Authentication system, user terminal, control device, service providing device, program, and authentication method

1. An authentication system comprising:

a control device;

a user terminal; and

a service providing device, wherein the control device includes:

a first storage configured to store information;

an information acquirer configured to acquire a first authentication element for authentication;

a first authentication processor configured to transmit to the user terminal a comparison request message including the first authentication element for comparison with a second authentication element stored in the user terminal, receive a comparison response message corresponding to the comparison request message from the user terminal, register the first authentication element in the first storage and invalidate a status of the first authentication element when the comparison response message indicates comparison success, transmit an authentication element registration response message to the service providing device, and validate the status of the first authentication element registered in the first storage when an authentication element validation instruction is received from the service providing device in correspondence with the authentication element registration response message; and

a control manager configured to control an object based on a validation of the status of the first authentication element, wherein the user terminal includes:

a second storage configured to pre-store the second authentication element which is a user authentication element of a user; and

a second authentication processor configured to compare the first authentication element included in the comparison request message with the second authentication element stored in the second storage when the comparison request message including the first authentication element is received from the control device, and transmit the comparison response message including information indicating whether a comparison process succeeded or failed to the control device, and wherein the service providing device includes:

a verifier configured to verify assertion information related to an authentication process included in the authentication element registration response message when the authentication element registration response message is received from the control device, and transmit the authentication element validation instruction for validating the status of the first authentication element stored in the first storage within the control device to the control device when the verification succeeds; and

a service provider configured to manage a state for providing a user with a service using an object to be controlled by the control device when the verification succeeds.

2. The authentication system according to claim 1 , wherein the first authentication element is information of an authentication element for use in biometrics.

3. A control device comprising:

a storage configured to store information;

an information acquirer configured to acquire a first authentication element for authentication;

an authentication processor configured to transmit to a user terminal a comparison request message including the first authentication element for comparison with a second authentication element stored in the user terminal, receive a comparison response message corresponding to the comparison request message from the user terminal, register the first authentication element in the storage and invalidate a status of the first authentication element when the comparison response message indicates comparison success, transmit an authentication element registration response message to a service providing device, and validate the status of the first authentication element registered in the storage when an authentication element validation instruction is received from the service providing device in correspondence with the authentication element registration response message; and

a control manager configured to control an object based on a validation of the status of the first authentication element.

4. An authentication method using an authentication system configured to include a control device for controlling an object, a user terminal, and a service providing device, the authentication method comprising:

acquiring, by the control device, an authentication element from a user;

issuing a request for comparison of the authentication element from the control device to the user terminal;

comparing, by the user terminal, the authentication request transmitted from the control device with a pre-stored authentication element of the user and transmitting a result of the comparison as a comparison response to the control device;

registering the authentication element in a storage provided in the control device and invalidating a status of the authentication element when the comparison in the user terminal succeeds;

verifying, by the service providing device, an authentication process from the acquiring to the registering;

validating a status of the authentication element registered in the storage provided in the control device when the verification in the service providing device succeeds; and

performing, by the control device, control so that a user is able to use the object when the verification in the service providing device succeeds.