JP2011012511A - Electric lock control system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a high-security electric lock control system which can surely prevent unauthorized use while suppressing equipment cost.SOLUTION: The electric lock control system includes: an authentication information management server 1 which encrypts authentication data containing a validity period T/Tusing a specified cryptographic key Kcorresponding to the electric lock control device, so as to send the encrypted authentication data to a portable terminal; the portable terminal 2 which makes the electric lock control device 3 read the encrypted authentication data TK; and the electric lock control device 3 which stores a decoding key Kcorresponding to the cryptographic key Kand authentication rules. The electric lock control device 3 obtains the encrypted authentication data TK and time data Sfrom the portable terminal 2, and cross-checks the validity period T/Tcontained in the decoded authentication data with the time data Sobtained from the portable terminal 2 to authenticate the qualifications to control the electric lock.

Description

  The present invention relates to an electronic lock control system for unlocking an electric lock attached to a door with an electronic key.

Conventionally, a system for unlocking an electric lock with an electronic key is known.
For example, an authentication device connected to an electric lock attached to the entrance of a building reads a key ID stored in an electronic key such as an IC card, and the key ID is permitted to be unlocked in advance. There are some which determine whether or not there is and control the unlocking of the electric lock according to the result.
In such an electric lock system, an electronic key is given to a person who is qualified to unlock the electric lock, and a key ID of a qualified person is registered in advance in the electric lock control device.
On the other hand, when an electric lock is installed in a building that many users use only for a specific period, the electronic key information with a valid period is distributed to the user by communication, and the distributed key information is There is also known a method of setting by communication on the side.
And such an electric lock can be applied to a property managed by a real estate agent, for example, and if an electronic key with an expiration date is given to a specific customer, the property can be visited without guidance from the agent. Will be able to.

JP 2006-316565 A JP-A-2005-207157

In the conventional electric lock system, every time a new user is given an unlocking qualification, information such as an ID must be registered in the electric lock control device.
Therefore, the server on the manager side and the electric lock control device are connected via communication means, and a communication function is provided in each electric lock control device.
Therefore, there has been a problem that the manufacturing cost of the electric lock control device is increased. In addition, every time a user is given an unlocking qualification, it takes time and cost to transmit data to the electric lock side.
Such equipment costs and communication costs become higher as the number of properties to be managed increases, and cannot be ignored.
An object of the present invention is to provide an electric lock control system with high security capable of reliably preventing unauthorized use while suppressing costs.

  1st invention is an electric lock control system provided with the authentication information management server and the electric lock control apparatus for controlling an electric lock, Comprising: The said authentication information management server authenticates the control qualification of an electric lock An encryption means for encrypting authentication data including a valid period for the encryption with a specific encryption key corresponding to the electric lock control device, and a transmission means for transmitting the encrypted authentication data to a specific portable terminal, The electric lock control device reads the encrypted authentication data and the time data held by the specific mobile terminal from the specific mobile terminal, and the encrypted authentication data read from the mobile terminal Whether or not the decryption means for decrypting with the decryption key corresponding to the encryption key and the time based on the time data acquired from the portable terminal are within the validity period included in the decrypted authentication data And wherein the point with an authentication means for authenticating the control credentials electric lock is determined.

  According to a second aspect of the present invention, there is provided an authentication information management server, a portable terminal capable of communicating with the authentication information management server, and an electric lock control device capable of controlling an electric lock and capable of short-range communication with the portable terminal. The authentication information management server encrypts authentication data including a valid period for authenticating the control qualification of the electric lock with a specific encryption key corresponding to the electric lock control device. Encryption means, time information generation function associated with the authentication data or function information transmission means for transmitting data for specifying this function to the portable terminal, and encrypted authentication data to the portable terminal Authentication data transmission means for transmitting, the portable terminal comprising: authentication data storage means for storing encrypted authentication data received from the authentication information management server; When the time data generation request signal is received from the device, the time data is generated from the current time using the time data generation function received from the authentication information management server or the function specified based on the data for specifying the function. Time data generating means for generating the time data, and time data storage means for storing the time data. The electric lock control device outputs a time data generation request signal for requesting the portable terminal to generate time data. Time data generation request signal output means, reading means for reading encrypted authentication data and time data stored in the portable terminal, and encrypted authentication data read from the portable terminal as the encryption key. The decryption means for decrypting with the corresponding decryption key and the inverse function of the time data generation function based on the decrypted authentication data are specified. It is determined whether the time calculated from the time data acquired from the portable terminal using the function specifying means and the inverse function specified by the inverse function specifying means is within the valid period included in the decrypted authentication data And an authentication means for authenticating the control qualification of the electric lock.

According to the first and second inventions, if a composite key corresponding to an encryption key and an authentication rule are set in the electric lock control device, it is based on data acquired from a portable terminal functioning as an electronic key. Thus, the control qualification of the electric lock can be authenticated.
Therefore, the electric lock control device does not need a storage capacity for storing information necessary for authentication, such as a user ID, and does not need to set an ID each time.
That is, since it is not necessary to input data to the installed electric lock control device later, it is not necessary to connect the electric lock control device and the authentication information management server by communication.
Since the communication function can be omitted in this way, the cost required for communication can be reduced along with the manufacturing cost of the electric lock control device.

Furthermore, security is ensured by encrypting the authentication data.
Accordingly, it is possible to improve security while suppressing the cost on the electric lock control device side.
In addition, since the electric lock control device acquires time data for authenticating the validity period from the mobile terminal, the electric lock control device side performs communication for acquiring the time from a clock or an external clock. No means for specifying the time, such as a function, is required. Accordingly, the cost of the electric lock control device can be further reduced.

  According to the second invention, by generating time data using a function in the mobile terminal, it is possible to prevent falsification of the time data and to improve reliability.

It is a whole block diagram of the electric lock control system of an embodiment. It is a block diagram of the system of an embodiment.

1 and 2 show an embodiment of the present invention.
As shown in FIG. 1, the electric lock control system of this embodiment controls an authentication information management server 1 that manages this system, a portable terminal 2 that is used as an electronic key by a user, and an electric lock that is attached to a door X. And an electric lock control device 3.

The configuration of each apparatus will be described with reference to FIG.
The authentication data server 1 includes a processing unit 4 and a network communication unit 5. The network communication unit 5 is connected to the Internet or the like to enable communication with the portable terminal 2, and the processing unit 4 will be described in detail later. A function of issuing an authentication ticket TK for enabling control of the above is provided. The authentication ticket TK is data obtained by encrypting the authentication data of the present invention with the encryption key K _X corresponding to each door X, and the processing unit 4 generates the authentication ticket TK and transmits it to the portable terminal 2. Like to do. Therefore, the authentication information management server 1 includes a database (not shown) in which the door number and the encryption key are associated with each other.

  On the other hand, the portable terminal 2 includes a network communication unit 6 that enables communication with the authentication information management server 1, and a processing unit 7 in which a key application is set is connected to the network communication unit 6. . The key application is application software necessary for the portable terminal 2 to function as an electronic key that can unlock the electric lock of the door X. Based on the key application, the processing unit 7 acquires the authentication ticket TK from the authentication information management server 1 and generates data necessary for unlocking the electric lock.

The time generator 8, the seed storage unit 9, and the data storage unit 10 are connected to the processing unit 7, and the proximity communication unit 11 is connected to the data storage unit 10.
The data storage unit 10 is a storage unit that can be read from the electric lock control device 3 that can communicate via the proximity communication unit 11 and may be provided on the IC chip. The processing unit 7 includes a secure area 10a in which data cannot be rewritten and a non-secure area 10b in which data can be rewritten. A user ID is stored in the secure area 10a. The user ID cannot be rewritten freely by the user as described above, but may be an ID distributed from the authentication information management server 1 or a machine number unique to the portable terminal 2, for example.

On the other hand, in the non-secure area 10b that can be rewritten by the processing unit 7, each time the specific door X needs to be unlocked, the door number X, the authentication ticket TK, and a time stamp S _T described later. Is remembered.
However, the data storage unit 10 is not divided into two areas 10a and 10b, but the ID is not rewritable and the authentication ticket TK is rewritable and stored in the data storage unit 10, respectively. You may do it.

The time generation unit 8 is a means for generating the current time, such as a clock or a means for acquiring the time from an external clock. However, the time generation unit 8 can generate an accurate time, and the time cannot be easily tampered with by the user's intention.
Further, the proximity communication unit 11 is a communication unit that establishes communication when the proximity communication unit 12 of the electric lock control device 3 described later contacts or approaches the proximity communication unit 12.
The mobile terminal 2 may have any form as long as the mobile terminal 2 has the above function, but a commonly used mobile phone and other communication terminals can be used.

The electric lock control device 3 is connected to the proximity communication unit 12 that can communicate with the proximity communication unit 11 of the mobile terminal 2, the electric lock side processing unit 13 connected thereto, and the electric lock side processing unit 13. A storage unit 14, an electric cylinder 15 that locks and unlocks the electric lock, and an activation switch 16 of the electronic lock side processing unit 13 are provided.
The storage unit 14 stores the door number X of the door X on which the electric lock control device 3 is installed and the decryption key K _X set for the door X. The door number X and the decryption key K _X are data set for each electric lock control device 3.
The decryption key K _X corresponds to the encryption key K _X stored in the authentication information management server 1 in association with the door number. However, the decryption key K _X may be the same depending on the encryption algorithm used. There is also.

The operation of this embodiment will be described below.
First, a procedure until the portable terminal 2 acquires the authentication ticket TK from the authentication information management server 1 will be described, and then a procedure for unlocking the electric lock with the acquired authentication ticket TK will be described.
Note that before performing the following procedure, the user, a specific door X, during the effective period T _{S /} T _E, finished the reservation to allow unlocking and issues authentication information management server 1 It is assumed that you have a reservation number. This reservation may be performed by the mobile terminal 2 accessing the reservation page of the authentication information management server 1 or by calling the administrator. In any case, the user of the portable terminal 2 obtains a reservation number, and the authentication information management server 1 adds the reservation contents, that is, the reservation contents, that is, the door number X, the user ID, and the validity period T _S / T _E Are associated and stored in the reservation database. The valid period T _S / T _E means between the time T _S and the time T _E.

First, the mobile terminal 2 accesses the authentication information management server 1 via the network communication unit 6 and requests an authentication ticket TK based on a reservation number acquired in advance. The processing unit 4 of the authentication information management server 1 that has received this request via the network communication unit 5 generates an authentication ticket TK by the following procedure.
Based on the received reservation number, the processing unit 4 searches the reservation database (not shown) for the corresponding door number X, the validity period T _S / T _E that is the unlocking reservation time, and the user ID. Further, the processing unit 4 specifies the encryption key K _X corresponding to the door number X.

Next, the processing unit 4 generates a random number R. The random number R, the user ID, the start time T _S and the end time T _E of the validity period are combined to obtain authentication data including the validity period of the present invention, and this is the encryption key K _X The authentication ticket TK is generated by encryption. That is, the authentication ticket TK: = enc {K _X } (R | ID | T _S | T _E ). Note that “|” is a symbol for combining data.
Further, the processing unit 4 converts the random number R using a hash function to calculate a calculation seed S: = hash (R). This calculation seed S is the portable terminal 2 is necessary when calculating the time stamp S _T is the time data of the present invention. The hash function is also set in advance in the processing unit 13 of the electric lock control device 3.

As described above, after calculating the authentication ticket TK and the calculation seed S, the processing unit 4 transmits the authentication ticket TK and the calculation seed S to the portable terminal 2 via the network communication unit 5.
That is, the processing unit 4 and the network communication unit 5 are authentication data transmitting means for transmitting the encrypted authentication data (authentication ticket TK) of the present invention to the portable terminal 2, and the processing unit 4 that generates the authentication ticket TK. Is the encryption means of the present invention.
The calculation seed S is data for specifying a function for generating time data, and the processing unit 4 and the network communication unit 5 are function information transmitting means of the present invention.
In this embodiment, the authentication information management server 1 generates the authentication ticket TK when a request is made from the portable terminal 2, but the authentication ticket TK is created at the time of reservation. An authentication ticket TK generated in advance in response to the ticket request may be transmitted.

The portable terminal 2 receives the authentication ticket TK and the calculation seed S generated by the processing unit 4 as described above, and the processing unit 7 uses the authentication ticket TK received by the processing unit 7 as authentication data storage means of the present invention. The calculation storage S is stored in the seed storage unit 9 while being stored in the non-secure area 10 b of the data storage unit 10 in association with the door number X.
This completes preparation of the portable terminal 2 as an electronic key.

Next, a procedure for unlocking the electric lock of the door X using the portable terminal 2 will be described.
When the start switch 16 is turned on, the processing unit 13 of the electric lock control device 3 is always in a standby state in which proximity communication via the proximity communication unit 12 is possible and an inquiry signal is transmitted. Normally, it is assumed that the switch 16 is in an off state. However, the activation switch 16 can be omitted when the processing unit 13 is always activated.
The user of the mobile terminal 2 who has come to the door X first turns on the start switch 16 and then brings the mobile terminal 2 close to the proximity communication unit 12 of the electric lock control device 3. Specifically, the portable terminal 2 is brought into contact with a reading unit provided on the surface of the electric lock control device 3. At this time, if the proximity communication unit 11 of the portable terminal 2 reacts to the inquiry signal transmitted from the processing unit 13 of the electric lock control device 3, the proximity communication between the proximity communication units 11 and 12 is established.

Once this way near field communication is established, the portable terminal 2, processing unit 7 acquires time T ₁ of the current from the time generator 8, the time stamp S _T is the time data of the present _invention: = f { S} (T ₁ ) is calculated. Incidentally, f {S} is a function using the calculated seed S, a value calculated by applying the present time T ₁ in the function f {S} is the timestamp S _T. In this embodiment, the function f {S} is a function for generating time data (time stamp S _T ) according to the present invention, and the seed S is data for specifying this function.
Then, the processing unit 7, the time stamp S _T described above generated, is stored in association with the non-secure area 10b of the data storage unit 10 to the door number X.

Here, the inquiry signal from the electric lock control device 3 to the portable terminal 2 corresponds to the time data generation request signal of the present invention, and when this signal is received and communication is established, the processing unit of the portable terminal 2 7 is to execute the generation of the time stamp S _T. And the process part 13 and the near field communication part 12 of the electric lock control apparatus 3 are the time data generation request signal output means of this invention.

On the other hand, when the proximity communication is established, the processing unit 13 of the electric lock control device 3 functions as a means for reading authentication data and time data of the present invention, and stores data in the portable terminal 2 via the proximity communication units 12 and 11. The data in the unit 10 is confirmed. Then, the processing unit 13, data corresponding to the door number X door X placed itself is if in the data storage unit 10 of the mobile terminal 2, to get them authentication ticket TK and timestamp S _T. However, if the data corresponding to the door number X cannot be acquired, the subsequent processing is not performed. Further, the processing unit 13 acquires a user ID from the data storage unit 10.

The processing unit 13 functions as a decryption unit, decrypts the authentication ticket TK using the decryption key K _X stored in the storage unit 14, and generates a random number R ′ from dec {K _X } (TK). , User ID ′, time T _S ′, time T _E ′ are extracted. Note that “′” is added here to indicate a value extracted by decrypting the authentication ticket TK and to distinguish it from the original data to be encrypted. In this way, after the authentication ticket TK is decrypted, the expiration date T _S '/ T _E ', the user ID ', and the random number R' are extracted.
Further, the processing unit 13 functions as an inverse function specifying unit, and calculates a calculation seed S: = hash (R ′) from the random number R ′ using the hash function. Then, using this calculation seed S, obtains the inverse function f ^{-1 {S}} of the time stamp generation function f {S}, the time from the time stamp S _T acquired from the portable terminal 2 by using the inverse function T ₁ ′ is calculated.

Then, the user ID ′ extracted after decryption is compared with the user ID obtained directly from the data storage unit 10 of the mobile terminal 2, and if they do not match, the mobile terminal 2 properly makes a reservation. Unlike the above, it is determined that the authentication ticket TK or the like has been illegally copied, and the process is terminated without unlocking the electric lock.
In the case of the user ID = ID ′, the process proceeds to the next, and the processing unit 13 calculates from the time stamp S _T within the expiration date T _S ′ / T _E ′ extracted after decrypting the authentication ticket TK. It is determined whether or not the time T ₁ ′ is included, and if it is included, the electric cylinder 15 is controlled to unlock the electric lock.
Further, the processing unit 13, prior to unlocking the electric lock, remove the timestamp S _T to portable terminal 2 stores, can be so as to produce a time stamp for each one of the authentication .

By the above procedure, the authorized user can unlock the electric lock by the portable terminal 2 within the valid period.
The electric lock control device 3 according to this embodiment decrypts the encrypted authentication information and performs authentication using the decrypted data and the data acquired from the mobile terminal 2, so that data necessary for authentication is obtained. There is no need to store a large number in advance.
Therefore, unlike a conventional system, a communication function for registering data such as an ID necessary for authentication, a large-capacity storage unit, and the like are not necessary.

  In the above embodiment, the calculation seed S is used as data for specifying the time stamp generating function, and the time stamp generating function is generated by the mobile terminal 2, but the time stamp generating function specifying method Is not limited to this. A plurality of functions may be stored in the mobile terminal 2 in advance, and information for selecting a specific function from the functions may be transmitted from the authentication information management server 1, or the authentication information management server 1 Therefore, the time stamp generating function itself may be transmitted.

As described above, when a specific function is selected from a plurality of functions, it is necessary to store a plurality of inverse functions in advance on the electric lock control device 3 side as well. Information for selecting a time stamp generation function from the plurality of functions must be included in the authentication ticket TK and read by the processing unit 13.
When the authentication information management server 1 transmits the time stamp generation function itself to the mobile terminal 2, the inverse function needs to be included in the authentication ticket TK.
In this embodiment, the time stamp S _{T obtained} by converting the current time T ₁ with a function constitutes time data. However, the time data is not converted using a function, and the time T ₁ itself may be used. Good.

In the above embodiment, the user ID is included in the authentication data. The user ID is useful for preventing unauthorized copying, but is not essential data.
Further, in addition to the user ID, personal attributes such as the user's title may be included in the authentication data, and for example, unlocking may be permitted only to persons having a specific title or higher.
In addition, the effective area is set, the information is included in the authentication data, the mobile terminal 2 is provided with a GPS function, and the electric lock control device 3 includes the location information acquired by the mobile terminal 2 and the area information included in the authentication ticket TK. You may make it authenticate by.

  It is also useful for managing properties that are used by multiple users for a limited time, such as a villa with membership.

DESCRIPTION OF SYMBOLS 1 Authentication information management server 2 Portable terminal 3 Electronic lock control apparatus 4 Processing part 5, 6 Network communication part 7 Processing part 9 Seed storage part 10 Data storage part 11, 12 Proximity communication part 13 Processing part 14 Storage part TK Authentication ticket K _X Encryption key S _T Time stamp T _S / T _E Valid period

Claims (2)

  An electric lock control system comprising an authentication information management server and an electric lock control device for controlling the electric lock, wherein the authentication information management server includes a validity period for authenticating the control qualification of the electric lock An encryption unit that encrypts authentication data with a specific encryption key corresponding to the electric lock control device; and a transmission unit that transmits the encrypted authentication data to a specific portable terminal. Reading means for reading the encrypted authentication data and time data held by the specific portable terminal from the specific portable terminal, and decrypting the encrypted authentication data read from the portable terminal corresponding to the encryption key It is determined whether the time based on the decryption means for decrypting with the key and the time data acquired from the portable terminal is within the validity period included in the decrypted authentication data. Electric lock control system comprising an authentication means for authenticating the control qualification.   An electric lock control system comprising: an authentication information management server; a portable terminal that can communicate with the authentication information management server; and an electric lock control device that controls the electric lock and is capable of short-range communication with the portable terminal. The authentication information management server encrypts authentication data including a valid period for authenticating the control qualification of the electric lock with a specific encryption key corresponding to the electric lock control device; and Function information transmitting means for transmitting a function for generating time data associated with authentication data or data for specifying this function to the portable terminal, and authentication data transmitting means for transmitting encrypted authentication data to the portable terminal The portable terminal includes an authentication data storage means for storing encrypted authentication data received from the authentication information management server, and a time from the electric lock control device. Time to generate time data from the current time using the time data generation function received from the authentication information management server or the function specified based on the data for specifying the function when the data generation request signal is received A time data generation means for outputting a time data generation request signal for requesting the portable terminal to generate time data, the data generation means; and a time data storage means for storing the time data. A request signal output means; a reading means for reading encrypted authentication data and time data stored in the mobile terminal; and a decryption key corresponding to the encryption key for the encrypted authentication data read from the mobile terminal. And decryption means for decrypting with, and inverse function identification means for identifying the inverse function of the time data generation function based on the decrypted authentication data Then, it is determined whether or not the time calculated from the time data acquired from the portable terminal using the inverse function specified by the inverse function specifying means is within the effective period included in the decrypted authentication data. An electric lock control system comprising authentication means for authenticating the control qualification.

Images