Authentication management method, authentication management program, and user authentication management device

A tangible, computer readable storage medium storing an authentication management program for operating a computer as an electronic control device installed in a vehicle, the authentication management program comprising steps of:

• storing authentication rules that define authentication levels and authentication elements in the electronic control device;
• storing identity information that identifies a user of the vehicle;
• receiving a request to update an authentication state from a vehicle application that controls vehicle functions;
• requesting an authentication terminal for authenticating a user or an authentication device possessed by the user, for an authentication of the user or the authentication device by the authentication terminal,
• generating the authentication state based on an authentication result by the authentication terminal, the authentication rule, and the identity information, and
• notifying the vehicle application of the generated authentication state, wherein
• the stored authentication rules define a plurality of authentication levels associated with security levels, and an authentication element in at least one authentication level includes possession authentication by a hardware encryption module with physical security.

A user authentication management device mounted on a vehicle and comprising:

• a first storage unit storing authentication rules that define authentication levels and authentication elements;
• a second storage unit that stores identity information to identify a user of the vehicle;
• and
• an authentication control unit configured to
• i) receive a request for updating an authentication state from a vehicle application that controls vehicle functions,
• ii) request an authentication terminal for authenticating a user or an authentication device possessed by the user, for an authentication of the user or the authentication device by the authentication terminal,
• iii) generate the authentication state based on an authentication result by the authentication terminal, the authentication rule, and the identity information, and
• iv) notify the vehicle application of the generated authentication state, wherein
• the stored authentication rules define authentication levels according to security levels, and the authentication element in at least one authentication level includes possession authentication by a hardware encryption module with physical security.