′ and the authentication parameter B when the authentication information Dc is input to the first input unit31and performs authentication based on the calculation result B′ and the authentication parameter A when the authentication information Dc is input to the second input unit32. With this configuration, the user is prompted to input the authentication information Dc during the authentication process. Thus, a person who does not know the valid authentication information Dc will not be able to accomplish authentication. Also, the user can input the authentication information Dc to any one of the first input unit31and the second input unit32. This improves the convenience for the user compared to when the authentication information Dc needs to be input to a predetermined input unit. Therefore, the security and the convenience are both obtained.

In an example, when the authentication information Dc is input to the first input unit31, the authentication unit40checks whether the calculation result A′ matches the authentication parameter B. Further, when the authentication information Dc is input to the second input unit32, the authentication unit40checks whether the calculation result B′ matches the authentication parameter A. With this configuration, a calculation using the calculation equation set for both of the vehicle1and the portable terminal2need to be performed to accomplish authentication. This improves security.

Further, the matching of the response codes of the vehicle1and the portable terminal2, which are calculated using the calculation results A′, B′ and the authentication parameter A, B, are checked when checking whether the calculation results A′, B′ match the authentication parameter A, B. With this configuration, the vehicle1and the portable terminal2do not have to transmit and receive the calculation results A′, B′ and the authentication parameters A, B to and from each other. Thus, the security is improved.

In an example, the first input unit31is arranged in the vehicle1, and the second input unit32is arranged in the portable terminal2. With this configuration, the vehicle1can be actuated by inputting the authentication information Dc to any one of the vehicle1or the portable terminal2. This improves the convenience for the user.

Second Embodiment

A second embodiment of the authentication system and the authentication method will now be described with reference toFIGS.4and5. The second embodiment differs from the first embodiment in that the second embodiment uses multiple pieces of authentication information that differ from one another. Therefore, same reference numerals are given to those components that are the same as the corresponding components of the first embodiment. Detailed description of such components will be omitted and only the differences will be described in detail.

As shown inFIG.4, the vehicle1includes a door lock device10and an engine11that are used as the on-board device4. Further, the vehicle1includes a body ECU12that controls the door lock device10and an engine ECU13that controls the engine11. The ECUs are connected to the verification ECU5by the communication line6in the vehicle.

The vehicle1includes a vehicle door14and an exterior door handle15. The exterior door handle15is arranged on the vehicle door14to open and close the vehicle door14. The door lock device10is a mechanical mechanism configured to lock and unlock the vehicle door14. The exterior door handle15includes a touch sensor16and a lock button17. The touch sensor16detects when the user touches the exterior door handle15to, for example, unlock the door. The lock button17detects when the user touches the exterior door handle15to, for example, lock the door. When the ID verification and the authentication are accomplished, the body ECU12controls actuation of the door lock device10based on detection signals of the touch sensor16and the lock button17. The actuation of the door lock device10corresponds to a first action of the vehicle1.

The vehicle1includes an engine switch18for switching the power supply state of the engine11. The engine switch18may be, for example, a push-type switch. When the engine switch18is operated under a predetermined condition, the engine ECU13controls switching of the state of the engine11. The predetermined condition for starting the engine11includes ID verification having been accomplished, authentication having been accomplished, the brake pedal (not shown) of the vehicle1being depressed, the transmission of the vehicle1being in the parking position, or a combination of two or more of these conditions. The switching operation of the engine11corresponds to a second action of the vehicle1.

In an example, the authentication unit40performs the first authentication or the second authentication as the above-described authentication in accordance with the functionality of the vehicle action (locking/unlocking of vehicle door14, power supply switching action of vehicle1). The authentication unit40executes different calculation processes in the first authentication and the second authentication. In the present example, the first authentication is performed when locking or unlocking the vehicle door14, and the second authentication is performed when switching the power supply state of the vehicle1. The authentication unit41includes a first authentication unit41athat performs the first authentication and a second authentication unit41bthat performs the second authentication. Further, the authentication unit42includes a first authentication unit42athat performs the first authentication and a second authentication unit42bthat performs the second authentication.

The memory7of the vehicle1stores a first authentication parameter A1used for the first authentication and a second authentication parameter A2used for the second authentication. Also, the memory23of the portable terminal2stores a first authentication parameter B1used for the first authentication and a second authentication parameter B2used for the second authentication.

The authentication information Dc includes first authentication information Dc1and second authentication information Dc2that are different. The first authentication information Dc1is used for the first authentication. The second authentication information Dc2is used for the second authentication. When the first authentication parameter A1and the first authentication parameter B1are generated, they are linked to the first authentication information Dc1. Further, when the second authentication parameter A2and the second authentication parameter B2are generated, they are linked to the second authentication information Dc2.

When the authentication information Dc is input to the first input unit31, the first calculation unit33obtains a calculation result A1′ calculated based on the authentication information Dc and the first authentication parameter A1and obtains a calculation result A2′ calculated based on the authentication information Dc and the second authentication parameter A2. When the authentication information Dc is input to the second input unit32, the second calculation unit34obtains a calculation result B1′ calculated based on the authentication information Dc and the first authentication parameter B1and obtains a calculation result B2′ calculated based on the authentication information Dc and the second authentication parameter B2.

The first authentication units41aand42adetermine that the first authentication has succeeded when the calculation result A1′ matches the first authentication parameter B1or when the calculation result B1′ matches the first authentication parameter A1. The second authentication units41band42bdetermine that the second authentication has succeeded when the calculation result A2′ matches the second authentication parameter B2or when the calculation result B2′ matches the second authentication parameter A2. When the first authentication information Dc1is input to the first input unit31, the calculation result A1′ will match the first authentication parameter B1. When the first authentication information Dc1is input to the second input unit32, the calculation result B1′ will match the first authentication parameter A1. When the second authentication information Dc2is input to the first input unit31, the calculation result A2′ will match the second authentication parameter B2. When the second authentication information Dc2is input to the second input unit32, the calculation result B2′ will match the second authentication parameter A2.

The operation and advantages of the authentication system in accordance with the second embodiment will now be described with reference toFIG.5. Here, a case where the authentication information Dc is input to the first input unit31will be described.

As shown inFIG.5, in step S301, when ID verification is completed, the authentication process starts.

In step S302, when the authentication information Dc is input to the first input unit31, the verification ECU5proceeds to step S303.

In step S303, the first calculation unit33uses the authentication information Dc and the first authentication parameter A1in a predetermined calculation equation to calculate the calculation result A1′. Further, the first calculation unit33uses the authentication information Dc and the second authentication parameter A2in a predetermined calculation equation to calculate the calculation result A2′.

In step S304, the authentication unit41generates a challenge code including a random number of which the value differs whenever a challenge code is transmitted. The authentication unit41transmits a challenge signal including the challenge code to the portable terminal2.

In step S305, the first authentication unit41acalculates the challenge code using the calculation result A1′ to generate a first response code of the vehicle1. Further, the second authentication unit41bcalculates the challenge code using the calculation result A2′ to generate a second response code of the vehicle1.

In step S306, when the first authentication unit42areceives the challenge signal, the first authentication unit42aperforms a calculation with the challenge code using the first authentication parameter B1to generate a first response code of the portable terminal2. Further, the second authentication unit42bperformed a calculation with the challenge code using the second authentication parameter B2to generate a second response code of the portable terminal2.

In step S307, the first authentication unit42aand the second authentication unit42btransmit the first response code and the second response code of the portable terminal2to the vehicle1.

In step S308, the first authentication unit41adetermines whether the first response code of the vehicle1matches the first response code of the portable terminal2. When the first authentication information Dc1has been input to the first input unit31in step S302, the calculation result A1′ will match the first authentication parameter B1. Thus, the first response codes of the vehicle1and the portable terminal2will match. When the first response codes of the vehicle1and the portable terminal2match, the first authentication unit41adetermines that the first authentication has succeeded. When the first authentication is accomplished, the verification ECU5proceeds to step S310. When the first authentication is not accomplished, the verification ECU5proceeds to step S309.

In step S309, the second authentication unit41bdetermines whether the second response codes of the vehicle1and the portable terminal2match. When the second authentication information Dc2has been input to the first input unit31in step S302, the calculation result A2′ will match the second authentication parameter B2. Thus, the second response codes of the vehicle1and the portable terminal2will match. When the second response codes of the vehicle1and the portable terminal2match, the second authentication unit41bdetermines that the second authentication has succeeded. When the second authentication is accomplished, the verification ECU5proceeds to step S311. When the second authentication is not accomplished, the verification ECU5ends the process.

In step S310, when the first authentication has been accomplished, the verification ECU5permits the body ECU12to actuate the door lock device10. In this manner, the body ECU12controls actuation of the door lock device10based on detection signals of the touch sensor16and the lock button17.

In step S311, when the second authentication has been accomplished, the verification ECU5permits the engine ECU13to start the engine11. In this manner, the engine ECU13starts the engine11when the engine switch18is operated under the predetermined condition.

In the present example, when the authentication information Dc is input to the second input unit32, the second calculation unit34calculates the calculation results B1′ and B2′. A challenge signal and a response signal are transmitted and received as described above to perform the first authentication by checking whether the calculation result B1′ matches the first authentication parameter A1and perform the second authentication by checking whether the calculation result B2′ matches the second authentication parameter A2.

In this manner, in the present example, the authentication information Dc includes the first authentication information Dc1and the second authentication information Dc2that differ from each other. When the first authentication is accomplished based on the first authentication information Dc1, the verification ECU5permits actuation of the door lock device10of the vehicle1. When the second authentication is accomplished based on the second authentication information Dc2, the verification ECU5permits starting of the engine11of the vehicle1. With this configuration, the first authentication information Dc1and the second authentication information Dc2, which differ from each other, need to be input to accomplish the first authentication and the second authentication. In other words, in the authentication system3, the authentication information Dc for actuating the door lock device10of the vehicle1differs from the authentication information Dc for switching the state of the engine11. Actuation of the entire vehicle1will not be permitted with only one of the first authentication information Dc1and the second authentication information Dc2. This improves security. Also, erroneous operations are avoided when remotely operating the vehicle1through the user interface application or the like of the portable terminal2.

Third Embodiment

A third embodiment of the authentication system will now be described with reference toFIG.6. The description of the third embodiment will focus on only the differences from the first embodiment.

As shown inFIG.6, the authentication system3includes a parameter update unit50that updates each of the authentication parameters A and B to a new value. The parameter update unit50includes a parameter update unit51and a parameter update unit52. The parameter update unit51is arranged in the verification ECU5to update the authentication parameter A. The parameter update unit52is arranged in the terminal controller20to update the authentication parameter B. The parameter update units51and52update the authentication parameters A and B when the authentication is accomplished.

In this manner, in the present example, the authentication system3includes the parameter update unit that updates each of the authentication parameter A in the vehicle1and the authentication parameter B in the portable terminal2to a new value when the authentication is accomplished. This configuration allows the authentication parameters A and B to be updated whenever the authentication is performed and improves security.

The present embodiments may be modified as follows. The present embodiments and the following modifications can be combined as long as the combined modifications remain technically consistent with each other.

In each embodiment, the calculation equation (calculation algorithm) of the first calculation unit33and the second calculation unit34is not limited to exclusive-OR and may use addition, subtraction, multiplication, or division. Alternatively, exponentiation or a point on an elliptic curve may be used in the calculation. When the calculation equation is set so that the authentication information Dc cannot be estimated from the authentication parameter A, B, the confidentiality of the authentication information Dc will be ensured.

In the third embodiment, the authentication parameter that is updated may be only the one used for authentication. Alternatively, the authentication parameters may be updated after a certain period from the preceding update.

In the second embodiment, the first authentication may be performed in association with the second authentication. For example, the second authentication may be performed only within a certain time after the first authentication is accomplished.

In the second embodiment, the number of the pieces of authentication information Dc is not limited to two and may be three or greater as long as the number is greater than one. This may be changed in accordance with the specification.

In each embodiment, the authentication information Dc may be a password, which includes alphabetical characters, numerical characters, and symbols, a pin code, a pictographic pattern, biometric information of a user, or a combination of these elements. The biometric information includes fingerprint, face, vein, hand geometry, iris, retina, and the like.

In each embodiment, the authentication information Dc input to the first input unit31may differ from the authentication information Dc input to the second input unit32. For example, when the authentication information Dc is a password and biometric information, the password may be input to the first input unit31, and the biometric information may be input to the second input unit32. In this case, the vehicle1and the portable terminal2include an authentication parameter for the password and an authentication parameter for the biometric information.

In each embodiment, when valid authentication information Dc is input to the first input unit31, the calculation result A′ calculated with the authentication parameter A may match the authentication parameter B. Further, when valid authentication information Dc is input to the second input unit32, the calculation result B′ calculated with the authentication parameter B may match the authentication parameter A. Furthermore, the authentication parameter A and the authentication parameter B may have the relationship of plain text and cipher text with the authentication information Dc serving as a common key.

In each embodiment, the first calculation unit33and the second calculation unit34may include the same calculation equation or different calculation equations.

In each embodiment, the authentication information Dc may be changed at any time after the electronic key is registered. For example, the authentication information Dc may be changed by a user when authentication is accomplished. When the authentication information Dc is changed, the authentication parameters A and B that are linked to the authentication information Dc will also be changed.

Each embodiment may be configured so that the authentication unit42generates a challenge code and the authentication unit42checks whether response codes match when authenticating a calculation result and an authentication parameter.

In each embodiment, the authentication of the vehicle1and the portable terminal2may be unidirectional authentication or bidirectional authentication. In bidirectional authentication, for example, the vehicle1transmits a challenge code to the portable terminal2, and the vehicle1checks whether the response codes generated by the two devices match. Then, the portable terminal2transmits a challenge code to the vehicle1, and the portable terminal2checks whether the response codes generated by the two devices match.

In each embodiment, the authentication unit40may simply compare a calculation result and an authentication parameter and check whether they match.

In each embodiment, the matching of a calculation result and an authentication parameter that are encrypted into cipher texts may be checked. Further, the matching of a calculation result and an authentication parameter that are hashed into hash values may be checked. The hash values may be obtained by hashing a challenge code and calculation result and a challenge code and authentication parameter. Alternatively, the hash values may be obtained by hashing a calculation result and an authentication parameter separately.

In each embodiment, when checking the matching of calculated values obtained by the vehicle1and the portable terminal2, the matching of the calculation result A′ with the authentication parameter B and the matching of the calculation result B′ with the authentication parameter A do not have to be performed. In other words, the calculation results A′, B′ and the authentication parameters A, B do not have to be used to determine whether the authentication information Dc is correct.

In each embodiment, the determination of whether authentication is successful may be performed by any one of the vehicle1or the portable terminal2.

In each embodiment, the near-range wireless communication is not limited to Bluetooth® communication and may be change to other communication protocols.

In each embodiment, the portable terminal2is not limited to a high-performance mobile phone and may be any of various types of terminals. For example, the portable terminal2may be an electronic key of the vehicle1.

In each embodiment, the communication peer is not limited to the vehicle1and may be applied to other members such as a door of an accommodation facility, a gate of a coin-operated parking lot, or a door of a delivery locker.

All features disclosed in the specification and/or the claims are to be disclosed separately and independently of each other for the purpose of the original disclosure and for the purpose of limiting the invention described in the scope of claims independently of combinations of the features described in the embodiments and/or the claims. Further, all descriptions of numerical ranges or sets of components disclose all possible intermediate values or intermediate components for the purpose of the original disclosure and for the purpose of limiting the invention described in the scope of the claims, especially as limitations of the numerical ranges.

In the above embodiments, each of the verification ECU, the terminal controller, the calculation unit, the authentication unit, and the parameter update unit may include one or more dedicated circuits or one or more processors. Further, the vehicle1and the portable terminal2may each include a memory (non-transitory computer-readable storage medium) connected to one or more processors. The memory may store one or more programs including commands that are executable by one or more processors. When executed, the commands are configured to have the processors perform a key information generation process in accordance with the present disclosure. For example, the programs include commands that are configured to have the processors perform processes corresponding to steps101to111of the sequence illustrated inFIG.2, steps201to205of the sequence illustrated inFIG.3, and steps301to311of the sequence illustrated inFIG.5. Therefore, the present disclosure can also provide a non-transitory computer-readable storage medium that stores such a program.

DESCRIPTION OF THE REFERENCE NUMERALS