JP7792698B2 - Locking device control device and control system - Google Patents

Description

The present invention relates to a control device and control system for a locking device.

In rental conference rooms, rental warehouses, hotels, etc., services are available in which users are provided with a key upon reservation, allowing them to use the space, etc., which is managed with a lock that corresponds to the key. Examples of such services include room rentals and access management for hideaway stores.

In such services, it is preferable to use disposable keys for each reservation to prevent unauthorized use of keys that have been lost by the user. However, in the case of physical keys such as dimple keys, electronic keys, and card keys, if the keys are used disposably for each reservation, the effort and/or cost required to prepare disposable physical keys can be significant.

Keys that use optically readable information, such as keys that use printed barcodes and/or keys that use barcodes displayed on a terminal, are being used. By using such keys as disposable keys, the effort and/or cost required to prepare disposable keys can be reduced compared to using disposable physical keys.

Patent Document 1 discloses technology that allows passengers to use locked areas using barcodes issued in response to reservations. This technology issues barcode boarding passes with barcode encoding to passengers, reads the barcode boarding pass presented by the passenger and compares it with flight-related data in a central database, and, if the data comparison is successful, temporarily releases the locking means at the transit area, allowing the passenger who presented the barcode boarding pass to pass through the designated transit area. The technology in Patent Document 1 automates boarding pass verification and can prevent the use of counterfeit boarding passes.

Special Publication No. 2010-506316

However, there is a demand for a service that retrofits existing equipment with locks that can manage rentals based on reservations, allowing users to use the equipment with the installed locks upon reservation. When retrofitting existing equipment with locks, there may be cases where communication means and/or power supply are limited at the location of the equipment.

The technology in Patent Document 1 reads the barcode boarding pass and compares it with flight-related data in a central database, allowing passengers who present their barcode boarding pass to pass through designated transit points. Therefore, there is room for improvement in the technology in Patent Document 1, in that it controls locks when there is no means of communication that can ensure stable communication with the central database, and allows for the retrofitting of locks that can manage rentals according to reservations to facilities in locations with limited communication means.

When power supply is limited, locks are required to be able to operate using a power source that can provide low power, such as a battery. By being able to operate a lock with less power, the frequency of power supply maintenance (e.g., battery replacement) can be reduced. This allows lock control to be performed with almost unattended management, and the administrator who manages reservations can reduce the effort and/or burden involved in lock control.

The technology in Patent Document 1 consumes power during communication to match the scanned barcode boarding pass with flight data in a central database. Therefore, there is room for further improvement in the technology in Patent Document 1, in that it can control locks with less power when power supply is limited, and can retrofit locks that can manage rentals based on reservations to facilities in places where power supply is limited.

In addition, there may be a need to provide separate locking devices corresponding to multiple rental objects managed by a locking device, so that both can be unlocked with a single reservation. A specific example of such a need is the need to manage access to a floor with multiple rental conference rooms managed by locking devices using a locking device that can be unlocked with reservation information related to the rental conference rooms. If communication means and/or power supply are limited, the method described in Cited Document 1 may prevent each of these locking devices from communicating with the central database. If communication with the central database is not possible, the locking device will be unable to perform the process of determining whether or not to unlock the object based on the read information. Therefore, Cited Document 1 leaves room for further improvement in terms of determining whether or not to unlock both the locking device managing the rental object and the separate locking devices corresponding to the multiple rental objects.

The present invention was made to solve the problems of the prior art described above, and aims to provide a means that can be retrofitted to equipment in locations where communication means and/or power supply are limited, and that can unlock multiple related lock devices using a single reservation information.

After extensive research to solve the above-mentioned problems, the inventors discovered that the above-mentioned problems could be solved by using the current time measured by a timer capable of measuring the current time to determine, without external communication, whether the current time falls within a reserved time slot recorded in a two-dimensional code, and by identifying whether one or more managed lock devices that can be commanded to unlock include a specific lock device that is one of the reserved lock devices, thereby completing the present invention. Specifically, the present invention provides the following:

The invention according to a first aspect provides a lock device control device comprising: a timer unit capable of measuring the current time; a reader unit capable of reading a two-dimensional code containing reservation information that enables one or more reserved lock devices to be unlocked during a reserved time slot; a discrimination unit capable of determining, without external communication, whether the current time measured by the timer unit falls within the reserved time slot corresponding to the reservation information contained in the two-dimensional code; an identification unit capable of identifying whether one or more managed lock devices that can be commanded to unlock include a specified lock device that is one of the one or more reserved lock devices identified by the reservation information; and an unlock command unit that can command the specified lock device to unlock when it is determined that the current time falls within the reserved time slot and it is identified that the one or more managed lock devices include the specified lock device.

According to the first feature, the management device can read not only two-dimensional codes that indicate that one reserved lock device can be unlocked during a reserved time slot, but also two-dimensional codes that indicate that two or more reserved lock devices can be unlocked during a reserved time slot. Even when the management device reads two-dimensional codes that indicate that two or more reserved lock devices can be unlocked during a reserved time slot, the management device can identify, using the identification unit, whether the reserved lock device is included in one or more managed lock devices that can be issued an unlock command. After the identification unit makes the determination and the identification unit identifies the reserved lock device, the management device can issue an unlock command to a specified lock device that is both a managed lock device and a reserved lock device.

The first aspect of the invention therefore makes it possible to unlock multiple related locking devices, such as a rental conference room managed by a locking device and another locking device that restricts access to a floor where such a rental conference room is located, with a single reservation information. Furthermore, the first aspect of the invention can reduce power consumption by preventing the discrimination unit and identification unit from communicating with the outside world. Therefore, according to the first aspect of the invention, the control device can control the locking device even in places where power supply is limited.

The invention relating to the first aspect therefore provides a means that can be retrofitted to equipment in locations where communication means and/or power supply are limited, and that enables multiple related lock devices to be unlocked using a single reservation information.

A second aspect of the invention is the control device of the first aspect of the invention, further comprising a decryption unit capable of decrypting the reservation information from encrypted reservation information, the reading unit capable of reading a two-dimensional code containing the encrypted reservation information, the encrypted reservation information being encrypted with a predetermined private key, and the decryption unit capable of decrypting the reservation information with a predetermined public key corresponding to the predetermined private key.

In control devices that read two-dimensional codes containing reservation information to unlock a locking device, there is a risk that a forged two-dimensional code containing forged reservation information could be used to unlock the locking device during times when no reservations have been made.

One method reduces the risk of a lock device being unlocked using a forged 2D code by encrypting using a common key, a shared key system that uses the same common key for encryption and decryption. However, with shared key systems, if the key used for decryption (the shared key) is not secret, forged reservation information can be encrypted using the shared key. This can result in the generation of a forged 2D code that allows the lock device to be unlocked during times other than the reserved time slot reserved by the user.

According to the second aspect of the invention, the control device can unlock the lock device by reading a two-dimensional code containing encrypted reservation information encrypted with a private key. Because it uses encrypted reservation information that cannot be generated without the private key, the second aspect of the invention can prevent the generation of counterfeit two-dimensional codes that allow the lock device to be unlocked outside of the reserved time slot reserved by the user, even if the key (public key) used for decryption is not secret.

Therefore, according to the second aspect of the invention, the control device can be retrofitted to equipment in locations where communication means and/or power supply are restricted, and can also prevent the lock device from being unlocked outside of the reserved time slot reserved by the user, even if the key (public key) used for decryption is not secret.

The second aspect of the invention can therefore be retrofitted to equipment in locations where communication means and/or power supply are limited, and can provide a means for unlocking multiple related lock devices using a single reservation information.

The third aspect of the invention is the first or second aspect of the invention, and provides a control device further including a control device power supply unit capable of supplying to the control device a power level lower than that which can be supplied by a commercial power source.

According to the third aspect of the invention, the control device is equipped with a control device power supply unit that can supply less power than that available from commercial power sources, allowing the control device to control the lock device even in locations where power supply is limited.

Therefore, the invention relating to the third aspect can be retrofitted to equipment in locations where communication means and/or power supply are limited, and can provide a means for unlocking multiple related lock devices using a single reservation information.

The invention according to the fourth feature is configured to include a first locking device, a second locking device different from the first locking device, a third locking device different from both the first locking device and the second locking device, a control device according to any of the first to third features, wherein the one or more managed locking devices include the first locking device, a second control device according to any of the first to third features, wherein the one or more managed locking devices include the second locking device, a third control device according to any of the first to third features, wherein the one or more managed locking devices include the third locking device, and a reservation management device capable of managing the reservation time slot, wherein the second locking device and the third locking device are locking devices related to the first locking device. and a two-dimensional code issuing unit that, in response to a request signal from a user terminal, issues to the user terminal a two-dimensional code that enables unlocking of one or more reserved lock devices during a reserved time slot based on the hierarchical information, wherein the two-dimensional code issuing unit, in response to a request signal requesting issuance of a two-dimensional code for the second lock device, is capable of issuing a second two-dimensional code that includes second reservation information that enables unlocking of the first lock device and the second lock device during the reserved time slot, and, in response to a request signal requesting issuance of a two-dimensional code for the third lock device, is capable of issuing a third two-dimensional code that includes third reservation information that enables unlocking of the first lock device and the third lock device during the reserved time slot.

There may be cases where control of multiple interrelated locking devices is required. Such multiple interrelated locking devices may, for example, include a first locking device that controls access to a floor where a rental conference room is located, a second locking device that controls a second rental conference room on a floor where access is controlled by the first locking device, and a third locking device that controls a third rental conference room on a floor where access is controlled by the first locking device. In such a case, the control system may be required to issue, for example, a two-dimensional code that can unlock both the first and second locking devices to a user who has reserved the second rental conference room, and a two-dimensional code that can unlock both the first and third locking devices to a user who has reserved the third rental conference room.

According to the fourth aspect of the invention, the reservation management device can manage hierarchical information indicating that the second locking device and the third locking device are locking devices related to the first locking device. Based on the hierarchical information, the reservation management device can then issue a second two-dimensional code capable of unlocking the associated first locking device and the associated second locking device. Additionally, based on the hierarchical information, the reservation management device can issue a third two-dimensional code capable of unlocking the associated first locking device and the associated third locking device.

The first to third control devices, which control the first to third locking devices, respectively, are control devices relating to any of the first to third features, and can therefore read the issued second or third two-dimensional code and unlock the respective managed locking devices without communicating with the outside world.

Therefore, the invention relating to the fourth aspect can simultaneously issue a two-dimensional code capable of unlocking multiple lock devices corresponding to a reservation among multiple lock devices related to each other as shown in the example, and control the lock devices using a control device that can be retrofitted to equipment in locations where communication means and/or power supply are limited.

Therefore, the invention relating to the fourth aspect can be retrofitted to equipment in locations where communication means and/or power supply are limited, and can provide a means for unlocking multiple related lock devices using a single reservation information.

This invention provides a means that can be retrofitted to equipment in locations where communication means and/or power supply are limited, and that allows multiple related lock devices to be unlocked using a single reservation information.

FIG. 1 is a block diagram showing an example of the hardware and software configurations of a control system S according to an embodiment of the present invention. FIG. 2 shows an example of the reservation table 221 . FIG. 3 shows an example of the management target table 223 . FIG. 4 shows an example of the large-volume reservation information table 621 . FIG. 5 is a main flowchart showing an example of reservation processing executed by the reservation management device 2. FIG. 6 is a flowchart showing an example of the large-volume reservation information transmission process executed in step S8 of FIG. FIG. 7 is a main flowchart showing an example of the control process executed by the control device 6. FIG. 8 is a flowchart showing an example of the offline control process executed in step S42 of FIG. FIG. 9 is a continuation of FIG. FIG. 10 is a flowchart showing an example of the online control process executed in step S45 of FIG. FIG. 11 is a flowchart showing an example of the large-volume reservation information receiving process executed in step S69 of FIG. FIG. 12 is a flowchart showing an example of the usage termination process executed in step S44 of FIG. FIG. 13 is a diagram showing an example of post-installation of a lock 3 to a managed object M. FIG. 14 is a diagram showing an example of offline management of a plurality of managed objects M related to each other.

The following describes in detail an example embodiment of the present invention, with reference to the drawings.

<<Control System S>>
1 is a block diagram showing an example of the hardware and software configurations of a control system S according to an embodiment of the present invention. The control system S (a control system for a lock device) includes at least a user terminal 1, a reservation management device 2 capable of issuing a two-dimensional code B that enables a managed object M to be used during a reserved time slot reserved by the user, and a lock 3 capable of managing the managed object M. The reservation management device 2 is also configured to be able to communicate with the user terminal 1 and the lock 3 via a network N.

The number of user terminals 1 is not particularly limited. The number of locks 3 is also not particularly limited, as long as there is more than one.

<User terminal 1>
The user terminal 1 is not particularly limited as long as it can request a reservation for a reservation time slot from the reservation management device 2 via the network N. The user terminal 1 may be, for example, a mobile terminal such as a smartphone or a tablet terminal, or a computer such as a personal computer or a laptop computer.

If the user terminal 1 is a mobile terminal, it is preferable that the user terminal 1 be able to display the two-dimensional code issued by the reservation management device 2. This allows a user using the user terminal 1 to use the two-dimensional code B displayed on the user terminal 1 to access the managed object M managed by the lock 3 during the reserved time slot.

If the user terminal 1 is a mobile terminal, it is preferable that the user terminal 1 be able to communicate with the reservation management device 2 via a wireless network. This allows the user terminal 1 to request the reservation management device 2 to issue a two-dimensional code B when in the vicinity of the lock 3, even if the reservation management device 2 is located far away from the lock 3, and then display the issued two-dimensional code B to use the managed object M managed by the lock 3.

<Reservation management device 2>
The reservation management device 2 includes a management device control unit 21, a management device storage unit 22, and a management device communication unit 23. The configuration of the reservation management device 2 is not particularly limited, and may be, for example, a server device, a cloud server including multiple computers connected via a network N, or the like.

In particular, it is preferable that the configuration of the reservation management device 2 includes a cloud server. This allows the reservation management device 2 to distribute processing across multiple computers and perform reservation management without delay, even when there are a large number of user terminals 1 and/or locks 3. Furthermore, even if a failure occurs in one of the computers included in the cloud server, another computer can continue to manage reservations.

[Management device control unit 21]
The management device control unit 21 includes a CPU (Central Processing Unit), a RAM (Random Access Memory), a ROM (Read Only Memory), and the like.

The management device control unit 21 loads a specified program and, by cooperating with the management device storage unit 22 and/or management device communication unit 23 as necessary, realizes the software configuration elements of the reservation management device 2, such as the large-capacity reservation information generation unit 211, the large-capacity reservation information transmission unit 212, the two-dimensional code issuance unit 213, the usage termination information reception unit 214, and the information management unit 215.

The flow of the reservation management process executed by the reservation management device 2 will be explained in detail later using Figure 5.

[Management device storage unit 22]
The management device storage unit 22 is a device in which data and/or files are stored, and has a data storage unit such as a hard disk, semiconductor memory, recording medium, memory card, etc. The management device storage unit 22 may have a mechanism that enables connection to a storage device or storage system such as a NAS (Network Attached Storage), a SAN (Storage Area Network), cloud storage, a file server, and/or a distributed file system via the network N.

The management device memory unit 22 stores the control program executed by the microcomputer, the reservation table 221, the private key 222, etc.

[Reservation Table 221]
2 is an example of the reservation table 221. The reservation table 221 stores reservation information including a reservation time slot, a lock ID that can identify the lock 3 used to manage the managed object M that is the subject of the reservation, and a lock device ID that can identify the lock device 4 used to manage the managed object M that is the subject of the reservation. The reservation information may include one lock ID and one lock device ID. The reservation information may also include multiple lock device IDs and one or more lock IDs corresponding to these lock device IDs.

The reservation table 221 is preferably capable of storing reservation information in association with a reservation information ID that can identify a reservation. This allows the reservation management device 2 to store and/or retrieve reservation information using the reservation ID.

Although not a required feature, it is preferable that the reservation information includes identification information that allows the control device 6 of the lock 3 to identify the reservation information and that has a smaller data volume than the reservation information. This allows the control device 6 of the lock 3, which receives the reservation information and acquires the identification information via the two-dimensional code B, to identify the reservation information using the identification information and control the lock 3 and/or lock device 4 according to the reservation information.

The identification information is not particularly limited. It is preferable that the identification information does not include unencrypted information related to the reserved time slot. This prevents the identification information from being used to generate a counterfeit two-dimensional code that can unlock the lock 3 and/or lock device 4 outside the reserved time slot if the confidentiality of the identification information is not maintained. Examples of identification information include a PIN number corresponding to the reservation information.

Although not a required feature, it is preferable that reservation information be stored in association with information on whether the reservation information has already been sent to the control device 6 of the lock 3. This can prevent reservation information that has already been sent from being sent repeatedly.

Although not a required feature, it is preferable that reservation information be stored in association with information on whether the use of that reservation information has ended. This can prevent reservation information whose use has ended from being repeatedly sent.

The reservation table 221 shown in Figure 2 stores reservation information associated with a reservation information ID. The reservation information stored in the reservation table 221 shown in Figure 2 includes, for a reservation, a "reservation time slot," a "lock ID," a "lock device ID," and "identification information" that can identify the reservation information, and is associated with information on whether the reservation information has been "sent" and whether use of the managed object M corresponding to the reservation information during the reserved time slot has "ended."

The reservation table 221 shown in Figure 2 stores reservation information identified by the reservation information ID "R0001." This reservation information includes lock ID 1 "3a" corresponding to lock 3a, lock device ID "4aa" corresponding to lock device 4aa, lock ID 1 "3b" corresponding to lock 3b, and lock device ID "4ba" corresponding to lock device 4ba.

The reservation table 221 shown in Figure 2 also stores reservation information identified by the reservation information ID "R0002." This reservation information includes lock ID 1 "3a" corresponding to lock 3a, lock device ID "4aa" corresponding to lock device 4aa, lock ID 1 "3b" corresponding to lock 3b, and lock device ID "4bb" corresponding to lock device 4bb.

This allows the reservation management device 2 to issue two-dimensional codes corresponding to this reservation information. Then, using the two-dimensional code issued based on the reservation information identified by, for example, the reservation information ID "R0001," the user can not only use the managed object M managed by the lock device 4ba, but also unlock the lock device 4aa, which controls access to the location where the lock device 4ba is installed.

In addition, the reservation table 221 shown in FIG. 2 stores identification information for reservation information. This allows the reservation management device 2 to issue a two-dimensional code that includes this identification information. The reservation table 221 shown in FIG. 2 also stores information indicating whether or not the reservation information has been sent to the control device 6. This allows the reservation management device 2 to determine whether or not the reservation information needs to be sent. In addition, the reservation table 221 shown in FIG. 2 stores information indicating whether or not the reservation has been completed. This allows the reservation management device 2 to determine whether or not a two-dimensional code corresponding to the reservation information can be issued.

[Private key 222]
The private key 222 is not particularly limited as long as it is a private key of a public encryption key system, and may be, for example, a public encryption key system based on prime factorization (such as RSA (Rivest-Shamir-Adleman) encryption, Paillier encryption, or Rabin encryption), a public encryption key system based on discrete logarithms (such as Cramer-Shoup encryption or ElGamal encryption), a public encryption key system based on lattice encryption (such as NTRU encryption), or a public encryption key system based on probabilistic encryption (such as McEllis encryption or EPOC (Efficient Probabilistic Public Key Encryption)).

In particular, it is preferable that the private key 222 include a private key of a public encryption key system based on prime factorization. Public encryption key systems based on prime factorization, such as the RSA encryption system, are known to be relatively easy to encrypt and decrypt. Therefore, by having the private key 222 include a private key of a public encryption key system based on prime factorization, the load of encryption and/or decryption can be reduced.

By storing the private key 222 in the management device storage unit 22, the reservation management device 2 can encrypt reservation information, including the reservation time slot, with the private key 222 to generate encrypted reservation information. This allows the reservation management device 2 to issue a two-dimensional code that includes the encrypted reservation information. Because the two-dimensional code includes encrypted reservation information encrypted with the private key 222, the control system S can prevent the generation of counterfeit two-dimensional codes that allow the lock device to be unlocked outside the reservation time slot reserved by the user, even if the key (public key) used for decryption is not secret.

Furthermore, by storing the private key 222 in the management device storage unit 22, the reservation management device 2 can encrypt information that includes identification information but does not include the reservation time slot using the private key 222, thereby generating encrypted small-volume information. This prevents the generation of counterfeit two-dimensional codes that allow the lock device to be unlocked outside of the reservation time slot reserved by the user, even if the key (public key) used for decryption is not secret.

[Management target table 223]
3 is an example of the management target table 223. The management target table 223 stores management target information that associates the management target M with a lock device ID that can identify the lock device 4 used to manage the management target M. The management target information can include hierarchical management target information (hierarchical information), which is management target information in which multiple management targets M are hierarchically organized.

The management object information includes unlocking information capable of unlocking the management object M. If information on multiple management objects M in a hierarchical structure is included, the management object information includes corresponding unlocking information for each of the multiple management objects M.

The example management object table 223 shown in FIG. 3 stores first management object information corresponding to the first management object Ma. The first management object information is managed by the first lock device 4aa, which is unlocked by the first unlock information "1ce81ddc23283076762f440bfcc36d37". The example management object table 223 shown in FIG. 3 also stores second management object information corresponding to the second management object Mb. The second management object information is managed by the second lock device 4b, which is unlocked by the second unlock information "6dd757cbdd852a16f222a7d1a07eab3e". In addition, the example management object table 223 shown in FIG. 3 stores third management object information corresponding to the third management object Mc. The third management target information is managed by the third lock device 4bb, which is unlocked using the third unlock information "ac81adaad0b2a7d6077edd5c319a6048".

In the example shown in FIG. 3, the first management object information, second management object information, and third management object information are stored in the management object table 223 in a hierarchical manner, with the second management object information and third management object information included in the first management object information. The first management object information through the third management object information each include corresponding unlock information. In other words, the management object table 223 stores hierarchical information such that the second unlock information and third unlock information are subordinate to the first unlock information.

This allows the control system S to manage multiple interrelated lock devices 4 in a hierarchical manner, exemplified by, for example, a first lock device 4a that manages access to a first managed object Ma, a second lock device 4ba that manages a second managed object Mb that can be accessed via the first managed object Ma whose access is managed by the first lock device 4a, and a third lock device 4bb that manages a third managed object Mc that can be accessed via the first managed object Ma whose access is managed by the first lock device 4a.

[Management device communication section 23]
The management device communication unit 23 is not particularly limited to any communication unit that connects the reservation management device 2 to the network N and enables communication with the user terminal 1, lock 3, etc., and examples include a wireless device compatible with a mobile phone network, a Wi-Fi (Wireless Fidelity) compatible device that complies with IEEE 802.11, and a network card that complies with the Ethernet standard.

The management device communication unit 23 preferably includes a communication unit that can connect to a wireless network, such as a wireless device compatible with a mobile phone network or a Wi-Fi (Wireless Fidelity) compatible device that complies with IEEE 802.11. This allows the reservation management device 2 to communicate with the user terminal 1 and/or lock 3 even if wired communication is restricted at the location of the user terminal 1 and/or lock 3.

<Tablet 3>
The lock 3 includes a locking device 4 capable of managing the managed object M, a reading device 5 capable of reading the two-dimensional code B, and a control device 6 electrically connected to the locking device 4 and the reading device 5 via wire and/or short-range wireless communication.

The number of locking devices 4 is not particularly limited as long as it is one or more. If the number of managed objects M is two or more, it is preferable that the number of locking devices 4 be equal to or greater than the number of managed objects M. This allows the lock 3 to associate each of the two or more managed objects M with a locking device 4 and manage usage according to the reservations for each managed object M.

There is no particular upper limit on the number of locking devices 4.

[Locking device 4]
The locking device 4 is not particularly limited as long as it is a locking device that can be switched between a locked state and an unlocked state. The locking device 4 may be, for example, an electric locking device that operates on a commercial power source, such as an electric lock, a magnetic lock, or an automatic door, or an electronic locking device that operates on a power source that can supply less power than that supplied by a commercial power source, such as a smart lock.

In particular, it is preferable that the locking device 4 includes an electronic locking device that operates on a power supply that can supply less power than that available from a commercial power source. This allows the lock 3 to provide management of the managed object M even in places where the power supply is limited. Therefore, even in places where the power supply is limited, the lock 3 can realize the rental of rooms equipped with electric and/or electronic locks with almost unattended management.

The locking device 4 is preferably a locking device 4 that can be connected to the control device 6 via short-range wireless communication. This allows the control device 6 to be configured without being connected to the locking device 4 via a wire. Because the control device 6 can be configured without being connected to the locking device 4 via a wire, it can be made even easier to retrofit a lock 3 to the managed object M.

The short-range wireless communication is not particularly limited, and may be, for example, short-range wireless communication compliant with Bluetooth (registered trademark), ZigBee (registered trademark), etc.

The short-range wireless communication preferably includes short-range wireless communication that complies with Bluetooth Low Energy (Bluetooth LE, BLE), a standard within Bluetooth (registered trademark). By including short-range wireless communication that complies with Bluetooth LE, the control device 6 can further reduce the power consumption associated with communication with the lock device 4.

[Power supply section]
Although not a required feature, it is preferable that the lock device 4 includes a power supply unit capable of supplying less power than that which can be supplied by a commercial power source. This allows the lock 3 to manage the managed objects M even in places where the supply of power is limited. Therefore, even in places where the supply of power is limited, the lock 3 can realize the rental of rooms equipped with electric and/or electronic locks with almost unattended management.

The power supply unit is not particularly limited as long as it can supply less power than that supplied by a commercial power source. The power supply unit may be capable of supplying power using, for example, one or more of a battery, an AC adapter, a USB power supply, a wireless power supply, etc.

It is preferable that the power supply unit includes a power supply unit that can supply power using a battery. This allows the administrator who manages the lock device 4 to maintain the power supply unit by the relatively simple task of replacing the battery. This reduces the effort required to maintain the power supply unit.

[Reading device 5]
The reader 5 is not particularly limited as long as it can read the two-dimensional code B.

Although not a required feature, the reading device 5 may include a usage termination reading device that reads the two-dimensional code B when the person who reserved the managed object M ends their use of the managed object M. This allows the person who reserved the managed object M to end their use of the managed object M by having the usage termination reading device read the two-dimensional code B.

Although not a required feature, it is preferable that the reading device 5 be capable of reading information that allows the control device 6 to communicate via short-range wireless communication with the locking device 4 included in the lock 3. This allows the administrator who manages the managed object M to easily retrofit the reading device 5 and control device 6 to an existing locking device 4. The administrator can also easily retrofit a locking device 4 to an existing lock 3.

[Detection unit]
Although not an essential aspect, it is preferable that the reading device 5 includes a detection unit capable of detecting whether a detection target, such as the two-dimensional code B, the user terminal 1, and/or a user using the user terminal 1, is present in the vicinity of the reading device 5. By including the detection unit in the reading device 5, the reading device 5 can reduce power consumption by not reading when a detection target is not detected.

The detection unit is not particularly limited as long as it can detect whether the user terminal 1 and/or a user using the user terminal 1 is present in the vicinity of the reading device 5. The detection unit may include, for example, a moving object identification sensor capable of detecting moving objects in the vicinity of the reading device 5, a human presence sensor capable of detecting people in the vicinity of the reading device 5, etc.

The detection unit is preferably a detection unit that includes a motion identification sensor. This allows the detection unit to detect the movement of the reservation holder presenting two-dimensional code B to the reading device 5. This makes it possible to both reduce power consumption by not reading when the reservation holder is simply near the reading device 5 but does not present two-dimensional code B, and to read two-dimensional code B when the reservation holder presents it to the reading device 5.

The detection unit is preferably capable of controlling the reading device 5 and/or the control device 6 to a standby state if the detection target is not detected for a certain period of time, and of ending the standby state of the reading device 5 and the control device 6 when the detection target is detected. This allows the detection unit to put the reading device 5 and/or the control device 6 into a standby state if the detection target is not detected for a certain period of time, thereby reducing power consumption.

[Power supply section]
Although not essential, it is preferable that the reading device 5 includes a power supply unit capable of supplying less power than that which can be supplied by a commercial power source. This allows the lock 3 to provide management of the managed objects M even in places where the supply of power is limited. Therefore, even in places where the supply of power is limited, the lock 3 can realize the rental of rooms equipped with electric and/or electronic locks with almost unattended management.

The power supply unit is not particularly limited as long as it can supply less power than that supplied by a commercial power source. The power supply unit may be capable of supplying power using, for example, one or more of a battery, an AC adapter, a USB power supply, a wireless power supply, etc.

It is preferable that the power supply unit includes a power supply unit that can supply power using a battery. This allows the administrator who manages the lock 3 to maintain the power supply unit by relatively simply replacing the battery. This reduces the effort required to maintain the power supply unit.

[Control device 6]
The control device 6 includes at least a control device control unit 61 , a control device storage unit 62 , a control device communication unit 63 , and a timer unit 64 .

[Control device control unit 61]
The control device control unit 61 includes a CPU (Central Processing Unit), a RAM (Random Access Memory), a ROM (Read Only Memory), and the like.

The control device control unit 61 loads a specified program and, as necessary, cooperates with each component included in the control device 6, such as the control device memory unit 62 and/or the control device communication unit 63, to realize the software configuration elements of the control device 6, such as the operation determination unit 611, large-capacity reservation information receiving unit 612, reading unit 613, decoding unit 614, determination unit 615, identification unit 616, unlock command unit 617, time setting unit 618, and usage end information sending unit 619.

The flow of control processing executed by the control device 6 will be explained in detail later using Figure 7.

[Control device storage unit 62]
The control device storage unit 62 is a device in which data and/or files are stored, and has a data storage unit such as a hard disk, semiconductor memory, recording medium, memory card, etc. The control device storage unit 62 may have a mechanism that enables connection to a storage device or storage system such as a NAS (Network Attached Storage), a SAN (Storage Area Network), cloud storage, a file server, and/or a distributed file system via the network N.

The control device storage unit 62 stores a control program executed by the microcomputer, a large-capacity reservation information table 621, a public key 622, etc. When the control device 6 performs online control processing that communicates with the outside, it is preferable that the control device storage unit 62 be able to store the sleep time period during which the control device 6 enters a sleep state in which it does not perform control processing, and the reception timing at which the control device 6 receives large-capacity reservation information.

(Large Capacity Reservation Information Table 621)
4 is an example of the large-capacity reservation information table 621. The large-capacity reservation information table 621 stores large-capacity reservation information including a reservation time slot, a lock device ID capable of identifying the lock device 4 used to manage the managed object M that is the target of the reservation, and identification information capable of identifying the reservation information and having a smaller data volume than the reservation information.

The identification information is not particularly limited and may be the same as the identification information stored in the reservation table 221. The number of large-capacity reservation information items that can be stored in the large-capacity reservation information table 621 is not particularly limited, but it is preferable that it be 1,000 or less. This reduces the storage area used by the large-capacity reservation information table 621 in the control device storage unit 62 and the storage capacity of the control device storage unit 62, and can reduce the power consumption of the control device storage unit 62.

The large-volume reservation information table 621 is preferably capable of storing large-volume reservation information in association with a large-volume reservation information ID that can identify the large-volume reservation information. This allows the control device 6 to store and/or retrieve large-volume reservation information using the large-volume reservation information ID.

Although not a required feature, it is preferable that large-volume reservation information be stored in association with information on whether the managed object M corresponding to the large-volume reservation information is in use. This makes it possible to send information on whether the managed object M is in use to the reservation management device 2.

Although not a required feature, it is preferable that the reservation information be stored in association with information on whether use of the managed object M corresponding to the large-volume reservation information during the reserved time period has ended. This makes it possible to prevent the lock device 4 retrofitted to the managed object M from being unlocked when use during the reserved time period has ended.

The large-capacity reservation information table 621 shown in Figure 4 stores large-capacity reservation information associated with large-capacity reservation information IDs. The large-capacity reservation information stored in the large-capacity reservation information table 621 shown in Figure 3 includes, for reservations, "reservation time slot," "lock ID," "lock device ID," and "identification information" that can identify the reservation information, and is associated with information on whether the managed object M corresponding to the large-capacity reservation information is "in use," and information on whether use of the managed object M corresponding to the large-capacity reservation information during the reserved time slot has "ended."

The reservation information associated with the large-volume reservation information ID "M0001" in FIG. 4 includes the following information:
A reservation time period with a start date and time of "July 7th, 16:00" and an end date and time of "July 7th, 18:00".
The lock device ID "4aa" is used to identify the lock device 4.
Identification information "0626..." that is information relating to the reserved time slot and does not include unencrypted information, and that can identify the reservation information.

Furthermore, the reservation information associated with the large-volume reservation information ID "M0001" in FIG. 4 is associated with the following information:
In-use information "No" indicates that the managed object M corresponding to the large-volume reservation information is not in use.
Usage end information "Yes" indicates that usage of the managed object M corresponding to the large-volume reservation information in the reserved time period has ended.

As a result, in response to reading two-dimensional code B containing identification information "0626...", the control device 6 can control lock device 4 based on a reservation to use managed object M, which is managed by lock device 4 identified by lock device ID "4aa" and indicated by the large-capacity reservation information corresponding to that identification information, during a reservation time period starting at "July 7th, 16:00" and ending at "July 7th, 18:00".

(Public key 622)
There are no particular limitations on the public key 622, as long as it is a public key that corresponds to the private key 222. The public key 622 may be a public key of the same public key cryptosystem as the corresponding private key 222.

By storing the public key 622 in the control device storage unit 62, the control device 6 can decrypt encrypted reservation information encrypted with the private key 222. Also, by storing the public key 622 in the control device storage unit 62, the control device 6 can decrypt encrypted small-volume information encrypted with the private key 222.

Because public key 622 is a public key used in public key cryptography, the secrecy of private key 222 is maintained even if the secrecy of public key 622 is compromised due to reverse engineering of lock 3, etc. This prevents the generation of counterfeit two-dimensional codes that allow lock device 4 to be unlocked outside of the reserved time slot reserved by the user, even if the secrecy of public key 622 is compromised.

[Control device communication unit 63]
The control device communication unit 63 is not particularly limited as long as it can electrically connect the control device 6 to the lock device 4 and the reading device 5 via wired and/or near-field wireless communication.

Because the control device communication unit 63 can electrically connect the control device 6 to the lock device 4 and the reading device 5 via wired and/or short-range wireless communication, the reading device 5 and control device 6 can be retrofitted to an existing lock device 4 to create a lock 3 that includes the existing lock device 4, reading device 5, and control device 6.

The control device communication unit 63 is preferably capable of electrically connecting the control device 6 and the lock device 4 via short-range wireless communication. This allows the control device 6 to be configured without being connected to the lock device 4 via a wire. Because the control device 6 can be configured without being connected to the lock device 4 via a wire, it can be made even easier to retrofit a lock 3 to the managed object M.

The short-range wireless communication is not particularly limited, and may be, for example, short-range wireless communication compliant with Bluetooth (registered trademark), ZigBee (registered trademark), etc.

The short-range wireless communication preferably includes short-range wireless communication that complies with Bluetooth Low Energy (Bluetooth LE, BLE), a standard within Bluetooth (registered trademark). By including short-range wireless communication that complies with Bluetooth LE, the control device 6 can further reduce the power consumption associated with communication with the lock device 4.

It is preferable that the control device communication unit 63 connects the control device 6 to the network N so that it can communicate with the reservation management device 2. This allows the control device 6 to perform online control processing to receive large amounts of reservation information, etc. from the reservation management device 2.

The components that connect the control device 6 included in the control device communication unit 63 to the network N and enable communication with the reservation management device 2 are not particularly limited, and examples include wireless devices compatible with mobile phone networks, Wi-Fi (Wireless Fidelity) compatible devices compliant with IEEE 802.11, and network cards compatible with the Ethernet standard.

[Timer section 64]
The control device 6 includes a timer unit 64 that can measure the current time. This allows the control device 6 to determine whether the current time falls within a reserved time slot without communicating with the outside. This allows the control device 6 to perform offline control processing without communicating with the outside.

The timer unit 64 is not particularly limited as long as it is capable of measuring the current time, and may be a timer unit including various conventional means for measuring the current time (such as a quartz clock, a timing circuit, or a radio-controlled clock).

By performing offline control processing without external communication, the control device 6 can reduce power consumption by the control device 6 and lock 3. Therefore, the control device 6 can control the lock 3 even in places where power supply is limited.

Furthermore, by having the control device 6 perform offline control processing that does not involve external communication, the risk of reservation information and the like being intercepted during external communications can be reduced. This allows the control system S to prevent intercepted reservation information from being used to generate a counterfeit two-dimensional code that would allow the lock device 4 to be unlocked during a time slot other than the one reserved by the user.

[Control device power supply unit 65]
Although not a required feature, it is preferable that the control device 6 includes a control device power supply unit 65 that can supply less power than that which can be supplied by a commercial power source. This allows the lock 3 to manage the managed objects M even in places where the power supply is limited. Therefore, even in places where the power supply is limited, the lock 3 can realize the rental of rooms equipped with electric and/or electronic locks with almost unattended management.

The control device power supply unit 65 is not particularly limited as long as it can supply less power than that supplied by a commercial power source. The control device power supply unit 65 may be a power supply unit that can supply power using, for example, one or more of a battery, an AC adapter, a USB power supply, a wireless power supply, etc.

It is preferable that the control device power supply unit 65 includes a power supply unit capable of supplying power using a battery. This allows the administrator in charge of the lock 3 to maintain the control device power supply unit 65 through the relatively simple task of replacing the battery. This reduces the effort required to maintain the control device power supply unit 65.

It is preferable that the control device power supply unit 65 be able to supply power to the reading device 5. This allows both the reading device 5 and the control device 6 to be supplied with power without having to provide power supplies for both. This reduces the effort required to maintain the lock 3.

[Action designation unit 66]
Although not a required feature, it is preferable that the control device 6 include an operation designation unit 66 that can designate the operation of the control device 6 from two or more operations including at least an operation for performing offline control processing and an operation for performing online control processing. This allows the control device 6 to switch between an operation for performing offline control processing that does not communicate with the outside world and an operation for performing online control processing that does communicate with the outside world based on the designation of the administrator who manages the locks 3. This allows the administrator to switch the operation of the control device 6 without having to change multiple locks 3 and/or control devices 6 that operate differently.

The operation designation unit 66 is not particularly limited. For example, the operation designation unit 66 may be an operation designation unit that designates an operation to perform offline control processing when the reading device 5 reads a two-dimensional code that designates an operation to perform offline control processing, or an operation designation unit that designates an operation to perform online control processing when the reading device 5 reads a two-dimensional code that designates an operation to perform online control processing.

It is preferable that the operation specification unit 66 be able to specify a usage termination operation that the control device 6 will use to perform usage termination processing. This allows the control device 6 to execute usage termination processing that terminates the use of the managed object M based on the specification.

[Device Identification Mark 67]
Although not an essential aspect, it is preferable that the control device 6 includes a device identification mark 67 that can identify the control device 6. This allows the user terminal 1 to read the device identification mark 67 and transmit the information included in the read device identification mark 67 to the reservation management device 2, thereby making a request to obtain a two-dimensional code related to the managed object M managed by the lock 3 including the control device 6, a reservation request, and/or a reservation cancellation request without manually inputting information related to the control device 6 and/or the managed object M.

The device identification mark 67 is not particularly limited and may be, for example, a two-dimensional code containing information that can identify the control device 6.

[Input section]
When the control device 6 performs online control processing that communicates with the outside, it is preferable that the control device 6 include an input unit (not shown) that can input identification information that can identify reservation information. This makes it possible to realize hybrid control that controls the lock 3 not only by the two-dimensional code but also by input from the person who made the reservation. The input unit is not particularly limited, and may be, for example, a keypad that can input identification information.

<Network N>
The type of network N is not particularly limited as long as it is a network that enables communication between the reservation management device 2, the user terminal 1, and the lock 3, and examples include a personal area network, a local area network, an intranet, an extranet, the Internet, a Wi-Fi network, a mobile phone network, or a network that combines multiple of these networks.

The network N preferably includes a wireless network, such as a mobile phone network or an IEEE 802.11-compliant Wi-Fi (Wireless Fidelity) network. This allows the reservation management device 2 to communicate with the user terminal 1 and/or lock 3 even if wired communication is restricted at the location of the user terminal 1 and/or lock 3.

<Management target M>
The managed object M is not particularly limited as long as it can be managed by the lock 3. The managed object M may be, for example, a room equipped with a door or the like that can be locked by the lock 3 (for example, a rental conference room, a rental office, a hotel room, etc.), a building equipped with a door or the like that can be locked by the lock 3 (for example, a store such as a hideaway store), or a storage device equipped with a door or the like that can be locked by the lock 3 (for example, a safe deposit box, a rental locker, a rental bicycle garage, etc.).

The number of managed objects M is not particularly limited.

[Main Flowchart of Reservation Processing Executed by the Reservation Management Device 2]
5 is a main flowchart showing an example of reservation processing executed by the reservation management device 2. Below, an example of a preferred flow of reservation processing executed by the reservation management device 2 will be described using FIG.

[Step S1: Determine whether a reservation has been requested]
The management device control unit 21 executes the reservation management unit 210 in cooperation with the management device storage unit 22 and the management device communication unit 23, and performs processing to determine whether a reservation for using the managed object M during the reserved time period has been requested by the user terminal 1 (step S1). If a reservation has been requested, the management device control unit 21 proceeds to step S2. If a reservation has not been requested, the management device control unit 21 proceeds to step S4.

[Step S2: Generate large-volume reservation information]
The management device control unit 21 executes the large-capacity reservation information generation unit 211 in cooperation with the management device storage unit 22, and performs processing to generate large-capacity reservation information (reservation information) regarding reservations for using the managed object M during the reserved time period (step S2). The management device control unit 21 then proceeds to step S3.

The process of generating large-capacity reservation information (reservation information) executed in step S2 preferably generates reservation information capable of unlocking multiple lock devices 4 that are related to each other. The generation of such reservation information preferably includes a procedure for generating reservation information based on hierarchical information stored in the management target table 223.

The following is an example of generating reservation information for multiple locking devices 4 that are related to each other. In this example, the second locking device 4ba and the third locking device 4bb are each related to the first locking device 4aa. Furthermore, the management target table 223 stores hierarchical information indicating that the second locking device 4ba and the third locking device 4bb are each related to the first locking device 4aa.

When a reservation for a managed object M managed by the second locking device 4ba is requested in step S1, the management device control unit 21 generates second reservation information that can unlock not only the second locking device 4ba but also the first locking device 4aa, based on the hierarchical information stored in the managed object table 223. Also, when a reservation for a managed object M managed by the third locking device 4bb is requested in step S1, the management device control unit 21 generates third reservation information that can unlock not only the third locking device 4bb but also the first locking device 4aa, based on the hierarchical information stored in the managed object table 223.

This allows the reservation management device 2 to issue a second two-dimensional code including second reservation information that can unlock the first locking device 4aa and the second locking device 4ba, which are associated with each other. In addition, the reservation management device 2 can issue a third two-dimensional code including third reservation information that can unlock the first locking device 4aa and the third locking device 4bb, which are associated with each other.

The process of generating large-volume reservation information (reservation information) executed in step S2 preferably includes a process of storing the generated reservation information in the reservation table 221. This allows the reservation management device 2 to transmit large-volume reservation information using the reservation information stored in the reservation table 221.

[Step S3: Issue a two-dimensional code]
The management device control unit 21 executes the two-dimensional code issuing unit 213 in cooperation with the management device storage unit 22, and executes a process of issuing a two-dimensional code B including at least a part of the reservation information generated in step S2 to the user who uses the user terminal 1 that requested the reservation in step S1 (step S3). The management device control unit 21 proceeds to step S4.

The process for issuing two-dimensional code B is not particularly limited. The process for issuing two-dimensional code B may include, for example, one or more of the following: sending information capable of displaying two-dimensional code B to the user terminal 1 that requested the reservation in step S1; sending information capable of printing two-dimensional code B to the user terminal 1 that requested the reservation in step S1; or sending a printout of two-dimensional code B to the user using the user terminal 1 that requested the reservation in step S1.

Although not a required feature, it is preferable that the processing executed in step S3 includes processing to associate information capable of identifying the reservation (e.g., reservation information ID, identification information, information capable of identifying the reservation time slot and managed object M, information including information capable of identifying the user using the user terminal 1 and the reservation time slot) with information capable of issuing a two-dimensional code, and register this in an external database (e.g., a database of a service that provides a calendar capable of managing schedules). This enables the user terminal 1 to use the information capable of identifying the reservation to obtain information capable of issuing a two-dimensional code from the external database, and issue the two-dimensional code.

(Two-dimensional code B)
The two-dimensional code B is not particularly limited and may be, for example, a two-dimensional code exemplified by a QR code (registered trademark) or the like. The two-dimensional code B is preferably displayable on the user terminal 1. This allows the user terminal 1 to display the issued two-dimensional code B and use the managed object M managed by the lock 3.

The offline reservation information contained in the two-dimensional code B corresponding to a reservation managed by a lock device 4 controlled by a control device 6 that performs offline control processing for a managed object M (described below) preferably includes specific information that can identify the managed object M (for example, a lock device ID that can identify the lock device 4) and reservation time slot information regarding the reservation time slot. This allows the control device 6 to unlock the lock device 4 corresponding to the managed object M identified using the specific information offline during the reservation time slot without communicating with the outside world.

Although not a required feature, it is preferable that the offline reservation information include the serial number of the issued two-dimensional code B. This makes it possible to identify forged two-dimensional codes using the serial number.

Although not a required feature, it is preferable that at least the reservation time slot information included in the offline reservation information is encrypted with the private key 222. This prevents the generation of counterfeit two-dimensional codes that allow the lock device 4 to be unlocked outside the reserved time slot reserved by the user, even if the public key 622 is not secret.

Although not a required feature, it is preferable that the offline reservation information be encrypted reservation information encrypted with the private key 222. This prevents the generation of counterfeit two-dimensional codes that allow the lock device 4 to be unlocked outside the reserved time slot reserved by the user, even if the public key 622 is not secret.

Although not a required feature, it is preferable that the offline reservation information be configured to allow unlocking of multiple lock devices 4 that are related to each other. This allows the control device 6 to command unlocking of multiple lock devices 4 that are related to each other using a single two-dimensional code B, even when communications are restricted and it is not possible to inquire of the reservation management device 2 about whether unlocking is possible using a two-dimensional code.

The online reservation information (small-volume information) contained in two-dimensional code B corresponding to a reservation managed by lock device 4 controlled by control device 6, which performs online control processing for managed item M (described below), preferably includes identification information corresponding to large-volume reservation information, but does not include reservation time slot information. This prevents the creation of a counterfeit two-dimensional code that allows the lock device 4 to be unlocked during a time slot other than the one reserved by the user using two-dimensional code B.

Although not a required feature, it is preferable that the small-capacity information be encrypted small-capacity information encrypted with the private key 222.

By encrypting the small-capacity information with the private key 222, it is possible to prevent the generation of counterfeit two-dimensional codes that allow the lock device 4 to be unlocked outside of the reserved time slots reserved by the user, even if the public key 622 is not secret.

While the public encryption key system provides stronger encryption than the common key system, it is known that the load on the encryption and decryption processes is greater than that of the common key system. As a result, when using the public encryption key system, the power consumption of the control device 6 may be higher than when using the common key system.

Furthermore, since the encrypted small-capacity information contains identification information corresponding to the large-capacity reservation information and is small-capacity information that does not contain reservation time slot information, encrypted with the private key 222, the control device 6 can limit the information to be decrypted to the encrypted small-capacity information, thereby reducing the load on the decryption process using the public encryption key method and preventing the generation of counterfeit two-dimensional codes.

Although not a required feature, it is preferable that the reservation process include the two-dimensional code issuance process executed in steps S4 and S5.

[Step S4: Determine whether issuance of a two-dimensional code has been requested]
The management device control unit 21 executes the two-dimensional code issuing unit 213 in cooperation with the management device storage unit 22, and performs processing to determine whether issuance of a two-dimensional code has been requested by the user terminal 1 (step S4). If issuance of a two-dimensional code has been requested, the management device control unit 21 proceeds to step S5. If issuance of a two-dimensional code has not been requested, the management device control unit 21 proceeds to step S6.

[Step S5: Issue a two-dimensional code]
The management device control unit 21 executes the two-dimensional code issuing unit 213 in cooperation with the management device storage unit 22, and performs processing to issue a two-dimensional code B to the user using the user terminal 1 that requested the issuance of a two-dimensional code in step S4 (step S5). The management device control unit 21 proceeds to step S6.

If the two-dimensional code B issued in step S5 is a two-dimensional code B corresponding to a reservation managed by a lock device 4 controlled by a control device 6 that performs offline control processing, as described below, where the managed object M is managed by the lock device 4, it is preferable that the two-dimensional code B issued in step S5 is an issued time-stamped two-dimensional code that includes at least a portion of the reservation information generated in step S2 and further includes issue time information regarding the time at which the issued time-stamped two-dimensional code is issued.

This allows the control device 6 to set the time on the timer unit 64 using the time-issued two-dimensional code. Setting the time on the timer unit 64 using the time-issued two-dimensional code will be explained in more detail later using Figure 8.

By including the two-dimensional code issuance process executed in steps S4-S5 in the reservation process, a user using user terminal 1 can request the issuance of two-dimensional code B and use the issued two-dimensional code B even if the user loses the two-dimensional code B.

Furthermore, since the reservation process includes the two-dimensional code issuance process executed in steps S4-S5, a user terminal 1 that can connect to a wireless network can request the reservation management device 2 to issue a two-dimensional code B near the lock 3, even if the reservation management device 2 is located far from the lock 3, and can display the issued two-dimensional code B to use the managed object M managed by the lock 3.

Although not a required feature, it is preferable that the reservation management device 2 be able to execute the reservation termination process of steps S6 to S7. The reservation termination process may be executed as a separate process from the reservation process of steps S1 to S5.

[Step S6: Determine whether usage termination information has been received]
The management device control unit 21, in cooperation with the management device storage unit 22, executes the usage end information receiving unit 214 and performs processing to determine whether usage end information has been received from the control device 6 (step S6). If usage end information has been received, the management device control unit 21 proceeds to step S7. If usage end information has not been received, the management device control unit 21 proceeds to step S8.

[Step S7: End reservation]
The management device control unit 21, in cooperation with the management device storage unit 22, executes the usage end information receiving unit 214, and performs processing to end the reservation corresponding to the usage end information received in step S6 (step S7). The management device control unit 21 then proceeds to step S8.

The process for terminating a reservation is not particularly limited. The process for terminating a reservation preferably includes a process for associating, in the reservation table 221, the reservation information corresponding to the usage termination information received in step S6 and information for terminating the usage of the managed object M during the reservation time slot corresponding to the reservation information. This can prevent repeated transmission of reservation information for the managed object M during the reservation time slot whose usage has ended.

The process of ending a reservation preferably includes a process of transmitting information for ending the use of the reservation corresponding to the use end information received in step S6 to a control device 6 other than the control device 6 that transmitted the use end information in step S6. This can prevent the lock 3 from being unlocked using the two-dimensional code B corresponding to the reservation information whose use has been ended.

If Lock 3 includes Lock 3 that performs the online control processing described below, the reservation processing preferably includes the large-volume reservation information transmission processing executed in step S8.

[Step S8: Large-volume reservation information transmission process]
The management device control unit 21 executes the large-volume reservation information transmission unit 212 in cooperation with the management device storage unit 22 and the management device communication unit 23, and performs a large-volume reservation information transmission process to transmit the large-volume reservation information generated in step S2 (step S8). The management device control unit 21 ends the reservation process and returns to step S1.

The large-volume reservation information transmission process performed in step S8 will be explained in detail using Figure 6.

[Information management step]
The reservation process preferably further includes an information management step (not shown) for managing the hierarchical information stored in the management target table 223. This allows the reservation management device 2 to manage the storage of hierarchical information in the management target table 223, for example, that indicates that the second locking device 4ba and the third locking device 4bb are locking devices related to the first locking device 4aa.

[Flowchart of large-volume reservation information transmission process]
Fig. 6 is a flowchart showing an example of the large-volume reservation information transmission process executed in step S8 of Fig. 5. Below, an example of a preferable flow of the large-volume reservation information transmission process executed in step S8 will be described with reference to Fig. 6.

[Step S11: Determine whether it is time to transmit large-volume reservation information]
The management device control unit 21 executes the large-capacity reservation information transmission unit 212 in cooperation with the management device storage unit 22 and management device communication unit 23, and performs processing to determine whether it is time to transmit large-capacity reservation information (step S11). If it is time to transmit large-capacity reservation information, the management device control unit 21 proceeds to step S12. If it is not time to transmit large-capacity reservation information, the management device control unit 21 proceeds to step S13.

There are no particular limitations on the method for determining whether it is time to send large-volume reservation information.

The method for determining whether it is time to send large-volume reservation information may be, for example, a method for determining that it is time to send large-volume reservation information if an interval of at least a specified time has elapsed since the timing immediately before the large-volume reservation information was sent in step S12, or a method for determining that it is time to send large-volume reservation information when a command to send large-volume reservation information is received from the control device 6.

The specified time is not particularly limited. The lower limit of the specified time is preferably 0.5 hours or more, and more preferably 1 hour or more. By setting the lower limit of the specified time as described above, the reservation management device 2 can transmit large amounts of reservation information less frequently than if large amounts of reservation information were transmitted each time a reservation was made. Therefore, the control system S can reduce the risk of large amounts of reservation information being intercepted and used fraudulently, even in locations where communication confidentiality is restricted. Furthermore, by reducing the frequency with which large amounts of reservation information are transmitted, the control device 6 can reduce the increase in power consumption required for long-distance communications.

The upper limit of the specified time is preferably 168 hours or less, more preferably 72 hours or less, and even more preferably 24 hours or less. By setting the upper limit of the specified time as described above, the frequency with which the control device 6 does not receive large-volume reservation information for a reserved time slot that includes the current time can be reduced.

[Step S12: Transmit large-volume reservation information]
The management device control unit 21 executes the large-capacity reservation information transmission unit 212 in cooperation with the management device storage unit 22 and the management device communication unit 23, and performs processing to transmit large-capacity reservation information collectively to the control device 6 (step S12). The management device control unit 21 proceeds to step S13.

The process of collectively transmitting large amounts of reservation information to the control device 6 is not particularly limited, and may be, for example, a process that includes a process of collectively transmitting unsent reservation information. If the process of collectively transmitting large amounts of reservation information to the control device 6 includes a process of collectively transmitting unsent reservation information, the process of step S12 preferably includes a process of associating information stored in the reservation table 221 that corresponds to the large amount of reservation information transmitted in step S12 with information that the information has been transmitted. This allows the reservation management device 2 to determine in step S12 whether reservation information has not been transmitted, using the reservation information stored in the reservation table 221.

The process of transmitting large-volume reservation information to the control device 6 in a lump preferably includes a process of notifying the control device 6 that all of the large-volume reservation information to be transmitted has been transmitted when all of the large-volume reservation information to be transmitted in a lump has been transmitted. This allows the control device 6 to terminate its connection to the network N when it has received all of the large-volume reservation information to be transmitted, thereby reducing the power consumption consumed by connecting to the network N.

[Step S13: Determine whether transmission of specific large-volume reservation information has been instructed]
The management device control unit 21 executes the large-capacity reservation information transmission unit 212 in cooperation with the management device storage unit 22 and the management device communication unit 23, and performs processing to determine whether a command to transmit specific large-capacity reservation information has been issued (step S13). If a command to transmit specific large-capacity reservation information has been issued, the management device control unit 21 proceeds to step S14. If a command to transmit specific large-capacity reservation information has not been issued, the management device control unit 21 ends the reservation processing and proceeds to step S1.

[Step S14: Transmit specific large-volume reservation information]
The management device control unit 21 executes the large-capacity reservation information transmission unit 212 in cooperation with the management device storage unit 22 and the management device communication unit 23, and performs processing to transmit the specific large-capacity reservation information to the user terminal 1 that instructed the transmission of the specific large-capacity information in step S13 (step S14). The management device control unit 21 ends the reservation processing and moves the processing to step S1.

By performing the large-volume reservation information transmission process of steps S11-S14, the reservation management device 2 transmits large-volume reservation information in batches at intervals of at least the specified time. This allows the reservation management device 2 to transmit large-volume reservation information less frequently than if large-volume reservation information were transmitted each time a reservation was made. Therefore, the control system S can reduce the risk of large-volume reservation information being intercepted and used fraudulently, even in locations where communication confidentiality is restricted. Furthermore, by reducing the frequency with which large-volume reservation information is transmitted, the control device 6 can reduce the increase in power consumption required for long-distance communication.

By performing the large-volume reservation information transmission process of steps S11-S14, the control device 6 can receive specific large-volume reservation information equivalent to the corresponding large-volume reservation information from the reservation management device 2 if the corresponding large-volume reservation information is not included in the received large-volume reservation information. Therefore, the control system S can simultaneously reduce the risk of interception and power consumption by having the control device 6 transmit reservation information one by one each time a reservation is made, and enable the control device 6 on the lock 3 side to reliably receive the corresponding large-volume reservation information that corresponds to the small-volume information after decryption, allowing it to quickly determine the validity of the reserved time slot.

[Main Flowchart of Control Processing Executed by the Control Device 6]
7 is a main flowchart showing an example of the control process executed by the control device 6. An example of a preferable flow of the control process executed by the control device 6 will be described below with reference to FIG.

[Step S41: Determine whether to perform offline operation]
The control device control unit 61 executes the operation determination unit 611 in cooperation with the control device storage unit 62 and the operation designation unit 66 to determine whether to perform offline operation (step S41). If offline operation is to be performed, the control device control unit 61 proceeds to step S42. If offline operation is not to be performed, the control device control unit 61 proceeds to step S43.

The process for determining whether to perform offline operation is not particularly limited. The process for determining whether to perform offline operation preferably includes a process for determining that offline operation will be performed when the operation designation unit 66 designates an operation for performing offline control processing, and/or a process for determining that offline operation will not be performed when the operation designation unit 66 designates an operation for performing online control processing. This allows the administrator managing the control device 6 to designate the operation of the control device 6 using the operation designation unit 66.

[Step S42: Offline control process]
The control device control unit 61 cooperates with the control device storage unit 62, control device communication unit 63, and/or timer unit 64 as necessary to execute the reading unit 613, decoding unit 614, discrimination unit 615, unlock command unit 617, time setting unit 618, etc., and performs offline control processing to control the lock device 4 without communicating with the outside (step S42). The control device control unit 61 ends the control processing and proceeds to step S41.

The offline control process performed in step S42 will be explained in detail later using Figure 8.

[Step S43: Determine whether to perform usage termination operation]
The control device control unit 61 executes the operation determination unit 611 in cooperation with the control device storage unit 62 and the operation designation unit 66 to determine whether to perform a usage termination operation (step S43). If a usage termination operation is to be performed, the control device control unit 61 proceeds to step S44. If a usage termination operation is not to be performed, the control device control unit 61 proceeds to step S45.

[Step S44: Usage termination process]
The control device control unit 61 executes the usage termination information transmission unit 619 in cooperation with the control device storage unit 62, the control device communication unit 63, and/or the timer unit 64 as necessary, and performs usage termination processing to terminate the usage of the reserved managed object M (step S44). The control device control unit 61 ends the control processing and moves the processing to step S41.

The usage termination process executed in step S44 will be explained in detail later using Figure 12.

[Step S45: Online control processing]
The control device control unit 61 cooperates with the control device storage unit 62, control device communication unit 63, and/or timer unit 64 as necessary to execute the large-capacity reservation information receiving unit 612, reading unit 613, decoding unit 614, discrimination unit 615, unlock command unit 617, etc., and performs online control processing to control the lock device 4 (step S45). The control device control unit 61 ends the control processing and moves the processing to step S41.

The online control process performed in step S45 will be explained in detail later using Figure 10.

Although not a required feature, the control processing preferably includes a sleep processing that enters a sleep state in which control processing is not performed when the current time is within a sleep time period stored in the control device storage unit 62, and a sleep release processing that releases the sleep state in which control processing is not performed when the current time is not within a sleep time period stored in the control device storage unit 62. By including these processes in the control processing, it is possible to perform control processing during times when the control system S is in use while further reducing the power consumption of the control device 6, for example by including some or all of the times when the control system S is not in use within the sleep time period.

[Flowchart of Offline Control Processing]
Fig. 8 is a flowchart showing an example of the offline control process executed in step S42 of Fig. 7. Fig. 9 is a diagram following Fig. 8. Below, an example of a preferable flow of the offline control process executed in step S42 will be described using Figs. 8 and 9.

If the reading device 5 has a detection unit, the offline control process preferably includes a readability determination process in step S51.

[Step S51: Determine whether the two-dimensional code can be read]
The control device control unit 61 executes the reading unit 613 in cooperation with the control device storage unit 62 and the control device communication unit 63 to perform processing to determine whether the two-dimensional code can be read (step S51). If the two-dimensional code can be read, the control device control unit 61 proceeds to step S52. If the two-dimensional code cannot be read, the control device control unit 61 proceeds to step S51.

The method for determining whether a two-dimensional code can be read is not particularly limited, and may be, for example, a method in which it is determined that a two-dimensional code can be read when the detection unit of the reading device 5 detects that two-dimensional code B, user terminal 1, and/or a user using user terminal 1 is present in the vicinity of the reading device 5.

If the detection unit of the reading device 5 is a detection unit that includes a motion identification sensor, the method of determining whether the two-dimensional code can be read preferably includes a method of determining that the two-dimensional code can be read when the detection unit detects the movement of the person who made the reservation presenting two-dimensional code B to the reading device 5. This makes it possible to both reduce power consumption by not reading when the person who made the reservation is simply near the reading device 5 but has not presented two-dimensional code B, and to read two-dimensional code B when the person who made the reservation presents it to the reading device 5.

By including the readability determination process in step S51 in the offline control process, it is possible to prevent the reading device 5 from attempting to read a two-dimensional code when it is not possible to read the two-dimensional code, which would increase power consumption.

[Step S52: Read the two-dimensional code]
The control device control unit 61 executes the reading unit 613 in cooperation with the control device storage unit 62 and the control device communication unit 63, and performs processing to read the two-dimensional code B using the reading device 5 (step S52). The control device control unit 61 proceeds to step S53.

If two-dimensional code B includes encrypted reservation information encrypted with private key 222 and/or reservation time slot information encrypted with private key 222, the offline control process preferably includes reservation information decryption processing in step S53.

[Step S53: Decrypt reservation information]
The control device control unit 61 executes the decryption unit 614 in cooperation with the control device storage unit 62, and performs a process of decrypting the information contained in the two-dimensional code B read in step S52, which information has been encrypted with the private key 222, using the public key 622 (step S53). The control device control unit 61 proceeds to step S54.

If the reservation time slot information contained in the offline reservation information included in the two-dimensional code B read in step S52 is encrypted with the private key 222, the process of decrypting the information encrypted with the private key 222 in step S53 preferably includes a process of decrypting the encrypted reservation time slot information to obtain the decrypted reservation time slot information. This allows the control device 6 to use the decrypted reservation time slot information to determine whether the current time falls within the reservation time slot.

If the offline reservation information contained in the two-dimensional code B read in step S52 is encrypted reservation information encrypted with the private key 222, the process of decrypting the information encrypted with the private key 222 in step S53 preferably includes a process of decrypting the encrypted reservation information to obtain decrypted reservation information. This allows the control device 6 to use the decrypted reservation information to determine whether the current time falls within the reserved time slot.

If the reservation process executed by the reservation management device 2 includes a two-dimensional code issuance process capable of issuing a two-dimensional code with an issuance time, it is preferable that the offline control process includes the time adjustment process of steps S54 to S56.

[Step S54: Determine whether two-dimensional code B includes issue time information]
The control device control unit 61, in cooperation with the control device storage unit 62 and timer unit 64, executes the time setting unit 618 and performs processing to determine whether the two-dimensional code B read in step S52 contains issue time information (step S54). If the two-dimensional code B contains issue time information, the control device control unit 61 proceeds to step S55. If the two-dimensional code B does not contain issue time information, the control device control unit 61 proceeds to step S57.

[Step S55: Determine whether the elapsed time is less than or equal to a predetermined time]
The control device control unit 61, in cooperation with the control device storage unit 62 and the timer unit 64, executes the time setting unit 618 and performs a process of determining whether the time elapsed since the issue time indicated by the issue time information included in the two-dimensional code B read in step S52 is equal to or less than a predetermined time (step S55). If it is equal to or less than the predetermined time, the control device control unit 61 proceeds to step S56. If it is not equal to or less than the predetermined time, the control device control unit 61 proceeds to step S57.

There is no particular limit on the lower limit of the specified time. The lower limit of the specified time is preferably 0.5 minutes or more, and more preferably 1 minute or more. By setting the lower limit of the specified time as described above, the control device 6 can increase the number of opportunities to set the time.

There is no particular limit to the upper limit of the specified time. The upper limit of the specified time is preferably 3 minutes or less, more preferably 2 minutes or less, and even more preferably 1 minute or less. By setting the upper limit of the specified time as described above, the control device 6 can prevent the difference between the current time measured by the timer unit 64 and the current time in standard time from increasing due to time adjustment.

[Step S56: Set the time]
The control device control unit 61 executes the time setting unit 618 in cooperation with the control device storage unit 62 and the timer unit 64, and performs processing to set the time on the timer unit 64 using the issue time indicated by the issue time information included in the two-dimensional code B read in step S52 (step S56). The control device control unit 61 proceeds to step S57.

The process of setting the time on the timer unit 64 using the issue time indicated by the issue time information is not particularly limited. The process of setting the time on the timer unit 64 using the issue time indicated by the issue time information preferably includes setting the current time indicated by the timer unit 64 to the issue time plus a specific time. By setting the time to the issue time plus a specific time, the time can be set taking into account the time from when two-dimensional code B is issued until the reader 5 reads that two-dimensional code B.

There is no particular limit on the lower limit of the specific time. The lower limit of the specific time is preferably 5 seconds or more, and more preferably 10 seconds or more. By setting the lower limit of the specific time as described above, the control device 6 can prevent delays in the time measured by the timer unit 64.

There is no particular limit to the upper limit of the specific time. The upper limit of the specific time is preferably 30 seconds or less, more preferably 20 seconds or less, and even more preferably 10 seconds or less. By setting the upper limit of the specific time as described above, the control device 6 can prevent the time measured by the timer unit 64 from being too fast.

The process of setting the time on the timer unit 64 using the issue time indicated by the issue time information preferably stores the two-dimensional code B used to set the time, and does not use the two-dimensional code B that was used once to set the time again. This prevents the time measured by the timer unit 64 from being delayed due to re-setting the time.

The timer unit 64 can continue to keep accurate timekeeping by adjusting the time based on the accurate current time provided externally. However, in locations where communication means and/or power supply are limited, it may be difficult to use external means that provide accurate current time, such as public NTP (Network Time Protocol) services. If the timer unit 64's timekeeping becomes inaccurate due to an inability to adjust the time, there is a risk that the lock will not be controlled according to the reservation.

By including the time setting process in steps S54 to S56 in the offline control process, the control device 6 can set the time on the timer unit 64 using the issue time indicated by the issue time information included in the two-dimensional code B issued when a request signal is sent from the user terminal 1 (when the user terminal 1 requests the issuance of a two-dimensional code). This allows the control device 6 to set the time on the timer unit 64 and continue to provide control of the lock 3 according to the reservation, even in locations where external means for providing time setting are not available.

By including the time adjustment process of steps S54 to S56 in the offline control process, the time is adjusted if the time elapsed from the issue time to the current time measured by the timer unit 64 is less than a predetermined time. This allows the control device 6 to adjust the time if the time elapsed since the issue time is short and the issue time can be considered to be substantially the accurate current time.

[Step S57: Determine whether it is within the reserved time slot]
The control device control unit 61, in cooperation with the control device storage unit 62 and the timer unit 64, executes the determination unit 615 and performs processing to determine whether the current time measured by the timer unit 64 corresponds to the reserved time slot included in the two-dimensional code B read in step S52 (step S57). If it corresponds to the reserved time slot, the control device control unit 61 proceeds to step S58. If it does not correspond to the reserved time slot, the control device control unit 61 ends the offline control processing and proceeds to step S41.

[Step S58: Identify whether a predetermined locking device is included]
The control device control unit 61, in cooperation with the control device storage unit 62 and the timer unit 64, executes the identification unit 616 to identify whether the one or more managed lock devices that can be commanded to unlock include a predetermined lock device that is one or more reserved lock devices identified by the reservation information included in the two-dimensional code B read in step S52 (step S58). If it is identified as including a predetermined lock device, the control device control unit 61 proceeds to step S59. If it is not identified as including a predetermined lock device, the control device control unit 61 ends the offline control process and proceeds to step S41.

[Step S59: Command to unlock]
The control device control unit 61 executes the unlock command unit 617 in cooperation with the control device storage unit 62 and the control device communication unit 63, and performs processing to command one or more lock devices 4, which are the predetermined lock devices identified in step S58, to unlock (step S59). The control device control unit 61 ends the offline control processing, and proceeds to step S41.

By including steps S57 to S59 in the offline control process, even if the control device 6 reads a two-dimensional code B that indicates that two or more reserved lock devices can be unlocked during a reserved time period using the identification unit 616, the control device 6 can identify whether the reserved lock device is included in one or more managed lock devices that can be issued an unlock command. After the determination by the determination unit 615 and the identification by the identification unit 616, the control device 6 can issue an unlock command to a specified lock device that is both a managed lock device and a reserved lock device.

Furthermore, since the offline control process includes steps S57 to S59, the control device 6 can determine whether the reservation time slot recorded in the reservation information contained in the two-dimensional code B corresponds to the reservation time slot by referencing the built-in timer unit 64 without communicating with the outside. This allows the control device 6 to unlock the lock device 4 offline without communicating with the outside.

As a result, even in locations where communication means are limited, the lock 3 allows for the rental of a room equipped with an electric and/or electronic lock 3 with almost unattended management. Furthermore, since the discrimination unit 615 does not communicate with the outside world, the power consumption of the lock 3 can be reduced. Therefore, the control device 6 can control the lock 3 even in locations where power supply is limited.

[Online control processing flowchart]
Fig. 10 is a flowchart showing an example of the online control process executed in step S45 of Fig. 7. Below, an example of a preferable flow of the online control process executed in step S45 will be described with reference to Fig. 10.

[Step S61: Determine whether the two-dimensional code can be read]
The control device control unit 61 executes the reading unit 613 in cooperation with the control device storage unit 62 and the control device communication unit 63 to perform processing to determine whether the two-dimensional code B can be read (step S61). If the two-dimensional code B can be read, the control device control unit 61 proceeds to step S62. If the two-dimensional code B cannot be read, the control device control unit 61 proceeds to step S69.

The method for determining whether two-dimensional code B can be read is not particularly limited, and may be, for example, a method in which it is determined that two-dimensional code B can be read when the detection unit of the reading device 5 detects that two-dimensional code B, user terminal 1, and/or a user using user terminal 1 are present in the vicinity of the reading device 5.

If the detection unit of the reading device 5 is a detection unit that includes a motion identification sensor, the method of determining whether two-dimensional code B can be read preferably includes a method of determining that two-dimensional code B can be read when the detection unit detects the movement of the person who made the reservation presenting two-dimensional code B to the reading device 5. This makes it possible to both reduce power consumption by not reading when the person who made the reservation is simply near the reading device 5 but does not present two-dimensional code B, and to read two-dimensional code B when the person who made the reservation presents it to the reading device 5.

By including the readability determination process in step S61 in the online control process, it is possible to prevent the reader 5 from attempting to read two-dimensional code B when it is not possible to read the two-dimensional code, which would increase power consumption.

[Step S62: Read the two-dimensional code]
The control device control unit 61 cooperates with the control device storage unit 62 and the control device communication unit 63 to execute the reading unit 613, and performs processing to read the two-dimensional code B using the reading device 5 (step S62). The control device control unit 61 proceeds to step S63.

If the control device 6 includes an input unit, the process of reading the two-dimensional code B in steps S61 to S62 preferably includes a process of acquiring information corresponding to the encrypted small-volume information contained in the two-dimensional code B when that information is input via the input unit. This makes it possible to realize hybrid control in which the lock 3 is controlled not only by the two-dimensional code but also by input from the reservation user.

If two-dimensional code B includes encrypted small-volume information encrypted with private key 222, the online control process preferably includes encrypted small-volume information decryption processing in step S63.

[Step S63: Decrypt the encrypted small-volume information]
The control device control unit 61 executes the decryption unit 614 in cooperation with the control device storage unit 62, and performs processing to decrypt the encrypted small-capacity information included in the two-dimensional code B read in step S62 using the public key 622 and obtain the decrypted small-capacity information (step S63). The control device control unit 61 proceeds to step S64.

[Step S64: Determine whether specific large-capacity information is being received]
The control device control unit 61 executes the determination unit 615 in cooperation with the control device storage unit 62, and performs processing to determine whether specific large-capacity information (corresponding large-capacity reservation information) corresponding to the decoded small-capacity information obtained in step S63 has been received, using the large-capacity reservation information table 621 (step S64). If specific large-capacity information has been received, the control device control unit 61 proceeds to step S67. If specific large-capacity information has not been received, the control device control unit 61 proceeds to step S65.

The process of using the large-capacity reservation information table 621 to determine whether specific large-capacity information (corresponding large-capacity reservation information) corresponding to the decoded small-capacity information obtained in step S63 has been received is not particularly limited, and may be, for example, a process of determining that corresponding large-capacity information has been received if large-capacity reservation information corresponding to the identification information included in the decoded small-capacity information can be obtained from the large-capacity reservation information table 621.

[Step S65: Command to transmit specific large volume information]
The control device control unit 61 operates in cooperation with the control device memory unit 62 and the control device communication unit 63 to execute the large-capacity reservation information receiving unit 612, and performs processing to instruct the reservation management device 2 to transmit specific large-capacity information (corresponding large-capacity reservation information) corresponding to the decoded small-capacity information obtained in step S63 (step S65).The control device control unit 61 then transfers processing to step S66.

[Step S66: Receiving specific large-volume information]
The control device control unit 61 executes the large-capacity reservation information receiving unit 612 in cooperation with the control device memory unit 62 and the control device communication unit 63, and performs processing to receive the specific large-capacity information (corresponding large-capacity reservation information) that was instructed to be sent in step S65 (step S66).The control device control unit 61 then transfers processing to step S67.

[Step S67: Determine whether it is within the reserved time slot]
The control device control unit 61, in cooperation with the control device storage unit 62 and the timer unit 64, executes the determination unit 615 and performs processing to determine whether the current time measured by the timer unit 64 corresponds to the reserved time slot included in the specific large-capacity information (corresponding large-capacity reservation information) (step S67). If it corresponds to the reserved time slot, the control device control unit 61 proceeds to step S68. If it does not correspond to the reserved time slot, the control device control unit 61 proceeds to step S69.

[Step S68: Command to unlock]
The control device control unit 61 executes the unlock command unit 617 in cooperation with the control device storage unit 62 and the control device communication unit 63, and performs processing to command the lock device 4 corresponding to the specific large-capacity information (corresponding large-capacity reservation information) to unlock (step S68). The control device control unit 61 proceeds to step S69.

Although not a required feature, it is preferable that the process of issuing an unlock command in step S68 be a process of issuing an unlock command to the lock device 4 if the specific large-volume information is not associated with information that ends a reservation in the large-volume reservation information table 621. This allows the control device 6 to issue an unlock command to the lock device 4 only for reservations that have not yet ended.

By including the processes of steps S64 to S68 in the online control process, the control device 6 can receive specific large-volume reservation information equivalent to the corresponding large-volume reservation information from the reservation management device 2 when the corresponding large-volume reservation information is not included in the received large-volume reservation information. Therefore, the control system S can simultaneously reduce the risk of interception and power consumption by having the control device 6 transmit reservation information one by one each time a reservation is made, and enable the control device 6 on the lock 3 side to reliably receive the corresponding large-volume reservation information that corresponds to the small-volume information after decryption, enabling the validity of the reservation time slot to be quickly determined.

In the common key method, if the key (common key) used for decryption is not secret, forged small amounts of information can be encrypted using the common key, which allows the lock device 4 to be unlocked outside of the reserved time slot reserved by the user. This makes it possible to generate a forged two-dimensional code that allows the lock device 4 to be unlocked outside of the reserved time slot reserved by the user.

By including the processing of step S63 in the online control processing, the control system S can prevent the generation of counterfeit two-dimensional codes that allow the lock device 4 to be unlocked outside the reserved time slot reserved by the user, even if the key (public key) used for decryption is not secret.

While the public encryption key system provides stronger encryption than the common key system, it is known that the load on the encryption and decryption processes is greater than that of the common key system. As a result, when using the public encryption key system, the power consumption of the control device 6 may be higher than when using the common key system.

By including steps S63 to S68 in the online control process, the control device 6 can decrypt the encrypted small-capacity information using the decryption unit 614 and determine whether the current time falls within the reserved time slot using the corresponding large-capacity reservation information that corresponds to the decrypted small-capacity information. This allows the control device 6 to limit the information to be decrypted to the encrypted small-capacity information, thereby reducing the load on the decryption process using the public encryption key method and preventing the generation of counterfeit two-dimensional codes.

[Step S69: Large-volume reservation information reception process]
The control device control unit 61 executes the large-volume reservation information receiving unit 612 in cooperation with the control device storage unit 62 and/or the control device communication unit 63 as necessary, and performs large-volume reservation information receiving processing to receive large-volume reservation information (step S69). The control device control unit 61 ends the online control processing, and proceeds to step S41.

The large-volume reservation information reception process executed in step S69 will be explained in detail using Figure 11.

[Flowchart of large-volume reservation information reception processing]
Fig. 11 is a flowchart showing an example of the large-volume reservation information reception process executed in step S69 of Fig. 10. Below, an example of a preferable flow of the large-volume reservation information reception process executed in step S69 will be described with reference to Fig. 11.

[Step S71: Determine whether it is time to receive large-volume reservation information] (No → Return)
The control device control unit 61 executes the large-volume reservation information receiving unit 612 in cooperation with the control device storage unit 62 and the control device communication unit 63, and performs processing to determine whether it is time to receive large-volume reservation information (step S71). If it is time to receive large-volume reservation information, the control device control unit 61 proceeds to step S72. If it is not time to transmit large-volume reservation information, the control device control unit 61 ends the large-volume reservation information receiving processing and proceeds to step S41.

There are no particular limitations on the method for determining whether it is time to receive large-volume reservation information.

One method for determining whether it is time to receive large-volume reservation information is, for example, to determine that it is time to receive large-volume reservation information if an interval of at least a specified time has elapsed since the timing immediately before the start of reception of large-volume reservation information in step S72.

The specified time is not particularly limited. The lower limit of the specified time is preferably 0.5 hours or more, and more preferably 1 hour or more. By setting the lower limit of the specified time as described above, the control device 6 can reduce the frequency with which large-volume reservation information is received compared to when large-volume reservation information is received each time a reservation is made. Therefore, the control system S can reduce the risk of large-volume reservation information being intercepted and used fraudulently, even in locations where communication confidentiality is restricted. Furthermore, by reducing the frequency with which large-volume reservation information is received, the control device 6 can reduce the increase in power consumption required for long-distance communication.

The upper limit of the specified time is preferably 168 hours or less, more preferably 72 hours or less, and even more preferably 24 hours or less. By setting the upper limit of the specified time as described above, the frequency with which the control device 6 does not receive large-volume reservation information for a reserved time slot that includes the current time can be reduced.

The method for determining whether it is the right time to receive large-volume reservation information preferably includes a method for determining whether it is the right time to receive large-volume reservation information if it is one or more specified dates and times that are spaced apart by an interval of at least a specified time. The one or more specified dates and times are not particularly limited, and may be, for example, dates and times that specify 6:00, 12:00, and 18:00 each day. This makes it possible to determine whether it is the right time to receive large-volume reservation information without having to remember the timing of the most recent reception of large-volume reservation information.

The method for determining whether it is time to receive large-volume reservation information preferably includes a method for determining whether it is time to receive large-volume reservation information during a time period other than the specified time period. This prevents attempts at long-distance communication during times when large-volume reservation information cannot be received, such as when maintenance is being performed on the reservation management device 2.

[Step S72: Start receiving large-volume reservation information]
The control device control unit 61 cooperates with the control device storage unit 62 and/or the control device communication unit 63 to execute the large-volume reservation information receiving unit 612, and performs processing to start receiving large-volume reservation information (step S72). The control device control unit 61 then proceeds to step S73.

The process of starting to receive large-volume reservation information preferably includes a process of connecting the control device 6 to the network N. This allows the control device 6 to communicate with the reservation management device 2 via the network N while receiving the large-volume reservation information.

The process of starting to receive large-volume reservation information preferably includes a process of requesting the reservation management device 2 to send large-volume reservation information. This further reduces the time difference between when the control device 6 starts to receive large-volume reservation information and when the reservation management device 2 starts to send large-volume reservation information. This prevents the control device 6 from being connected to the network N during the aforementioned time difference, reducing the increase in power consumption required for long-distance communication.

[Step S73: Determine whether all large-volume reservation information has been received]
The control device control unit 61 executes the large-volume reservation information receiving unit 612 in cooperation with the control device storage unit 62 and the control device communication unit 63, and performs processing to determine whether all large-volume reservation information has been received (step S73). If all large-volume reservation information has been received, the control device control unit 61 proceeds to step S76. If all large-volume reservation information has not been received, the control device control unit 61 proceeds to step S74.

The process for determining whether all large-volume reservation information has been received is not particularly limited, and may include, for example, a process for determining that all large-volume reservation information has been received when information notifying that all large-volume reservation information has been received from the reservation management device 2.

[Step S74: Determine whether large-volume reservation information has been received]
The control device control unit 61 executes the large-volume reservation information receiving unit 612 in cooperation with the control device storage unit 62 and the control device communication unit 63, and performs processing to determine whether large-volume reservation information has been received (step S74). If large-volume reservation information has been received, the control device control unit 61 proceeds to step S75. If large-volume reservation information has not been received, the control device control unit 61 proceeds to step S73.

[Step S75: Store large-volume reservation information]
The control device control unit 61 executes the large-volume reservation information receiving unit 612 in cooperation with the control device storage unit 62 and the control device communication unit 63, and performs processing to store the large-volume reservation information received in step S74 (step S75). The control device control unit 61 then proceeds to step S73.

[Step S76: End of reception of large-volume reservation information]
The control device control unit 61 cooperates with the control device storage unit 62 and the control device communication unit 63 to execute the large-volume reservation information receiving unit 612, and performs processing to end reception of the large-volume reservation information (step S76). The control device control unit 61 ends the large-volume reservation information receiving processing, and proceeds to step S44.

When connected to network N, the control device 6 consumes power for processes such as determining whether data has been received via network N. In particular, when the control device communication unit 63 is connected to a network N that includes a wireless network, this power consumption increases compared to when the control device communication unit 63 is connected to a network N that includes only a wired network.

The process of terminating reception of large-volume reservation information preferably includes a process of terminating the connection between the control device 6 and the network N. This allows the control device 6 to reduce the power consumption consumed by connecting to the network N when large-volume reservation information is not being received.

By performing the large-volume reservation information reception process, the control device 6 can receive one or more large-volume reservation information pieces that are sent collectively at intervals of at least a specified time. This allows the control device 6 to receive large-volume reservation information pieces when communication is stable, even in locations where communication stability is limited.

By performing the large-volume reservation information reception process, the control device 6 can receive large-volume reservation information less frequently than if large-volume reservation information were transmitted each time a reservation was made. Therefore, the control system S can reduce the risk of large-volume reservation information being intercepted and used fraudulently, even in locations where communication confidentiality is restricted. Furthermore, by receiving large-volume reservation information less frequently, the control device 6 can reduce the increase in power consumption required for long-distance communication.

By performing the large-volume reservation information reception process, the control device 6 can receive specific large-volume reservation information equivalent to the corresponding large-volume reservation information from the reservation management device 2 when the corresponding large-volume reservation information is not included in the received large-volume reservation information. Therefore, the control system S can simultaneously reduce the risk of interception and power consumption by having the control device 6 transmit reservation information one by one each time a reservation is made, and enable the control device 6 to reliably receive the corresponding large-volume reservation information that corresponds to the small-volume information after decryption, enabling the validity of the reservation time slot to be quickly determined.

[Flowchart of usage termination process]
Fig. 12 is a flowchart showing an example of the usage termination process executed in step S44 of Fig. 7. Below, an example of a preferable flow of the usage termination process executed in step S44 will be described using Fig. 12.

[Step S81: Determine whether the two-dimensional code can be read]
The control device control unit 61 executes the usage termination information transmission unit 619 in cooperation with the control device storage unit 62 and the control device communication unit 63, and performs processing to determine whether the two-dimensional code related to the termination of usage of the managed object M can be read (step S81). If the code can be read, the control device control unit 61 proceeds to step S52. If the code cannot be read, the control device control unit 61 terminates the usage termination processing and proceeds to step S41.

If the reading device 5 includes a usage termination reading device that reads two-dimensional code B to terminate the use of the managed object M, the process of determining whether two-dimensional code B can be read in step S81 preferably includes a process of determining that two-dimensional code B can be read if two-dimensional code B can be read by the usage termination reading device. This allows the person who made the reservation to terminate the use of the reserved managed object M by having the usage termination reading device read two-dimensional code B.

[Step S82: Read the two-dimensional code]
The control device control unit 61 cooperates with the control device storage unit 62 and the control device communication unit 63 to execute the usage end information transmission unit 619 and perform processing to read the two-dimensional code B using the reading device 5 (step S82). The control device control unit 61 then proceeds to step S83.

[Step S83: End reservation]
The control device control unit 61, in cooperation with the control device storage unit 62 and the control device communication unit 63, executes the usage termination information transmission unit 619, and performs processing to terminate the reservation corresponding to the two-dimensional code B read in step S82 (step S83). The control device control unit 61 proceeds to step S84.

The process for terminating a reservation is not particularly limited. The process for terminating a reservation preferably includes a process for associating reservation termination information with the large-volume reservation information stored in the large-volume reservation information table 621 and corresponding to the two-dimensional code B read in step S82. This allows the control device 6 to control the lock device 4 to an unlocked state when two-dimensional code B corresponding to large-volume reservation information that is not associated with reservation termination information is read.

[Step S84: Send usage termination information]
The control device control unit 61, in cooperation with the control device storage unit 62 and the control device communication unit 63, executes the usage end information sending unit 619, and performs processing to send usage end information regarding the end of usage during the reserved time slot of the managed object M corresponding to the two-dimensional code B read in step S82 to the reservation management device 2 (step S84). The control device control unit 61 ends the usage end processing, and proceeds to step S41.

By having the control device 6 execute the usage termination process, the person who reserved the managed object M can terminate their use of the managed object M without waiting for the end date and time of the reserved time slot. This allows the administrator who manages the managed object M to allow another person who reserved the managed object M to use the managed object M without waiting for the end date and time of the reserved time slot.

<<Example of use of control system S>>
Next, an example of how the control system S of this embodiment is used will be described.

<Adding Lock 3 to Managed Object M>
13 is a diagram showing an example of retrofitting a lock 3 to a management target M. An administrator who manages the management target M (a room to be rented out) installs a lock device 4 that can control entry and exit to the management target M in the management target M. Then, the administrator retrofits a reading device 5 and a control device 6 around the management target M to configure the lock 3.

In the example shown in FIG. 13, the control device 6, which is retrofitted outside the managed object M, is electrically connected to the lock device 4 installed inside the managed object M via short-range wireless communication performed by the control device communication unit 63. Because the control device 6 can be electrically connected to the lock device 4 via short-range wireless communication, the administrator can configure the lock 3 without installing the lock device 4 outside the managed object M. This allows the administrator to prevent the lock device 4 from being destroyed by someone outside the managed object M.

In the example shown in FIG. 13, the control device 6 includes a control device power supply unit 65 (a power supply unit capable of supplying power from a battery). This allows the administrator to use the lock 3 to manage the use of the managed object M even if the supply of power is limited in the vicinity of the managed object M. In addition, the administrator can maintain the control device power supply unit 65 by the relatively simple procedure of replacing the battery.

<Lending of managed object M managed by lock 3 with offline control>
Next, the lending of the managed object M managed by the lock 3 that performs offline control without communicating with the outside will be explained.

[Reserve use of managed object M]
A reserving user who reserves the use of a managed object M requests a reservation for the use of the managed object M during a reserved time period from the reservation management device 2 via a user terminal 1. The reservation management device 2 generates large-capacity reservation information (reservation information) including information that can identify the reserved time period and the managed object M.

[Issue a two-dimensional code]
The reservation management device 2 transmits to the user terminal 1 offline two-dimensional code display information capable of displaying a two-dimensional code B for offline control, the encrypted reservation information being reservation information including information capable of identifying the reservation time slot and the management target M, encrypted with a private key 222. The user terminal 1 receives the offline two-dimensional code display information.

[Reading two-dimensional codes]
The reserving person uses the offline two-dimensional code display information to display the two-dimensional code B for offline control on the user terminal 1, and has the displayed two-dimensional code B for offline control read by the reading device 5 of the lock 3 installed in the vicinity of the managed object M. The reading device 5, which is equipped with a motion identification sensor, detects the movement of the reserving person to read the two-dimensional code B, and reads the two-dimensional code B.

[Determine whether it is within the reserved time slot]
The control device 6 decrypts the encrypted reservation information with the public key 622 to obtain the decrypted reservation information. The control device 6 determines whether the current time measured by the timer unit 64 is included in the reservation time slot included in the decrypted reservation information, without communicating with an external device.

[Controlling the lock device 4 to the unlocked state]
If the current time is included in the reserved time period, the control device 6 controls the lock device 4, which can control entry and exit to the managed object M, to an unlocked state. This allows the person who makes the reservation to use the managed object M during the reserved time period.

[Keeping the locking device 4 in the locked state]
If the current time is not included in the reserved time period, the control device 6 keeps the lock device 4, which can control entry and exit to the managed object M, in a locked state. This prevents the reserving user from using the managed object M outside the reserved time period.

<Time setting for lock 3 with offline control>
The time setting of the lock 3, which is controlled offline and does not communicate with the outside, will now be described.

[Issuing a two-dimensional code with the time of generation]
A reserving person, in the vicinity of the managed object M, requests the reservation management device 2 to issue a two-dimensional code B via a user terminal 1. The reservation management device 2 transmits to the user terminal 1 generated time-attached offline two-dimensional code display information capable of displaying a generated time-attached two-dimensional code B for offline control, which includes encrypted generated time-attached reservation information obtained by encrypting generated time-attached reservation information, including generation time information when the two-dimensional code B was generated, the reservation time slot, and information that can identify the managed object M, with a private key 222. The user terminal 1 receives the generated time-attached two-dimensional code display information.

[Reading two-dimensional codes]
The reserving person uses the offline two-dimensional code display information to display the two-dimensional code B for offline control on the user terminal 1, and has the displayed two-dimensional code B for offline control read by the reading device 5 of the lock 3 installed in the vicinity of the managed object M. The reading device 5, which is equipped with a motion identification sensor, detects the movement of the reserving person to read the two-dimensional code B, and reads the two-dimensional code B.

[Time setting]
The control device 6 determines whether the time elapsed from the generation time corresponding to the generation time information to the current time measured by the timer unit 64 is less than or equal to a predetermined time. If it is less than or equal to the predetermined time, the control device 6 sets the current time to a time obtained by adding a specific time to the generation time. This allows the control device 6 to set the time on the timer unit 64 without using an external means for providing the time used for time setting via the network N.

<Lending of managed object M managed by lock 3 that performs online control>
The lending of the managed object M managed by the lock 3 that performs online control and communicates with the reservation management device 2 will be explained.

[Reserve use of managed object M]
A reserving user who reserves the use of a managed object M requests a reservation for the use of the managed object M during a reserved time period from the reservation management device 2 via a user terminal 1. The reservation management device 2 generates large-capacity reservation information (reservation information) including information that can identify the reserved time period and the managed object M.

[Issue a two-dimensional code]
The reservation management device 2 transmits to the user terminal 1 online two-dimensional code display information capable of displaying a two-dimensional code B for online control, which includes identification information corresponding to the large-capacity reservation information and encrypted small-capacity information obtained by encrypting small-capacity information not including the reservation time slot with a private key 222. The user terminal 1 receives the online two-dimensional code display information.

[Sending large volume reservation information]
The reservation management device 2 collectively transmits one or more large-volume reservation information items that can identify a reservation time slot, identification information, and a management target M at intervals of at least a specified time. The control device 6 receives the one or more large-volume reservation information items that have been collectively transmitted.

[Reading two-dimensional codes]
The reserving person uses the online two-dimensional code display information to display the two-dimensional code B for online control on the user terminal 1, and has the displayed two-dimensional code B for online control read by the reading device 5 of the lock 3 installed in the vicinity of the managed object M. The reading device 5, which is equipped with a motion identification sensor, detects the movement of the reserving person to read the two-dimensional code B, and reads the two-dimensional code B.

[Determine whether corresponding large-volume reservation information has been received]
The control device 6 obtains the decrypted small-capacity information by decrypting the encrypted small-capacity information with the public key 622. The control device 6 determines whether or not it has received corresponding large-capacity reservation information that corresponds to the decrypted small-capacity information.

[Receive specific large-volume reservation information]
If the corresponding large-volume reservation information has not been received, the control device 6 instructs the reservation management device 2 to transmit specific large-volume reservation information equivalent to the corresponding large-volume reservation information, and receives the specific large-volume reservation information.

[Determine whether it is within the reserved time slot]
The control device 6 determines whether the current time falls within the reservation time slot included in the corresponding large-volume reservation information.

[Controlling the lock device 4 to the unlocked state]
If the current time is included in the reserved time period, the control device 6 controls the lock device 4, which can control entry and exit to the managed object M, to an unlocked state. This allows the person who makes the reservation to use the managed object M during the reserved time period.

[Keeping the locking device 4 in the locked state]
If the current time is not included in the reserved time period, the control device 6 keeps the lock device 4, which can control entry and exit to the managed object M, in a locked state. This prevents the reserving user from using the managed object M outside the reserved time period.

<Ending the lending of managed object M managed by lock 3 that performs online control>
The end of lending of the managed object M managed by the lock 3 that performs online control and communicates with the reservation management device 2 will be explained.

[Reading two-dimensional codes]
The reserving person uses the online two-dimensional code display information to display the two-dimensional code B for online control on the user terminal 1, and has the displayed two-dimensional code B for online control read by a usage termination reading device related to the end of use, among the reading devices 5 of the locks 3 installed in the vicinity of the managed object M. The usage termination reading device equipped with a motion identification sensor detects the movement of the reserving person to read the two-dimensional code B, and reads the two-dimensional code B.

[End of reservation]
The control device 6 associates information indicating the end of use with the large-capacity reservation information corresponding to the read two-dimensional code B. The control device 6 transmits usage end information regarding the end of the reservation corresponding to the read two-dimensional code B to the reservation management device 2. The reservation management device 2 receives the usage end information and associates the information indicating the end of use with the large-capacity reservation information regarding the reservation. This makes it impossible to unlock the lock 3 using the two-dimensional code B even at a time that falls within the reserved time slot. The reservation management device 2 also terminates transmission of the large-capacity reservation information regarding the reservation.

<Offline Management of Multiple Managed Objects M>
14 is a diagram showing an example of offline management of a plurality of mutually related management targets M. Below, offline management of a plurality of management targets M will be described with reference to FIG.

In the example shown in FIG. 14, entry from near the ground floor entrance to the elevator hall, the first managed object Ma, is managed by the first control device 6a and the first locking device 4aa. Also in the example shown in FIG. 14, entry from the elevator hall on the second floor to the second managed object Mb or the third managed object Mc is managed by the second control device 6b and the second locking device 4ba or the third locking device 4bb. Additionally, in the example shown in FIG. 14, entry from the elevator hall on the third floor to the fourth managed object Md or the fifth managed object Me is managed by the third control device 6c and the fourth locking device 4ca or the fifth locking device 4cb.

When there are multiple managed objects M like this, there may be a desire to use a single two-dimensional code B that can unlock all lock devices 4 located from near the ground floor entrance to any of the reserved managed objects M from the second managed object Mb to the fifth managed object Me.

[Request for issuance of a two-dimensional code]
The user transmits a request signal via the user terminal 1 to the reservation management device 2 requesting one two-dimensional code B capable of unlocking all the lock devices 4 up to the second management target Mb.

[Issuing a two-dimensional code based on hierarchical information]
The reservation management device 2 issues a two-dimensional code B based on hierarchical information stored in the management object table 223. The management object table 223 stores hierarchical information indicating that the first locking device 4aa and the second locking device 4ba are associated with each other ( FIG. 3 ). The reservation management device 2 generates reservation information capable of unlocking the first locking device 4aa and the second locking device 4ba based on the hierarchical information. Then, the reservation management device 2 issues a two-dimensional code B including reservation information capable of unlocking the first locking device 4aa and the second locking device 4ba based on the generated reservation information.

[Enters elevator hall]
The user goes to the building where the reserved second management target Mb is located during the reserved time slot. The user has the issued two-dimensional code read by the first control device 6a installed in the building. The first control device 6a identifies that the first locking device 4aa, which is the management target locking device, includes a first locking device 4aa (predetermined locking device) that is one of the reserved locking devices (first locking device 4aa, second locking device 4ba) included in the two-dimensional code. The first control device 6a then commands the first locking device 4aa to unlock. The user enters the first management target Ma, which is the elevator hall.

[Entering the second managed area]
The user takes the elevator to the second floor and has the second control device 6b read the issued two-dimensional code. The second control device 6b identifies the second locking device 4ba, which is the locking device to be managed, as one of the reserved locking devices (first locking device 4aa, second locking device 4ba) included in the two-dimensional code (predetermined locking device). The second control device 6b then commands the second locking device 4ba to unlock. The user enters the reserved second management target Mb.

The present invention will be specifically explained below with reference to examples, but the present invention is not limited to these examples.

<Construction of control system S according to examples and comparative examples>
[Example 1] Control system S for lock 3 that operates offline
First, a reservation management device 2 according to an embodiment of the present invention was prepared. Then, a reading device 5 and a control device 6 were retrofitted to an electronic locking device 4 capable of managing the use of the managed object M and electrically connecting to the control device 6 via BLE to configure a lock 3 according to the embodiment. The lock 3 was specified to operate offline without communicating with the outside world, and to enter a sleep state in which no control processing is performed between 10:00 PM and 6:00 AM, thereby configuring a control system S according to Example 1.

The reading device 5 and control device 6 used in Example 1 had an operating voltage of 3.3 V. The control device power supply unit 65 used in this example was capable of converting power supplied by a battery with a nominal voltage of 5 V and a capacity of 2200 mA with a conversion efficiency of 0.9 to an output voltage of 3.3 V and supplying it to the reading device 5 and control device 6.

[Example 2] Control system S for lock 3 that operates online
The control system S of Example 2 was configured in the same manner as Example 1, except that the control device communication unit 63 specified that the lock 3, which is connectable to a Wi-Fi network, should perform online operation to communicate with the outside world via the Wi-Fi network.

[Comparative Example] Control system for lock 3 that receives large amounts of reservation information one by one As a comparison example, a reservation management device 2 similar to that of Example 2 was prepared, and a control system S for the comparative example was constructed by instructing a lock 3 composed of the same lock device 4, reading device 5, control device 6, and control device power supply unit 65 as in Example 2 to receive large amounts of reservation information one by one.

<Exam Contents>
[Current consumption]
For each of Example 1, Example 2, and the comparative example, a commercially available ammeter was used to measure the standby state current consumption, which is the total current consumption by the reader 5 and the control device 6 in a standby state in which neither reading of the two-dimensional code B, receiving of large-volume reservation information, nor control of the lock device 4 is performed; the reading current consumption by the reader 5 in a reading state in which the two-dimensional code is read; the receiving current consumption by the control device communication unit 63 in a receiving state in which large-volume reservation information is received; and the control current consumption by the control device communication unit 63 in a control state in which the lock device 4 is controlled. The results are shown in Table 1.

[Operation test]
A test was conducted in which the control systems S of Example 1, Example 2, and Comparative Example were operated for one day from 6:00 to 6:00 the next day. In this test, the control systems S of Example 1 and Example 2 were in a sleep state from 10:00 PM to 6:00 AM based on a specification regarding the sleep state. In this test, the control system S of Example 2 transmitted large-volume reservation information at 6:00 AM, 12:00 PM, and 6:00 PM based on a specification of the timing for transmitting large-volume reservation information.

[Average operating time]
For each reading state that occurred during the operation test, the reading time during which the reading state continued was measured, and the average reading time was calculated as the average.In addition, for each receiving state that occurred during the operation test, the receiving time during which the receiving state continued was measured, and the average receiving time was calculated as the average.In addition, for each control state that occurred during the operation test, the control time during which the control state continued was measured, and the average control time was calculated as the average.The results are shown in Table 2.

[Power consumption]
During the one-day operation test, the power consumption of the lock 3 in the reading device 5 and the control device 6 was measured for each of Example 1, Example 2, and the comparative example. The results are shown in Table 3.

<Discussion and consideration of test results>
The current consumption in the standby state, reading state, and control state was the same in Example 1, Example 2, and Comparative Example. The average reading time and average control time were also the same in Example 1, Example 2, and Comparative Example.

Example 1, which does not communicate with the outside world and is not in a receiving state, consumed less power than Example 2 and the comparative example. Although Example 2, which does communicate with the outside world, and the comparative example had the same current consumption, average reading time, and average control time in the standby, reading, receiving, and control states, there was a large difference in power consumption over the one day of testing. The difference in power consumption between Example 2 and the comparative example is thought to be because Example 2 did not enter a receiving state, which occurred three times during the operational test, while the comparative example was in a receiving state at all times. It is also thought that Examples 1 and 2 reduced power consumption by entering a sleep state during designated time periods.

As described above, the control device power supply unit 65 used in Example 1, Example 2, and the comparative example is a power supply unit that can convert the power supplied by a battery with a nominal voltage of 5 V and a capacity of 2200 mA into an output voltage of 3.3 V with a conversion efficiency of 0.9 and supply it to the reading device 5 and control device 6.

Therefore, it is believed that Lock 3 of Example 1 can maintain the same control as during the test for more than 324 days (approximately 10 months) without changing the battery. Furthermore, Lock 3 of Example 2 can maintain the same control as during the test for more than 275 days (approximately 9 months) without changing the battery. On the other hand, Lock 3 of the Comparative Example can maintain the same control as during the test for only about 9-10 days without changing the battery.

In other words, while the locks 3 of Examples 1 and 2 are expected to require battery replacement approximately 1-2 times per year, the lock 3 of the comparative example is expected to require battery replacement approximately 36-41 times per year.

Therefore, both the lock 3 of Example 1, which performs offline control, and the lock 3 of Example 2, which performs online control, can reduce power consumption compared to the comparative example. Therefore, it was confirmed that the control systems S of Examples 1 and 2 can significantly reduce the frequency of maintenance required for the power supply unit.

It should be noted that within the spirit of the present invention, a person skilled in the art may conceive of various modifications and alterations, and it is understood that these modifications and alterations also fall within the scope of the present invention. For example, even if a person skilled in the art appropriately adds, deletes, or modifies the design of the above-described embodiment, or adds, omits, or modifies processes, these modifications will also fall within the scope of the present invention, as long as they maintain the essence of the present invention.

S Control system 1 User terminal 2 Reservation management device 21 Management device control unit 211 Large-capacity reservation information generation unit 212 Large-capacity reservation information transmission unit 213 Two-dimensional code issuing unit 214 Usage end information reception unit 215 Information management unit 22 Management device storage unit 221 Reservation table 222 Private key 223 Management target table 23 Management device communication unit 3 Lock 4 Lock device 5 Reading device 6 Control device 61 Control device control unit 611 Operation discrimination unit 612 Large-capacity reservation information reception unit 613 Reading unit 614 Decryption unit 615 Discrimination unit 616 Identification unit 617 Unlock command unit 618 Time setting unit 619 Usage end information transmission unit 62 Control device storage unit 621 Large-capacity reservation information table 622 Public key 63 Control device communication unit 64 Timer unit 65 Control device power supply unit 66 Operation designation unit 67 Device identification mark B Two-dimensional code M Management target N Network EV Elevator

Claims (4)

A timer unit capable of measuring the current time;
a reading unit capable of reading a two-dimensional code including reservation information that allows one or more reserved lock devices to be unlocked during a reserved time period;
a determination unit capable of determining, without communicating with an external device, whether the current time measured by the timer unit falls within the reservation time slot corresponding to the reservation information included in the two-dimensional code;
an identification unit that can identify one or more lock devices to be managed, the unlocking of which can be commanded, as a predetermined lock device that is one or more of the reserved lock devices identified by the reservation information;
an unlock command unit that can command the predetermined lock device to unlock when it is determined that the current time falls within the reserved time slot and the one or more lock devices to be managed include the predetermined lock device;
Equipped with
A control device for a locking device. a decoding unit capable of decrypting the reservation information from the encrypted reservation information;
the reading unit is capable of reading a two-dimensional code including the encrypted reservation information,
The encrypted reservation information is encrypted with a predetermined secret key,
the decryption unit is capable of decrypting the reservation information using a predetermined public key corresponding to the predetermined private key.
The control device according to claim 1 . The control device described in claim 1 further includes a control device power supply unit capable of supplying the control device with less power than can be supplied by a commercial power source. a first locking device;
a second locking device different from the first locking device;
a third locking device different from both the first locking device and the second locking device;
2. The control device according to claim 1, wherein the one or more managed locking devices include the first locking device; and
2. The control device of claim 1, wherein the one or more managed locking devices include the second locking device; and
2. The control device according to claim 1, wherein the one or more managed locking devices include the third locking device; and
a reservation management device capable of managing the reservation time slot;
The invention comprises:
The reservation management device
an information management unit capable of managing hierarchical information indicating that the second lock device and the third lock device are lock devices related to the first lock device;
a two-dimensional code issuing unit that issues to the user terminal a two-dimensional code that enables one or more reserved lock devices to be unlocked during a reserved time period based on the hierarchical information in response to a request signal from the user terminal;
Equipped with
The two-dimensional code issuing unit
a second two-dimensional code including second reservation information for unlocking the first locking device and the second locking device during the reserved time period can be issued in response to a request signal requesting the issuance of a two-dimensional code for the second locking device;
a third two-dimensional code including third reservation information for unlocking the first locking device and the third locking device during the reserved time period can be issued in response to a request signal requesting the issuance of a two-dimensional code related to the third locking device;
Locking device control system.