JP7738318B2 - Lock control system - Google Patents

Description

The present invention relates to a lock control system.

In rental conference rooms, rental warehouses, hotels, etc., services are available in which users are provided with a key upon reservation, allowing them to use the space, which is managed with a corresponding lock. Examples of such services include room rentals and access management for hideaway stores.

In such services, it is preferable to use disposable keys for each reservation to prevent unauthorized use of keys that have been lost by the user. However, in the case of physical keys such as dimple keys, electronic keys, and card keys, if the keys are used disposably for each reservation, the effort and/or cost required to prepare disposable physical keys can be significant.

Keys that use optically readable information, such as keys that use printed barcodes and/or keys that use barcodes displayed on a terminal, are being used. By using such keys as disposable keys, the effort and/or cost required to prepare disposable keys can be reduced compared to using disposable physical keys.

Patent Document 1 discloses technology that allows passengers to use locked areas using barcodes issued in response to reservations. This technology issues barcode boarding passes with barcode encoding to passengers, reads the barcode boarding pass presented by the passenger and compares it with flight-related data in a central database, and, if the data comparison is successful, temporarily releases the locking means at the transit area, allowing the passenger who presented the barcode boarding pass to pass through the designated transit area. The technology in Patent Document 1 automates boarding pass verification and can prevent the use of counterfeit boarding passes.

Special Publication No. 2010-506316

However, there is a demand for a service that retrofits existing equipment with locks that can manage rentals based on reservations, allowing users to use the equipment with the locks retrofitted upon reservation. When retrofitting locks to existing equipment, there may be cases where the location of the equipment has limitations on communication stability, communication confidentiality, and/or power supply.

The technology in Patent Document 1 reads the barcode boarding pass and checks it against flight data in a central database, allowing passengers who present their barcode boarding pass to pass through designated transit points. Therefore, the technology in Patent Document 1 has room for improvement in that it provides a means of controlling locks according to reservations that can be retrofitted to equipment in locations where it is difficult to ensure stable communication with a central database.

When communication confidentiality is limited, such as in the case of wireless communication, if information is sent to the lock each time a reservation is made, the transmitted information may be intercepted and used fraudulently. The technology in Patent Document 1 leaves room for further improvement in terms of reducing the risk of information transmitted to a lock retrofitted to equipment in a location where communication confidentiality is limited being intercepted and used fraudulently.

When the power supply is limited, the lock is required to be able to operate using a power source that can provide a small amount of power, such as a battery. By being able to operate the means for controlling the lock with less power, the frequency of power supply maintenance (e.g., battery replacement) can be reduced. This makes it possible to control the lock with almost unattended management, and the administrator who manages reservations can reduce the effort and/or burden involved in controlling the lock.

The technology of Patent Document 1 may consume power for communication each time a barcode boarding pass is read, in order to compare the scanned barcode boarding pass with flight data in a central database. Therefore, there is room for further improvement in the technology of Patent Document 1 in terms of providing a means for controlling locks using less power, which can be retrofitted to equipment in locations with limited power supply, and which enables lock control according to reservations.

The present invention was made to solve the problems of the prior art described above, and aims to provide a lock control system that can achieve reservation-based lock control, while maintaining communication stability, confidentiality, and/or can be retrofitted to equipment in locations where power supply is limited.

After extensive research into how to solve the above-mentioned problems, the inventors discovered that the above-mentioned problems could be solved by transmitting large amounts of reservation information, including reservation time slots, collectively at intervals of at least a specified time, and issuing a two-dimensional code containing encrypted small-volume information obtained by encrypting the large-volume reservation information and the corresponding small-volume information with a private key using a public encryption key system, thereby completing the present invention. Specifically, the present invention provides the following:

The invention according to a first aspect comprises an electric and/or electronic lock comprising a locking device switchable between a locked state and an unlocked state, a reading device capable of reading a two-dimensional code, and a control device capable of controlling the locking device and the reading device; and a reservation management device connected to the lock via a network and capable of managing reservation time slots during which the locking device can be unlocked during a reservation time slot reserved by a user. The reservation management device comprises a large-capacity reservation information generation unit capable of generating large-capacity reservation information including at least reservation time slot information related to the reservation time slot and identification information having a smaller data volume than the reservation time slot information; a large-capacity reservation information transmission unit capable of transmitting one or more pieces of large-capacity reservation information to the control device at intervals of 0.5 hours or more; and a two-dimensional code including encrypted small-capacity information in which small-capacity information including the identification information but not the reservation time slot information is encrypted with a private key using a public encryption key system to the user. and a two-dimensional code issuing unit capable of issuing a two-dimensional code, wherein the control device of the lock has a large-capacity reservation information receiving unit capable of receiving the one or more large-capacity reservation information from the reservation management device, a decoding unit that decrypts the encrypted small-capacity information included in the two-dimensional code read by the reading unit using a public key corresponding to the private key to obtain decoded small-capacity information, a determination unit that determines whether the current time falls within the reservation time slot using corresponding large-capacity reservation information corresponding to the decoded small-capacity information, and an unlock command unit that can command the lock device to switch to the unlocked state if the current time falls within the reservation time slot, and the large-capacity reservation information receiving unit is capable of receiving specific large-capacity reservation information equivalent to the corresponding large-capacity reservation information from the reservation management device if the corresponding large-capacity reservation information corresponding to the decoded small-capacity information is not included in the one or more large-capacity reservation information received by the reservation information receiving unit.

According to the first aspect of the invention, the reservation management device generates large-volume reservation information including reservation time slots, etc., and can transmit one or more large-volume reservation information items collectively to the control device at intervals of at least a specified time. This allows the reservation management device to transmit large-volume reservation information to the control device at times when communication is stable, even in locations where communication stability is limited.

According to the first aspect of the invention, the reservation management device transmits large amounts of reservation information in batches at intervals of at least a specified time. This allows the reservation management device to transmit large amounts of reservation information less frequently than if large amounts of reservation information were transmitted each time a reservation was made. Therefore, the control system can reduce the risk of large amounts of reservation information being intercepted and used fraudulently, even in locations where communication confidentiality is restricted. Furthermore, by reducing the frequency with which large amounts of reservation information are transmitted, the control device can reduce the increase in power consumption required for long-distance communications.

According to the first aspect of the invention, if the received large-volume reservation information does not contain corresponding large-volume reservation information, specific large-volume reservation information equivalent to the corresponding large-volume reservation information can be received from the reservation management device. Therefore, the control system can simultaneously reduce the risk of interception and power consumption by having the control device transmit reservation information one by one each time a reservation is made, and enable the control device on the electronic lock side to reliably receive corresponding large-volume reservation information that corresponds to the small-volume information after decryption, enabling the validity of the reserved time slot to be quickly determined.

In the common key method, if the key (common key) used for decryption is not secret, forged small amounts of information can be encrypted using the common key, which allows the lock device to be unlocked outside of the reserved time slot. This can generate a forged two-dimensional code that allows the lock device to be unlocked outside of the reserved time slot.

According to the first aspect of the invention, encrypted small-volume information is encrypted using a private key in a public encryption key system and decrypted using a public key corresponding to the private key. This prevents the generation of counterfeit two-dimensional codes that allow a lock device to be unlocked outside of the reserved time slot reserved by the user, even if the key (public key) used for decryption is not secret.

However, while public encryption key systems offer stronger encryption than symmetric key systems, they are known to impose a greater load on encryption and decryption processes than symmetric key systems. As a result, when using public encryption key systems, the power consumption of control devices may be higher than with symmetric key systems.

According to the first aspect of the invention, the decryption unit decrypts the encrypted small-capacity information and uses the corresponding large-capacity reservation information that corresponds to the decrypted small-capacity information to determine whether the current time falls within a reserved time slot. This allows the control device to limit the information to be decrypted to the encrypted small-capacity information, thereby reducing the load on the decryption process using the public encryption key method and preventing the generation of counterfeit two-dimensional codes.

Therefore, according to the first aspect of the invention, it is possible to prevent the generation of counterfeit two-dimensional codes while reducing the power consumption of the control device caused by the load imposed by the decryption process compared to when all large-volume reservation information is encrypted using a public encryption key method.

Therefore, the invention relating to the first feature can simultaneously reduce the risk of large-volume reservation information being intercepted and used fraudulently, reduce power consumption, and prevent the generation of counterfeit two-dimensional codes that allow a lock device to be unlocked outside of the reserved time slot, even if the key used for decryption is not secret. This makes it possible to rent out rooms equipped with electric and/or electronic locks with almost unattended management, even in places where confidentiality of communications and/or power supply are limited.

Therefore, according to the first aspect of the invention, it is possible to provide a lock control system that can achieve stable communication, confidential communication, and/or reservation-based lock control that can be retrofitted to equipment in locations where power supply is limited.

The second aspect of the invention is the first aspect of the invention, and provides a control system in which the lock further includes a power supply unit capable of supplying less power than that which can be supplied by commercial power to the lock device, the reading device, and the control device.

According to the second aspect of the invention, by providing a power supply unit capable of supplying less power than that available from commercial power sources, the locking device, reading device, and control device can provide lock control even in locations where power supply is limited. Therefore, according to the second aspect of the invention, even in locations where power supply is limited, the control system can realize almost unattended management of rooms equipped with electric and/or electronic locks. Furthermore, since the power consumption of the lock can be reduced by not communicating with the outside world, it is expected that the frequency of maintenance of the power supply unit will also be reduced.

Therefore, the second aspect of the invention provides a lock control system that can achieve stable communication, confidential communication, and/or reservation-based lock control that can be retrofitted to equipment in locations where power supply is limited.

The present invention provides a lock control system that can achieve stable communication, confidential communication, and/or reservation-based lock control that can be retrofitted to equipment in locations where power supply is limited.

FIG. 1 is a block diagram showing an example of the hardware and software configurations of a control system S according to an embodiment of the present invention. FIG. 2 shows an example of the reservation table 221 . FIG. 3 shows an example of the large-volume reservation information table 621 . FIG. 4 is a main flowchart showing an example of reservation processing executed by the reservation management device 2. FIG. 5 is a flowchart showing an example of the large-volume reservation information transmission process executed in step S8 of FIG. FIG. 6 is a main flowchart showing an example of the control process executed by the control device 6. FIG. 7 is a flowchart showing an example of the offline control process executed in step S42 of FIG. FIG. 8 is a flowchart showing an example of the online control process executed in step S45 of FIG. FIG. 9 is a flowchart showing an example of the large-volume reservation information receiving process executed in step S69 of FIG. FIG. 10 is a flowchart showing an example of the usage termination process executed in step S44 of FIG. FIG. 11 is a diagram showing an example of attaching a lock 3 to a managed object M.

An example of an embodiment of the present invention will be described in detail below with reference to the drawings.

<<Control System S>>
1 is a block diagram showing an example of the hardware and software configurations of a control system S according to an embodiment of the present invention. The control system S (lock control system) includes at least a user terminal 1, a reservation management device 2 capable of issuing a two-dimensional code B that enables a managed object M to be used during a reserved time slot reserved by the user, and a lock 3 capable of managing the managed object M. The reservation management device 2 is also configured to be able to communicate with the user terminal 1 and the lock 3 via a network N.

The number of user terminals 1 is not particularly limited. The number of locks 3 is also not particularly limited, as long as it is one or more.

<User terminal 1>
The user terminal 1 is not particularly limited as long as it can request a reservation for a reservation time slot from the reservation management device 2 via the network N. The user terminal 1 may be, for example, a mobile terminal such as a smartphone or a tablet terminal, or a computer such as a personal computer or a laptop computer.

If the user terminal 1 is a mobile terminal, it is preferable that the user terminal 1 be able to display the two-dimensional code issued by the reservation management device 2. This allows a user using the user terminal 1 to use the two-dimensional code B displayed on the user terminal 1 to access the managed object M managed by the lock 3 during the reserved time slot.

If the user terminal 1 is a mobile terminal, it is preferable that the user terminal 1 be able to communicate with the reservation management device 2 via a wireless network. This allows the user terminal 1 to request the reservation management device 2 to issue a two-dimensional code B when in the vicinity of the lock 3, even if the reservation management device 2 is located far away from the lock 3, and then display the issued two-dimensional code B to use the managed object M managed by the lock 3.

<Reservation management device 2>
The reservation management device 2 includes a management device control unit 21, a management device storage unit 22, and a management device communication unit 23. The configuration of the reservation management device 2 is not particularly limited, and may be, for example, a server device, a cloud server including multiple computers connected via a network N, or the like.

In particular, it is preferable that the configuration of the reservation management device 2 includes a cloud server. This allows the reservation management device 2 to distribute processing across multiple computers and perform reservation management without delay, even when there are a large number of user terminals 1 and/or locks 3. Furthermore, even if a failure occurs in one of the computers included in the cloud server, another computer can continue to manage reservations.

[Management device control unit 21]
The management device control unit 21 includes a CPU (Central Processing Unit), a RAM (Random Access Memory), a ROM (Read Only Memory), and the like.

The management device control unit 21 loads a specified program and, as necessary, cooperates with the management device storage unit 22 and/or management device communication unit 23 to realize the software configuration elements of the reservation management device 2, such as the large-capacity reservation information generation unit 211, the large-capacity reservation information transmission unit 212, the two-dimensional code issuance unit 213, and the usage end information reception unit 214.

The flow of the reservation management process executed by the reservation management device 2 will be explained in detail later using Figure 4.

[Management device storage unit 22]
The management device storage unit 22 is a device in which data and/or files are stored, and has a data storage unit such as a hard disk, semiconductor memory, recording medium, memory card, etc. The management device storage unit 22 may have a mechanism that enables connection to a storage device or storage system such as a NAS (Network Attached Storage), a SAN (Storage Area Network), cloud storage, a file server, and/or a distributed file system via the network N.

The management device memory unit 22 stores the control program executed by the microcomputer, the reservation table 221, the private key 222, etc.

[Reservation Table 221]
2 is an example of the reservation table 221. The reservation table 221 stores reservation information including a reservation time slot, a lock ID that can identify the lock 3 used to manage the managed object M that is the subject of the reservation, a lock device ID that can identify the lock device 4 used to manage the managed object M that is the subject of the reservation, and the like.

The reservation table 221 is preferably capable of storing reservation information in association with a reservation information ID that can identify a reservation. This allows the reservation management device 2 to store and/or retrieve reservation information using the reservation ID.

Although not a required feature, it is preferable that the reservation information includes identification information that allows the lock 3 to identify the reservation information and has a smaller data volume than the reservation information. This allows the lock 3, which receives the reservation information and obtains the identification information via the two-dimensional code B, to identify the reservation information using the identification information and control the lock 3 according to the reservation information.

The identification information is not particularly limited. It is preferable that the identification information does not include unencrypted information related to the reserved time slot. This prevents the identification information from being used to generate a counterfeit two-dimensional code that can unlock the lock 3 outside the reserved time slot if the confidentiality of the identification information is not maintained. An example of the identification information is a PIN number that corresponds to the reservation information.

Although not a required feature, it is preferable that reservation information be stored in association with information on whether the reservation information has already been sent to lock 3. This can prevent reservation information that has already been sent from being sent repeatedly.

Although not a required feature, it is preferable that reservation information be stored in association with information on whether the use of that reservation information has ended. This can prevent reservation information whose use has ended from being repeatedly sent.

The reservation table 221 shown in Figure 2 stores reservation information associated with a reservation information ID. The reservation information stored in the reservation table 221 shown in Figure 2 includes, for a reservation, a "reservation time slot," a "lock ID," a "lock device ID," and "identification information" that can identify the reservation information, and is associated with information on whether the reservation information has been "sent" and whether use of the managed object M corresponding to the reservation information during the reserved time slot has "ended."

The reservation information associated with reservation information ID "R0001" in FIG. 2 includes the following information:
A reservation time period with a start date and time of "July 7th, 16:00" and an end date and time of "July 7th, 18:00".
Lock ID "3a" that can identify lock 3.
A lock device ID "4aa" that can identify a lock device 4 that can be controlled by the lock 3 identified by the lock ID "3a".
Identification information "0626..." that is information relating to the reserved time slot and does not include unencrypted information, and that can identify the reservation information.

The reservation information associated with the reservation information ID "R0001" in FIG. 2 is associated with the following information:
Transmitted information "Yes" indicating that the reservation information has been transmitted.
Use end information "Yes" indicates that the use of the reservation corresponding to the reservation information has ended.

As a result, the reservation management device 2 can send to the lock 3 large-volume reservation information regarding a reservation for the use of managed object M, which is controlled by lock 3 identified by lock ID "3a" and managed by lock device 4 identified by lock device ID "4aa", during a reservation time period starting at "July 7th, 16:00" and ending at "July 7th, 18:00". The reservation management device 2 can also issue a two-dimensional code B containing identification information "0626...", which can identify the transmitted large-volume reservation information.

[Private key 222]
The private key 222 is not particularly limited as long as it is a private key of a public encryption key system, and may be, for example, a public encryption key system based on prime factorization (such as RSA (Rivest-Shamir-Adleman) encryption, Paillier encryption, or Rabin encryption), a public encryption key system based on discrete logarithms (such as Cramer-Shoup encryption or ElGamal encryption), a public encryption key system based on lattice encryption (such as NTRU encryption), or a public encryption key system based on probabilistic encryption (such as McEllis encryption or EPOC (Efficient Probabilistic Public Key Encryption)).

In particular, it is preferable that the private key 222 include a private key of a public encryption key system based on prime factorization. Public encryption key systems based on prime factorization, such as the RSA encryption system, are known to be relatively easy to encrypt and decrypt. Therefore, by having the private key 222 include a private key of a public encryption key system based on prime factorization, the load of encryption and/or decryption can be reduced.

By storing the private key 222 in the management device storage unit 22, the reservation management device 2 can encrypt reservation information, including the reservation time slot, with the private key 222 to generate encrypted reservation information. This allows the reservation management device 2 to issue a two-dimensional code that includes the encrypted reservation information. Because the two-dimensional code includes encrypted reservation information encrypted with the private key 222, the control system S can prevent the generation of counterfeit two-dimensional codes that allow the lock device to be unlocked outside the reservation time slot reserved by the user, even if the key (public key) used for decryption is not secret.

Furthermore, by storing the private key 222 in the management device storage unit 22, the reservation management device 2 can encrypt information that includes identification information but does not include the reservation time slot using the private key 222, thereby generating encrypted small-volume information. This prevents the generation of counterfeit two-dimensional codes that allow the lock device to be unlocked outside of the reservation time slot reserved by the user, even if the key (public key) used for decryption is not secret.

[Management device communication section 23]
The management device communication unit 23 is not particularly limited to any communication unit that connects the reservation management device 2 to the network N and enables communication with the user terminal 1, lock 3, etc., and examples include a wireless device compatible with a mobile phone network, a Wi-Fi (Wireless Fidelity) compatible device that complies with IEEE 802.11, and a network card that complies with the Ethernet standard.

The management device communication unit 23 preferably includes a communication unit that can connect to a wireless network, such as a wireless device compatible with a mobile phone network or a Wi-Fi (Wireless Fidelity) compatible device that complies with IEEE 802.11. This allows the reservation management device 2 to communicate with the user terminal 1 and/or lock 3 even if wired communication is restricted at the location of the user terminal 1 and/or lock 3.

<Tablet 3>
The lock 3 includes a locking device 4 capable of managing the managed object M, a reading device 5 capable of reading the two-dimensional code B, and a control device 6 electrically connected to the locking device 4 and the reading device 5 via wire and/or short-range wireless communication.

The number of locking devices 4 is not particularly limited as long as it is one or more. If the number of managed objects M is two or more, it is preferable that the number of locking devices 4 be equal to or greater than the number of managed objects M. This allows the lock 3 to associate each of the two or more managed objects M with a locking device 4 and manage usage according to the reservations for each managed object M.

There is no particular upper limit on the number of locking devices 4.

[Locking device 4]
The locking device 4 is not particularly limited as long as it is a locking device that can be switched between a locked state and an unlocked state. The locking device 4 may be, for example, an electric locking device that operates on a commercial power source, such as an electric lock, a magnetic lock, or an automatic door, or an electronic locking device that operates on a power source that can supply less power than that supplied by a commercial power source, such as a smart lock.

In particular, it is preferable that the locking device 4 includes an electronic locking device that operates on a power supply that can supply less power than that available from a commercial power source. This allows the lock 3 to provide management of the managed object M even in places where the power supply is limited. Therefore, even in places where the power supply is limited, the lock 3 can realize the rental of rooms equipped with electric and/or electronic locks with almost unattended management.

The locking device 4 is preferably a locking device 4 that can be connected to the control device 6 via short-range wireless communication. This allows the control device 6 to be configured without being connected to the locking device 4 via a wire. Because the control device 6 can be configured without being connected to the locking device 4 via a wire, it can be made even easier to retrofit a lock 3 to the managed object M.

The short-range wireless communication is not particularly limited, and may be, for example, short-range wireless communication compliant with Bluetooth (registered trademark), ZigBee (registered trademark), etc.

The short-range wireless communication preferably includes short-range wireless communication that complies with Bluetooth Low Energy (Bluetooth LE, BLE), a standard within Bluetooth (registered trademark). By including short-range wireless communication that complies with Bluetooth LE, the control device 6 can further reduce the power consumption associated with communication with the lock device 4.

[Power supply section]
Although not a required feature, it is preferable that the lock device 4 includes a power supply unit capable of supplying less power than that which can be supplied by a commercial power source. This allows the lock 3 to manage the managed objects M even in places where the supply of power is limited. Therefore, even in places where the supply of power is limited, the lock 3 can realize the rental of rooms equipped with electric and/or electronic locks with almost unattended management.

The power supply unit is not particularly limited as long as it can supply less power than that supplied by a commercial power source. The power supply unit may be capable of supplying power using, for example, one or more of a battery, an AC adapter, a USB power supply, a wireless power supply, etc.

It is preferable that the power supply unit includes a power supply unit that can supply power using a battery. This allows the administrator who manages the lock device 4 to maintain the power supply unit by the relatively simple task of replacing the battery. This reduces the effort required to maintain the power supply unit.

[Reading device 5]
The reader 5 is not particularly limited as long as it can read the two-dimensional code B.

Although not a required feature, the reading device 5 may include a usage termination reading device that reads the two-dimensional code B when the person who reserved the managed object M ends their use of the managed object M. This allows the person who reserved the managed object M to end their use of the managed object M by having the usage termination reading device read the two-dimensional code B.

Although not a required feature, it is preferable that the reading device 5 be capable of reading information that allows the control device 6 to communicate with the locking device 4 included in the lock 3 via short-range wireless communication. This allows the administrator who manages the managed object M to easily retrofit the reading device 5 and control device 6 to an existing locking device 4. It also makes it easy to retrofit a locking device 4 to an existing lock 3.

[Detection unit]
Although not an essential aspect, it is preferable that the reading device 5 includes a detection unit capable of detecting whether a detection target, such as the two-dimensional code B, the user terminal 1, and/or a user using the user terminal 1, is present in the vicinity of the reading device 5. By including the detection unit in the reading device 5, the reading device 5 can reduce power consumption by not reading when a detection target is not detected.

The detection unit is not particularly limited as long as it can detect whether the user terminal 1 and/or a user using the user terminal 1 is present in the vicinity of the reading device 5. The detection unit may include, for example, a moving object identification sensor capable of detecting moving objects in the vicinity of the reading device 5, a human presence sensor capable of detecting people in the vicinity of the reading device 5, etc.

The detection unit is preferably a detection unit that includes a motion identification sensor. This allows the detection unit to detect the movement of the reservation holder presenting two-dimensional code B to the reading device 5. This makes it possible to both reduce power consumption by not reading when the reservation holder is simply near the reading device 5 but does not present two-dimensional code B, and to read two-dimensional code B when the reservation holder presents it to the reading device 5.

The detection unit is preferably capable of controlling the reading device 5 and/or the control device 6 to a standby state if the detection target is not detected for a certain period of time, and of ending the standby state of the reading device 5 and the control device 6 when the detection target is detected. This allows the detection unit to put the reading device 5 and/or the control device 6 into a standby state if the detection target is not detected for a certain period of time, thereby reducing power consumption.

[Power supply section]
Although not essential, it is preferable that the reading device 5 includes a power supply unit capable of supplying less power than that which can be supplied by a commercial power source. This allows the lock 3 to provide management of the managed objects M even in places where the supply of power is limited. Therefore, even in places where the supply of power is limited, the lock 3 can realize the rental of rooms equipped with electric and/or electronic locks with almost unattended management.

The power supply unit is not particularly limited as long as it can supply less power than that supplied by a commercial power source. The power supply unit may be capable of supplying power using, for example, one or more of a battery, an AC adapter, a USB power supply, a wireless power supply, etc.

It is preferable that the power supply unit includes a power supply unit that can supply power using a battery. This allows the administrator who manages the lock 3 to maintain the power supply unit by relatively simply replacing the battery. This reduces the effort required to maintain the power supply unit.

[Control device 6]
The control device 6 includes at least a control device control unit 61 , a control device storage unit 62 , a control device communication unit 63 , and a timer unit 64 .

[Control device control unit 61]
The control device control unit 61 includes a CPU (Central Processing Unit), a RAM (Random Access Memory), a ROM (Read Only Memory), and the like.

The control device control unit 61 loads a specified program and, as necessary, cooperates with each component included in the control device 6, such as the control device storage unit 62 and/or the control device communication unit 63, to realize the software configuration elements of the control device 6, such as the operation determination unit 611, large-capacity reservation information receiving unit 612, reading unit 613, decoding unit 614, determination unit 615, unlock command unit 616, time setting unit 617, and usage end information sending unit 618.

The flow of control processing executed by the control device 6 will be explained in detail later using Figure 6.

[Control device storage unit 62]
The control device storage unit 62 is a device in which data and/or files are stored, and has a data storage unit such as a hard disk, semiconductor memory, recording medium, memory card, etc. The control device storage unit 62 may have a mechanism that enables connection to a storage device or storage system such as a NAS (Network Attached Storage), a SAN (Storage Area Network), cloud storage, a file server, and/or a distributed file system via the network N.

The control device storage unit 62 stores a control program executed by the microcomputer, a large-capacity reservation information table 621, a public key 622, etc. When the control device 6 performs online control processing that communicates with the outside, it is preferable that the control device storage unit 62 be able to store the sleep time period during which the control device 6 enters a sleep state in which it does not perform control processing, and the reception timing at which the control device 6 receives large-capacity reservation information.

(Large Capacity Reservation Information Table 621)
3 is an example of the large-capacity reservation information table 621. The large-capacity reservation information table 621 stores large-capacity reservation information including a reservation time slot, a lock device ID capable of identifying the lock device 4 used to manage the managed object M that is the target of the reservation, and identification information capable of identifying the reservation information and having a smaller data volume than the reservation information.

The identification information is not particularly limited and may be the same as the identification information stored in the reservation table 221. The number of large-capacity reservation information items that can be stored in the large-capacity reservation information table 621 is not particularly limited, but it is preferable that it be 1,000 or less. This reduces the storage area used by the large-capacity reservation information table 621 in the control device storage unit 62 and the storage capacity of the control device storage unit 62, and can reduce the power consumption of the control device storage unit 62.

The large-volume reservation information table 621 is preferably capable of storing large-volume reservation information in association with a large-volume reservation information ID that can identify the large-volume reservation information. This allows the control device 6 to store and/or retrieve large-volume reservation information using the large-volume reservation information ID.

Although not a required feature, it is preferable that large-volume reservation information be stored in association with information on whether the managed object M corresponding to the large-volume reservation information is in use. This makes it possible to send information on whether the managed object M is in use to the reservation management device 2.

Although not a required feature, it is preferable that the reservation information be stored in association with information on whether use of the managed object M corresponding to the large-volume reservation information during the reserved time period has ended. This makes it possible to prevent the lock device 4 retrofitted to the managed object M from being unlocked when use during the reserved time period has ended.

The large-capacity reservation information table 621 shown in Figure 3 stores large-capacity reservation information associated with large-capacity reservation information IDs. The large-capacity reservation information stored in the large-capacity reservation information table 621 shown in Figure 3 includes, for reservations, "reservation time period," "lock ID," "lock device ID," and "identification information" that can identify the reservation information, and is associated with information on whether the managed object M corresponding to the large-capacity reservation information is "in use," and information on whether use of the managed object M corresponding to the large-capacity reservation information during the reserved time period has "ended."

The reservation information associated with the large-volume reservation information ID "M0001" in FIG. 3 includes the following information:
A reservation time period with a start date and time of "July 7th, 16:00" and an end date and time of "July 7th, 18:00".
The lock device ID "4aa" is used to identify the lock device 4.
Identification information "0626..." that is information relating to the reserved time slot and does not include unencrypted information, and that can identify the reservation information.

Furthermore, the reservation information associated with the large-volume reservation information ID "M0001" in FIG. 3 is associated with the following information:
In-use information "No" indicates that the managed object M corresponding to the large-volume reservation information is not in use.
Usage end information "Yes" indicates that usage of the managed object M corresponding to the large-volume reservation information in the reserved time period has ended.

As a result, in response to reading two-dimensional code B containing identification information "0626...", the control device 6 can control lock device 4 based on a reservation to use managed object M, which is managed by lock device 4 identified by lock device ID "4aa" and indicated by the large-capacity reservation information corresponding to that identification information, during a reservation time period starting at "July 7th, 16:00" and ending at "July 7th, 18:00".

(Public key 622)
There are no particular limitations on the public key 622, as long as it is a public key that corresponds to the private key 222. The public key 622 may be a public key of the same public key cryptosystem as the corresponding private key 222.

By storing the public key 622 in the control device storage unit 62, the control device 6 can decrypt encrypted reservation information encrypted with the private key 222. Also, by storing the public key 622 in the control device storage unit 62, the control device 6 can decrypt encrypted small-volume information encrypted with the private key 222.

Because public key 622 is a public key used in public key cryptography, the secrecy of private key 222 is maintained even if the secrecy of public key 622 is compromised due to reverse engineering of lock 3, etc. This prevents the generation of counterfeit two-dimensional codes that allow lock device 4 to be unlocked outside of the reserved time slot reserved by the user, even if the secrecy of public key 622 is compromised.

[Control device communication unit 63]
The control device communication unit 63 is not particularly limited as long as it can electrically connect the control device 6 to the lock device 4 and the reading device 5 via wired and/or near-field wireless communication.

Because the control device communication unit 63 can electrically connect the control device 6 to the lock device 4 and the reading device 5 via wired and/or short-range wireless communication, the reading device 5 and control device 6 can be retrofitted to an existing lock device 4 to create a lock 3 that includes the existing lock device 4, reading device 5, and control device 6.

The control device communication unit 63 is preferably capable of electrically connecting the control device 6 and the lock device 4 via short-range wireless communication. This allows the control device 6 to be configured without being connected to the lock device 4 via a wire. Because the control device 6 can be configured without being connected to the lock device 4 via a wire, it can be made even easier to retrofit a lock 3 to the managed object M.

The short-range wireless communication is not particularly limited, and may be, for example, short-range wireless communication compliant with Bluetooth (registered trademark), ZigBee (registered trademark), etc.

The short-range wireless communication preferably includes short-range wireless communication that complies with Bluetooth Low Energy (Bluetooth LE, BLE), a standard within Bluetooth (registered trademark). By including short-range wireless communication that complies with Bluetooth LE, the control device 6 can further reduce the power consumption associated with communication with the lock device 4.

It is preferable that the control device communication unit 63 connects the control device 6 to the network N so that it can communicate with the reservation management device 2. This allows the control device 6 to perform online control processing to receive large amounts of reservation information, etc. from the reservation management device 2.

The components that connect the control device 6 included in the control device communication unit 63 to the network N and enable communication with the reservation management device 2 are not particularly limited, and examples include wireless devices compatible with mobile phone networks, Wi-Fi (Wireless Fidelity) compatible devices compliant with IEEE 802.11, and network cards compatible with the Ethernet standard.

[Timer section 64]
The control device 6 includes a timer unit 64 that can measure the current time. This allows the control device 6 to determine whether the current time falls within a reserved time slot without communicating with the outside. This allows the control device 6 to perform offline control processing without communicating with the outside.

The timer unit 64 is not particularly limited as long as it is capable of measuring the current time, and may be a timer unit including various conventional means for measuring the current time (such as a quartz clock, a timing circuit, or a radio-controlled clock).

By performing offline control processing without external communication, the control device 6 can reduce power consumption by the control device 6 and lock 3. Therefore, the control device 6 can control the lock 3 even in places where power supply is limited.

Furthermore, by having the control device 6 perform offline control processing that does not involve external communication, the risk of reservation information and the like being intercepted during external communications can be reduced. This allows the control system S to prevent intercepted reservation information from being used to generate a counterfeit two-dimensional code that would allow the lock device 4 to be unlocked during a time slot other than the one reserved by the user.

[Control device power supply unit 65]
Although not a required feature, it is preferable that the control device 6 includes a control device power supply unit 65 that can supply less power than that which can be supplied by a commercial power source. This allows the lock 3 to manage the managed objects M even in places where the power supply is limited. Therefore, even in places where the power supply is limited, the lock 3 can realize the rental of rooms equipped with electric and/or electronic locks with almost unattended management.

The control device power supply unit 65 is not particularly limited as long as it can supply less power than that supplied by a commercial power source. The control device power supply unit 65 may be a power supply unit that can supply power using, for example, one or more of a battery, an AC adapter, a USB power supply, a wireless power supply, etc.

It is preferable that the control device power supply unit 65 includes a power supply unit capable of supplying power using a battery. This allows the administrator in charge of the lock 3 to maintain the control device power supply unit 65 through the relatively simple task of replacing the battery. This reduces the effort required to maintain the control device power supply unit 65.

It is preferable that the control device power supply unit 65 be able to supply power to the reading device 5. This allows both the reading device 5 and the control device 6 to be supplied with power without having to provide power supplies for both. This reduces the effort required to maintain the lock 3.

[Action designation unit 66]
Although not a required feature, it is preferable that the control device 6 include an operation designation unit 66 that can designate the operation of the control device 6 from two or more operations including at least an operation for performing offline control processing and an operation for performing online control processing. This allows the control device 6 to switch between an operation for performing offline control processing that does not communicate with the outside world and an operation for performing online control processing that does communicate with the outside world based on the designation of the administrator who manages the locks 3. This allows the administrator to switch the operation of the control device 6 without having to change multiple locks 3 and/or control devices 6 that operate differently.

The operation designation unit 66 is not particularly limited. For example, the operation designation unit 66 may be an operation designation unit that designates an operation to perform offline control processing when the reading device 5 reads a two-dimensional code that designates an operation to perform offline control processing, or an operation designation unit that designates an operation to perform online control processing when the reading device 5 reads a two-dimensional code that designates an operation to perform online control processing.

It is preferable that the operation specification unit 66 be able to specify a usage termination operation that the control device 6 will use to perform usage termination processing. This allows the control device 6 to execute usage termination processing that terminates the use of the managed object M based on the specification.

[Device Identification Mark 67]
Although not an essential aspect, it is preferable that the control device 6 includes a device identification mark 67 that can identify the control device 6. This allows the user terminal 1 to read the device identification mark 67 and transmit the information included in the read device identification mark 67 to the reservation management device 2, thereby making a request to obtain a two-dimensional code related to the managed object M managed by the lock 3 including the control device 6, a reservation request, and/or a reservation cancellation request without manually inputting information related to the control device 6 and/or the managed object M.

The device identification mark 67 is not particularly limited and may be, for example, a two-dimensional code containing information that can identify the control device 6.

[Input section]
When the control device 6 performs online control processing that communicates with the outside, it is preferable that the control device 6 include an input unit (not shown) that can input identification information that can identify reservation information. This makes it possible to realize hybrid control that controls the lock 3 not only by the two-dimensional code but also by input from the person who made the reservation. The input unit is not particularly limited, and may be, for example, a keypad that can input identification information.

<Network N>
The type of network N is not particularly limited as long as it is a network that enables communication between the reservation management device 2, the user terminal 1, and the lock 3, and examples include a personal area network, a local area network, an intranet, an extranet, the Internet, a Wi-Fi network, a mobile phone network, or a network that combines multiple of these networks.

The network N preferably includes a wireless network, such as a mobile phone network or an IEEE 802.11-compliant Wi-Fi (Wireless Fidelity) network. This allows the reservation management device 2 to communicate with the user terminal 1 and/or lock 3 even if wired communication is restricted at the location of the user terminal 1 and/or lock 3.

<Management target M>
The managed object M is not particularly limited as long as it can be managed by the lock 3. The managed object M may be, for example, a room equipped with a door or the like that can be locked by the lock 3 (for example, a rental conference room, a rental office, a hotel room, etc.), a building equipped with a door or the like that can be locked by the lock 3 (for example, a store such as a hideaway store), or a storage device equipped with a door or the like that can be locked by the lock 3 (for example, a safe deposit box, a rental locker, a rental bicycle garage, etc.).

The number of managed objects M is not particularly limited.

[Main Flowchart of Reservation Processing Executed by the Reservation Management Device 2]
4 is a main flowchart showing an example of reservation processing executed by the reservation management device 2. An example of a preferable flow of reservation processing executed by the reservation management device 2 will be described below with reference to FIG.

[Step S1: Determine whether a reservation has been requested]
The management device control unit 21 executes the large-capacity reservation information generation unit 211 in cooperation with the management device storage unit 22 and the management device communication unit 23, and performs processing to determine whether a reservation for using the managed object M during the reserved time period has been requested by the user terminal 1 (step S1). If a reservation has been requested, the management device control unit 21 proceeds to step S2. If a reservation has not been requested, the management device control unit 21 proceeds to step S4.

[Step S2: Generate large-volume reservation information]
The management device control unit 21 executes the large-capacity reservation information generation unit 211 in cooperation with the management device storage unit 22, and performs processing to generate large-capacity reservation information (reservation information) regarding reservations for using the managed object M during the reserved time period (step S2). The management device control unit 21 then proceeds to step S3.

The process of generating large-volume reservation information (reservation information) executed in step S2 preferably includes a process of storing the generated reservation information in the reservation table 221. This allows the reservation management device 2 to transmit large-volume reservation information using the reservation information stored in the reservation table 221.

[Step S3: Issue a two-dimensional code]
The management device control unit 21 executes the two-dimensional code issuing unit 213 in cooperation with the management device storage unit 22, and executes a process of issuing a two-dimensional code B including at least a part of the reservation information generated in step S2 to the user who uses the user terminal 1 that requested the reservation in step S1 (step S3). The management device control unit 21 proceeds to step S4.

The process for issuing two-dimensional code B is not particularly limited. The process for issuing two-dimensional code B may include, for example, one or more of the following: sending information capable of displaying two-dimensional code B to the user terminal 1 that requested the reservation in step S1; sending information capable of printing two-dimensional code B to the user terminal 1 that requested the reservation in step S1; or sending a printout of two-dimensional code B to the user using the user terminal 1 that requested the reservation in step S1.

Although not a required feature, it is preferable that the processing executed in step S3 includes processing to associate information capable of identifying the reservation (e.g., reservation information ID, identification information, information capable of identifying the reservation time slot and managed object M, information including information capable of identifying the user using the user terminal 1 and the reservation time slot) with information capable of issuing a two-dimensional code, and register this in an external database (e.g., a database of a service that provides a calendar capable of managing schedules). This enables the user terminal 1 to use the information capable of identifying the reservation to obtain information capable of issuing a two-dimensional code from the external database, and issue the two-dimensional code.

(Two-dimensional code B)
The two-dimensional code B is not particularly limited and may be, for example, a two-dimensional code exemplified by a QR code (registered trademark) or the like. The two-dimensional code B is preferably displayable on the user terminal 1. This allows the user terminal 1 to display the issued two-dimensional code B and use the managed object M managed by the lock 3.

The offline reservation information contained in the two-dimensional code B corresponding to a reservation managed by a lock device 4 controlled by a control device 6 that performs offline control processing for a managed object M (described below) preferably includes specific information that can identify the managed object M (for example, a lock device ID that can identify the lock device 4) and reservation time slot information regarding the reservation time slot. This allows the control device 6 to unlock the lock device 4 corresponding to the managed object M identified using the specific information offline during the reservation time slot without communicating with the outside world.

Although not a required feature, it is preferable that the offline reservation information include the serial number of the issued two-dimensional code B. This makes it possible to identify forged two-dimensional codes using the serial number.

Although not a required feature, it is preferable that at least the reservation time slot information included in the offline reservation information is encrypted with the private key 222. This prevents the generation of counterfeit two-dimensional codes that allow the lock device 4 to be unlocked outside the reserved time slot reserved by the user, even if the public key 622 is not secret.

Although not a required feature, it is preferable that the offline reservation information be encrypted reservation information encrypted with the private key 222. This prevents the generation of counterfeit two-dimensional codes that allow the lock device 4 to be unlocked outside the reserved time slot reserved by the user, even if the public key 622 is not secret.

The online reservation information (small-volume information) contained in two-dimensional code B corresponding to a reservation managed by lock device 4 controlled by control device 6, which performs online control processing for managed item M (described below), preferably includes identification information corresponding to large-volume reservation information, but does not include reservation time slot information. This prevents the creation of a counterfeit two-dimensional code that allows the lock device 4 to be unlocked during a time slot other than the one reserved by the user using two-dimensional code B.

Although not a required feature, it is preferable that the small-capacity information be encrypted small-capacity information encrypted with the private key 222.

By encrypting the small-capacity information with the private key 222, it is possible to prevent the generation of counterfeit two-dimensional codes that allow the lock device 4 to be unlocked outside of the reserved time slots reserved by the user, even if the public key 622 is not secret.

While the public encryption key system provides stronger encryption than the common key system, it is known that the load on the encryption and decryption processes is greater than that of the common key system. As a result, when using the public encryption key system, the power consumption of the control device 6 may be higher than when using the common key system.

Furthermore, since the encrypted small-capacity information contains identification information corresponding to the large-capacity reservation information and is small-capacity information that does not contain reservation time slot information, encrypted with the private key 222, the control device 6 can limit the information to be decrypted to the encrypted small-capacity information, thereby reducing the load on the decryption process using the public encryption key method and preventing the generation of counterfeit two-dimensional codes.

Although not a required feature, it is preferable that the reservation process include the two-dimensional code issuance process executed in steps S4 and S5.

[Step S4: Determine whether issuance of a two-dimensional code has been requested]
The management device control unit 21 executes the two-dimensional code issuing unit 213 in cooperation with the management device storage unit 22, and performs processing to determine whether issuance of a two-dimensional code has been requested by the user terminal 1 (step S4). If issuance of a two-dimensional code has been requested, the management device control unit 21 proceeds to step S5. If issuance of a two-dimensional code has not been requested, the management device control unit 21 proceeds to step S6.

[Step S5: Issue a two-dimensional code]
The management device control unit 21 executes the two-dimensional code issuing unit 213 in cooperation with the management device storage unit 22, and performs processing to issue a two-dimensional code B to the user using the user terminal 1 that requested the issuance of a two-dimensional code in step S4 (step S5). The management device control unit 21 proceeds to step S6.

If the two-dimensional code B issued in step S5 is a two-dimensional code B corresponding to a reservation managed by a lock device 4 controlled by a control device 6 that performs offline control processing, as described below, where the managed object M is managed by the lock device 4, it is preferable that the two-dimensional code B issued in step S5 is an issued time-stamped two-dimensional code that includes at least a portion of the reservation information generated in step S2 and further includes issue time information regarding the time at which the issued time-stamped two-dimensional code is issued.

This allows the control device 6 to set the time on the timer unit 64 using the time-issued two-dimensional code. Setting the time on the timer unit 64 using the time-issued two-dimensional code will be explained in more detail later using Figure 7.

By including the two-dimensional code issuance process executed in steps S4-S5 in the reservation process, a user using user terminal 1 can request the issuance of two-dimensional code B and use the issued two-dimensional code B even if the user loses the two-dimensional code B.

Furthermore, since the reservation process includes the two-dimensional code issuance process executed in steps S4-S5, a user terminal 1 that can connect to a wireless network can request the reservation management device 2 to issue a two-dimensional code B near the lock 3, even if the reservation management device 2 is located far from the lock 3, and can display the issued two-dimensional code B to use the managed object M managed by the lock 3.

Although not a required feature, it is preferable that the reservation management device 2 be able to execute the reservation termination process of steps S6 to S7. The reservation termination process may be executed as a separate process from the reservation process of steps S1 to S5.

[Step S6: Determine whether usage termination information has been received]
The management device control unit 21, in cooperation with the management device storage unit 22, executes the usage end information receiving unit 214 and performs processing to determine whether usage end information has been received from the control device 6 (step S6). If usage end information has been received, the management device control unit 21 proceeds to step S7. If usage end information has not been received, the management device control unit 21 proceeds to step S8.

[Step S7: End reservation]
The management device control unit 21, in cooperation with the management device storage unit 22, executes the usage end information receiving unit 214, and performs processing to end the reservation corresponding to the usage end information received in step S6 (step S7). The management device control unit 21 then proceeds to step S8.

The process for terminating a reservation is not particularly limited. The process for terminating a reservation preferably includes a process for associating, in the reservation table 221, the reservation information corresponding to the usage termination information received in step S6 and information for terminating the usage of the managed object M during the reservation time slot corresponding to the reservation information. This can prevent repeated transmission of reservation information for the managed object M during the reservation time slot whose usage has ended.

The process of ending a reservation preferably includes a process of transmitting information for ending the use of the reservation corresponding to the use end information received in step S6 to a control device 6 other than the control device 6 that transmitted the use end information in step S6. This can prevent the lock 3 from being unlocked using the two-dimensional code B corresponding to the reservation information whose use has been ended.

If Lock 3 includes Lock 3 that performs the online control processing described below, the reservation processing preferably includes the large-volume reservation information transmission processing executed in step S8.

[Step S8: Large-volume reservation information transmission process]
The management device control unit 21 executes the large-volume reservation information transmission unit 212 in cooperation with the management device storage unit 22 and the management device communication unit 23, and performs a large-volume reservation information transmission process to transmit the large-volume reservation information generated in step S2 (step S8). The management device control unit 21 ends the reservation process and returns to step S1.

The large-volume reservation information transmission process performed in step S8 will be explained in detail using Figure 5.

[Flowchart of large-volume reservation information transmission process]
Fig. 5 is a flowchart showing an example of the large-volume reservation information transmission process executed in step S8 of Fig. 4. Hereinafter, an example of a preferable flow of the large-volume reservation information transmission process executed in step S8 will be described with reference to Fig. 5.

[Step S11: Determine whether it is time to transmit large-volume reservation information]
The management device control unit 21 executes the large-capacity reservation information transmission unit 212 in cooperation with the management device storage unit 22 and management device communication unit 23, and performs processing to determine whether it is time to transmit large-capacity reservation information (step S11). If it is time to transmit large-capacity reservation information, the management device control unit 21 proceeds to step S12. If it is not time to transmit large-capacity reservation information, the management device control unit 21 proceeds to step S13.

There are no particular limitations on the method for determining whether it is time to send large-volume reservation information.

The method for determining whether it is time to send large-volume reservation information may be, for example, a method for determining that it is time to send large-volume reservation information if an interval of at least a specified time has elapsed since the timing immediately before the large-volume reservation information was sent in step S12, or a method for determining that it is time to send large-volume reservation information when a command to send large-volume reservation information is received from the control device 6.

The specified time is not particularly limited. The lower limit of the specified time is preferably 0.5 hours or more, and more preferably 1 hour or more. By setting the lower limit of the specified time as described above, the reservation management device 2 can transmit large amounts of reservation information less frequently than if large amounts of reservation information were transmitted each time a reservation was made. Therefore, the control system S can reduce the risk of large amounts of reservation information being intercepted and used fraudulently, even in locations where communication confidentiality is restricted. Furthermore, by reducing the frequency with which large amounts of reservation information are transmitted, the control device 6 can reduce the increase in power consumption required for long-distance communications.

The upper limit of the specified time is preferably 168 hours or less, more preferably 72 hours or less, and even more preferably 24 hours or less. By setting the upper limit of the specified time as described above, the frequency with which the control device 6 does not receive large-volume reservation information for a reserved time slot that includes the current time can be reduced.

[Step S12: Transmit large-volume reservation information]
The management device control unit 21 executes the large-capacity reservation information transmission unit 212 in cooperation with the management device storage unit 22 and the management device communication unit 23, and performs processing to transmit large-capacity reservation information collectively to the control device 6 (step S12). The management device control unit 21 proceeds to step S13.

The process of collectively transmitting large amounts of reservation information to the control device 6 is not particularly limited, and may be, for example, a process that includes a process of collectively transmitting unsent reservation information. If the process of collectively transmitting large amounts of reservation information to the control device 6 includes a process of collectively transmitting unsent reservation information, the process of step S12 preferably includes a process of associating information stored in the reservation table 221 that corresponds to the large amount of reservation information transmitted in step S12 with information that the information has been transmitted. This allows the reservation management device 2 to determine in step S12 whether reservation information has not been transmitted, using the reservation information stored in the reservation table 221.

The process of transmitting large-volume reservation information to the control device 6 in a lump preferably includes a process of notifying the control device 6 that all of the large-volume reservation information to be transmitted has been transmitted when all of the large-volume reservation information to be transmitted in a lump has been transmitted. This allows the control device 6 to terminate its connection to the network N when it has received all of the large-volume reservation information to be transmitted, thereby reducing the power consumption consumed by connecting to the network N.

[Step S13: Determine whether transmission of specific large-volume reservation information has been instructed]
The management device control unit 21 executes the large-capacity reservation information transmission unit 212 in cooperation with the management device storage unit 22 and the management device communication unit 23, and performs processing to determine whether a command to transmit specific large-capacity reservation information has been issued (step S13). If a command to transmit specific large-capacity reservation information has been issued, the management device control unit 21 proceeds to step S14. If a command to transmit specific large-capacity reservation information has not been issued, the management device control unit 21 ends the reservation processing and proceeds to step S1.

[Step S14: Transmit specific large-volume reservation information]
The management device control unit 21 executes the large-capacity reservation information transmission unit 212 in cooperation with the management device storage unit 22 and the management device communication unit 23, and performs processing to transmit the specific large-capacity reservation information to the user terminal 1 that instructed the transmission of the specific large-capacity information in step S13 (step S14). The management device control unit 21 ends the reservation processing and moves the processing to step S1.

By performing the large-volume reservation information transmission process of steps S11-S14, the reservation management device 2 transmits large-volume reservation information in batches at intervals of at least the specified time. This allows the reservation management device 2 to transmit large-volume reservation information less frequently than if large-volume reservation information were transmitted each time a reservation was made. Therefore, the control system S can reduce the risk of large-volume reservation information being intercepted and used fraudulently, even in locations where communication confidentiality is restricted. Furthermore, by reducing the frequency with which large-volume reservation information is transmitted, the control device 6 can reduce the increase in power consumption required for long-distance communication.

By performing the large-volume reservation information transmission process of steps S11-S14, the control device 6 can receive specific large-volume reservation information equivalent to the corresponding large-volume reservation information from the reservation management device 2 if the corresponding large-volume reservation information is not included in the received large-volume reservation information. Therefore, the control system S can simultaneously reduce the risk of interception and power consumption by having the control device 6 transmit reservation information one by one each time a reservation is made, and enable the control device 6 on the lock 3 side to reliably receive the corresponding large-volume reservation information that corresponds to the small-volume information after decryption, allowing it to quickly determine the validity of the reserved time slot.

[Main Flowchart of Control Processing Executed by the Control Device 6]
6 is a main flowchart showing an example of the control process executed by the control device 6. Hereinafter, an example of a preferable flow of the control process executed by the control device 6 will be described with reference to FIG.

[Step S41: Determine whether to perform offline operation]
The control device control unit 61 executes the operation determination unit 611 in cooperation with the control device storage unit 62 and the operation designation unit 66 to determine whether to perform offline operation (step S41). If offline operation is to be performed, the control device control unit 61 proceeds to step S42. If offline operation is not to be performed, the control device control unit 61 proceeds to step S43.

The process for determining whether to perform offline operation is not particularly limited. The process for determining whether to perform offline operation preferably includes a process for determining that offline operation will be performed when the operation designation unit 66 designates an operation for performing offline control processing, and/or a process for determining that offline operation will not be performed when the operation designation unit 66 designates an operation for performing online control processing. This allows the administrator managing the control device 6 to designate the operation of the control device 6 using the operation designation unit 66.

[Step S42: Offline control process]
The control device control unit 61 cooperates with the control device storage unit 62, control device communication unit 63, and/or timer unit 64 as necessary to execute the reading unit 613, decoding unit 614, discrimination unit 615, unlock command unit 616, time setting unit 617, etc., and performs offline control processing to control the lock device 4 without communicating with the outside (step S42). The control device control unit 61 ends the control processing and proceeds to step S41.

The offline control process performed in step S42 will be explained in detail later using Figure 7.

[Step S43: Determine whether to perform usage termination operation]
The control device control unit 61 executes the operation determination unit 611 in cooperation with the control device storage unit 62 and the operation designation unit 66 to determine whether to perform a usage termination operation (step S43). If a usage termination operation is to be performed, the control device control unit 61 proceeds to step S44. If a usage termination operation is not to be performed, the control device control unit 61 proceeds to step S45.

[Step S44: Usage termination process]
The control device control unit 61 executes the usage termination information transmission unit 618 in cooperation with the control device storage unit 62, the control device communication unit 63, and/or the timer unit 64 as necessary, and performs usage termination processing to terminate the usage of the reserved managed object M (step S44). The control device control unit 61 ends the control processing and moves the processing to step S41.

The usage termination process executed in step S44 will be explained in detail later using Figure 10.

[Step S45: Online control processing]
The control device control unit 61 cooperates with the control device storage unit 62, control device communication unit 63, and/or timer unit 64 as necessary to execute the large-capacity reservation information receiving unit 612, reading unit 613, decoding unit 614, discrimination unit 615, unlock command unit 616, etc., and performs online control processing to control the lock device 4 (step S45). The control device control unit 61 ends the control processing and moves the processing to step S41.

The online control process performed in step S45 will be explained in detail later using Figure 8.

Although not a required feature, the control processing preferably includes a sleep processing that enters a sleep state in which control processing is not performed when the current time is within a sleep time period stored in the control device storage unit 62, and a sleep release processing that releases the sleep state in which control processing is not performed when the current time is not within a sleep time period stored in the control device storage unit 62. By including these processes in the control processing, it is possible to perform control processing during times when the control system S is in use while further reducing the power consumption of the control device 6, for example by including some or all of the times when the control system S is not in use within the sleep time period.

[Flowchart of Offline Control Processing]
Fig. 7 is a flowchart showing an example of the offline control process executed in step S42 of Fig. 6. Hereinafter, an example of a preferable flow of the offline control process executed in step S42 will be described with reference to Fig. 7.

If the reading device 5 has a detection unit, the offline control process preferably includes a readability determination process in step S51.

[Step S51: Determine whether the two-dimensional code can be read]
The control device control unit 61 executes the reading unit 613 in cooperation with the control device storage unit 62 and the control device communication unit 63 to perform processing to determine whether the two-dimensional code can be read (step S51). If the two-dimensional code can be read, the control device control unit 61 proceeds to step S52. If the two-dimensional code cannot be read, the control device control unit 61 proceeds to step S51.

The method for determining whether a two-dimensional code can be read is not particularly limited, and may be, for example, a method in which it is determined that a two-dimensional code can be read when the detection unit of the reading device 5 detects that two-dimensional code B, user terminal 1, and/or a user using user terminal 1 is present in the vicinity of the reading device 5.

If the detection unit of the reading device 5 is a detection unit that includes a motion identification sensor, the method of determining whether the two-dimensional code can be read preferably includes a method of determining that the two-dimensional code can be read when the detection unit detects the movement of the person who made the reservation presenting two-dimensional code B to the reading device 5. This makes it possible to both reduce power consumption by not reading when the person who made the reservation is simply near the reading device 5 but has not presented two-dimensional code B, and to read two-dimensional code B when the person who made the reservation presents it to the reading device 5.

By including the readability determination process in step S51 in the offline control process, it is possible to prevent the reading device 5 from attempting to read a two-dimensional code when it is not possible to read the two-dimensional code, which would increase power consumption.

[Step S52: Read the two-dimensional code]
The control device control unit 61 executes the reading unit 613 in cooperation with the control device storage unit 62 and the control device communication unit 63, and performs processing to read the two-dimensional code B using the reading device 5 (step S52). The control device control unit 61 proceeds to step S53.

If two-dimensional code B includes encrypted reservation information encrypted with private key 222 and/or reservation time slot information encrypted with private key 222, the offline control process preferably includes reservation information decryption processing in step S53.

[Step S53: Decrypt reservation information]
The control device control unit 61 executes the decryption unit 614 in cooperation with the control device storage unit 62, and performs a process of decrypting the information contained in the two-dimensional code B read in step S52, which information has been encrypted with the private key 222, using the public key 622 (step S53). The control device control unit 61 proceeds to step S54.

If the reservation time slot information contained in the offline reservation information included in the two-dimensional code B read in step S52 is encrypted with the private key 222, the process of decrypting the information encrypted with the private key 222 in step S53 preferably includes a process of decrypting the encrypted reservation time slot information to obtain the decrypted reservation time slot information. This allows the control device 6 to use the decrypted reservation time slot information to determine whether the current time falls within the reservation time slot.

If the offline reservation information contained in the two-dimensional code B read in step S52 is encrypted reservation information encrypted with the private key 222, the process of decrypting the information encrypted with the private key 222 in step S53 preferably includes a process of decrypting the encrypted reservation information to obtain decrypted reservation information. This allows the control device 6 to use the decrypted reservation information to determine whether the current time falls within the reserved time slot.

If the reservation process executed by the reservation management device 2 includes a two-dimensional code issuance process capable of issuing a two-dimensional code with an issuance time, it is preferable that the offline control process includes the time adjustment process of steps S54 to S56.

[Step S54: Determine whether two-dimensional code B includes issue time information]
The control device control unit 61, in cooperation with the control device storage unit 62 and timer unit 64, executes the time setting unit 617 and performs processing to determine whether the two-dimensional code B read in step S52 contains issue time information (step S54). If the two-dimensional code B contains issue time information, the control device control unit 61 proceeds to step S55. If the two-dimensional code B does not contain issue time information, the control device control unit 61 proceeds to step S57.

[Step S55: Determine whether the elapsed time is less than or equal to a predetermined time]
The control device control unit 61, in cooperation with the control device storage unit 62 and the timer unit 64, executes the time setting unit 617 and performs a process of determining whether the time elapsed since the issue time indicated by the issue time information contained in the two-dimensional code B read in step S52 is equal to or less than a predetermined time (step S55). If it is equal to or less than the predetermined time, the control device control unit 61 proceeds to step S56. If it is not equal to or less than the predetermined time, the control device control unit 61 proceeds to step S57.

There is no particular limit on the lower limit of the specified time. The lower limit of the specified time is preferably 0.5 minutes or more, and more preferably 1 minute or more. By setting the lower limit of the specified time as described above, the control device 6 can increase the number of opportunities to set the time.

There is no particular limit to the upper limit of the specified time. The upper limit of the specified time is preferably 3 minutes or less, more preferably 2 minutes or less, and even more preferably 1 minute or less. By setting the upper limit of the specified time as described above, the control device 6 can prevent the difference between the current time measured by the timer unit 64 and the current time in standard time from increasing due to time adjustment.

[Step S56: Set the time]
The control device control unit 61 executes the time setting unit 617 in cooperation with the control device storage unit 62 and the timer unit 64, and performs processing to set the time on the timer unit 64 using the issue time indicated by the issue time information included in the two-dimensional code B read in step S52 (step S56). The control device control unit 61 proceeds to step S57.

The process of setting the time on the timer unit 64 using the issue time indicated by the issue time information is not particularly limited. The process of setting the time on the timer unit 64 using the issue time indicated by the issue time information preferably includes setting the current time indicated by the timer unit 64 to the issue time plus a specific time. By setting the time to the issue time plus a specific time, the time can be set taking into account the time from when two-dimensional code B is issued until the reader 5 reads that two-dimensional code B.

There is no particular limit on the lower limit of the specific time. The lower limit of the specific time is preferably 5 seconds or more, and more preferably 10 seconds or more. By setting the lower limit of the specific time as described above, the control device 6 can prevent delays in the time measured by the timer unit 64.

There is no particular limit to the upper limit of the specific time. The upper limit of the specific time is preferably 30 seconds or less, more preferably 20 seconds or less, and even more preferably 10 seconds or less. By setting the upper limit of the specific time as described above, the control device 6 can prevent the time measured by the timer unit 64 from being too fast.

The process of setting the time on the timer unit 64 using the issue time indicated by the issue time information preferably stores the two-dimensional code B used to set the time, and does not use the two-dimensional code B that was used once to set the time again. This prevents the time measured by the timer unit 64 from being delayed due to re-setting the time.

The timer unit 64 can continue to keep accurate timekeeping by adjusting the time based on the accurate current time provided externally. However, in locations where communication means and/or power supply are limited, it may be difficult to use external means that provide accurate current time, such as public NTP (Network Time Protocol) services. If the timer unit 64's timekeeping becomes inaccurate due to an inability to adjust the time, there is a risk that the lock will not be controlled according to the reservation.

By including the time setting process in steps S54 to S56 in the offline control process, the control device 6 can set the time on the timer unit 64 using the issue time indicated by the issue time information included in the two-dimensional code B issued when a request signal is sent from the user terminal 1 (when the user terminal 1 requests the issuance of a two-dimensional code). This allows the control device 6 to set the time on the timer unit 64 and continue to provide control of the lock 3 according to the reservation, even in locations where external means for providing time setting are not available.

By including the time adjustment process of steps S54 to S56 in the offline control process, the time is adjusted if the time elapsed from the issue time to the current time measured by the timer unit 64 is less than a predetermined time. This allows the control device 6 to adjust the time if the time elapsed since the issue time is short and the issue time can be considered to be substantially the accurate current time.

[Step S57: Determine whether it is within the reserved time slot]
The control device control unit 61, in cooperation with the control device storage unit 62 and the timer unit 64, executes the determination unit 615 and performs processing to determine whether the current time measured by the timer unit 64 corresponds to the reserved time slot included in the two-dimensional code B read in step S52 (step S57). If it corresponds to the reserved time slot, the control device control unit 61 proceeds to step S58. If it does not correspond to the reserved time slot, the control device control unit 61 ends the offline control processing and proceeds to step S41.

[Step S58: Command to unlock]
The control device control unit 61 cooperates with the control device storage unit 62 and the control device communication unit 63 to execute the unlock command unit 616, and performs processing to command the lock device 4 corresponding to the reservation information contained in the two-dimensional code B read in step S52 to unlock (step S58). The control device control unit 61 ends the offline control processing, and proceeds to step S41.

By including steps S57 and S58 in the offline control process, the control device 6 can determine whether the reservation time slot recorded in the reservation information contained in the two-dimensional code B corresponds to the reservation time slot by referencing the built-in timer unit 64 without communicating with the outside. This allows the control device 6 to unlock the lock device 4 offline without communicating with the outside.

As a result, even in locations where communication means are limited, the lock 3 allows for the rental of a room equipped with an electric and/or electronic lock 3 with almost unattended management. Furthermore, since the discrimination unit 615 does not communicate with the outside world, the power consumption of the lock 3 can be reduced. Therefore, the control device 6 can control the lock 3 even in locations where power supply is limited.

[Online control processing flowchart]
Fig. 8 is a flowchart showing an example of the online control process executed in step S45 of Fig. 6. Hereinafter, an example of a preferable flow of the online control process executed in step S45 will be described with reference to Fig. 7.

[Step S61: Determine whether the two-dimensional code can be read]
The control device control unit 61 executes the reading unit 613 in cooperation with the control device storage unit 62 and the control device communication unit 63 to perform processing to determine whether the two-dimensional code B can be read (step S61). If the two-dimensional code B can be read, the control device control unit 61 proceeds to step S62. If the two-dimensional code B cannot be read, the control device control unit 61 proceeds to step S69.

The method for determining whether two-dimensional code B can be read is not particularly limited, and may be, for example, a method in which it is determined that two-dimensional code B can be read when the detection unit of the reading device 5 detects that two-dimensional code B, user terminal 1, and/or a user using user terminal 1 are present in the vicinity of the reading device 5.

If the detection unit of the reading device 5 is a detection unit that includes a motion identification sensor, the method of determining whether two-dimensional code B can be read preferably includes a method of determining that two-dimensional code B can be read when the detection unit detects the movement of the person who made the reservation presenting two-dimensional code B to the reading device 5. This makes it possible to both reduce power consumption by not reading when the person who made the reservation is simply near the reading device 5 but does not present two-dimensional code B, and to read two-dimensional code B when the person who made the reservation presents it to the reading device 5.

By including the readability determination process in step S61 in the online control process, it is possible to prevent the reader 5 from attempting to read two-dimensional code B when it is not possible to read the two-dimensional code, which would increase power consumption.

[Step S62: Read the two-dimensional code]
The control device control unit 61 cooperates with the control device storage unit 62 and the control device communication unit 63 to execute the reading unit 613, and performs processing to read the two-dimensional code B using the reading device 5 (step S62). The control device control unit 61 proceeds to step S63.

If the control device 6 includes an input unit, the process of reading the two-dimensional code B in steps S61 to S62 preferably includes a process of acquiring information corresponding to the encrypted small-volume information contained in the two-dimensional code B when that information is input via the input unit. This makes it possible to realize hybrid control in which the lock 3 is controlled not only by the two-dimensional code but also by input from the reservation user.

If two-dimensional code B includes encrypted small-volume information encrypted with private key 222, the online control process preferably includes encrypted small-volume information decryption processing in step S63.

[Step S63: Decrypt the encrypted small-volume information]
The control device control unit 61 executes the decryption unit 614 in cooperation with the control device storage unit 62, and performs processing to decrypt the encrypted small-capacity information included in the two-dimensional code B read in step S62 using the public key 622 and obtain the decrypted small-capacity information (step S63). The control device control unit 61 proceeds to step S64.

[Step S64: Determine whether specific large-capacity information is being received]
The control device control unit 61 executes the determination unit 615 in cooperation with the control device storage unit 62, and performs processing to determine whether specific large-capacity information (corresponding large-capacity reservation information) corresponding to the decoded small-capacity information obtained in step S63 has been received, using the large-capacity reservation information table 621 (step S64). If specific large-capacity information has been received, the control device control unit 61 proceeds to step S67. If specific large-capacity information has not been received, the control device control unit 61 proceeds to step S65.

The process of using the large-capacity reservation information table 621 to determine whether specific large-capacity information (corresponding large-capacity reservation information) corresponding to the decoded small-capacity information obtained in step S63 has been received is not particularly limited, and may be, for example, a process of determining that corresponding large-capacity information has been received if large-capacity reservation information corresponding to the identification information included in the decoded small-capacity information can be obtained from the large-capacity reservation information table 621.

[Step S65: Command to transmit specific large volume information]
The control device control unit 61 operates in cooperation with the control device memory unit 62 and the control device communication unit 63 to execute the large-capacity reservation information receiving unit 612, and performs processing to instruct the reservation management device 2 to transmit specific large-capacity information (corresponding large-capacity reservation information) corresponding to the decoded small-capacity information obtained in step S63 (step S65).The control device control unit 61 then transfers processing to step S66.

[Step S66: Receiving specific large-volume information]
The control device control unit 61 executes the large-capacity reservation information receiving unit 612 in cooperation with the control device memory unit 62 and the control device communication unit 63, and performs processing to receive the specific large-capacity information (corresponding large-capacity reservation information) that was instructed to be sent in step S65 (step S66).The control device control unit 61 then transfers processing to step S67.

[Step S67: Determine whether it is within the reserved time slot]
The control device control unit 61, in cooperation with the control device storage unit 62 and the timer unit 64, executes the determination unit 615 and performs processing to determine whether the current time measured by the timer unit 64 corresponds to the reserved time slot included in the specific large-capacity information (corresponding large-capacity reservation information) (step S67). If it corresponds to the reserved time slot, the control device control unit 61 proceeds to step S68. If it does not correspond to the reserved time slot, the control device control unit 61 proceeds to step S69.

[Step S68: Command to unlock]
The control device control unit 61 cooperates with the control device storage unit 62 and the control device communication unit 63 to execute the unlock command unit 616, and performs processing to command the lock device 4 corresponding to the specific large-capacity information (corresponding large-capacity reservation information) to unlock (step S68). The control device control unit 61 proceeds to step S69.

Although not a required feature, it is preferable that the process of issuing an unlock command in step S68 be a process of issuing an unlock command to the lock device 4 if the specific large-volume information is not associated with information that ends a reservation in the large-volume reservation information table 621. This allows the control device 6 to issue an unlock command to the lock device 4 only for reservations that have not yet ended.

By including the processes of steps S64 to S68 in the online control process, the control device 6 can receive specific large-volume reservation information equivalent to the corresponding large-volume reservation information from the reservation management device 2 when the corresponding large-volume reservation information is not included in the received large-volume reservation information. Therefore, the control system S can simultaneously reduce the risk of interception and power consumption by having the control device 6 transmit reservation information one by one each time a reservation is made, and enable the control device 6 on the lock 3 side to reliably receive the corresponding large-volume reservation information that corresponds to the small-volume information after decryption, enabling the validity of the reservation time slot to be quickly determined.

In the common key method, if the key (common key) used for decryption is not secret, forged small amounts of information can be encrypted using the common key, which allows the lock device 4 to be unlocked outside of the reserved time slot reserved by the user. This makes it possible to generate a forged two-dimensional code that allows the lock device 4 to be unlocked outside of the reserved time slot reserved by the user.

By including the processing of step S63 in the online control processing, the control system S can prevent the generation of counterfeit two-dimensional codes that allow the lock device 4 to be unlocked outside the reserved time slot reserved by the user, even if the key (public key) used for decryption is not secret.

While the public encryption key system provides stronger encryption than the common key system, it is known that the load on the encryption and decryption processes is greater than that of the common key system. As a result, when using the public encryption key system, the power consumption of the control device 6 may be higher than when using the common key system.

By including steps S63 to S68 in the online control process, the control device 6 can decrypt the encrypted small-capacity information using the decryption unit 614 and determine whether the current time falls within the reserved time slot using the corresponding large-capacity reservation information that corresponds to the decrypted small-capacity information. This allows the control device 6 to limit the information to be decrypted to the encrypted small-capacity information, thereby reducing the load on the decryption process using the public encryption key method and preventing the generation of counterfeit two-dimensional codes.

[Step S69: Large-volume reservation information reception process]
The control device control unit 61 executes the large-volume reservation information receiving unit 612 in cooperation with the control device storage unit 62 and/or the control device communication unit 63 as necessary, and performs large-volume reservation information receiving processing to receive large-volume reservation information (step S69). The control device control unit 61 ends the online control processing, and proceeds to step S41.

The large-volume reservation information reception process executed in step S69 will be explained in detail using Figure 9.

[Flowchart of large-volume reservation information reception processing]
Fig. 9 is a flowchart showing an example of the large-volume reservation information receiving process executed in step S69 of Fig. 8. Hereinafter, an example of a preferable flow of the large-volume reservation information receiving process executed in step S69 will be described with reference to Fig. 9.

[Step S71: Determine whether it is time to receive large-volume reservation information] (No → Return)
The control device control unit 61 executes the large-volume reservation information receiving unit 612 in cooperation with the control device storage unit 62 and the control device communication unit 63, and performs processing to determine whether it is time to receive large-volume reservation information (step S71). If it is time to receive large-volume reservation information, the control device control unit 61 proceeds to step S72. If it is not time to transmit large-volume reservation information, the control device control unit 61 ends the large-volume reservation information receiving processing and proceeds to step S41.

There are no particular limitations on the method for determining whether it is time to receive large-volume reservation information.

One method for determining whether it is time to receive large-volume reservation information is, for example, to determine that it is time to receive large-volume reservation information if an interval of at least a specified time has elapsed since the timing immediately before the start of reception of large-volume reservation information in step S72.

The specified time is not particularly limited. The lower limit of the specified time is preferably 0.5 hours or more, and more preferably 1 hour or more. By setting the lower limit of the specified time as described above, the control device 6 can reduce the frequency with which large-volume reservation information is received compared to when large-volume reservation information is received each time a reservation is made. Therefore, the control system S can reduce the risk of large-volume reservation information being intercepted and used fraudulently, even in locations where communication confidentiality is restricted. Furthermore, by reducing the frequency with which large-volume reservation information is received, the control device 6 can reduce the increase in power consumption required for long-distance communication.

The upper limit of the specified time is preferably 168 hours or less, more preferably 72 hours or less, and even more preferably 24 hours or less. By setting the upper limit of the specified time as described above, the frequency with which the control device 6 does not receive large-volume reservation information for a reserved time slot that includes the current time can be reduced.

The method for determining whether it is the right time to receive large-volume reservation information preferably includes a method for determining whether it is the right time to receive large-volume reservation information if it is one or more specified dates and times that are spaced apart by an interval of at least a specified time. The one or more specified dates and times are not particularly limited, and may be, for example, dates and times that specify 6:00, 12:00, and 18:00 each day. This makes it possible to determine whether it is the right time to receive large-volume reservation information without having to remember the timing of the most recent reception of large-volume reservation information.

The method for determining whether it is time to receive large-volume reservation information preferably includes a method for determining whether it is time to receive large-volume reservation information during a time period other than the specified time period. This prevents attempts at long-distance communication during times when large-volume reservation information cannot be received, such as when maintenance is being performed on the reservation management device 2.

[Step S72: Start receiving large-volume reservation information]
The control device control unit 61 cooperates with the control device storage unit 62 and/or the control device communication unit 63 to execute the large-volume reservation information receiving unit 612, and performs processing to start receiving large-volume reservation information (step S72). The control device control unit 61 then proceeds to step S73.

The process of starting to receive large-volume reservation information preferably includes a process of connecting the control device 6 to the network N. This allows the control device 6 to communicate with the reservation management device 2 via the network N while receiving the large-volume reservation information.

The process of starting to receive large-volume reservation information preferably includes a process of requesting the reservation management device 2 to send large-volume reservation information. This further reduces the time difference between when the control device 6 starts to receive large-volume reservation information and when the reservation management device 2 starts to send large-volume reservation information. This prevents the control device 6 from being connected to the network N during the aforementioned time difference, reducing the increase in power consumption required for long-distance communication.

[Step S73: Determine whether all large-volume reservation information has been received]
The control device control unit 61 executes the large-volume reservation information receiving unit 612 in cooperation with the control device storage unit 62 and the control device communication unit 63, and performs processing to determine whether all large-volume reservation information has been received (step S73). If all large-volume reservation information has been received, the control device control unit 61 proceeds to step S76. If all large-volume reservation information has not been received, the control device control unit 61 proceeds to step S74.

The process for determining whether all large-volume reservation information has been received is not particularly limited, and may include, for example, a process for determining that all large-volume reservation information has been received when information notifying that all large-volume reservation information has been received from the reservation management device 2.

[Step S74: Determine whether large-volume reservation information has been received]
The control device control unit 61 executes the large-volume reservation information receiving unit 612 in cooperation with the control device storage unit 62 and the control device communication unit 63, and performs processing to determine whether large-volume reservation information has been received (step S74). If large-volume reservation information has been received, the control device control unit 61 proceeds to step S75. If large-volume reservation information has not been received, the control device control unit 61 proceeds to step S73.

[Step S75: Store large-volume reservation information]
The control device control unit 61 executes the large-volume reservation information receiving unit 612 in cooperation with the control device storage unit 62 and the control device communication unit 63, and performs processing to store the large-volume reservation information received in step S74 (step S75). The control device control unit 61 then proceeds to step S73.

[Step S76: End of reception of large-volume reservation information]
The control device control unit 61 cooperates with the control device storage unit 62 and the control device communication unit 63 to execute the large-volume reservation information receiving unit 612, and performs processing to end reception of the large-volume reservation information (step S76). The control device control unit 61 ends the large-volume reservation information receiving processing, and proceeds to step S44.

When connected to network N, the control device 6 consumes power for processes such as determining whether data has been received via network N. In particular, when the control device communication unit 63 is connected to a network N that includes a wireless network, this power consumption increases compared to when the control device communication unit 63 is connected to a network N that includes only a wired network.

The process of terminating reception of large-volume reservation information preferably includes a process of terminating the connection between the control device 6 and the network N. This allows the control device 6 to reduce the power consumption consumed by connecting to the network N when large-volume reservation information is not being received.

By performing the large-volume reservation information reception process, the control device 6 can receive one or more large-volume reservation information pieces that are sent collectively at intervals of at least a specified time. This allows the control device 6 to receive large-volume reservation information pieces when communication is stable, even in locations where communication stability is limited.

By performing the large-volume reservation information reception process, the control device 6 can receive large-volume reservation information less frequently than if large-volume reservation information were transmitted each time a reservation was made. Therefore, the control system S can reduce the risk of large-volume reservation information being intercepted and used fraudulently, even in locations where communication confidentiality is restricted. Furthermore, by receiving large-volume reservation information less frequently, the control device 6 can reduce the increase in power consumption required for long-distance communication.

By performing the large-volume reservation information reception process, the control device 6 can receive specific large-volume reservation information equivalent to the corresponding large-volume reservation information from the reservation management device 2 when the corresponding large-volume reservation information is not included in the received large-volume reservation information. Therefore, the control system S can simultaneously reduce the risk of interception and power consumption by having the control device 6 transmit reservation information one by one each time a reservation is made, and enable the control device 6 to reliably receive the corresponding large-volume reservation information that corresponds to the small-volume information after decryption, enabling the validity of the reservation time slot to be quickly determined.

[Flowchart of usage termination process]
Fig. 10 is a flowchart showing an example of the usage termination process executed in step S44 of Fig. 6. Hereinafter, an example of a preferable flow of the usage termination process executed in step S44 will be described with reference to Fig. 10.

[Step S81: Determine whether the two-dimensional code can be read]
The control device control unit 61 executes the usage termination information transmission unit 618 in cooperation with the control device storage unit 62 and the control device communication unit 63, and performs processing to determine whether the two-dimensional code related to the termination of usage of the managed object M can be read (step S81). If the code can be read, the control device control unit 61 proceeds to step S52. If the code cannot be read, the control device control unit 61 terminates the usage termination processing and proceeds to step S41.

If the reading device 5 includes a usage termination reading device that reads two-dimensional code B to terminate the use of the managed object M, the process of determining whether two-dimensional code B can be read in step S81 preferably includes a process of determining that two-dimensional code B can be read if two-dimensional code B can be read by the usage termination reading device. This allows the person who made the reservation to terminate the use of the reserved managed object M by having the usage termination reading device read two-dimensional code B.

[Step S82: Read the two-dimensional code]
The control device control unit 61 executes the usage end information transmission unit 618 in cooperation with the control device storage unit 62 and the control device communication unit 63, and performs processing to read the two-dimensional code B using the reading device 5 (step S82). The control device control unit 61 proceeds to step S83.

[Step S83: End reservation]
The control device control unit 61, in cooperation with the control device storage unit 62 and the control device communication unit 63, executes the usage termination information transmission unit 618, and performs processing to terminate the reservation corresponding to the two-dimensional code B read in step S82 (step S83). The control device control unit 61 proceeds to step S84.

The process for terminating a reservation is not particularly limited. The process for terminating a reservation preferably includes a process for associating reservation termination information with the large-volume reservation information stored in the large-volume reservation information table 621 and corresponding to the two-dimensional code B read in step S82. This allows the control device 6 to control the lock device 4 to an unlocked state when two-dimensional code B corresponding to large-volume reservation information that is not associated with reservation termination information is read.

[Step S84: Send usage termination information]
The control device control unit 61, in cooperation with the control device storage unit 62 and the control device communication unit 63, executes the usage end information sending unit 618, and performs processing to send usage end information regarding the end of usage during the reservation time slot of the managed object M corresponding to the two-dimensional code B read in step S82 to the reservation management device 2 (step S84). The control device control unit 61 ends the usage end processing, and proceeds to step S41.

By having the control device 6 execute the usage termination process, the person who reserved the managed object M can terminate their use of the managed object M without waiting for the end date and time of the reserved time slot. This allows the administrator who manages the managed object M to allow another person who reserved the managed object M to use the managed object M without waiting for the end date and time of the reserved time slot.

<<Example of use of control system S>>
Next, an example of how the control system S of this embodiment is used will be described.

<Adding Lock 3 to Managed Object M>
11 is a diagram showing an example of retrofitting a lock 3 to a management target M. An administrator who manages the management target M (a room to be rented out) installs a lock device 4 that can control entry and exit to the management target M in the management target M. Then, the administrator retrofits a reading device 5 and a control device 6 around the management target M to configure the lock 3.

In the example shown in FIG. 11, the control device 6, which is retrofitted outside the managed object M, is electrically connected to the lock device 4 installed inside the managed object M via short-range wireless communication performed by the control device communication unit 63. Because the control device 6 can be electrically connected to the lock device 4 via short-range wireless communication, the administrator can configure the lock 3 without installing the lock device 4 outside the managed object M. This allows the administrator to prevent the lock device 4 from being destroyed by someone outside the managed object M.

In the example shown in FIG. 11, the control device 6 includes a control device power supply unit 65 (a power supply unit capable of supplying power from a battery). This allows the administrator to use the lock 3 to manage the use of the managed object M even if the supply of power is limited in the vicinity of the managed object M. In addition, the administrator can maintain the control device power supply unit 65 by the relatively simple procedure of replacing the battery.

<Lending of managed object M managed by lock 3 with offline control>
Next, the lending of the managed object M managed by the lock 3 that performs offline control without communicating with the outside will be explained.

[Reserve use of managed object M]
A reserving user who reserves the use of a managed object M requests a reservation for the use of the managed object M during a reserved time period from the reservation management device 2 via a user terminal 1. The reservation management device 2 generates large-capacity reservation information (reservation information) including information that can identify the reserved time period and the managed object M.

[Issue a two-dimensional code]
The reservation management device 2 transmits to the user terminal 1 offline two-dimensional code display information capable of displaying a two-dimensional code B for offline control, the encrypted reservation information being reservation information including information capable of identifying the reservation time slot and the management target M, encrypted with a private key 222. The user terminal 1 receives the offline two-dimensional code display information.

[Reading two-dimensional codes]
The reserving person uses the offline two-dimensional code display information to display the two-dimensional code B for offline control on the user terminal 1, and has the displayed two-dimensional code B for offline control read by the reading device 5 of the lock 3 installed in the vicinity of the managed object M. The reading device 5, which is equipped with a motion identification sensor, detects the movement of the reserving person to read the two-dimensional code B, and reads the two-dimensional code B.

[Determine whether it is within the reserved time slot]
The control device 6 decrypts the encrypted reservation information with the public key 622 to obtain the decrypted reservation information. The control device 6 determines whether the current time measured by the timer unit 64 is included in the reservation time slot included in the decrypted reservation information, without communicating with an external device.

[Controlling the lock device 4 to the unlocked state]
If the current time is included in the reserved time period, the control device 6 controls the lock device 4, which can control entry and exit to the managed object M, to an unlocked state. This allows the person who makes the reservation to use the managed object M during the reserved time period.

[Keeping the locking device 4 in the locked state]
If the current time is not included in the reserved time period, the control device 6 keeps the lock device 4, which can control entry and exit to the managed object M, in a locked state. This prevents the reserving user from using the managed object M outside the reserved time period.

<Time setting for lock 3 with offline control>
The time setting of the lock 3, which is controlled offline and does not communicate with the outside, will now be described.

[Issuing a two-dimensional code with the time of generation]
A reserving person, in the vicinity of the managed object M, requests the reservation management device 2 to issue a two-dimensional code B via a user terminal 1. The reservation management device 2 transmits to the user terminal 1 generated time-attached offline two-dimensional code display information capable of displaying a generated time-attached two-dimensional code B for offline control, which includes encrypted generated time-attached reservation information obtained by encrypting generated time-attached reservation information, including generation time information when the two-dimensional code B was generated, the reservation time slot, and information that can identify the managed object M, with a private key 222. The user terminal 1 receives the generated time-attached two-dimensional code display information.

[Reading two-dimensional codes]
The reserving person uses the offline two-dimensional code display information to display the two-dimensional code B for offline control on the user terminal 1, and has the displayed two-dimensional code B for offline control read by the reading device 5 of the lock 3 installed in the vicinity of the managed object M. The reading device 5, which is equipped with a motion identification sensor, detects the movement of the reserving person to read the two-dimensional code B, and reads the two-dimensional code B.

[Time setting]
The control device 6 determines whether the time elapsed from the generation time corresponding to the generation time information to the current time measured by the timer unit 64 is less than or equal to a predetermined time. If it is less than or equal to the predetermined time, the control device 6 sets the current time to a time obtained by adding a specific time to the generation time. This allows the control device 6 to set the time on the timer unit 64 without using an external means for providing the time used for time setting via the network N.

<Lending of managed object M managed by lock 3 that performs online control>
The lending of the managed object M managed by the lock 3 that performs online control and communicates with the reservation management device 2 will be described.

[Reserve use of managed object M]
A reserving user who reserves the use of a managed object M requests the reservation management device 2 to reserve the use of the managed object M during a reserved time period via a user terminal 1. The reservation management device 2 generates large-capacity reservation information (reservation information) including information that can identify the reserved time period and the managed object M.

[Issue a two-dimensional code]
The reservation management device 2 transmits to the user terminal 1 online two-dimensional code display information capable of displaying a two-dimensional code B for online control, which includes identification information corresponding to the large-capacity reservation information and encrypted small-capacity information obtained by encrypting small-capacity information not including the reservation time slot with a private key 222. The user terminal 1 receives the online two-dimensional code display information.

[Sending large volume reservation information]
The reservation management device 2 collectively transmits one or more large-volume reservation information items that can identify a reservation time slot, identification information, and a management target M at intervals of at least a specified time. The control device 6 receives the one or more large-volume reservation information items that have been collectively transmitted.

[Reading two-dimensional codes]
The reserving person uses the online two-dimensional code display information to display the two-dimensional code B for online control on the user terminal 1, and has the displayed two-dimensional code B for online control read by the reading device 5 of the lock 3 installed in the vicinity of the managed object M. The reading device 5, which is equipped with a motion identification sensor, detects the movement of the reserving person to read the two-dimensional code B, and reads the two-dimensional code B.

[Determine whether corresponding large-volume reservation information has been received]
The control device 6 obtains the decrypted small-capacity information by decrypting the encrypted small-capacity information with the public key 622. The control device 6 determines whether or not it has received corresponding large-capacity reservation information that corresponds to the decrypted small-capacity information.

[Receive specific large-volume reservation information]
If the corresponding large-volume reservation information has not been received, the control device 6 instructs the reservation management device 2 to transmit specific large-volume reservation information equivalent to the corresponding large-volume reservation information, and receives the specific large-volume reservation information.

[Determine whether it is within the reserved time slot]
The control device 6 determines whether the current time falls within the reservation time slot included in the corresponding large-volume reservation information.

[Controlling the lock device 4 to the unlocked state]
If the current time is included in the reserved time period, the control device 6 controls the lock device 4, which can control entry and exit to the managed object M, to an unlocked state. This allows the person who makes the reservation to use the managed object M during the reserved time period.

[Keeping the locking device 4 in the locked state]
If the current time is not included in the reserved time period, the control device 6 keeps the lock device 4, which can control entry and exit to the managed object M, in a locked state. This prevents the reserving user from using the managed object M outside the reserved time period.

<Ending the lending of managed object M managed by lock 3 that performs online control>
The end of lending of the managed object M managed by the lock 3 that performs online control and communicates with the reservation management device 2 will be described.

[Reading two-dimensional codes]
The reserving person uses the online two-dimensional code display information to display the two-dimensional code B for online control on the user terminal 1, and has the displayed two-dimensional code B for online control read by a usage termination reading device related to the end of use, among the reading devices 5 of the locks 3 installed in the vicinity of the managed object M. The usage termination reading device equipped with a motion identification sensor detects the movement of the reserving person to read the two-dimensional code B, and reads the two-dimensional code B.

[End of reservation]
The control device 6 associates information indicating the end of use with the large-capacity reservation information corresponding to the read two-dimensional code B. The control device 6 transmits usage end information regarding the end of the reservation corresponding to the read two-dimensional code B to the reservation management device 2. The reservation management device 2 receives the usage end information and associates the information indicating the end of use with the large-capacity reservation information regarding the reservation. This makes it impossible to unlock the lock 3 using the two-dimensional code B even at a time that falls within the reserved time slot. The reservation management device 2 also terminates transmission of the large-capacity reservation information regarding the reservation.

The present invention will be specifically explained below with reference to examples, but the present invention is not limited to these examples.

<Construction of control system S according to examples and comparative examples>
[Example 1] Control system S for lock 3 that operates offline
First, a reservation management device 2 according to an embodiment of the present invention was prepared. Then, a reading device 5 and a control device 6 were retrofitted to an electronic locking device 4 capable of managing the use of the managed object M and electrically connecting to the control device 6 via BLE to configure a lock 3 according to the embodiment. The lock 3 was specified to operate offline without communicating with the outside world, and to enter a sleep state in which no control processing is performed between 10:00 PM and 6:00 AM, thereby configuring a control system S according to Example 1.

The reading device 5 and control device 6 used in Example 1 had an operating voltage of 3.3 V. The control device power supply unit 65 used in this example was capable of converting power supplied by a battery with a nominal voltage of 5 V and a capacity of 2200 mA with a conversion efficiency of 0.9 to an output voltage of 3.3 V and supplying it to the reading device 5 and control device 6.

[Example 2] Control system S for lock 3 that operates online
The control system S of Example 2 was configured in the same manner as Example 1, except that the control device communication unit 63 specified that the lock 3, which is connectable to a Wi-Fi network, should perform online operation to communicate with the outside world via the Wi-Fi network.

[Comparative Example] Control system for lock 3 that receives large amounts of reservation information one by one As a comparison example, a reservation management device 2 similar to that of Example 2 was prepared, and a control system S for the comparative example was constructed by instructing a lock 3 composed of the same lock device 4, reading device 5, control device 6, and control device power supply unit 65 as in Example 2 to receive large amounts of reservation information one by one.

<Exam Contents>
[Current consumption]
For each of Example 1, Example 2, and the comparative example, a commercially available ammeter was used to measure the standby state current consumption, which is the total current consumption by the reader 5 and the control device 6 in a standby state in which neither reading of the two-dimensional code B, receiving of large-volume reservation information, nor control of the lock device 4 is performed; the reading current consumption by the reader 5 in a reading state in which the two-dimensional code is read; the receiving current consumption by the control device communication unit 63 in a receiving state in which large-volume reservation information is received; and the control current consumption by the control device communication unit 63 in a control state in which the lock device 4 is controlled. The results are shown in Table 1.

[Operation test]
A test was conducted in which the control systems S of Example 1, Example 2, and Comparative Example were operated for one day from 6:00 to 6:00 the next day. In this test, the control systems S of Example 1 and Example 2 were in a sleep state from 10:00 PM to 6:00 AM based on a specification regarding the sleep state. In this test, the control system S of Example 2 transmitted large-volume reservation information at 6:00 AM, 12:00 PM, and 6:00 PM based on a specification of the timing for transmitting large-volume reservation information.

[Average operating time]
For each reading state that occurred during the operation test, the reading time during which the reading state continued was measured, and the average reading time was calculated as the average.In addition, for each receiving state that occurred during the operation test, the receiving time during which the receiving state continued was measured, and the average receiving time was calculated as the average.In addition, for each control state that occurred during the operation test, the control time during which the control state continued was measured, and the average control time was calculated as the average.The results are shown in Table 2.

[Power consumption]
During the one-day operation test, the power consumption of the lock 3 in the reading device 5 and the control device 6 was measured for each of Example 1, Example 2, and the comparative example. The results are shown in Table 3.

<Discussion and consideration of test results>
The current consumption in the standby state, reading state, and control state was the same in Example 1, Example 2, and Comparative Example. The average reading time and average control time were also the same in Example 1, Example 2, and Comparative Example.

Example 1, which does not communicate with the outside world and is not in a receiving state, consumed less power than Example 2 and the comparative example. Although Example 2, which does communicate with the outside world, and the comparative example had the same current consumption, average reading time, and average control time in the standby, reading, receiving, and control states, there was a large difference in power consumption over the one day of testing. The difference in power consumption between Example 2 and the comparative example is thought to be because Example 2 did not enter a receiving state, which occurred three times during the operational test, while the comparative example was in a receiving state at all times. It is also thought that Examples 1 and 2 reduced power consumption by entering a sleep state during designated time periods.

As described above, the control device power supply unit 65 used in Example 1, Example 2, and the comparative example is a power supply unit that can convert the power supplied by a battery with a nominal voltage of 5 V and a capacity of 2200 mA into an output voltage of 3.3 V with a conversion efficiency of 0.9 and supply it to the reading device 5 and control device 6.

Therefore, it is believed that Lock 3 of Example 1 can maintain the same control as during the test for more than 324 days (approximately 10 months) without changing the battery. Furthermore, Lock 3 of Example 2 can maintain the same control as during the test for more than 275 days (approximately 9 months) without changing the battery. On the other hand, Lock 3 of the Comparative Example can maintain the same control as during the test for only about 9-10 days without changing the battery.

In other words, while the locks 3 of Examples 1 and 2 are expected to require battery replacement approximately 1-2 times per year, the lock 3 of the comparative example is expected to require battery replacement approximately 36-41 times per year.

Therefore, both the lock 3 of Example 1, which performs offline control, and the lock 3 of Example 2, which performs online control, can reduce power consumption compared to the comparative example. Therefore, it was confirmed that the control systems S of Examples 1 and 2 can significantly reduce the frequency of maintenance required for the power supply unit.

It should be noted that within the spirit of the present invention, a person skilled in the art may conceive of various modifications and alterations, and it is understood that these modifications and alterations also fall within the scope of the present invention. For example, even if a person skilled in the art appropriately adds, deletes, or modifies the design of the above-described embodiment, or adds, omits, or modifies processes, these modifications will also fall within the scope of the present invention, as long as they maintain the essence of the present invention.

S Control system 1 User terminal 2 Reservation management device 21 Management device control unit 211 Large-capacity reservation information generation unit 212 Large-capacity reservation information transmission unit 213 Two-dimensional code issuing unit 214 Usage end information reception unit 22 Management device storage unit 221 Reservation table 222 Private key 23 Management device communication unit 3 Lock 4 Lock device 5 Reading device 6 Control device 61 Control device control unit 611 Operation determination unit 612 Large-capacity reservation information reception unit 613 Reading unit 614 Decryption unit 615 Determination unit 616 Unlock command unit 617 Time setting unit 618 Usage end information transmission unit 62 Control device storage unit 621 Large-capacity reservation information table 622 Public key 63 Control device communication unit 64 Timer unit 65 Control device power supply unit 66 Operation designation unit 67 Device identification mark B Two-dimensional code M Managed object N Network

Claims (2)

An electric and/or electronic lock including a locking device that can be switched between a locked state and an unlocked state, a reading device that can read a two-dimensional code, and a control device that can control the locking device and the reading device;
a reservation management device connected to the lock via a network and capable of managing a reservation time slot during which the lock device can be unlocked by a user;
Equipped with
The reservation management device
a large-volume reservation information generating unit capable of generating large-volume reservation information including at least reservation time slot information relating to the reservation time slot and identification information having a data amount smaller than that of the reservation time slot information;
a large-capacity reservation information transmitting unit capable of transmitting one or more pieces of large-capacity reservation information to the control device at intervals of 0.5 hours or more;
a two-dimensional code issuing unit capable of issuing to the user a two-dimensional code including encrypted small-volume information, in which small-volume information including the identification information but not the reservation time slot information is encrypted with a private key of a public encryption key system;
and
The control device of the lock
a large-volume reservation information receiving unit capable of receiving the one or more large-volume reservation information from the reservation management device;
a decoding unit that decodes the encrypted small-capacity information included in the two-dimensional code read by the reading device using a public key corresponding to the private key, and obtains the decoded small-capacity information;
a determination unit that can determine whether a current time falls within the reserved time slot by using corresponding large-capacity reservation information corresponding to the decoded small-capacity information;
an unlock command unit that can command the lock device to switch to the unlocked state when the current time falls within the reserved time period;
and
A lock control system in which the large-capacity reservation information receiving unit is capable of receiving specific large-capacity reservation information equivalent to the corresponding large-capacity reservation information from the reservation management device when the corresponding large-capacity reservation information corresponding to the decoded small-capacity information is not included in the one or more large-capacity reservation information received by the large-capacity reservation information receiving unit. The control system of claim 1, wherein the lock further includes a power supply unit capable of supplying the lock device, the reading device, and the control device with less power than can be supplied by a commercial power source.