Access management system, authentication device for access management system, management device for access management system, portable terminal for access management system, mobile body for access management system, data structure for access management data, access management program, and construction method for access management system

An authentication device for an access management system comprising:

• processing circuitry
• to store a blockchain shared among a plurality of nodes connected by a peer-to-peer (P2P) network;
• to validate validity of a block added to the blockchain;
• to read authentication information of a passing body;
• and
• to authenticate the passing body when the authentication device is designated, in authentication conditions recorded in blocks of the blockchain by a management node, which is any one of the plurality of nodes, as an authentication node that performs authentication and the read authentication information is included in the authentication conditions as authentication information of an authenticatable passing body, wherein
• the processing circuitry determines, when a hash value calculated from a block generated by any one of the plurality of nodes is equal to or larger than a set threshold, the block as invalid, and does not add the block determined as invalid to the blockchain, and
• the processing circuitry sets a threshold set in validation of a block generated by the authentication node to a value larger than a threshold set in validation of a block generated by the node, which is not the authentication node, and validates validity of a block added to the blockchain.

A management device for an access management system comprising:

• processing circuitry
• to store a blockchain shared among a plurality of nodes connected by a peer-to-peer (P2P) network;
• to validate validity of a block added to the blockchain;
• and
• to record, in blocks of the blockchain, authentication conditions including authentication information of an authenticatable passing body and designating, as a node that reads the authentication information and performs authentication, an authentication node provided in a region where the passing body passes out of the plurality of nodes, wherein
• the processing circuitry determines, when a hash value calculated from a block generated by any one of the plurality of nodes is equal to or larger than a set threshold, the block as invalid, and does not add the block determined as invalid to the blockchain, and
• the processing circuitry sets a threshold set in validation of a block generated by the authentication node to a value larger than a threshold set in validation of a block generated by the node, which is not the authentication node, and validates validity of a block added to the blockchain.

A portable terminal or a mobile body for an access management system comprising:

• processing circuitry
• to store a blockchain shared among a plurality of nodes connected by a peer-to-peer (P2P) network;
• to validate validity of a block added to the blockchain;
• and
• to transmit, to an authentication node, with a radio signal, authentication information of either a passerby or the mobile body, which is an authenticatable target of authentication according to each the portable terminal or the mobile body, read from authentication conditions including the authentication information, designating, as a node that reads the authentication information and performs the authentication, the authentication node provided in a region where the target passes out of the plurality of nodes, and recorded in blocks of the blockchain by a management node, which is any one of the plurality of nodes, wherein
• the processing circuitry determines, when a hash value calculated from a block generated by any one of the plurality of nodes is equal to or larger than a set threshold, the block as invalid, and does not add the block determined as invalid to the blockchain, and
• the processing circuitry sets a threshold set in validation of a block generated by the authentication node to a value larger than a threshold set in validation of a block generated by the node, which is not the authentication node, and validates validity of a block added to the blockchain.

A non-transitory storage medium storing an access management program for causing an authentication device to execute:

• storing a blockchain shared among a plurality of nodes connected by a peer-to-peer (P2P) network;
• validating validity of a block added to the blockchain;
• reading authentication information of a passing body;
• and
• authenticating the passing body when the authentication device is designated, in authentication conditions recorded in blocks of the blockchain by a management node, which is any one of the plurality of nodes, as an authentication node that performs authentication and the read authentication information is included in the authentication conditions as authentication information of an authenticatable passing body, wherein
• when a hash value calculated from a block generated by any one of the plurality of nodes is equal to or larger than a set threshold, the block is determined as invalid and the block determined as invalid is not added to the blockchain, and
• a threshold set in validation of a block generated by the authentication node is set to a value larger than a threshold set in validation of a block generated by the node, which is not the authentication node.

A non-transitory storage medium storing an access management program for causing a management device to execute:

• storing a blockchain shared among a plurality of nodes connected by a peer-to-peer (P2P) network;
• validating validity of a block added to the blockchain;
• and
• recording, in blocks of the blockchain, authentication conditions including authentication information of an authenticatable passing body and designating an authentication node provided in a region where the passing body passes out of the plurality of nodes as a node that reads the authentication information and performs authentication, wherein
• when a hash value calculated from a block generated by any one of the plurality of nodes is equal to or larger than a set threshold, the block is determined as invalid and the block determined as invalid is not added to the blockchain, and
• a threshold set in validation of a block generated by the authentication node is set to a value larger than a threshold set in validation of a block generated by the node, which is not the authentication node.

A non-transitory storage medium storing an access management program for causing either a portable terminal or a mobile body for an access management system to execute:

• storing a blockchain shared among a plurality of nodes connected by a peer-to-peer (P2P) network;
• validating validity of a block added to the blockchain;
• and
• transmitting, to an authentication node, with a radio signal, authentication information read from authentication conditions including the authentication information of either a passerby or the mobile body, which is an authenticable target of authentication according to each the portable terminal or the mobile body, designating the authentication node provided in a region where the target passes out of the plurality of nodes as a node that reads the authentication information and performs the authentication, and recorded in blocks of the blockchain by a management node, which is any one of the plurality of nodes, wherein
• when a hash value calculated from a block generated by any one of the plurality of nodes is equal to or larger than a set threshold, the block is determined as invalid and the block determined as invalid is not added to the blockchain, and
• a threshold set in validation of a block generated by the authentication node is set to a value larger than a threshold set in validation of a block generated by the node, which is not the authentication node.

A construction method for an access management system comprising:

• distributing a first program to an authentication device provided in a region where a passing body passes and making the authentication device into an authentication node, which is any one of a plurality of nodes,
• the first program causing the authentication device to execute:
• storing a blockchain shared among the plurality of nodes connected by a peer-to-peer (P2P) network;
• validating validity of a block added to the blockchain;
• reading authentication information of the passing body;
• and
• authenticating the passing body when the authentication device is designated, in authentication conditions recorded in blocks of the blockchain by a management node, which is any one of the plurality of nodes, as a node that performs authentication and the read authentication information is included in the authentication conditions as authentication information of an authenticatable passing body;
• and
• distributing a second program to a management device and making the management device into a management node, which is any one of the plurality of nodes,
• the second program causing the management device to execute:
• storing the blockchain shared among the plurality of nodes;
• validating validity of a block added to the blockchain;
• and
• recording the authentication conditions in the blocks of the blockchain, wherein
• when a hash value calculated from a block generated by any one of the plurality of nodes is equal to or larger than a set threshold, the block is determined as invalid and the block determined as invalid is not added to the blockchain, and
• a threshold set in validation of a block generated by the authentication node is set to a value larger than a threshold set in validation of a block generated by the node, which is not the authentication node.