JP7614964B2 - Equipment system and authentication method - Google Patents

Description

This disclosure relates to an equipment system and an authentication method.

There is a known facility equipment system in which facility equipment such as air conditioners installed in a property is controlled from a server device via a field network that uses a communication method that is not publicly available. In such a system, wireless sensors are placed in the property and the sensing information acquired by the wireless sensors is used to control the facility equipment in an energy-saving manner or to control the facility equipment more comfortably for the user. The sensing information is usually exchanged within the system by wireless communication using a publicly available communication method such as Wi-Fi (registered trademark) or Bluetooth (registered trademark). For this reason, it is possible to commit fraudulent acts such as spoofing and data tampering using general-purpose mobile devices and computer devices with respect to the sensing information, and wireless communication of wireless sensors poses a high security risk.

In response to these problems, technology has been proposed that aims to reduce security risks by authenticating wireless sensors. For example, Patent Document 1 discloses a technology in which a wireless sensor transmits its location information to a server device as authentication information, and the server device compares the received authentication information with authentication information based on the location information of the wireless sensor held by the server device, and if the authentication information matches, transmits access permission information to the wireless sensor.

JP 2019-161608 A

However, wireless sensors are often set to fixed settings, and with the above-mentioned technology, the authentication information using location information is always the same. If a third party is able to intercept such authentication information once, it is impossible to prevent fraudulent activity. Therefore, there is a demand for a facility equipment system that can ensure higher security by safely authenticating wireless sensors without using the location information of the wireless sensors.

This disclosure has been made in consideration of the above circumstances, and aims to provide an equipment system and authentication method with high security by safely authenticating wireless sensors.

In order to achieve the above object, the facility equipment system according to the present disclosure includes:
A facility equipment system that controls facility equipment using sensing information acquired by a wireless sensor,
a first receiving means for receiving an authentication parameter for authenticating the wireless sensor by a first communication method that is not publicly disclosed;
a first transmitting means for transmitting the authentication parameters received by the first receiving means by a second communication method different from the first communication method;
a second receiving means for receiving the authentication parameters transmitted by the first transmitting means by the second communication method;
a first generating means for generating first authentication information from the authentication parameters received by the second receiving means;
a packet generating means for generating a packet including the first authentication information generated by the first generating means and the sensing information acquired by the wireless sensor;
a packet transmitting means for transmitting the packet generated by the packet generating means by a third communication method different from the second communication method;
a packet receiving means for receiving the packet transmitted by the packet transmitting means by the third communication method;
an acquisition means for acquiring the first authentication information from the packet received by the packet receiving means;
a third receiving means for receiving the authentication parameters by the first communication method;
a second generating means for generating second authentication information from the authentication parameters received by the third receiving means;
The authentication information receiving means includes a matching means for comparing the first authentication information acquired by the acquiring means with the second authentication information generated by the second generating means, and discarding the packet received by the packet receiving means if it is determined that the first authentication information and the second authentication information do not match.

This disclosure makes it possible to provide a facility equipment system and authentication method with high security by safely authenticating wireless sensors.

Block diagram of an equipment system according to a first embodiment FIG. 1 is a block diagram showing a hardware configuration of a server device according to a first embodiment. FIG. 1 is a block diagram showing a hardware configuration of a notification device according to a first embodiment. FIG. 1 is a block diagram showing a hardware configuration of a wireless sensor according to a first embodiment. FIG. 1 is a block diagram showing a hardware configuration of a relay device according to a first embodiment. FIG. 1 is a block diagram showing a functional configuration of an equipment system according to a first embodiment. FIG. 1 is a diagram for explaining a light emission information table according to the first embodiment; FIG. 1 is a diagram for explaining a set air volume information table according to the first embodiment; FIG. 1 is a diagram for explaining a measured air volume information table according to the first embodiment; FIG. 1 is a diagram for explaining a transmission radio wave intensity information table according to the first embodiment; FIG. 1 is a diagram for explaining a received radio wave intensity information table according to the first embodiment; 1 is a flowchart showing an authentication parameter transmission process executed by a server device according to a first embodiment; FIG. 1 is a sequence diagram illustrating an example of communication between a notification device, a wireless sensor, and a relay device according to the first embodiment. FIG. 13 is a block diagram showing a functional configuration of an equipment system according to a second embodiment. FIG. 13 is a diagram for explaining an attribute information table according to the second embodiment.

(Embodiment 1)
The facility equipment system according to the first embodiment is a system that controls facility equipment using sensing information acquired by wireless sensors.

As shown in FIG. 1, the facility equipment system 1000 includes a server device 1, one or more facility equipment 2, one or more notification devices 3, one or more wireless sensors 4, and one or more relay devices 5. The facility equipment system 1000 is a system constructed in a property such as an office building, a commercial facility, or a house. The server device 1 is communicatively connected to the facility equipment 2, the notification device 3, and the relay device 5 via a network 6. Here, the network 6 is a network that communicates using a communication method that is not open to the public, such as a wired field network. The relay device 5 is communicatively connected to the wireless sensor 4 via wireless communication 7. The wireless communication 7 is wireless communication using a publicly available communication method such as Wi-Fi (registered trademark) or Bluetooth (registered trademark). The notification device 3 is communicatively connected to the wireless sensor 4 via communication 8 using a communication method different from the communication method used in the network 6 and the wireless communication 7.

The server device 1 acquires sensing information from the wireless sensor 4 via the relay device 5, and acquires information indicating the operation details from the equipment 2 and information detected by the equipment 2. The server device 1 then controls the equipment 2 using the sensing information or the information acquired from the equipment 2. The server device 1 also generates authentication parameters, which will be described later, and transmits the generated authentication parameters to the notification device 3 and the relay device 5.

The equipment 2 is electrical equipment installed in the property. The equipment 2 is, for example, an air conditioner, lighting equipment, ventilation equipment, etc. The equipment 2 operates according to instructions from the server device 1. The equipment 2 also transmits information indicating the operation details of the equipment 2, information detected by the equipment 2, etc. to the server device 1.

The notification device 3 is a device for notifying the wireless sensor 4 of the authentication parameters received from the server device 1. The notification device 3 transmits the authentication parameters to the wireless sensor 4 by communication 8, which is a communication method different from the communication method used in the network 6 and the wireless communication 7. The different communication methods are, for example, (A) an infrared communication method, (B) a visible light communication method, (C) a communication method using lighting, and (D) a communication method using a fan. The notification device 3 transmits the authentication parameters to the wireless sensor 4 by one of the communication methods (A) to (D). The administrator of the facility equipment system 1000 arbitrarily decides which of the communication methods (A) to (D) to use. The communication methods (A) to (D) will be described in detail later.

The wireless sensor 4 is a sensor that acquires information about the environment of the property in which the equipment 2 is installed, and transmits the acquired information via wireless communication. The information acquired by the wireless sensor 4 is, for example, information about temperature, humidity, illuminance, etc. Hereinafter, the information acquired by the wireless sensor 4 is referred to as "sensing information." The wireless sensor 4 transmits the sensing information to the relay device 5 via wireless communication 7.

The relay device 5 is a device for relaying the sensing information received from the wireless sensor 4 to the server device 1 and the equipment 2. The relay device 5 also performs authentication processing for the wireless sensor 4. Details of the authentication processing will be described later.

Next, the hardware configuration of the server device 1 will be described with reference to FIG. 2.

The server device 1 has a processor 11 that executes various processes, a main memory unit 12 that is used as a working area for the processor 11, an auxiliary memory unit 13 that stores various data used in the processing of the processor 11, an RTC (Real Time Clock) 14 that keeps time, an input unit 15 that acquires input information, an output unit 16 that presents various information, and a wired communication circuit 17 for wired communication with an external device. The main memory unit 12, the auxiliary memory unit 13, the RTC 14, the input unit 15, the output unit 16, and the wired communication circuit 17 are all connected to the processor 11 via a bus 18.

The processor 11 includes a CPU (Central Processing Unit). The processor 11 executes programs stored in the auxiliary storage unit 13 to realize various functions of the server device 1.

The main memory unit 12 includes a RAM (Random Access Memory). Programs are loaded into the main memory unit 12 from the auxiliary memory unit 13. The main memory unit 12 is used as a working area for the processor 11.

The auxiliary storage unit 13 includes a non-volatile memory such as an EEPROM (Electrically Erasable Programmable Read-Only Memory). In addition to programs, the auxiliary storage unit 13 stores various data used in the processing of the processor 11. In accordance with instructions from the processor 11, the auxiliary storage unit 13 supplies the processor 11 with data used by the processor 11, and stores the data supplied from the processor 11.

The RTC 14 is a timing device equipped with an oscillator circuit using a crystal oscillator. The RTC 14, for example, has a built-in battery and continues to measure time even when the server device 1 is powered off.

The input unit 15 includes input devices such as input keys and a pointing device. The input unit 15 acquires information input by a user of the server device 1 and notifies the processor 11 of the acquired information.

The output unit 16 includes output devices such as an LCD (Liquid Crystal Display) and a speaker. The output unit 16 may be configured as a touch screen integrally formed with a pointing device constituting the input unit 15. The output unit 16 presents various information to the user in accordance with instructions from the processor 11.

The wired communication circuit 17 includes a network interface circuit for performing wired communication with an external device. The wired communication circuit 17 receives a signal from the external device and outputs data indicated by this signal to the processor 11. The wired communication circuit 17 also transmits a signal indicating the data output from the processor 11 to the external device.

Next, the hardware configuration of the notification device 3 will be described with reference to FIG. 3.

The notification device 3 has a processor 31 that executes various processes, a main memory unit 32 that is used as a working area for the processor 31, an auxiliary memory unit 33 that stores various data used in the processing of the processor 31, an RTC 34 that keeps time, a wired communication circuit 35 for wired communication with an external device, and a notification unit 36 that notifies authentication parameters. The main memory unit 32, the auxiliary memory unit 33, the RTC 34, the wired communication circuit 35, and the notification unit 36 are all connected to the processor 31 via a bus 37.

The processor 31, the main memory unit 32, the auxiliary memory unit 33, the RTC 34, and the wired communication circuit 35 are similar to the processor 11, the main memory unit 12, the auxiliary memory unit 13, the RTC 14, and the wired communication circuit 17 in FIG. 2.

The notification unit 36 is a means for notifying the wireless sensor 4 of the authentication parameters received from the server device 1, and its configuration differs depending on the communication method (A) to (D) used with the wireless sensor 4. When the communication method used with the wireless sensor 4 is (A) infrared communication, the notification unit 36 is an infrared communication circuit 36-1. When the communication method used with the wireless sensor 4 is (B) visible light communication, the notification unit 36 is a visible light communication circuit 36-2. When the communication method used with the wireless sensor 4 is (C) communication using lighting, the notification unit 36 is a lighting controller 36-3a and an LED (Light Emitting Diode) 36-3b. When the communication method used with the wireless sensor 4 is (D) communication using a fan, the notification unit 36 is a fan controller 36-4a and a fan 36-4b.

Next, the hardware configuration of the wireless sensor 4 will be described with reference to FIG. 4.

The wireless sensor 4 has a processor 41 that executes various processes, a main memory unit 42 that is used as a working area for the processor 41, an auxiliary memory unit 43 that stores various data used in the processes of the processor 41, an RTC 44 that keeps time, a wireless communication circuit 45 for wireless communication with an external device, a sensor circuit 46 that measures various information, and an acquisition unit 47 that acquires authentication parameters. The main memory unit 42, the auxiliary memory unit 43, the RTC 44, the wireless communication circuit 45, the sensor circuit 46, and the acquisition unit 47 are all connected to the processor 41 via a bus 48.

The processor 41, the main memory unit 42, the auxiliary memory unit 43, and the RTC 44 are similar to the processor 11, the main memory unit 12, the auxiliary memory unit 13, and the RTC 14 in FIG. 2.

The wireless communication circuit 45 includes an antenna and a network interface circuit for wireless communication with an external device. The wireless communication circuit 45 receives a signal from the external device and outputs data indicated by this signal to the processor 41. The wireless communication circuit 45 also transmits a signal indicating the data output from the processor 41 to the external device. The wireless communication circuit 45 has a function of measuring the received radio wave strength when a signal is received. The wireless communication circuit 45 also has a function of changing the transmitted radio wave strength when a signal is transmitted.

The sensor circuit 46 is a circuit for measuring environmental information such as temperature, humidity, and illuminance.

The acquisition unit 47 is a means for acquiring authentication parameters notified from the notification device 3, and its configuration differs depending on the communication method (A) to (D) used with the notification device 3. When the communication method used with the notification device 3 is (A) infrared communication, the acquisition unit 47 is an infrared communication circuit 47-1. When the communication method used with the notification device 3 is (B) visible light communication, the acquisition unit 47 is a visible light communication circuit 47-2. When the communication method used with the notification device 3 is (C) communication using lighting, the acquisition unit 47 is an illuminance sensor circuit 47-3. When the communication method used with the notification device 3 is (D) communication using a fan, the acquisition unit 47 is an air volume sensor circuit 47-4.

Next, the hardware configuration of relay device 5 will be described with reference to FIG. 5.

The relay device 5 has a processor 51 that executes various processes, a main memory unit 52 that is used as a working area for the processor 51, an auxiliary memory unit 53 that stores various data used in the processes of the processor 51, an RTC 54 that keeps time, a wired communication circuit 55 for wired communication with an external device, and a wireless communication circuit 56 for wireless communication with an external device. The main memory unit 52, the auxiliary memory unit 53, the RTC 54, the wired communication circuit 55, and the wireless communication circuit 56 are all connected to the processor 51 via a bus 57.

The processor 51, the main memory unit 52, the auxiliary memory unit 53, the RTC 54, and the wired communication circuit 55 are the same as the processor 11, the main memory unit 12, the auxiliary memory unit 13, the RTC 14, and the wired communication circuit 17 in FIG. 2. The wireless communication circuit 56 is the same as the wireless communication circuit 45 in FIG. 4.

Next, referring to FIG. 6, the functions of the server device 1, notification device 3, wireless sensor 4, and relay device 5 included in the facility equipment system 1000 will be described.

The server device 1 functionally comprises an authentication parameter generating unit 101 that generates authentication parameters, and an authentication parameter transmitting unit 102 that transmits the authentication parameters.

The authentication parameter generation unit 101 periodically generates authentication parameters for authenticating the wireless sensor 4. The authentication parameter generation unit 101 is realized by the processor 11. The authentication parameter generation unit 101 is an example of an authentication parameter generation means.

The authentication parameter is a parameter used to authenticate the wireless sensor 4, and is generated periodically. The authentication parameter is, for example, the level of received radio wave strength when the relay device 5 receives a packet from the wireless sensor 4, a random symbol string, etc. In the following, the authentication parameter is the level of received radio wave strength, and the level of received radio wave strength is represented, for example, by "strong", "medium", or "weak".

Here, "generate periodically" means that the authentication parameter generation unit 101 repeatedly generates authentication parameters, and the interval at which they are generated is not limited to being constant. The interval is determined arbitrarily by the administrator of the equipment system 1000. The interval may be set according to a predetermined rule, or may be set to an irregular value.

For example, if the authentication parameter is the level of received radio wave strength, the authentication parameter generation unit 101 generates the authentication parameter by randomly selecting a value from the received radio wave strength levels "strong," "medium," and "weak."

The authentication parameter transmission unit 102 transmits the authentication parameters generated by the authentication parameter generation unit 101 to the notification device 3 and the relay device 5 by a first communication method that is not publicly available. The authentication parameter transmission unit 102 is realized by the processor 11 and the wired communication circuit 17 working together. The authentication parameter transmission unit 102 is an example of a second transmission means.

The first communication method is a communication method for which the standards relating to hardware and software, such as communication circuits and communication protocols, are not publicly available, and is, for example, a wired field network communication method used exclusively in the property in which the equipment 2 is installed. The first communication method has a lower risk of fraudulent acts, such as spoofing and data tampering, than publicly available communication methods such as Wi-Fi (registered trademark) and Bluetooth (registered trademark).

For example, the authentication parameter transmission unit 102 transmits information specifying a "strong" level of received radio wave intensity as an authentication parameter to the notification device 3 and relay device 5 via the network 6, which is a wired field network used exclusively by the property.

The notification device 3 functionally comprises an authentication parameter receiving unit 301 that receives authentication parameters from the server device 1, and an authentication parameter transmitting unit 302 that transmits the authentication parameters to the wireless sensor 4.

The authentication parameter receiving unit 301 receives the authentication parameters transmitted by the authentication parameter transmitting unit 102 of the server device 1 by the first communication method. The authentication parameter receiving unit 301 also stores information on the received authentication parameters in the auxiliary storage unit 33. The authentication parameter receiving unit 301 is realized by the processor 31 and the wired communication circuit 35 working together. The authentication parameter receiving unit 301 is an example of a first receiving means.

For example, the authentication parameter receiving unit 301 receives information specifying a level of received radio wave strength of "strong" from the authentication parameter transmitting unit 102 of the server device 1 via the network 6, which is a wired field network. Then, the authentication parameter receiving unit 301 stores the information on the level of received radio wave strength of "strong" in the auxiliary memory unit 33 as an authentication parameter.

The authentication parameter transmission unit 302 transmits the authentication parameters received by the authentication parameter reception unit 301 by a second communication method different from the first communication method. The authentication parameter transmission unit 302 is realized by cooperation between the processor 31 and the notification unit 36. The authentication parameter transmission unit 302 is an example of a first transmission means.

The second communication method is a communication method different from the first communication method and also different from the third communication method described below. As long as the second communication method is different from the first and third communication methods, it does not matter whether it is a publicly available communication method or not. The second communication method includes, for example, four communication methods: (A) an infrared communication method, (B) a visible light communication method, (C) a communication method using lighting, and (D) a communication method using a fan. The authentication parameter transmission unit 302 transmits the authentication parameters by a communication method adopted in the facility equipment system 1000 among the above communication methods (A) to (D).

When the facility equipment system 1000 employs the (A) infrared communication method, the authentication parameter transmission unit 302 is realized by the processor 31 and the infrared communication circuit 36-1 working together. For example, if the authentication parameter reception unit 301 receives information from the server device 1 using the first communication method, in which the level of received radio wave intensity is specified as the authentication parameter, the authentication parameter transmission unit 302 transmits information in which the level of received radio wave intensity is specified as the authentication parameter using the (A) infrared communication method to the wireless sensor 4.

In addition, when the facility equipment system 1000 employs the communication method of (B) visible light communication, the authentication parameter transmission unit 302 is realized by the processor 31 and the visible light communication circuit 36-2 working together. For example, if the authentication parameter reception unit 301 receives information from the server device 1 using the first communication method, in which the level of received radio wave intensity is specified as the authentication parameter, the authentication parameter transmission unit 302 transmits information in which the level of received radio wave intensity is specified as the authentication parameter using the communication method of (B) visible light communication to the wireless sensor 4.

In addition, when the facility equipment system 1000 employs the communication method of communication using lighting (C), the authentication parameter transmission unit 302 is realized by the processor 31, the lighting controller 36-3a, and the LED 36-3b working together. In this case, the authentication parameter is indicated by the lighting, that is, the light emitted by the LED 36-3b. For example, if the authentication parameter reception unit 301 receives information from the server device 1 using the first communication method in which the level of received radio wave intensity is specified as the authentication parameter, the authentication parameter transmission unit 302 transmits information in which the level of received radio wave intensity is specified as the authentication parameter to the wireless sensor 4 using the communication method of communication using lighting (C). For example, the level of received radio wave intensity, which is the authentication parameter, is associated with light emission information such as the light emission intensity, light emission color, and light emission time series pattern of the LED provided in the notification device 3, and the auxiliary storage unit 33 stores a table in which the level of received radio wave intensity is associated with the light emission information.

Figure 7 shows an example of a table in which the level of received radio wave strength is associated with light emission information. In the light emission information table in Figure 7, the level of received radio wave strength is associated with the time series pattern of light emission and is registered. For example, the record in the first row of the light emission information table in Figure 7 indicates that the level of received radio wave strength "strong" is associated with the time series pattern of light emission "ON-ON-ON". Here, "ON" indicates, for example, lighting per unit time, and "OFF" indicates lighting per unit time.

The authentication parameter transmission unit 302 refers to the table in FIG. 7 and identifies the time series pattern of light emission representing the "strong" level of received radio wave intensity of the authentication parameter as "ON-ON-ON", and controls the lighting controller 36-3a so that the time series pattern of light emission of the LED 36-3b becomes "ON-ON-ON".

In addition, when the facility equipment system 1000 employs the (D) fan-based communication method, the authentication parameter transmission unit 302 is realized by the processor 31, the fan controller 36-4a, and the fan 36-4b working together. In this case, the authentication parameter is indicated by the air volume of the fan 36-4b. For example, the authentication parameter transmission unit 302 transmits information in which the received radio wave strength "strong" is specified as the authentication parameter to the wireless sensor 4 using the (D) fan-based communication method. For example, the level of the received radio wave strength, which is the authentication parameter, is associated with the strength of the air volume, and the auxiliary memory unit 33 stores a table in which the level of the received radio wave strength is associated with the strength of the air volume.

Fig. 8 shows an example of a table in which the level of received radio wave strength corresponds to the strength of the airflow. In the set airflow information table of Fig. 8, the level of received radio wave strength and the range of set airflow of fan 36-4b are registered in association with each other. For example, the record in the first row of the set airflow information table of Fig. 8 indicates that the level of received radio wave strength "strong" corresponds to the range of set airflow "x1 [ ^m3 /s] to x2 [ ^m3 /s]". Note that x1, x2, ..., x6 in Fig. 8 indicate arbitrary numerical values.

The authentication parameter transmission unit 302 refers to the table in FIG. 8 and identifies the range of air volume representing the "strong" level of received radio wave intensity of the authentication parameter as "x1 [m ³ /s] to x2 [m ³ /s]", and controls the fan controller 36-4a so that the air volume of the fan 36-4b falls within the range of "x1 [m ³ /s] to x2 [m ³ /s]".

The wireless sensor 4 in FIG. 6 functionally comprises an authentication parameter receiving unit 401 that receives authentication parameters from the notification device 3, a first authentication information generating unit 402 that generates first authentication information from the authentication parameters, a sensing information acquiring unit 403 that acquires sensing information, a packet generating unit 404 that generates a packet including the first authentication information and the sensing information, and a packet transmitting unit 405 that transmits the packet to the relay device 5.

The authentication parameter receiving unit 401 receives the authentication parameters transmitted by the authentication parameter transmitting unit 302 of the notification device 3 by the second communication method. The authentication parameter receiving unit 401 also stores information on the received authentication parameters in the auxiliary storage unit 43. The authentication parameter receiving unit 401 is an example of a second receiving means.

When the facility equipment system 1000 employs the (A) infrared communication method, the authentication parameter receiving unit 401 is realized by cooperation between the processor 41 and the infrared communication circuit 47-1. For example, the authentication parameter receiving unit 401 receives information from the notification device 3 using the (A) infrared communication method, in which the level of received radio wave intensity "strong" is specified as an authentication parameter. The authentication parameter receiving unit 401 then stores the information on the level of received radio wave intensity "strong" in the auxiliary storage unit 43 as an authentication parameter.

In addition, when the facility equipment system 1000 employs the communication method of (B) visible light communication, the authentication parameter receiving unit 401 is realized by cooperation between the processor 41 and the visible light communication circuit 47-2. For example, the authentication parameter receiving unit 401 transmits information in which the level of received radio wave intensity "strong" is specified as an authentication parameter from the notification device 3 using the communication method of (B) visible light communication. Then, the authentication parameter receiving unit 401 stores the information on the level of received radio wave intensity "strong" in the auxiliary storage unit 43 as an authentication parameter.

When the facility equipment system 1000 employs the (C) lighting-based communication method, the authentication parameter receiving unit 401 is realized by the processor 41 and the illuminance sensor circuit 47-3 working together. The auxiliary memory unit 43 of the wireless sensor 4 stores the light emission information table of FIG. 7, just like the notification device 3.

For example, the authentication parameter receiving unit 401 detects the time series pattern of light emission of LED 36-3b, "ON-ON-ON", using the illuminance sensor circuit 47-3. Next, the authentication parameter receiving unit 401 refers to the light emission information table of FIG. 7 stored in the auxiliary memory unit 43, and identifies the level of received radio wave intensity represented by the detected time series pattern of light emission, "ON-ON-ON", as "strong". Then, the authentication parameter receiving unit 401 stores information on the level of received radio wave intensity, "strong", in the auxiliary memory unit 43 as an authentication parameter.

In addition, when the facility equipment system 1000 employs the (D) fan-based communication method, the authentication parameter receiving unit 401 is realized by the processor 41 and the airflow sensor circuit 47-4 working together. In addition, the auxiliary memory unit 43 of the wireless sensor 4 stores a table that associates the level of received radio wave intensity with the strength of the airflow.

Fig. 9 shows an example of a table in which the level of received radio wave strength corresponds to the strength of air volume. In the measured air volume information table of Fig. 9, the level of received radio wave strength is registered in correspondence with the range of measured air volume measured by the air volume sensor circuit 47-4. For example, the record in the first row of the measured air volume information table of Fig. 9 indicates that the level of received radio wave strength "strong" corresponds to the set air volume range "x7 [ ^m3 /s] to x8 [ ^m3 /s]". Note that x7, x8, ..., x12 in Fig. 9 indicate arbitrary numerical values.

For example, the authentication parameter receiving unit 401 measures the volume of air "x13 [m ³ /s]" output by the fan 36-4b using the air volume sensor circuit 47-4. Next, when the authentication parameter receiving unit 401 determines that the measured air volume "x13 [m ³ /s]" is within the range of "x7 [m ³ /s] to x8 [m ³ /s]" by referring to the measured air volume information table of FIG. 9, it specifies the level of received radio wave intensity represented by the measured air volume "x13" as "strong". Then, the authentication parameter receiving unit 401 stores information on the level of received radio wave intensity "strong" in the auxiliary storage unit 43 as an authentication parameter.

The first authentication information generating unit 402 generates first authentication information from the authentication parameters received by the authentication parameter receiving unit 401. The first authentication information generating unit 402 is realized by the processor 31. The first authentication information generating unit 402 is an example of a first generating means.

For example, the first authentication information generating unit 402 generates a hash value using a predetermined hash function with the information on the level of received radio wave strength "strong" stored in the auxiliary storage unit 43 as a key, and the generated hash value is regarded as the first authentication information. Hereinafter, the hash value generated by the first authentication information generating unit 402 with the information on the level of received radio wave strength "strong" as a key is referred to as "hash value 1."

The sensing information acquisition unit 403 acquires sensing information. The sensing information acquisition unit 403 is realized by the processor 41 and the sensor circuit 46 working together.

For example, the sensing information acquisition unit 403 acquires, as sensing information, information on the temperature and humidity in the property in which the equipment 2 is installed.

The packet generating unit 404 generates a packet including the first authentication information generated by the first authentication information generating unit 402 and the sensing information acquired by the sensing information acquiring unit 403. The packet generating unit 404 is realized by the processor 41. The packet generating unit 404 is an example of a packet generating means.

For example, the packet generation unit 404 generates a packet that includes a hash value of 1 and sensing information.

The packet transmitting unit 405 transmits the packets generated by the packet generating unit 404 by a third communication method different from the second communication method. The packet transmitting unit 405 is realized by the processor 41 and the wireless communication circuit 45 working together. The packet transmitting unit 405 is an example of a packet transmitting means.

The third communication method is a communication method different from the second communication method. For example, the third communication method is a communication method for which the software or hardware specifications are publicly available, specifically, a wireless communication method such as Wi-Fi (registered trademark) or Bluetooth (registered trademark). Publicly available wireless communication methods have a higher risk of fraudulent activities such as spoofing and data tampering than the first communication method, which is not publicly available.

For example, the packet transmitting unit 405 transmits a packet including the hash value 1 and the sensing information to the relay device 5 by a publicly available wireless communication method. Here, if the authentication parameter is the level of received radio wave strength, the packet transmitting unit 405 sets the transmitted radio wave strength when transmitting the packet so that the level of received radio wave strength measured when the relay device 5 receives the packet matches the level of received radio wave strength specified as the authentication parameter. For example, the auxiliary memory unit 43 stores a table in which the level of received radio wave strength of the authentication parameter is associated with the transmitted radio wave strength when the packet transmitting unit 405 transmits the packet.

Figure 10 shows an example of a table in which the level of received radio wave strength of the authentication parameters corresponds to the transmitted radio wave strength when the packet transmitting unit 405 transmits a packet. In the transmitted radio wave strength information table in Figure 10, the level of received radio wave strength of the authentication parameters and the range of transmitted radio wave strength of the wireless communication circuit 45 are registered in correspondence with each other. For example, the record in the first row of the transmitted radio wave strength information table in Figure 10 indicates that the level of received radio wave strength "strong" of the authentication parameters corresponds to the range of transmitted radio wave strength "y1 [dBm] to y2 [dBm]" of the wireless communication circuit 45.

The packet transmitting unit 405 refers to the transmission radio wave strength information table in FIG. 10 and identifies the range of the transmission radio wave strength representing the "strong" level of the reception radio wave strength of the authentication parameters as "y1 [dBm] to y2 [dBm]". The packet transmitting unit 405 sets the transmission radio wave strength of the wireless communication circuit 45 to "y13 [dBm]" within the range of "y1 [dBm] to y2 [dBm]" and transmits a packet including the hash value 1 and the sensing information to the relay device 5.

The relay device 5 in FIG. 6 functionally comprises a packet receiving unit 501 that receives packets from the wireless sensor 4, a first authentication information acquiring unit 502 that acquires first authentication information from the packets, an authentication parameter receiving unit 503 that receives authentication parameters from the server device 1, a second authentication information generating unit 504 that generates second authentication information from the authentication parameters received from the server device 1, a matching unit 505 that matches the first authentication information with the second authentication information, and a sensing information transmitting unit 506 that transmits sensing information.

The packet receiving unit 501 receives the packet transmitted by the packet transmitting unit 405 of the wireless sensor 4 using the third communication method. The packet receiving unit 501 is realized by cooperation between the processor 51 and the wireless communication circuit 56. The packet receiving unit 501 is an example of a packet receiving means.

For example, the packet receiving unit 501 receives a packet including a hash value 1 and sensing information from the wireless sensor 4 using a publicly available wireless communication method. In addition, the packet receiving unit 501 measures the value of the received radio wave strength when receiving the packet. The measured value of the received radio wave strength is set to "y14 [dBm]".

The first authentication information acquisition unit 502 acquires the first authentication information from the packet received by the packet receiving unit 501. The first authentication information acquisition unit 502 is realized by cooperation between the processor 51 and the wireless communication circuit 56. The first authentication information acquisition unit 502 is an example of an acquisition means.

For example, the first authentication information acquisition unit 502 acquires hash value 1 as the first authentication information from the packet received by the packet receiving unit 501. Here, if the authentication parameter is the level of received radio wave strength, the first authentication information acquisition unit 502 further refers to a received radio wave strength information table in FIG. 11 (described later) to determine which level of received radio wave strength the value of received radio wave strength measured by the packet receiving unit 501 corresponds to, and identifies the level of received radio wave strength, which is the authentication parameter. The received radio wave strength information table in FIG. 11 is stored in the auxiliary storage unit 43. The first authentication information acquisition unit 502 then acquires the identified level of received radio wave strength as the first authentication information.

Figure 11 shows an example of a received radio wave strength information table. In the received radio wave strength information table in Figure 11, the received radio wave strength level of the authentication parameters and the range of the received radio wave strength of the signal received by the wireless communication circuit 56 are registered in association with each other. For example, the record in the first row of the received radio wave strength information table in Figure 11 indicates that the received radio wave strength level "strong" is associated with the received radio wave strength range "y7 [dBm] to y8 [dBm]."

The packet receiving unit 501 refers to the received signal strength information table in FIG. 11 to identify the level of received signal strength that corresponds to the range of received signal strength that includes the received signal strength "y14 [dBm]". If the received signal strength "y14 [dBm]" is included in "y1 [dBm] to y2 [dBm]", the first authentication information acquiring unit 502 acquires the hash value 1 and the level of received signal strength "strong" as the first authentication information.

The authentication parameter receiving unit 503 receives the authentication parameters transmitted by the authentication parameter transmitting unit 102 of the server device 1 by the first communication method. The authentication parameter receiving unit 503 also stores the received authentication parameter information in the auxiliary storage unit 53. The authentication parameter receiving unit 503 is realized by the processor 51 and the wired communication circuit 55 working together. The authentication parameter receiving unit 503 is an example of a third receiving means.

For example, the authentication parameter receiving unit 503 receives information specifying the level of received radio wave intensity "strong" as an authentication parameter from the server device 1 via the network 6, which is a wired field network. Then, the authentication parameter receiving unit 503 stores the information on the level of received radio wave intensity "strong" as an authentication parameter in the auxiliary memory unit 53.

The second authentication information generating unit 504 generates second authentication information from the authentication parameters received by the authentication parameter receiving unit 503. The second authentication information generating unit 504 is realized by the processor 51. The second authentication information generating unit 504 is an example of a second generating means.

For example, the second authentication information generating unit 504 uses the information on the level of received radio wave strength "strong" stored in the auxiliary storage unit 53 as a key to generate a hash value using the same hash function as the hash function used to generate the first authentication information, and sets the generated hash value as the second authentication information. Hereinafter, the hash value generated by the second authentication information generating unit 504 using the information on the level of received radio wave strength "strong" as a key is referred to as "hash value 2." Hereinafter, when the authentication parameter is the level of received radio wave strength, the second authentication information generating unit 504 also includes the level of received radio wave strength of the authentication parameter in the second authentication information. For example, the second authentication information generating unit 504 generates hash value 2 and the level of received radio wave strength "strong" as the second authentication information.

The matching unit 505 matches the first authentication information acquired by the first authentication information acquisition unit 502 with the second authentication information generated by the second authentication information generation unit 504. If the matching unit 505 determines that the first authentication information and the second authentication information match, it causes the sensing information transmission unit 506 to transmit the sensing information included in the packet received by the packet reception unit 501. On the other hand, if the matching unit 505 determines that the first authentication information and the second authentication information do not match, it discards the packet received by the packet reception unit 501. The matching unit 505 is realized by the processor 51. The matching unit 505 is an example of a matching means.

For example, the comparison unit 505 compares hash value 1 and the level of received radio wave strength "strong" with hash value 2 and the level of received radio wave strength "strong". If hash value 1 and hash value 2 are the same value, both levels of received radio wave strength are "strong", and the comparison unit 505 determines that the first authentication information and the second authentication information match. In this case, the comparison unit 505 causes the sensing information transmission unit 506 to transmit the sensing information contained in the packet containing hash value 1 to the server device 1 or the facility device 2.

On the other hand, if hash value 1 and hash value 2 are different values, or if the levels of received radio wave intensity are different values, the matching unit 505 determines that the first authentication information and the second authentication information do not match. In this case, the matching unit 505 discards the packet received by the packet receiving unit 501, which includes hash value 1 and sensing information. In other words, the sensing information received from the wireless sensor 4 is not transmitted to the server device 1 and the equipment 2.

When the comparison unit 505 determines that the first authentication information and the second authentication information match, the sensing information transmission unit 506 transmits the sensing information of the packet including the first authentication information to the server device 1 or the facility device 2 by the first communication method. The sensing information transmission unit 506 is realized by the processor 51 and the wired communication circuit 55 working together.

For example, if the comparison unit 505 determines that the first authentication information and the second authentication information match, the sensing information transmission unit 506 extracts the sensing information from the packet including the hash value 1 and the sensing information received by the packet reception unit 501. Then, the sensing information transmission unit 506 transmits the sensing information to the server device 1 or the facility device 2 via the network 6, which is a wired field network.

Next, the authentication parameter transmission process executed by the server device 1 according to this embodiment will be described with reference to the flowchart in FIG. 12. The authentication parameter transmission process in FIG. 12 is repeatedly executed at predetermined intervals.

The authentication parameter generating unit 101 generates authentication parameters for authenticating the wireless sensor 4 (step S101). Then, the authentication parameter transmitting unit 102 transmits the authentication parameters to the notification device 3 and the relay device 5 by the first communication method that is not publicly available (step S102).

For example, the authentication parameter generation unit 101 randomly selects a value from the received radio wave strength levels "strong," "medium," and "weak," and generates the received radio wave strength level "strong" as an authentication parameter. The authentication parameter transmission unit 102 then transmits information specifying the received radio wave strength level "strong" as an authentication parameter to the notification device 3 and relay device 5 via the network 6, which is a wired field network.

Next, the process executed between the notification device 3, the wireless sensor 4, and the relay device 5 according to this embodiment will be explained using the sequence diagram in FIG. 13.

The authentication parameter receiving unit 301 of the notification device 3 receives the authentication parameters transmitted by the authentication parameter transmitting unit 102 of the server device 1 using the first communication method and stores them in the auxiliary storage unit 33 (step S201). Then, the authentication parameter transmitting unit 302 of the notification device 3 transmits the authentication parameters received by the authentication parameter receiving unit 301 using a second communication method that is different from the first communication method (step S202).

For example, the authentication parameter receiving unit 301 receives information in which the level of received radio wave strength "strong" is specified as an authentication parameter from the server device 1 via the network 6, which is a wired field network. The authentication parameter receiving unit 301 also stores the information in which the level of received radio wave strength "strong" is specified as an authentication parameter in the auxiliary storage unit 33. The authentication parameter transmitting unit 302 then transmits the information in which the level of received radio wave strength "strong" is specified as an authentication parameter by a communication method adopted in the facility equipment system 1000 from among the communication methods (A) to (D) above.

The authentication parameter receiving unit 503 of the relay device 5 receives the authentication parameters transmitted by the authentication parameter transmitting unit 102 of the server device 1 using the first communication method and stores them in the auxiliary storage unit 53 (step S203). Then, the second authentication information generating unit 504 of the relay device 5 generates second authentication information from the authentication parameters received by the authentication parameter receiving unit 503 (step S204).

For example, the authentication parameter receiving unit 503 receives information in which the level of received radio wave strength "strong" is specified as an authentication parameter from the server device 1 via the network 6, which is a wired field network. The authentication parameter receiving unit 503 also stores the information on the level of received radio wave strength "strong" as an authentication parameter in the auxiliary storage unit 53. Next, the second authentication information generating unit 504 generates a hash value 2 as the second authentication information by using the information on the level of received radio wave strength "strong" as a key and the same hash function as the hash function used to generate the first authentication information. Then, the second authentication information generating unit 504 generates the hash value 2 and the level of received radio wave strength "strong" as the second authentication information.

The authentication parameter receiving unit 401 of the wireless sensor 4 receives the authentication parameters transmitted by the authentication parameter transmitting unit 302 of the notification device 3 using the second communication method and stores them in the auxiliary storage unit 43 (step S205). Then, the first authentication information generating unit 402 of the wireless sensor 4 generates first authentication information from the authentication parameters received by the authentication parameter receiving unit 401 (step S206). Also, the sensing information acquiring unit 403 of the wireless sensor 4 acquires sensing information (step S207).

For example, the authentication parameter receiving unit 401 receives information in which the level of received radio wave intensity "strong" is specified as an authentication parameter by a communication method adopted in the facility equipment system 1000 among the above communication methods (A) to (D), and stores the information in the auxiliary memory unit 43. Then, the first authentication information generating unit 402 generates a hash value 1 as the first authentication information by a predetermined hash function using the information on the level of received radio wave intensity "strong" as a key. In addition, the sensing information acquiring unit 403 acquires, as sensing information, information on the temperature and humidity in the property in which the facility equipment 2 is installed.

Next, the packet generating unit 404 of the wireless sensor 4 generates a packet including the first authentication information generated by the first authentication information generating unit 402 and the sensing information acquired by the sensing information acquiring unit 403 (step S208). Then, the packet transmitting unit 405 of the wireless sensor 4 transmits the packet generated by the packet generating unit 404 by the third communication method (step S209).

For example, the packet generation unit 404 generates a packet including the hash value 1 and the sensing information. Then, the packet transmission unit 405 transmits the packet including the hash value 1 and the sensing information to the relay device 5 by a publicly available wireless communication method.

The packet receiving unit 501 of the relay device 5 receives the packet transmitted by the packet transmitting unit 405 of the wireless sensor 4 using the third communication method (step S210). Next, the first authentication information acquiring unit 502 of the relay device 5 acquires the first authentication information from the packet received by the packet receiving unit 501 (step S211). Then, the matching unit 505 of the relay device 5 matches the first authentication information acquired by the first authentication information acquiring unit 502 with the second authentication information generated by the second authentication information generating unit 504 (step S212).

For example, the packet receiving unit 501 receives a packet including hash value 1 and sensing information from the wireless sensor 4 using a publicly available wireless communication method. When receiving the packet, the packet receiving unit 501 also measures the value of the received radio wave strength. Next, the first authentication information acquisition unit 502 acquires hash value 1 from the packet received by the packet receiving unit 501 as the first authentication information, and further acquires the level of received radio wave strength "strong" identified based on the value of the received radio wave strength measured by the packet receiving unit 501 as the first authentication information. Then, the comparison unit 505 compares the hash value 1 and the level of received radio wave strength "strong" with the hash value 2 and the level of received radio wave strength "strong".

If the matching unit 505 of the relay device 5 determines in step S212 that the first authentication information and the second authentication information match, the sensing information transmission unit 506 transmits the sensing information contained in the packet received by the packet receiving unit 501 to the server device 1 or the equipment 2 (step S213). On the other hand, if the matching unit 505 of the relay device 5 determines in step S212 that the first authentication information and the second authentication information do not match, the matching unit 505 discards the packet received by the packet receiving unit 501 (step S214).

For example, if hash value 1 and hash value 2 are the same value, both levels of received radio wave intensity are "strong", and therefore the matching unit 505 determines that the first authentication information and the second authentication information match. The sensing information transmission unit 506 then extracts sensing information from the packet containing hash value 1 and sensing information received from the packet reception unit 501, and transmits it to the server device 1 or the equipment 2 via the network 6, which is a wired field network. On the other hand, if hash value 1 and hash value 2 are different values, or the levels of received radio wave intensity are different values, the matching unit 505 determines that the first authentication information and the second authentication information do not match, and discards the packet received by the packet reception unit 501, containing hash value 1 and sensing information.

According to this embodiment, the authentication parameters for authenticating the wireless sensor can be notified to the wireless sensor by a communication method different from the wireless communication method used to transmit the sensing information. This allows the authentication of the wireless sensor to be performed safely, and a facility equipment system with high security can be realized.

Furthermore, according to this embodiment, authentication parameters for authenticating wireless sensors can be generated periodically, and the generated authentication parameters can be transmitted to the notification device and the relay device each time. As a result, the value of the authentication parameter fluctuates, making it more difficult to identify the authentication parameter compared to when the location information of wireless sensors, which are often installed in fixed locations, is used as the authentication parameter. Therefore, it is possible to realize an equipment system with higher security.

(Embodiment 2)
The facility equipment system according to the second embodiment is a system having a function of detecting unauthorized movement of a wireless sensor in addition to the functions of the facility equipment system according to the first embodiment.

The functions of the server device 1, notification device 3, wireless sensor 4, and relay device 5 included in the facility equipment system 1000 of embodiment 2 are shown in FIG. 14. The following describes functions that differ from the functions of the facility equipment system 1000 of embodiment 1.

Functionally, the relay device 5 includes each unit of the relay device 5 in the first embodiment, as well as a determination unit 507 that determines a first attribute, and a determination unit 508 that determines whether the first attribute and the second attribute match.

The determination unit 507 determines in advance a first attribute indicating the installation state of the wireless sensor 4 from a change in the received radio wave intensity received from the wireless sensor 4. The determination unit 507 is realized by cooperation between the processor 51 and the wireless communication circuit 56. The determination unit 507 is an example of a determination means.

The first attribute indicates the installation mode of the wireless sensor 4 and is determined in advance for the wireless sensor 4. Here, the installation mode is, for example, a mode that is classified based on the tendency of the position of the wireless sensor 4 to change in the property. The installation mode of the wireless sensor 4 includes, for example, a mode in which the sensor is fixedly installed in the property and a mode in which the sensor is not fixedly installed. Furthermore, the mode in which the sensor is not fixedly installed further includes a mode in which the sensor is moved randomly and a mode in which the sensor is moved regularly.

A wireless sensor that is fixedly installed is, for example, a wireless sensor that measures temperature, humidity, etc. In the following, the first attribute of a wireless sensor that is fixedly installed is referred to as a "stationary terminal." A wireless sensor that is randomly moved is, for example, a wireless sensor carried by a person present within a property. In the following, the first attribute of a wireless sensor that is randomly moved is referred to as a "randomly moving terminal." A wireless sensor that is randomly moved is, for example, a wireless sensor provided on a robot that patrols within a property. In the following, the first attribute of a wireless sensor that is regularly moved is referred to as a "regularly moving terminal."

For example, when the relay device 5 is powered on, the determination unit 507 measures the received radio wave strength of the signal received from the wireless sensor 4 for a predetermined period (for example, one week). The determination unit 507 then analyzes the time-series change in the received radio wave strength measured during the predetermined period to determine the first attribute of the wireless sensor 4. The time-series change in the received radio wave strength is stored in the auxiliary storage unit 53 for each wireless sensor 4. For example, when the value of the received radio wave strength is constant during the predetermined period, the determination unit 507 determines the first attribute of the wireless sensor 4 to be a "stationary terminal". Note that the value of the received radio wave strength being constant does not necessarily mean that it is the same value, but also includes the case where it falls within a predetermined range. Furthermore, for example, when the value of the received radio wave strength changes randomly during the predetermined period, the determination unit 507 determines the first attribute of the wireless sensor 4 to be a "randomly moving terminal". Furthermore, for example, if the value of the received radio wave intensity changes regularly over a predetermined period, the determination unit 507 determines the first attribute of the wireless sensor 4 to be a "terminal that moves regularly." The determination unit 507 stores information on the first attribute determined for the wireless sensor 4 in the auxiliary storage unit 53.

Figure 15 shows an example of a table in which information on the first attribute of a wireless sensor 4 is registered. In the attribute information table of Figure 15, identification information of a wireless sensor 4 and a determined first attribute are registered in association with each other. The identification information of a wireless sensor 4 is, for example, the MAC (Media Access Control) address of the wireless sensor 4. The record in the first row of the attribute information table of Figure 15 indicates that the first attribute of the wireless sensor 4 with identification information "aa:aa:aa:11:11:11" is "fixed terminal".

The determination unit 508 in FIG. 14 determines a second attribute indicating the installation state of the wireless sensor 4 from the change in the received radio wave intensity measured when the packet receiving unit 501 receives a packet. The determination unit 508 then determines whether the first attribute and the second attribute match. The determination unit 508 is realized by the processor 51. The determination unit 508 is an example of a determination means.

The second attribute indicates the installation mode of the wireless sensor 4, and is determined after the first attribute is determined for the wireless sensor 4. Like the first attribute, the second attribute is assumed to be either a "fixed terminal," a "randomly moving terminal," or a "regularly moving terminal."

For example, after the first attribute is determined, the determination unit 508 acquires the received radio wave strength measured by the packet receiving unit 501 for a predetermined period (e.g., 10 minutes). The determination unit 508 then analyzes the time-series changes in the acquired received radio wave strength to determine the second attribute of the wireless sensor 4. For example, if the value of the received radio wave strength measured when receiving a packet from the wireless sensor 4 with the identification information "aa:aa:aa:11:11:11" can be considered constant during a predetermined period, the determination unit 508 determines the second attribute of the wireless sensor 4 with the identification information "aa:aa:aa:11:11:11" to be "fixed terminal". In addition, for example, if the value of the received radio wave intensity measured when a packet is received from the wireless sensor 4 with the identification information "bb:bb:bb:22:22:22" during a predetermined period changes randomly, the determination unit 508 determines the second attribute of the wireless sensor 4 with the identification information "bb:bb:bb:22:22:22" to be a "terminal that moves randomly." In addition, for example, if the time series change of the value of the received radio wave intensity measured when a packet is received from the wireless sensor 4 with the identification information "cc:cc:cc:33:33:33" during a predetermined period matches a part of the regular pattern of the time series change of the wireless sensor 4 with the identification information "cc:cc:cc:33:33:33" stored in the auxiliary storage unit 53, the determination unit 508 determines the second attribute of the wireless sensor 4 with the identification information "cc:cc:cc:33:33:33" to be a "terminal that moves regularly."

Next, the determination unit 508 refers to the attribute table in FIG. 15 to determine whether the first attribute and the second attribute of the wireless sensor 4 match. If the determination unit 508 determines that the first attribute and the second attribute match, the first authentication information acquisition unit 502 starts a process of acquiring the first authentication information. On the other hand, if the determination unit 508 determines that the first attribute and the second attribute do not match, the packet receiving unit 501 discards the received packet.

For example, if the value of the received radio wave intensity received from the wireless sensor 4 (identification information "aa:aa:aa:11:11:11") with the first attribute "stationary terminal" changes randomly, the determination unit 507 determines the second attribute to be "randomly moving terminal". In this case, the judgment unit 508 judges that the first attribute does not match the second attribute, and the packet receiving unit 501 discards the packet received from the wireless sensor 4 (identification information "aa:aa:aa:11:11:11"). Therefore, the processing by the first authentication information acquisition unit 502 and the matching unit 505 that is performed after the judgment unit 508 judges that the first attribute matches the second attribute is not executed.

For example, if the value of the received radio wave intensity received from the wireless sensor 4 (identification information "aa:aa:aa:11:11:11") of the first attribute "fixed terminal" changes randomly, it is possible that the wireless sensor 4 of the "fixed terminal" has been moved by a third party. In this case, the reliability of the information in the packet sent from the wireless sensor 4 cannot be guaranteed. Therefore, by having the packet receiving unit 501 discard the packet received from the wireless sensor 4 (identification information "aa:aa:aa:11:11:11"), it is possible to prevent the facility equipment system 1000 from using unreliable information.

According to this embodiment, by detecting a change in the installation mode of a wireless sensor, it is possible to detect that the wireless sensor has been moved by a third party. Then, information transmitted from a wireless sensor for which a change in the installation mode has been detected can be regarded as information with low reliability and discarded. This makes it possible to provide an equipment system with higher security.

(Modification)
Although the embodiment of the present disclosure has been described above, various modifications and applications are possible in implementing the present disclosure.

In the above embodiment, an example was shown in which the transmitted radio wave strength of the wireless sensor 4 is set when the authentication parameter is the level of received radio wave strength, but this is not limited to the above. For example, when the authentication parameter is a random symbol string, the transmitted radio wave strength at the time of packet transmission is an arbitrary value, and the level of received radio wave strength is not acquired as the first authentication information. Alternatively, the authentication parameter may be both a random symbol string and the level of received radio wave strength.

In the above embodiment, the second communication method is one of the communication methods (A) to (D) described above, but this is not limited to this. The second communication method may be a combination of two or more of the communication methods (A) to (D) described above.

In addition, in FIG. 13 of the above embodiment, the process of acquiring sensing information (step S207) is shown after the process of generating the first authentication information (step S206), but this is not limited to this. The acquisition of sensing information by the sensing information acquisition unit 403 is arbitrarily set by the administrator of the facility equipment system 1000.

In addition, by applying an operating program that specifies the operation of the devices included in the facility equipment system 1000 according to the above embodiment to an existing personal computer or information terminal device, it is also possible to cause the personal computer or information terminal device to function as a device included in the facility equipment system 1000 according to the embodiment.

In addition, such programs may be distributed in any manner, for example, by storing them on a computer-readable recording medium such as a CD-ROM (Compact Disk Read-Only Memory), a DVD (Digital Versatile Disk), or a memory card, or by distributing them via a communications network such as the Internet.

Various embodiments and modifications of the present disclosure are possible without departing from the broad spirit and scope of the present disclosure. Furthermore, the above-described embodiments are intended to explain the present disclosure and do not limit the scope of the present disclosure. In other words, the scope of the present disclosure is indicated by the claims, not the embodiments. Various modifications made within the scope of the claims and within the scope of the disclosure equivalent thereto are considered to be within the scope of the present disclosure.

This disclosure can provide a facility equipment system and authentication method with high security by safely authenticating wireless sensors.

1 Server device, 2 Equipment device, 3 Notification device, 4 Wireless sensor, 5 Relay device, 6 Network, 7 Wireless communication, 8 Communication, 11, 31, 41, 51 Processor, 12, 32, 42, 52 Main memory unit, 13, 33, 43, 53 Auxiliary memory unit, 14, 34, 44, 54 RTC, 15 Input unit, 16 Output unit, 17, 35, 55 Wired communication circuit, 18, 37, 48 Bus, 36 Notification unit, 36-1, 47-1 Infrared communication circuit, 36-2, 47-2 Visible light communication circuit, 36-3a Lighting controller, 36-3b LED, 36-4a Fan controller, 36-4b Fan, 45, 56 Wireless communication circuit, 46 Sensor circuit, 47 Detection unit, 47-3 Illuminance sensor circuit, 47-4 Air flow sensor circuit, 101 authentication parameter generation unit, 102, 302 authentication parameter transmission unit, 301, 401, 503 authentication parameter reception unit, 402 first authentication information generation unit, 403 sensing information acquisition unit, 404 packet generation unit, 405 packet transmission unit, 501 packet reception unit, 502 first authentication information acquisition unit, 504 second authentication information generation unit, 505 matching unit, 506 sensing information transmission unit, 1000 equipment system.

Claims (10)

A facility equipment system that controls facility equipment using sensing information acquired by a wireless sensor,
a first receiving means for receiving an authentication parameter for authenticating the wireless sensor by a first communication method that is not publicly disclosed;
a first transmitting means for transmitting the authentication parameters received by the first receiving means by a second communication method different from the first communication method;
a second receiving means for receiving the authentication parameters transmitted by the first transmitting means by the second communication method;
a first generating means for generating first authentication information from the authentication parameters received by the second receiving means;
a packet generating means for generating a packet including the first authentication information generated by the first generating means and the sensing information acquired by the wireless sensor;
a packet transmitting means for transmitting the packet generated by the packet generating means by a third communication method different from the second communication method;
a packet receiving means for receiving the packet transmitted by the packet transmitting means by the third communication method;
an acquisition means for acquiring the first authentication information from the packet received by the packet receiving means;
a third receiving means for receiving the authentication parameters by the first communication method;
a second generating means for generating second authentication information from the authentication parameters received by the third receiving means;
a comparison means for comparing the first authentication information acquired by the acquisition means with the second authentication information generated by the second generation means, and discarding the packet received by the packet reception means when it is determined that the first authentication information and the second authentication information do not match.
Facility equipment system. The second communication method is an infrared communication method.
The facility equipment system according to claim 1 . The second communication method is a visible light communication method.
The facility equipment system according to claim 1 . the second communication method is a communication method using lighting,
indicating the authentication parameter by emitting light from the illumination;
The facility equipment system according to claim 1 . the second communication method is a communication method using a fan,
The authentication parameter is represented by an air volume of the fan.
The facility equipment system according to claim 1 . a determination means for determining in advance a first attribute indicating an installation state of the wireless sensor from a change in received radio wave intensity measured when a signal is received from the wireless sensor;
a determination means for determining a second attribute indicating an installation state of the wireless sensor from a change in received radio wave intensity measured when the packet receiving means receives a packet, and determining whether or not the first attribute and the second attribute match,
When the determination means determines that the first attribute and the second attribute do not match, the packet receiving means discards the received packet.
The facility equipment system according to any one of claims 1 to 5. an authentication parameter generating means for periodically generating the authentication parameters;
The facility equipment system according to any one of claims 1 to 6, further comprising: a second transmitting means that transmits the authentication parameters generated by the authentication parameter generating means to the first receiving means and the third receiving means by the first communication method. the facility equipment system includes the facility equipment, the wireless sensor, a server device that uses the sensing information to control the facility equipment, a notification device that receives the authentication parameters from the server device, and a relay device that receives the sensing information from the wireless sensor and transmits the received sensing information to the server device;
the server device comprises the authentication parameter generating means and the second transmitting means,
The notification device includes the first receiving means and the first transmitting means,
the wireless sensor comprises the second receiving means, the first generating means, the packet generating means, and the packet transmitting means;
the relay device includes the packet receiving means, the acquiring means, the third receiving means, the second generating means, and the matching means;
The facility equipment system according to claim 7. The facility equipment is an air conditioner.
The facility equipment system according to any one of claims 1 to 8. An authentication method executed by an equipment system that controls equipment using sensing information acquired by a wireless sensor, comprising:
The first receiving means receives authentication parameters for authenticating the wireless sensor by a first communication method that is not publicly disclosed;
a first transmitting means for transmitting the authentication parameters received by the first receiving means by a second communication method different from the first communication method;
a second receiving means for receiving the authentication parameters transmitted by the first transmitting means by the second communication method;
a first generating means for generating first authentication information from the authentication parameters received by the second receiving means;
a packet generating means for generating a packet including the first authentication information generated by the first generating means and the sensing information acquired by the wireless sensor;
a packet transmitting means for transmitting the packet generated by the packet generating means by a third communication method different from the second communication method;
a packet receiving means for receiving the packet transmitted by the packet transmitting means in accordance with the third communication method;
an acquiring means for acquiring the first authentication information from the packet received by the packet receiving means;
a third receiving means for receiving the authentication parameters by the first communication method;
a second generating means for generating second authentication information from the authentication parameters received by the third receiving means;
a comparison means for comparing the first authentication information acquired by the acquisition means with the second authentication information generated by the second generation means, and discarding the packet received by the packet reception means when it is determined that the first authentication information and the second authentication information do not match.
Authentication method.

Images