To cope with an attack by a malicious third person impersonating a normal user.SOLUTION: An authentication part 4 confirms an authentication state of a user 3 and an authorized state of operation on the basis of authentication information on authentication of the user 3 and authorization information on authorization of the operation upon receiving an operation request to requesting prescribed operation about a vehicle 2 from the user 3, and transmits the operation request to function parts 7 to 10 for achieving the prescribed operation when it is confirmed that the user 3 is authenticated and that the operation is authorized. A management part 5 manages the authentication state of the user 3 by the authentication part 4 and the authorization state of the operation by the user 3. Verification parts 6 verify the validity of the operation request, and notifies the management part 5 of invalid request reception upon detecting that the operation request is invalid. The management part 5 changes at least one of authentication information and authorization information corresponding to an invalid request source user who makes an operation request detected to be invalid according to a prescribed policy when the invalid request reception is notified.SELECTED DRAWING: Figure 1

    【課題】正規のユーザに成りすました悪意のある第三者による攻撃への対応を行う。【解決手段】認証部4は、ユーザ3から車両2に関する所定の操作を要求する操作要求が与えられると、ユーザ3の認証に関する認証情報および操作の認可に関する認可情報に基づいてユーザ3の認証状態および操作の認可状態を確認し、ユーザ3が認証済みであり且つ操作が認可済みであることが確認されると所定の操作を実現する機能部7~10に対して操作要求を伝達する。管理部5は、認証部4によるユーザ3の認証状態およびユーザ3による操作の認可状態を管理する。検証部6は、操作要求の正当性を検証するもので、操作要求が不当であることを検出すると管理部5に対して不当要求受信を通知する。管理部5は、不当要求受信が通知されると、不当であることが検出された操作要求を与えた不当要求元ユーザに対応する認証情報および認可情報のうち少なくとも一方を所定のポリシーに則って変更する。【選択図】図1


    Access

    Download


    Export, share and cite



    Title :

    AUTHENTICATION MANAGEMENT DEVICE AND AUTHENTICATION MANAGEMENT METHOD


    Additional title:

    認証管理装置および認証管理方法


    Contributors:
    NOMURA HAJIME (author) / TANAKA YUSUKE (author) / ITO YUKA (author) / MAKITA TAKANARI (author)

    Publication date :

    2022-04-11


    Type of media :

    Patent


    Type of material :

    Electronic Resource


    Language :

    Japanese


    Classification :

    IPC:    B60R Fahrzeuge, Fahrzeugausstattung oder Fahrzeugteile, soweit nicht anderweitig vorgesehen , VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR / G06F ELECTRIC DIGITAL DATA PROCESSING , Elektrische digitale Datenverarbeitung



    AUTHENTICATION MANAGEMENT METHOD, AUTHENTICATION MANAGEMENT PROGRAM AND USER AUTHENTICATION MANAGEMENT DEVICE

    SUENAGA YURI / SATO HIROYUKI / MIZUNO KOJI | European Patent Office | 2022

    Free access

    Authentication method, charging method, authentication device and charging management device

    WANG SHENGHUI / SONG JUNG WOO / WANG SHIFENG | European Patent Office | 2023

    Free access

    MEMORY MANAGEMENT DEVICE, AUTHENTICATION CENTER AND AUTHENTICATION SYSTEM

    YAMAGO NARUHITO | European Patent Office | 2016

    Free access


    AUTHENTICATION DEVICE AND MANAGEMENT SYSTEM

    WATANABE SATOSHI | European Patent Office | 2020

    Free access