JP7635929B2 - USE CONTROL SYSTEM, SETTING INFORMATION TRANSMISSION DEVICE, USE CONTROL UNIT, USE CONTROL METHOD, AND PROGRAM - Google Patents

Description

The present invention relates to a usage control technology for objects of use that can be restricted by locking/unlocking, access control, or encryption/decryption, including real estate such as hotels, inns, private lodging facilities, houses, warehouses, and rooms, mobile objects such as automobiles and bicycles, and viewing terminals for electronic media such as electronic medical records and electronic books.

Patent Document 1 discloses a system that allows users to use various services, including unlocking and locking rooms, and cashless dining and purchasing, simply by carrying a room key in facilities such as companies, hospitals, amusement parks, and public facilities.

This system includes room keys having readable and writable radio frequency identification (RFID) tags that store authentication data such as room numbers, PIN numbers, and customer information; RFID readers installed in various locations within the facility for reading and writing information to the RFID tags of the room keys; a database that stores information about each room and piece of equipment within the facility; and a server that is connected to the RFID readers and database via a network and manages each room and piece of equipment within the facility. One of the RFID readers reads the authentication data stored in the RFID tags of the room keys and transmits it to the server. The server then authenticates the user using the authentication data received from the RFID reader, thereby providing the user carrying the room key with a service associated with the RFID reader.

JP 2003-132435 A

However, the system described in Patent Document 1 assumes that common authentication data stored in the RFID wireless tag of the room key will be used for services provided anywhere in the facility where an RFID reader is installed, and does not anticipate a situation in which services that use different authentication methods will coexist.

The system described in Patent Document 1 is based on the premise that the same service provider provides multiple services, and does not assume that there are multiple service providers. For example, if a service provider is different for each service, even if a user has already registered facial recognition data to use a service from service provider B, the user must separately register facial recognition data when using a service from another service provider A that requires facial recognition data for the first time, which is cumbersome.

The system described in Patent Document 1 does not assume that a facility will be used by multiple people. In this case, a representative will be selected from among the multiple users who will use the facility, and the representative will be tasked with managing the room keys and unlocking and locking the facility, which places a heavy burden on the representative. On the other hand, users other than the representative will not be able to freely unlock and lock the facility on their own, which is inconvenient.

Furthermore, the system described in Patent Document 1 is based on the premise that room keys are lent and returned at the reception desk of facilities such as companies, hospitals, amusement parks, and public facilities. In other words, when using the facility, a user must borrow a room key from the reception desk, and must return the room key to the reception desk after using the facility. For this reason, it is inconvenient when the facility and the reception desk are geographically separated.

In addition, in the system described in Patent Document 1, RFID readers installed at various locations within the facility read the information stored in the RFID wireless tag of the room key and transmit it to a server via a network. For this reason, if the server is installed outside the facility and the RFID readers installed at various locations within the facility are connected to the server installed outside the facility via the Internet, each time the RFID reader reads information from the RFID wireless tag of the room key, the read information will be transmitted over the Internet, increasing the security risk.

The present invention has been made in consideration of the above-mentioned circumstances, and its purpose is to improve convenience in usage control technology for objects whose usage can be restricted by locking/unlocking or access control , including real estate such as hotels, inns, private lodging facilities, houses, warehouses, and rooms, and mobile objects such as automobiles and bicycles.

In order to solve the above problem, the present invention comprises a setting information transmission device , a usage control unit provided for each user object that controls the usage of the user object by locking /unlocking or access control , and a setting terminal.

In accordance with the operator's instructions, the setting terminal transmits first information to the setting information transmission device, the first information including specific information capable of identifying the user's identification information and the authentication method adopted by the usage control unit corresponding to the usage target, obtains setting information including the user's authentication data from the setting information transmission device, and notifies the usage control unit of the obtained setting information.

The setting information transmission device stores at least one authentication data for each user, together with the authentication method, linked to at least one identification information such as an email address, a mobile phone number, an employee number, or a membership number. The setting information transmission device also identifies the authentication data of the authentication method identified by the identification information included in the first information received from the setting terminal from the authentication data stored linked to the user's identification information included in the first information. Then, the setting information including the identified authentication data is transmitted to the setting terminal.

The usage control unit stores the setting information notified by the setting terminal, acquires authentication data from the user according to a predetermined authentication method, and searches for setting information including the acquired authentication data.

For example, the present invention provides
A usage control system for controlling usage of a usage object,
A setting information transmitting device ;
a usage control unit provided for each of the objects of use and controlling usage of the objects of use by locking /unlocking or access control ;
a setting terminal which transmits to said setting information transmission device , in accordance with an instruction from an operator, first information including a user's identification information and specific information capable of identifying an authentication method adopted by said usage control unit corresponding to said usage target , and obtains setting information including the authentication data of the user from said setting information transmission device , and notifies said usage control unit of said obtained setting information;
The setting information transmission device
an authentication data storage means for storing at least one piece of authentication data for each user, together with an authentication method of the authentication data, in association with at least one piece of identification information ;
an authentication data specifying means for specifying, from the authentication data stored in the authentication data storage means in association with the user's identification information included in the first information received from the setting terminal , the authentication data of an authentication method specified by the specification information included in the first information ;
a setting information transmitting means for transmitting the setting information including the authentication data identified by the authentication data identifying means to the setting terminal,
The utilization control unit includes:
a setting information storage means for storing the setting information notified by the setting terminal;
an authentication data acquisition means for acquiring the authentication data from a user in accordance with a predetermined authentication method;
The authentication data acquisition unit acquires the setting information including the authentication data acquired by the authentication data acquisition unit , and further acquires the setting information including the authentication data acquired by the authentication data acquisition unit.

In the present invention, the setting information transmission device stores authentication data for each user together with its authentication method in association with at least one identification information, and when it receives first information from the setting terminal, it identifies authentication data of an authentication method identified by the identification information included in the first information from among the authentication data linked to the user's identification information included in the first information , and notifies the setting terminal of the identified authentication data.The setting terminal then registers the authentication data received from the setting information transmission device in the usage control unit.For this reason, even if a user uses a certain usage target for the first time, if the authentication data of the authentication method adopted by the usage control unit corresponding to this usage target has already been registered in the setting information transmission device , the user does not need to separately register his/her own authentication data with the service provider that provides the usage service of the usage target.

Therefore, the present invention improves convenience.

In this way, according to the present invention, it is possible to improve convenience in a usage control technique for a target user whose usage can be restricted by locking/unlocking or access control .

FIG. 1 is a schematic diagram of a usage control system according to an embodiment of the present invention. FIG. 2 is a sequence diagram showing an example of a setting information registration operation for registering setting information in the license notification device 4. As shown in FIG. FIG. 3 is a sequence diagram showing an example of a usage restriction release operation of a usage target by the usage control device 3. In FIG. FIG. 4 is a schematic functional configuration diagram of the license issuing device 1. As shown in FIG. FIG. 5 is a diagram showing an example of registered contents of the identification information table 1030. As shown in FIG. FIG. 6 is a diagram showing an example of registered contents of the authentication data table 1031. As shown in FIG. FIG. 7 is a diagram showing an example of registered contents in the key information storage unit 104. As shown in FIG. FIG. 8 is a flow diagram for explaining the operation of the license issuing device 1. As shown in FIG. FIG. 9 is a schematic functional configuration diagram of the usage control device 3. FIG. 10 is a flow diagram for explaining the operation of the usage control device 3. As shown in FIG. FIG. 11 is a schematic functional configuration diagram of the license notifying device 4. As shown in FIG. FIG. 12 is a diagram showing an example of registered contents in the setting information storage unit 43. As shown in FIG. FIG. 13 is a flow diagram for explaining the operation of the license notifying device 4. As shown in FIG. FIG. 14 is a diagram showing an example of registered contents of the account information table 1033. As shown in FIG.

One embodiment of the present invention will be described below with reference to the drawings.

Figure 1 is a schematic diagram of a usage control system according to this embodiment.

As shown in the figure, the usage control system according to this embodiment includes a usage permit issuing device 1 that issues usage permits including usage conditions for usage objects such as real estate such as hotels, inns, private lodging facilities, houses, warehouses, and rooms, mobile objects such as automobiles and bicycles, and viewing terminals for electronic media such as electronic medical records and electronic books, usage control units 2-1 to 2-n (hereinafter also simply referred to as usage control units 2) provided for each usage object, and a setting terminal 5. The usage control unit 2 also includes a usage control device 3 that controls the usage of the usage object by locking/unlocking, access control, or encryption/decryption based on the usage permit, and a usage permit notification device 4 that notifies the usage control device 3 paired with its own device of the usage permit.

The license issuing device 1 is connected to a WAN (Wide Area Network) 60, and for each user, it stores at least one piece of authentication data, along with the authentication method (facial authentication, vein authentication, password authentication, etc.), linked to at least one piece of identification information, such as an email address, mobile phone number, employee number, or membership number. In addition, for each target of use, it stores key information, including a private key used to sign the license and a common key used to encrypt the usage conditions included in the license.

The usage control device 3 can communicate only by short-range wireless communication 63 such as IrDA (Infrared Data Association) or Bluetooth (registered trademark), and is isolated from the network. In addition, the usage control device 3 is set with hole data including a public key required for signature verification of the usage certificate and a common key required for decrypting the usage conditions included in the usage certificate.

At least one piece of configuration information including a license, a signature for the license, and authentication data for the user is registered in the license notification device 4.

The setting terminal 5 is provided, for example, for each service provider that provides a service to be used. The setting terminal 5 is connected to the WAN 60 via a wireless network 62 and a relay device 61 such as a wireless base station or an access point, and acquires setting information from the usage certificate issuing device 1. The acquired setting information is then transmitted to the usage certificate notification device 4 by short-range wireless communication 63 and registered.

Figure 2 is a sequence diagram showing an example of a setting information registration operation for registering setting information in the usage license notification device 4.

Here, the service provider accepts a request for permission to use from the user via email, mobile phone, etc., which includes the specification of the target of use and the conditions of use (start and end dates and times of use, etc.), and grants the request.

First, when the setting terminal 5 accepts a login operation from a service provider (S100), it sends a login request including the service provider's login information (user ID, password) to the usage permit issuing device 1 (S101). In response, the usage permit issuing device 1 performs authentication processing using the password included in the login request and a password managed in association with the user ID included in the login request (S102). Then, if authentication is successful, it permits the login of the setting terminal 5 that sent the login request, and transmits a login permission notification to this setting terminal 5 (S103).

Next, when the setting terminal 5 receives from the service provider a license issuance operation including an object ID, which is identification information of the target of use specified in the license request, an authentication method (biometric authentication (face authentication, vein authentication, etc.), password authentication, etc.) adopted by the license notification device 4 of the usage control unit 2 corresponding to this target of use, the usage conditions specified in the license request, and identification information of the user requesting license that is known to the service provider (email address, mobile phone number, employee number, membership number, etc.) (S104), the setting terminal 5 generates a license issuance request including the specification of this information and sends this license issuance request to the license issuing device 1 (S105).

In response to this, the license issuing device 1 issues a license including the usage conditions specified in the license issuance request (S106). The license issuing device 1 also encrypts the usage conditions included in the issued license using a common key included in key information stored in association with the object ID specified in the license issuance request, and generates a signature for the license using a private key included in this key information (S107). Specifically, the license, or a specified part of the license, or a message digest of either is encrypted with the private key, and the encrypted information is used as the signature.

Furthermore, the license issuing device 1 identifies authentication data for the authentication method specified in the license issuance request from among the authentication data stored in association with the user identification information specified in the license issuance request (S108).

Then, the license issuing device 1 generates setting information including the license issued as described above, the generated signature, and the identified authentication data, and transmits this setting information to the setting terminal 5, which is the sender of the license issuance request (S109).

Next, when the setting terminal 5 receives a setting operation from the service provider while being brought close to the usage permit notification device 4 of the usage control unit 2 associated with the usage target specified in the usage permission request received from the user (S110), it transmits the setting information received from the usage permit issuing device 1 to the usage permit notification device 4 via short-range wireless communication 63 (S111). In response, the usage permit notification device 4 registers the setting information received from the setting terminal 5 (S112).

Figure 3 is a sequence diagram showing an example of the operation of the usage control device 3 to remove usage restrictions on a usage target.

First, the user approaches the usage permit notification device 4 of the usage control unit 2 associated with the usage target approved for use by the service provider, and performs an authentication data reading operation to have the usage permit notification device 4 read the user's authentication data (S120). The usage permit notification device 4 then reads the authentication data from the user according to a predetermined authentication method such as biometric authentication (face authentication, vein authentication, etc.) or password authentication (S121). The usage permit notification device 4 then searches for setting information including the authentication data read from the user (S122). The usage permit and signature included in the searched setting information are then transmitted to the usage control device 3 paired with the device 4 via short-range wireless communication 63 (S123).

The usage control device 3 then uses the public key included in the hall data set in its own device 3 to verify the signature received from the usage certificate notification device 4 via short-range wireless communication 63 together with the usage certificate (S124). If the signature verification is successful, the usage control device 3 uses the common key included in the hall data to decrypt the encrypted usage conditions (hereinafter referred to as the encrypted usage conditions) included in the usage certificate (S125).

Then, the usage control device 3 confirms that the decrypted usage conditions are satisfied (S126). For example, if the usage conditions are the start and end times of usage, it confirms that the current date and time is within the period specified by the start and end times of usage. If the usage control device 3 confirms that the usage conditions are satisfied, it releases the usage restrictions on the target of usage (S127). For example, if the target of usage is real estate such as a hotel, inn, private lodging facility, house, warehouse, or room, it unlocks the autolock device at the entrance and exit of the real estate.

Then, the usage control device 3 transmits a usage restriction release notification to the usage permit notification device 4 via short-range wireless communication 63 (S128). In response to this, the usage permit notification device 4 performs a predetermined release message output process, such as displaying a message to the effect that the usage restriction on the target of usage has been released, or outputting a message sound to that effect (S129).

Next, the usage permit issuing device 1 and usage control unit 2 constituting the usage control system according to this embodiment will be described in detail. Note that since an existing mobile terminal such as a smartphone or tablet terminal equipped with a short-range wireless communication function can be used as the setting terminal 5, a detailed description thereof will be omitted.

First, we will explain the details of the usage permit issuing device 1.

Figure 4 is a schematic functional configuration diagram of the usage permit issuing device 1.

As shown in the figure, the license issuing device 1 includes a WAN interface unit 100, a memory unit 101, a login processing unit 105, a license issuing unit 106, an encryption unit 107, a signature generation unit 108, an authentication data identification unit 109, and a setting information transmission unit 110.

The WAN interface unit 100 is an interface for connecting to the WAN 60.

The memory unit 101 includes a login information memory unit 102, an authentication data memory unit 103, and a key information memory unit 104.

The login information storage unit 102 stores login information (user ID, password) for logging in to the license issuing device 1 for each service provider.

The authentication data storage unit 103 stores the following identification information table 1030 and authentication data table 1031 for each user.

Figure 5 is a schematic diagram showing an example of the registered contents of the identification information table 1030.

As shown in the figure, an identification information table 1030 is provided for each user, linked to a route ID 1032 assigned to the user. The identification information table 1030 stores a record 10301 of the user's identification information. This identification information record 10301 has a field 10302 for registering the type and use of identification information, such as an email address, mobile phone number, employee number, membership number, etc., and a field 10303 for registering the user's identification information.

Figure 6 is a schematic diagram showing an example of the registered contents of the authentication data table 1031.

As shown in the figure, the authentication data table 1031 is provided for each user, linked to a route ID 1032 assigned to the user. The authentication data table 1031 stores a record 10311 of the authentication data of the user. This authentication data record 10311 has a field 10312 for registering an authentication method such as face authentication, vein authentication, password authentication, etc., and a field 10313 for registering the authentication data of the user.

The key information storage unit 104 stores key information for each target of use.

Figure 7 is a schematic diagram showing an example of the contents registered in the key information storage unit 104.

As shown in the figure, the key information storage unit 104 stores a record 1040 of key information for each usage object. The key information record 1040 has a field 1041 for registering an object ID, which is identification information for the usage object, a field 1042 for registering a private key used to sign the usage certificate for the usage control unit 2 corresponding to this usage object, a field 1043 for registering a public key paired with this private key, and a field 1044 for registering a common key used to encrypt and decrypt the usage conditions included in this usage certificate.

The login processing unit 105 refers to the login information storage unit 102 and processes the login request received from the setting terminal 5.

The license issuing unit 106 issues a license including the encrypted usage conditions received from the setting information transmitting unit 110 in accordance with the instructions of the setting information transmitting unit 110.

The encryption unit 107, following instructions from the setting information transmission unit 110, encrypts the usage conditions received from the setting information transmission unit 110 using a common key included in the key information that is linked to the object ID received from the setting information transmission unit 110 and stored in the key information storage unit 104, to generate encrypted usage conditions.

The signature generation unit 108, in accordance with instructions from the setting information transmission unit 110, generates a signature for the usage certificate received from the setting information transmission unit 110 using a private key included in the key information that is linked to the object ID received from the setting information transmission unit 110 and stored in the key information storage unit 104.

The authentication data identification unit 109, following instructions from the setting information transmission unit 110, refers to the authentication data storage unit 103 to identify the authentication data linked to the user identification information and authentication method received from the setting information transmission unit 110.

The setting information transmission unit 110 cooperates with the license issuing unit 106 and the encryption unit 107 to issue a license including encrypted usage conditions generated from the usage conditions included in the license issuance request received from the setting terminal 5 via the WAN interface unit 100, and cooperates with the signature generation unit 108 to generate a signature for this license. It also cooperates with the authentication data identification unit 109 to identify, from the authentication data storage unit 103, authentication data according to the authentication method included in the license issuance request for the user identified by the identification information included in the license issuance request. Then, it transmits setting information including the license, signature, and authentication data to the setting terminal 5.

The schematic functional configuration of the license issuing device 1 shown in FIG. 4 may be realized in hardware using an integrated logic IC such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array), or in software using a computer such as a DSP (Digital Signal Processor). Alternatively, it may be realized in a general-purpose computer equipped with a CPU (Central Processing Unit), memory, an auxiliary storage device such as a flash memory or a hard disk drive, and a communication device such as a NIC (Network Interface Card), by the CPU loading a specific program from the auxiliary storage device into the memory and executing it. It may also be realized on a distributed system consisting of multiple general-purpose computers working together.

Figure 8 is a flow diagram for explaining the operation of the usage permit issuing device 1.

This flow begins when the WAN interface unit 100 receives a login request from the setting terminal 5 via the WAN 60.

First, the WAN interface unit 100 notifies the login processing unit 105 of the received login request. In response, the login processing unit 105 performs login authentication (S200). Specifically, it searches for a password associated with the service provider's user ID included in the login request and stored in the login information storage unit 102, and if the searched password matches the password included in the login request, it permits the login (authentication successful), and if they do not match, it rejects the login (authentication unsuccessful).

Next, if the login authentication is not successful (NO in S201), the login processing unit 105 performs a predetermined error processing such as sending an error message to the setting terminal 5 that sent the login request via the WAN interface unit 100 (S209).

On the other hand, if the login authentication is successful (YES in S201), a login permission notification is sent to the setting terminal 5 that sent the login request via the WAN interface unit 100 (S202). Then, the setting information sending unit 110 waits for a license issuance request to be sent from the setting terminal 5 that has been permitted to login via the WAN interface unit 100 (S203).

When the setting information transmission unit 110 receives a license issuance request from the setting terminal 5 that has been permitted to log in via the WAN interface unit 100 (YES in S203), it passes the object ID and usage conditions of the object to be used that are included in the license issuance request to the encryption unit 107 and instructs it to generate encrypted usage conditions. In response, the encryption unit 107 searches the key information storage unit 104 for a record 1040 of key information using the object ID received from the setting information transmission unit 110 as a key. Then, it encrypts the usage conditions received from the setting information transmission unit 110 using the common key registered in field 1044 of the searched record 1040 to generate encrypted usage conditions (S204).

Next, the setting information transmission unit 110 passes the object ID of the object to be used and the user identification information included in the license issuance request, and the encrypted usage conditions generated by the encryption unit 107 to the license issuance unit 106, and instructs it to issue a license. In response, the license issuance unit 106 issues a license including the object ID of the object to be used, the user identification information, and the encrypted usage conditions received from the setting information transmission unit 110 (S205).

Next, the setting information transmission unit 110 passes the object ID of the object to be used, which is included in the license issuance request, and the license issued by the license issuance unit 106 to the signature generation unit 108, and instructs it to generate a signature. In response to this, the signature generation unit 108 searches the key information storage unit 104 for a record 1040 of key information, using the object ID received from the setting information transmission unit 110 as a key. Then, using the private key registered in field 1042 of the searched record 1040, it generates a signature for the license received from the setting information transmission unit 110 (S206). Specifically, the license, or a specified part of the license, or a message digest of either of them is encrypted with the private key, and the encrypted information is used as the signature.

The setting information transmission unit 110 also passes the user's identification information and authentication method included in the license issuance request to the authentication data identification unit 109, and instructs it to identify the user's authentication data. In response to this, the authentication data identification unit 109 refers to the authentication data storage unit 103 and identifies the user's authentication data linked to the user's identification information and authentication method received from the setting information transmission unit 110 (S207). Specifically, the authentication data storage unit 103 searches for an identification information table 1030 having an identification information record 10301 in which the user's identification information received from the setting information transmission unit 110 is registered in field 10303. Then, from the authentication data table 1031 stored in the authentication data storage unit 103 and linked to the route ID 1032 linked to the searched identification information table 1030, a record 10311 of authentication data in which the authentication method received from the setting information transmission unit 110 is registered in field 10312 is searched, and the authentication data of the user registered in field 10313 of the searched record 10311 is identified.

Then, the setting information transmission unit 110 generates setting information including the license issued by the license issuing unit 106, the signature generated by the signature generating unit 108, and the authentication data of the user identified by the authentication data identifying unit 109, and transmits this setting information to the setting terminal 5, which is the sender of the license issuance request, via the WAN interface unit 100 (S208).

Next, we will explain the details of the usage control unit 2.

As described above, the usage control unit 2 has a usage control device 3 and a usage permit notification device 4.

First, we will explain the details of the usage control device 3.

Figure 9 is a schematic functional configuration diagram of the usage control device 3.

As shown in the figure, the usage control device 3 includes a short-range wireless communication unit 30, a hall data storage unit 31, a usage restriction removal unit 32, a signature verification unit 33, and a decryption unit 34.

The short-range wireless communication unit 30 communicates with the license notification device 4 via short-range wireless communication such as IrDA or Bluetooth (registered trademark).

The hole data storage unit 31 stores hole data. The hole data includes a public key used to verify the signature of the usage certificate and a common key for decrypting the encrypted usage conditions included in the usage certificate. These public keys and common keys are the same as the public key and common key registered in the record 1040 of the key information stored in the key information storage unit 104 in the usage certificate issuing device 1, linked to the object ID of the usage target associated with the usage control unit 2 including the device itself 3.

The usage restriction release unit 32 releases the usage restriction of the usage target associated with the usage control unit 2 including its own device 3 when the verification of the signature received from the usage license notification device 4 together with the usage license is successful and the usage conditions included in the usage license are satisfied. For example, when the usage target is real estate such as a hotel, inn, private lodging facility, house, warehouse, room, etc., it outputs an unlock command to the autolock device installed at the entrance door of the real estate.

The signature verification unit 33 verifies the signature on the license using the public key contained in the hall data stored in the hall data storage unit 31.

The decryption unit 34 decrypts the encrypted usage conditions included in the usage permit using the common key included in the hall data stored in the hall data storage unit 31.

The schematic functional configuration of the usage control device 3 shown in FIG. 9 may be realized in hardware using an integrated logic IC such as an ASIC or FPGA, or in software using a computer such as a DSP. Alternatively, it may be realized in a general-purpose computer equipped with a CPU, memory, an auxiliary storage device such as a flash memory or a hard disk drive, and a short-range wireless communication device such as an IrDA communication device or a Bluetooth (registered trademark) communication device, by the CPU loading a specific program from the auxiliary storage device into the memory and executing it.

Figure 10 is a flow diagram for explaining the operation of the usage control device 3.

This flow starts when the short-range wireless communication unit 30 receives a usage certificate together with a signature from the usage certificate notification device 4 via short-range wireless communication 63.

The usage restriction removal unit 32 passes the usage permit and signature received from the usage permit notification device 4 to the signature verification unit 33 via the short-range wireless communication unit 30, and instructs the signature verification unit 33 to verify the signature. In response, the signature verification unit 33 verifies the signature on the usage permit using the public key included in the hole data stored in the hole data storage unit 31 (S300). Specifically, the signature is decrypted using the public key, and the authenticity of the signature is verified by determining whether the decrypted information matches the usage permit, or a specified part of the usage permit, or a message digest of either.

Next, the signature verification unit 33 notifies the usage restriction lifting unit 32 of the signature verification result. In response to this, if the usage restriction lifting unit 32 is successful in the signature verification and can prove the validity of the signature (YES in S301), it passes the encrypted usage conditions included in this usage license to the decryption unit 34 and instructs it to decrypt. On the other hand, if the signature verification fails and the validity of the signature cannot be proved (NO in S301), it sends an error notification to the usage license notification device 4 via the short-range wireless communication unit 30 (S306).

Next, when the decryption unit 34 receives the encrypted usage conditions together with a decryption instruction from the usage restriction lifting unit 32, it decrypts the encrypted usage conditions using the common key included in the hole data stored in the hole data storage unit 31 (S302). Then, it passes the decrypted usage conditions to the usage restriction lifting unit 32.

In response to this, the usage restriction removal unit 32 judges whether the decrypted usage conditions are satisfied (S303). For example, if the usage conditions are the usage start and end times, it judges whether the current date and time is within the period specified by the usage start and end times.

Next, if the usage restriction release unit 32 determines that the usage conditions are satisfied (YES in S303), it releases the usage restriction of the usage target associated with the usage control unit 2 including the device 3 (S304). For example, if the usage target is real estate such as a hotel, inn, private lodging facility, house, warehouse, or room, it outputs an unlock command to the autolock device installed at the entrance door of the real estate. Then, the usage restriction release unit 32 transmits a usage restriction release notification to the usage permit notification device 4 via the short-range wireless communication unit 30 (S305).

On the other hand, if the usage restriction removal unit 32 determines that the usage conditions are not satisfied (NO in S303), it sends an error notification to the usage license notification device 4 via the short-range wireless communication unit 30 (S306).

Next, we will explain the details of the usage license notification device 4.

Figure 11 is a schematic functional configuration diagram of the license notification device 4.

As shown in the figure, the usage permit notification device 4 includes a short-range wireless communication unit 40, an authentication data acquisition unit 41, a display unit 42 such as an LCD (Liquid Crystal Display) or an organic EL (Electro Luminescence), a setting information storage unit 43, a setting information receiving unit 44, a setting information search unit 45, a usage permit transmission unit 46, and a notification receiving unit 47.

The short-range wireless communication unit 40 communicates with the usage control device 3 and the setting terminal 5 via short-range wireless communication 63 such as IrDA or Bluetooth (registered trademark).

The authentication data acquisition unit 41 acquires authentication data from the user according to a predetermined authentication method such as facial authentication, vein authentication, or password authentication. For example, in the case of facial authentication, the authentication data acquisition unit 41 is equipped with a camera and captures an image of the user's face to acquire facial authentication data. In the case of vein authentication, the authentication data acquisition unit 41 is equipped with a vein sensor and detects the user's vein pattern to acquire vein authentication data. In the case of password authentication, the authentication data acquisition unit 41 is equipped with an input device such as a keyboard or touch panel, or a card reader, and accepts password input from the user via the input device, or reads the password from an ID card carried by the user via the card reader.

The setting information storage unit 43 stores setting information.

Figure 12 is a schematic diagram showing an example of the registered contents of the setting information storage unit 43.

As shown in the figure, the setting information storage unit 43 stores a setting information record 430. The setting information record 430 has a field 431 for registering authentication data, a field 432 for registering a license, and a field 433 for registering a signature for the license.

The setting information receiving unit 44 receives setting information from the setting terminal 5 via the short-range wireless communication unit 40, and stores the received setting information in the setting information storage unit 43.

The setting information search unit 45 searches the setting information storage unit 43 for a record 430 of setting information that includes the authentication data acquired by the authentication data acquisition unit 41.

The usage permit transmission unit 46 transmits the usage permit and signature contained in the record 430 of the setting information searched by the setting information search unit 45 to the usage control device 3 paired with the device 4 via the short-range wireless communication unit 40.

The notification receiving unit 47 receives various notifications from the usage control device 3 via the short-range wireless communication unit 40 and displays them on the display unit 42.

The schematic functional configuration of the usage permit notification device 4 shown in FIG. 11 may be implemented in hardware using an integrated logic IC such as an ASIC or FPGA, as with the usage control device 3, or in software using a computer such as a DSP. Alternatively, it may be implemented in a general-purpose computer equipped with a CPU, memory, an auxiliary storage device such as a flash memory or a hard disk drive, and a short-range wireless communication device such as an IrDA communication device or a Bluetooth (registered trademark) communication device, by the CPU loading a specific program from the auxiliary storage device into the memory and executing it.

Figure 13 is a flow diagram for explaining the operation of the usage license notification device 4.

When the setting information receiving unit 44 receives the setting information from the setting terminal 5 via the short-range wireless communication unit 40 (YES in S400), it stores the setting information in the setting information storage unit 43 (S401). Specifically, if a setting information record 430 in which the authentication data included in the setting information received from the setting terminal 5 is registered in field 431 is not registered in the setting information storage unit 43, a new setting information record 430 is added to the setting information storage unit 43, and the authentication data, license, and signature included in the setting information received from the setting terminal 5 are registered in fields 431 to 433 of this record 430. On the other hand, if a setting information record 430 in which the authentication data included in the setting information received from the setting terminal 5 is registered in field 431 is registered in the setting information storage unit 43, fields 432 and 433 of this record 430 are updated to the license and signature included in the setting information received from the setting terminal 5.

When the authentication data acquisition unit 41 receives an authentication data reading operation from the user (YES in S402), it acquires authentication data from the user according to a predetermined authentication method such as face authentication, vein authentication, or password authentication (S403). Then, it passes the acquired authentication data to the setting information search unit 45. In response to this, the setting information search unit 45 searches the setting information record 430 from the setting information storage unit 43 using the acquired authentication data as a key (S404).

Here, if the setting information record 430 including the authentication data received from the authentication data acquisition unit 41 is not stored in the setting information storage unit 43 and the search fails (NO in S405), the setting information search unit 45 performs a predetermined error process, such as displaying an error message on the display unit 42 (S408).

On the other hand, if the setting information record 430 including the authentication data received from the authentication data acquisition unit 41 is stored in the setting information storage unit 43 and the search is successful (YES in S405), the usage certificate and signature included in the searched setting information record 430 are passed to the usage certificate transmission unit 46. In response to this, the usage certificate transmission unit 46 transmits the usage certificate and signature received from the setting information search unit 45 to the usage control device 3 via the short-range wireless communication unit 40 (S406). Thereafter, the notification reception unit 47 receives a notification (either a usage restriction release notification or an error notification) from the usage control device 3 via the short-range wireless communication unit 40 and displays this notification on the display unit 42 (S407).

The above describes one embodiment of the present invention.

In this embodiment, the license issuing device 1 stores authentication data for each user, together with the authentication method, linked to at least one piece of identification information. When the license issuing device 1 receives a license issuance request from the setting terminal 5, the device issues a license, generates a signature for the license, and identifies authentication data for the authentication method included in the license issuance request from the authentication data linked to the user's identification information included in the license issuance request, and notifies the setting terminal 5 of the license, signature, and setting information including the identified authentication data. The setting terminal 5 then registers the setting information received from the license issuing device 1 in the license notification device 4. Therefore, even when a user uses a certain target for use for the first time, if the authentication data for the authentication method adopted by the license notification device 4 of the usage control unit 2 associated with the target for use has already been registered in the license issuing device 1, the user does not need to separately register his/her own authentication data with the service provider that provides the target's usage service.

In addition, by registering a user's usage permit in advance in the usage permit notification device 4 in association with the user's authentication data, the user can use the usage object under the usage conditions included in the usage permit by having the usage permit notification device 4 read his/her own authentication data. Therefore, for example, when multiple people use a usage object, the multiple users can freely use the facility etc. independently under the usage conditions included in their own usage permit, and there is no need to select a representative from among the multiple users and entrust the representative with the management of room keys etc. and the unlocking and locking of the facility.

In addition, in this embodiment, the usage control device 3 releases the usage restrictions on the target of use only when the usage conditions included in the usage permit are satisfied, and does not release the usage restrictions on the target of use if they are not satisfied. Therefore, by including usage conditions such as the usage period and number of uses, in a situation where these usage conditions are not satisfied, the usage permit becomes invalid even if its validity is proven, so there is no need to ask the user to return or erase the usage permit.

Therefore, this embodiment improves convenience.

In addition, in this embodiment, the usage control device 3 can communicate only via short-range wireless communication 63 and is isolated from the network, so it cannot be attacked from the outside via a network such as the Internet. In addition, the validity of the usage permit used to release the usage restrictions on the target is proven by verifying the signature attached to this usage permit using the public key included in the hall data. Therefore, according to this embodiment, security risks are reduced.

In this way, according to this embodiment, it is possible to reduce security risks while improving convenience in a usage control technology for targets whose usage can be restricted by locking/unlocking, access control, or encryption/decryption.

The present invention is not limited to the above embodiment, and many variations are possible within the scope of the gist.

For example, in the above embodiment, the license issuing device 1 encrypts the usage conditions to be included in the license with a common key included in the hall data set in the usage control device 3 (encrypted usage conditions), and the usage control device 3 decrypts the encrypted usage conditions included in the license received from the usage license notification device 4. However, the present invention is not limited to this. The license issuing device 1 may include the usage conditions in the license in plain text without encrypting them. In this case, the common key may be omitted from the hall data set in the usage control device 3.

In the above embodiment, the usage conditions may be any conditions for lifting the usage restrictions on the target of use. For example, the number of uses may be used as the usage conditions instead of the available start and end times, or in addition to the available start and end times. In this case, in the usage control device 3, the usage restriction lifting unit 32 stores the number of uses of the target of use for each user, linked to the user's identification information. Then, in S303 of FIG. 10, if the number of uses included as the usage conditions in the usage certificate received from the usage certificate notification device 4 is less than the number of uses linked to the user's identification information included in this usage certificate and stored, it is determined that the usage conditions are satisfied. Also, in S304 of FIG. 10, if the usage restrictions on the target of use are lifted, the number of uses linked to the user's identification information included in this usage certificate and stored is incremented by one.

In the above embodiment, the setting terminal 5 includes in the license issuance request sent to the license issuing device 1 the authentication method adopted by the license notification device 4 of the usage control unit 2 corresponding to the target of use, together with the identification information of the user who made the license request and is known to the service provider, but the present invention is not limited to this. It is sufficient that the license issuing device 1 includes in the license issuance request specific information that can identify the authentication method adopted by the license notification device 4 of the usage control unit 2 corresponding to the target of use, together with the identification information of this user.

For example, the type and use of the user's identification information linked to the user's authentication data of the authentication method adopted by the usage permission notification device 4 of the usage control unit 2 corresponding to the target of use may be included as specific information in the request for issuance of a usage permit together with the identification information of the user requesting usage permission that is known to the service provider.

In this case, the authentication data storage unit 103 of the storage unit 101 of the license issuing device 1 stores the account information table 1033 shown in FIG. 14 instead of the identification information table 1030 shown in FIG. 5 and the authentication data table 1031 shown in FIG. 6.

The account information table 1033 is provided for each user, linked to the route ID 1032 assigned to the user. The account information table 1033 stores a record 10331 of the user's account information. This account information record 10331 has a field 10332 for registering the type and use of identification information such as an email address, mobile phone number, employee number, membership number, etc., a field 10333 for registering the user's identification information of that type and use, a field 10334 for registering an authentication method such as face authentication, vein authentication, password authentication, etc., and a field 10335 for registering the user's authentication data for that authentication method.

In addition, in S104 and S105 of FIG. 2, when the setting terminal 5 receives from the service provider a license issuance operation including an object ID, which is the identification information of the target of use specified in the license request, the identification information of the user who made the license request known to the service provider, the type and use of the user's identification information linked to the user's authentication data of the authentication method adopted by the license notification device 4 corresponding to this target of use, and the conditions of use specified in the license request, the setting terminal 5 generates a license issuance request including the specification of this information and transmits this license issuance request to the license issuing device 1.

In addition, in S108 of FIG. 2, the license issuing device 1 identifies from the authentication data storage unit 103 an account information table 1033 having a record 10331 of account information in which the identification information of the user specified in the license issuance request is registered in field 10333. Then, from the identified account information table 1033, the device further identifies a record 10331 of account information in which the type and use specified in the license issuance request is registered in field 10332. Then, the device identifies the authentication data registered in field 10335 of the authentication method registered in field 10334 of this record 10331 as the authentication data of the user of the authentication method adopted by the license notification device 4 of the usage control unit 2 corresponding to the usage target specified by the object ID specified in the license issuance request.

1: license issuing device 2, 2-1 to 2-n: usage control unit 3: usage control device 4: license notification device 5: setting terminal 30: short-distance wireless communication unit 31: hole data storage unit 32: usage restriction release unit 33: signature verification unit 34: decryption unit 40: short-distance wireless communication unit 41: authentication data acquisition unit 42: display unit 43: setting information storage unit 44: setting information reception unit 45: setting information search unit 46: license transmission unit 47: notification reception unit 60: WAN 61: relay device 62: wireless network 63: short-distance wireless communication 100: WAN interface unit 101: storage unit 102: login information storage unit 103: authentication data storage unit 104: key information storage unit 105: login processing unit 106: license issuing unit 107: encryption unit 108: signature generation unit 109: Authentication data identification unit 110: Setting information transmission unit

Claims (7)

A usage control system for controlling usage of a usage object,
A setting information transmitting device;
a usage control unit provided for each of the objects of use and controlling usage of the objects of use by locking/unlocking or access control;
a setting terminal which transmits to said setting information transmission device, in accordance with an instruction from an operator, first information including a user's identification information and specific information capable of identifying an authentication method adopted by said usage control unit corresponding to said usage target, and obtains setting information including the authentication data of the user from said setting information transmission device, and notifies said usage control unit of said obtained setting information;
The setting information transmission device
an authentication data storage means for storing at least one piece of authentication data for each user, together with an authentication method of the authentication data, in association with at least one piece of identification information;
an authentication data specifying means for specifying, from the authentication data stored in the authentication data storage means in association with the user's identification information included in the first information received from the setting terminal, the authentication data of an authentication method specified by the specification information included in the first information;
a setting information transmitting means for transmitting the setting information including the authentication data identified by the authentication data identifying means to the setting terminal,
The utilization control unit includes:
a setting information storage means for storing the setting information notified by the setting terminal;
an authentication data acquisition means for acquiring the authentication data from a user in accordance with a predetermined authentication method;
a setting information retrieval means for retrieving the setting information including the authentication data acquired by the authentication data acquisition means from the setting information storage means. 2. The access control system according to claim 1,
The specific information is an authentication method of the authentication data,
The authentication data identification means
a usage control system characterized by identifying, from among the authentication data stored in the authentication data storage means in association with the user's identification information included in the first information, the authentication data of an authentication method identified by the identification information included in the first information. 2. The access control system according to claim 1,
The authentication data storage means includes:
At least one piece of account information is stored for each user, the account information including authentication data and its authentication method, identification information and its type and purpose,
The specific information is a type and purpose of the identification information,
The authentication data identification means
A usage control system characterized by identifying account information including the type and purpose included in the first information from among the account information stored in the authentication data storage means in correspondence with a user identified by the user's identification information included in the first information, and identifying authentication data included in the account information. 4. The usage control system according to claim 1,
The authentication data storage means includes:
a route ID assigned to the user and stored for each user, the route ID being associated with at least one of the authentication data and the authentication method, and at least one of the identification information. an authentication data storage means for storing, for each user, at least one authentication method among a plurality of authentication methods adopted by a usage control unit corresponding to each of a plurality of usage targets, and at least one authentication data corresponding to the authentication method, in association with at least one piece of identification information;
an authentication data specifying means for receiving first information including identification information of the user and specific information capable of specifying an authentication method adopted by the usage control unit corresponding to the target of usage, and for specifying the authentication data of the authentication method specified by the specific information included in the first information from among the authentication data stored in the authentication data storage means in association with the identification information of the user included in the first information;
and a setting information transmitting means for transmitting, to a source of the first information, setting information including the authentication data identified by the authentication data identifying means and used by the usage control unit to confirm whether the usage conditions of the target of usage are satisfied . A usage control method for controlling usage of a usage object, comprising:
A setting information transmitting device;
a usage control unit provided for each of the objects of use and controlling usage of the objects of use by locking/unlocking or access control;
a setting terminal which transmits, to the setting information transmission device in accordance with an instruction from an operator, first information including a user's identification information and specific information capable of identifying an authentication method adopted by the usage control unit corresponding to the usage target, obtains setting information including the authentication data of the user from the setting information transmission device, and notifies the usage control unit of the obtained setting information,
The setting information transmission device
At least one piece of authentication data is stored for each user, together with an authentication method of the authentication data, in association with at least one piece of identification information;
identifying the authentication data of an authentication method identified by the first information from the authentication data stored in association with the user's identification information included in the first information received from the setting terminal, and transmitting the setting information including the identified authentication data to the setting terminal;
The utilization control unit includes:
The setting information notified by the setting terminal is stored,
11. A method for controlling use, comprising the steps of: acquiring said authentication data from a user in accordance with a predetermined authentication method; and searching for said setting information including said authentication data. Computer,
an authentication data storage means for storing, for each user, at least one authentication method among a plurality of authentication methods adopted by a usage control unit corresponding to each of a plurality of usage targets, and at least one authentication data corresponding to the authentication method, in association with at least one piece of identification information;
a setting information transmission means for transmitting setting information, which includes the authentication data identified by the authentication data identification means and is used for checking whether the usage conditions of the usage target are satisfied by the usage control unit, to a source of the first information, the setting information including the authentication data identified by the authentication data identification means, and is used for checking whether the usage conditions of the usage target are satisfied by the usage control unit, to a source of the first information, the setting information transmitting means, and the setting information including the authentication data identified by the authentication data identification means, is used for checking whether the usage conditions of the usage target are satisfied by the usage control unit.

Images