JP2009271936A - Communication terminal device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To arrange security even when an electronic key device is lost, and to use a target device. <P>SOLUTION: Key information necessary for authentication processing for transiting the target device 3 to a usable state is acquired from an electronic key management server device 2, and the acquired key information is transmitted to the target device 3 to unlock a door, or the like. Then, even when an electronic key device 100 that is usually used is lost, a communication terminal device 1 (for example, a cellular phone) is used as substitution, and the loss can be coped with by downloading the key information. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a communication terminal device, and more particularly to a communication terminal device that transmits key information for making a target device transition to an available state.

In the ubiquitous information society of “anytime, anywhere, with anyone”, it is necessary to create a space where information can be exchanged and shared by operating terminal devices with peace of mind.
In Non-Patent Document 1, the concept of a safe space in which a target device (that is, a target device) within a certain distance from an individual who has an electronic key (hereinafter referred to as an electronic key) can operate is referred to as Secure Private Cosm , Abbreviated as SPC). In the technique described in Non-Patent Document 1, authentication is always performed between a pair of objects using two-way wireless communication, and function control based on the distance between the pair of objects is enabled. In this case, authentication processing is performed by transmitting key information from the electronic key at a predetermined cycle (for example, a cycle of about 1 second) and receiving a response to the key information.

  Only when a pair of a wearable electronic key and a portable terminal is within a certain distance, the portable terminal can be activated, that is, transitioned to an available state. Then, there is a space for using the target device around the person by the wearable electronic key, and when the person moves, the SPC space moves together. In order to realize this SPC, it is necessary to store the key information of the electronic key and the identifier of the target device in advance in association with each other.

"Introduction to SPC technology", [online], [Search January 25, 2006], Internet <URL: http://www.spc-c.com/about.html>

In the conventional key system described above, the electronic key and the target device are bound one-on-one. For this reason, when the electronic key is lost due to loss or theft, the person who lost the electronic key cannot use the target device until the registration content change (new key registration) on the target device side is performed. is there. In that case, the electronic key lost due to loss or theft cannot be invalidated until the registration details are changed (new key registration). There may be security issues.
Also, the master key of the electronic key is hardware, and its spare (that is, child key) can be created in advance, but the spare (that is, grandchild key) cannot be further created. Since the master key is important, it is usually stored in the house. Therefore, it is a child key that is usually carried and used. If this child key is lost, it cannot be copied on the go.
The present invention has been made to solve the above-described problems of the prior art, and its purpose is to provide a communication terminal that allows security to be used and the target device to be used even when the electronic key device is lost. Is to provide a device.

The communication terminal device according to claim 1 of the present invention provides key information acquisition means for acquiring key information necessary for authentication processing for transitioning the target device to a usable state from the external device after authentication processing with the external device. And storage means for storing the key information obtained by the key information obtaining means, and transmitting the key information obtained by the key information obtaining means to the target device in order to shift the target device to an available state. Including key information transmitting means for
The key information is appended with the number-of-transmissions limit information related to the information, and the key information transmission means transmits the key information to the target device only for the number of times corresponding to the number-of-transmissions limit information. And By using the terminal device configured in this manner, key information can be acquired even when the electronic key is lost, and the target device can be used. Therefore, if the electronic key device that is always used is lost, it can be dealt with, for example, by using the mobile phone as a substitute and downloading the key information. Then, by using the terminal device configured as described above, the use of the target device can be permitted according to the preset number of times.

According to claim 2 of the present invention, the communication terminal device according to claim 1 acquires key information necessary for authentication processing for transitioning the target device to a usable state from the external device after authentication processing with the external device. Key information acquisition means, storage means for storing the key information acquired by the key information acquisition means, and key information acquired by the key information acquisition means for transitioning the target device to an available state. Key information transmitting means for transmitting to the target device,
Expiration date information related to the information is added to the key information, and the key information transmitting means transmits the key information to the target device only by a time corresponding to the expiration date information. To do. By using the terminal device configured in this manner, key information can be acquired even when the electronic key is lost, and the target device can be used. Therefore, if the electronic key device that is always used is lost, it can be dealt with by, for example, using a mobile phone as a substitute and downloading the key information. Then, by using the terminal device configured as described above, the use of the target device can be permitted until a preset time limit.

  As described above, the present invention acquires key information from an external device and transmits the key information to the target device in order to transition the target device to an available state, even when the electronic key is lost. Key information can be acquired, and there is an effect that the target device can be used until a preset number of times or a preset time limit.

It is a figure which shows the structural example of the electronic key system using the communication terminal device by this invention. In an electronic key system, it is a sequence diagram which shows the operation example in the case of downloading key information from an electronic key management server apparatus to a communication terminal device, and changing a target apparatus to an available state using it. In an electronic key system, it is a sequence figure showing operation in the case where key information is transmitted from an electronic key management server device to a communication terminal device, and is further transmitted to a target device, and a target device is changed to an available state. . FIG. 4 is a block diagram illustrating a configuration example for realizing the operation of FIG. 3. It is a figure which shows the example of the content of each memory in FIG. In an electronic key system, a sequence showing the operation when the key information is downloaded from the electronic key management server device to the communication terminal device, and the number of times key information is sent when the target device is shifted to the usable state using the key information. FIG. FIG. 7 is a block diagram illustrating a configuration example for realizing the operation of FIG. 6. It is a figure which shows the example of the content of each memory in FIG. In an electronic key system, a sequence showing an operation when a key information is downloaded from an electronic key management server device to a communication terminal device, and a time limit for using key information is set when the target device is shifted to an available state using the key information. FIG. FIG. 10 is a block diagram illustrating a configuration example for realizing the operation of FIG. 9. It is a figure which shows the example of the content of each memory in FIG. In an electronic key system, it is a sequence diagram which shows operation | movement in the case of sending out key information from an electronic key management server apparatus, and making a target apparatus change to an available state. FIG. 13 is a block diagram illustrating a configuration example for realizing the operation of FIG. 12.

Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the drawings referred to in the following description, the same parts as those in the other drawings are denoted by the same reference numerals.
Hereinafter, a configuration example of an electronic key system using a communication terminal device according to the present invention will be described.

(Overview of system configuration)
FIG. 1 is a diagram illustrating a configuration example of an electronic key system. The electronic key system shown in FIG. 1 manages an electronic key device 100 that transmits key information, a target device 3 that transitions to a usable state by an authentication process using the transmitted key information, and key information. The electronic key management server device 2 and the communication terminal device 1 used as a new electronic key are configured.

  In order to realize the electronic key system, it is essential that the electronic key device 100 and the target device 3 are associated with each other in advance (hereinafter referred to as pairing) and registered in the electronic key management server device 2. Specifically, the key information of the electronic key device and the identification information of the target device need to be associated with each other in advance and registered in the electronic key management server device 2. Therefore, even if an electronic key device that is not registered for pairing is used, the target device does not transition to an available state.

  Therefore, when the electronic key device 100 registered for pairing is lost, such as lost, the target device cannot be made available unless pairing is performed again. Therefore, in this system, the key information is downloaded to the third device, and the target device can be transitioned to an available state by using it. That is, the pairing registration content is updated.

The procedure in this case is as follows, for example.
(1) Use the communication terminal device as a third device, download the electronic key from the electronic key management server device using this device, and make the newly distributed key information valid for the target device when saving it Process to make it. The notification for enabling the third device is transmitted using a dedicated communication line (SS1) or transmitted using a mobile phone line (SS2).

(2) The key information may be downloaded directly from the electronic key management server device 2 to the communication terminal device 1 using a mobile phone line (SS3) or from the electronic key management server device 2 to the target device 3 May be performed on the communication terminal device 1 via (SS4, SS4 ′). When downloading, two-way communication may be used, or one-way communication may be used.

(3) When the communication terminal device 1 acquires key information from the electronic key management server device 2, the communication terminal device accesses the electronic key management server device with a browser, and authenticates by entering an ID, password, etc. After downloading, the key information is downloaded. A method in which a mail address is registered in the electronic key management server device in advance, and a mail with key information attached is transmitted from the electronic key management server device to the communication terminal device when a request is made from the communication terminal device. May be adopted.

(4) In addition, for the key information downloaded and saved, temporary use (time limit) or use frequency limit may be set. Furthermore, the electronic key is not stored in the terminal, and the electronic key interface is used, and only when the communication line is connected, the server and the target communicate with each other directly via the line, so that temporary electronic It may be used as a key.

(5) By the way, the downloaded key information may be written in an alternative device 4 (that is, a fourth device) different from the communication terminal device. In this case, the alternative device 4 is used as a new electronic key device. A medium equivalent to the lost electronic key device 100 is obtained (for example, purchased at a convenience store), and writing is performed on this medium. The writing to the alternative device 4 may be performed via a communication terminal device that is a third device (SS5) or may be performed via the target device 3 (SS5 ′).
(6) After the key information is downloaded, the registration of the electronic key device (that is, the lost device) that has been previously registered for pairing is invalidated. By invalidating the previous pairing registration, security can be ensured even if the electronic key device is in the hands of others.

(7) The relationship between the acquisition of key information and the connection state of the communication line includes the following cases.
(A) When key information is transmitted from the server device to the mobile terminal device, and the key information is transmitted to the target device via the mobile terminal device, the server device and the mobile terminal device are communicating with each other. In the middle, authentication processing is performed with the target device, and the target device can be made available. When communication is interrupted, the target device becomes unavailable.
(B) The key information is downloaded from the server device to the portable terminal device and stored, and the target device and the authentication process are performed using the stored key information, so that the target device can be made available. When authentication processing is no longer performed away from the target device, the stored key information is deleted.

(C) Communication is performed from the mobile terminal device to the server device, and key information is transmitted from the server device to the mobile terminal device automatically or manually during the communication, and the key information passes through the mobile terminal device. Then, the authentication process is performed with the target device by being transmitted to the target device, and the target device can be made available. When communication is interrupted, the target device becomes unavailable.
(D) Sending an e-mail including the manufacturing number of the mobile terminal device to the server device, receiving a reply mail from the server device, authenticating, and using the target device using the key information transmitted by the reply mail Make it possible.

(Use scene)
By using the above system, it becomes possible to update the registered contents to the target device remotely, and it is possible to improve convenience and security. The following usage scenes can be considered for this system.
(1) Since the third device can be used as a new electronic key device simply by downloading key information, such as when the electronic key device is lost, it is highly convenient when unlocking the door. Furthermore, if the process of invalidating the lost electronic key is performed, high security can be ensured even if it is in the hands of a third party.

(2) Even if the security guard dispatched from the security company does not have the key, it can function as an electronic key device simply by downloading the key information to the communication terminal device as necessary, so it can be smoothly installed in the building. Can enter.
For example, when the security guard needs to enter a building in an area that is not his / her area, even if he / she does not have an electronic key device to enter the building, the electronic key device can be downloaded by downloading it on the spot. A product having a function can be obtained. For this reason, an electronic key can be obtained without returning to a storage location (for example, a security company) of the electronic key, and the door can be unlocked to enter the building smoothly.

(Operation example)
FIG. 2 is a sequence diagram illustrating an operation example when key information is downloaded from the electronic key management server device to the communication terminal device and the target device is shifted to an available state using the key information in the electronic key system. The electronic key system shown in FIG. 1 includes a communication terminal device 1, an electronic key management server device 2, and a target device 3.

  In the figure, when the electronic key device 100 is lost due to loss or theft, the communication terminal device 1 is used instead of the electronic key device. In this case, a user authentication request is sent from the communication terminal device 1 to the electronic key management server device 2 (step S201). When this user authentication request is transmitted, a unique identifier such as a device manufacturing number of the communication terminal device 1 or a UIM (User Identify Module) manufacturing number is simultaneously transmitted. In the electronic key management server apparatus 2 that has received this, a user confirmation process is performed (step S202). By this processing, the user authentication is established between the communication terminal device 1 and the electronic key management server device 2 (step S203).

  Thereafter, when an electronic key transmission request is transmitted from the communication terminal device 1 to the electronic key management server device 2 (step S204), key information is transmitted from the electronic key management server device 2 to the communication terminal device 1 (step S205). . That is, key information for causing the target device 3 to transition to an available state is downloaded to the communication terminal device 1. This key information is stored in the memory in the communication terminal device 1 (step S206).

Next, when the communication terminal device 1 approaches the target device 3, key information is transmitted from the communication terminal device 1 to the target device 3 to make an authentication request (step S207). The target device 3 that has received the key information confirms whether the key information is registered in advance and is valid (step S208). If the key information is registered and valid, authentication is established (step S209). As a result, the target device 3 transitions to an available state such as the operation being turned on (step S210). Note that the processing from step S207 to step S209 is periodically repeated at a predetermined cycle (for example, a cycle of about 1 second).
Incidentally, a registration information update request may be transmitted from the electronic key management server device 2 to the target device 3 (step S211), and the registration content may be changed (step S212). As a result, the lost electronic key device 100 can be invalidated.

Hereinafter, other operation examples and configurations of respective units for realizing the operations will be described.
(When key information is not saved)
FIG. 3 shows an operation in the electronic key system when key information is transmitted from the electronic key management server apparatus to the communication terminal apparatus and further transmitted to the target apparatus, thereby causing the target apparatus to transition to an available state. It is a sequence diagram.

  In the figure, the electronic key management server device 2 manages a unique identifier such as a manufacturing number of a UIM of a mobile phone in association with key information (step S301). When the electronic key device 100 is lost due to loss or theft, the communication terminal device 1 is used instead of the electronic key device. In this case, a user authentication request is sent from the communication terminal device 1 to the electronic key management server device 2 (step S302). When this user authentication request is transmitted, a unique identifier such as a device manufacturing number of the communication terminal device 1 or a UIM manufacturing number is simultaneously transmitted. Note that authentication using an ID or password may be performed simultaneously with the transmission of the unique identifier.

In the electronic key management server apparatus 2 that has received the unique identifier, a user confirmation process is performed (step S303). By this processing, the user authentication is established between the communication terminal device 1 and the electronic key management server device 2 (step S304).
In this state, an electronic key transmission request is transmitted from the communication terminal device 1 to the electronic key management server device 2 (step S305). In response to this request, when an authentication request for key information is sent from the electronic key management server device 2 (step S306), it is sent to the target device 3 via the communication terminal device 1 (step S306 '). This key information authentication request is transmitted / received between the electronic key management server apparatus 2 and the communication terminal apparatus 1 by the well-known HTTP (Hyper Text Transfer Protocol) or the like, and between the communication terminal apparatus 1 and the target apparatus 3 is an SPC. Sent and received.

  The target device 3 that has received the key information confirms whether the key information is registered in advance and is valid (step S307). If the key information is registered and valid, authentication is established (steps S308 and S308 ′). As a result, the target device 3 transitions to an available state such as the operation being turned on (step S309). Note that the processing from step S306 to step S308 ′ is periodically repeated at a predetermined cycle (for example, a cycle of about 1 second). In a state where these processes are periodically repeated, when the user is away from the target device 3 and authentication cannot be established, the communication terminal device 1 stops the authentication request by sending the key information and operates as an electronic key. Stop.

  As described above, the communication terminal device 1 as the third device receives a command from the server and authenticates the key information with the target device 3. And in this operation example, electronic key information is not preserve | saved in the communication terminal device 1 (a copy key is not made). When the line connected between the electronic key management server device 2 and the communication terminal device 1 is disconnected, the communication terminal device 1 stops the authentication request by sending the key information and stops the operation as the electronic key. .

FIG. 4 is a block diagram showing a configuration example for realizing the operation of FIG. In the figure, the electronic key system of this example includes a target device 3 that transitions to a usable state based on key information, a communication terminal device 1 that transmits key information for transitioning the target device to a usable state, And an electronic key management server device 2 for managing key information and the like.
The communication terminal device 1 includes a communication function 11 for realizing communication with other devices, a conversion function 12 for performing signal conversion, and an electronic key transmission function 13 for transmitting key information to the target device. A line monitoring function 14 for monitoring whether a communication line is connected or disconnected, an operation unit 15 for inputting various information, a browser 16, a display 17, and a UIM 18 for identifying a user. And a CPU (Central Processing Unit) 19 for controlling each part of the apparatus.

  The electronic key management server device 2 includes a communication function 23 for realizing communication with other devices, a memory 24 for storing a list of key information (electronic key information) and information attached thereto, It includes a UIM serial number verification function 25 for verifying the UIM serial number and a CPU 26 that controls each part of the apparatus. In the memory 24, for example, as shown in FIG. 5A, electronic key information, target information for identifying a target device, and a UIM number are stored together.

  The target device 3 has an electronic key receiving function 31 that receives key information, a memory 32 that stores a permitted electronic key information list, which is key information that can change the device itself to a usable state, and key information The electronic key collation function 33 that performs collation processing and the CPU 34 that controls each part of the apparatus are included. For example, as shown in FIG. 5B, the memory 32 stores a permission electronic key that is key information that can change the target device to a usable state.

In this example, the UIM serial number is exchanged between the communication terminal device 1 and the electronic key management server device 2 by HTTP or the like. Further, exchange of key information between the electronic key transmission function 13 and the electronic key reception function 31 is performed by SPC or the like.
In this example, authentication is performed between the communication terminal device 1 and the target device 3 only when the line is connected, and the target device 3 can be changed to an available state.

(When limiting the number of times key information is sent)
FIG. 6 shows a case where the key information is downloaded from the electronic key management server device to the communication terminal device in the electronic key system, and the number of times the key information is sent when the target device is changed to an available state using the key information. It is a sequence diagram which shows operation | movement.
In the figure, the electronic key management server device 2 manages a unique identifier such as a manufacturing number of a UIM of a mobile phone in association with key information (step S501). When the electronic key device 100 is lost due to loss or theft, the communication terminal device 1 is used instead of the electronic key device. In this case, a user authentication request is sent from the communication terminal device 1 to the electronic key management server device 2 (step S502). When this user authentication request is transmitted, a unique identifier such as a device manufacturing number of the communication terminal device 1 or a UIM manufacturing number is simultaneously transmitted. Note that authentication using an ID or password may be performed simultaneously with the transmission of the unique identifier.

In the electronic key management server apparatus 2 that has received the unique identifier, a user confirmation process is performed (step S503). By this processing, the user authentication is established between the communication terminal device 1 and the electronic key management server device 2 (step S504).
In this state, an electronic key transmission request is transmitted from the communication terminal device 1 to the electronic key management server device 2 (step S505), and the communication terminal device 1 acquires key information from the electronic key management server device 2 (step S506). This key information is transmitted and received by well-known HTTP or the like. Then, the communication terminal device 1 sends an authentication request to the target device 3 (step S507). This authentication request is transmitted and received by the SPC.

  Here, the key information authentication request includes the number of times the key information can be transmitted, that is, the remaining frequency information, and the remaining frequency information is confirmed in the target device 3 (step S508). As a result of the confirmation, if the remaining frequency information is not 0 (zero), the target device 3 confirms whether the key information is registered in advance and is valid (step S509). If the key information is registered and valid, authentication is established (step S510). As a result, the target device 3 transitions to an available state such as the operation being turned on (step S511). Note that the processing from step S507 to step S510 is periodically repeated at a predetermined cycle (for example, a cycle of about 1 second).

  By the way, in the communication terminal device 1, when the result of authentication is an error, a process of reducing the remaining frequency by 1 is performed (step S512). For this reason, when the communication terminal device 1 moves and authentication cannot be established (when the target device 3 is removed from the SPC area), the remaining frequency is reduced by one each time. For this reason, if the remaining frequency is 0 or less in the above step S508, an authentication error occurs, and the communication terminal device 1 stops the authentication request by sending the key information and stops the operation as the electronic key.

When the communication terminal device 1 moves away from the target device 3 and authentication cannot be established, the communication terminal device 1 stops the authentication request by sending the key information and stops the operation as the electronic key. For this reason, the operation of the target device 3 is turned off.
As described above, the temporary key that can be used temporarily, that is, that can be used only a limited number of times by including the usable number information in the electronic key information that is downloaded from the electronic key management server device 2 and stored. Can be realized.

FIG. 7 is a block diagram showing a configuration example for realizing the operation of FIG. In the figure, the electronic key system of this example includes a target device 3 that transitions to a usable state based on key information, a communication terminal device 1 that transmits key information for transitioning the target device to a usable state, And an electronic key management server device 2 for managing key information and the like.
The communication terminal device 1 includes a communication function 11 for realizing communication with other devices, an electronic key transmission function 13 for transmitting key information to the target device, and an operation unit for inputting various information. 15, a memory 20 for storing downloaded key information, a UIM 18 for identifying a user, and a CPU 19 for controlling each part of the apparatus. For example, as shown in FIG. 8B, the memory 20 stores electronic key information, target information for identifying the target device, and usable number information indicating the number of usable electronic key devices. Yes.

  The electronic key management server device 2 includes a communication function 23 for realizing communication with other devices, a memory 24 that stores a list of key information (electronic key information) and information attached thereto, It includes a UIM serial number verification function 25 for verifying the UIM serial number and a CPU 26 that controls each part of the apparatus. For example, as shown in FIG. 8A, the memory 24 stores electronic key information, target information for identifying the target device, and a UIM number in a bundled manner.

  The target device 3 has an electronic key receiving function 31 that receives key information, a memory 32 that stores a permitted electronic key information list, which is key information that can change the device itself to a usable state, and key information The electronic key collation function 33 that performs collation processing, the frequency management function 35 for managing the number of usable times, and the CPU 34 that controls each part of the apparatus are configured. For example, as shown in FIG. 8C, the memory 32 stores a permission electronic key that is key information that can change the target device to a usable state.

In this example, the UIM serial number is exchanged between the communication terminal device 1 and the electronic key management server device 2 by HTTP or the like. Further, exchange of key information between the electronic key transmission function 13 and the electronic key reception function 31 is performed by SPC or the like.
As described above, by including the usable number information in the information downloaded and stored from the electronic key management server device 2, a temporary key that can be used temporarily, that is, a limited number of times can be realized. can do.

(When setting an expiration date for key information)
FIG. 9 shows a case where, in the electronic key system, key information is downloaded from the electronic key management server device to the communication terminal device, and the use time limit of the key information is set when the target device is changed to an available state using the key information It is a sequence diagram which shows operation | movement.
In the figure, the electronic key management server apparatus 2 manages a unique identifier such as a manufacturing number of a UIM of a mobile phone in association with key information (step S701). When the electronic key device 100 is lost due to loss or theft, the communication terminal device 1 is used instead of the electronic key device. In this case, a user authentication request is sent from the communication terminal device 1 to the electronic key management server device 2 (step S702). When this user authentication request is transmitted, a unique identifier such as a device manufacturing number of the communication terminal device 1 or a UIM manufacturing number is simultaneously transmitted. Note that authentication using an ID or password may be performed simultaneously with the transmission of the unique identifier.

In the electronic key management server apparatus 2 that has received the unique identifier, a user confirmation process is performed (step S703). By this processing, the user authentication establishment state is established between the communication terminal device 1 and the electronic key management server device 2 (step S704).
In this state, an electronic key transmission request is transmitted from the communication terminal device 1 to the electronic key management server device 2 (step S705), and the communication terminal device 1 acquires key information from the electronic key management server device 2 (step S706). This key information is transmitted and received by well-known HTTP or the like. Then, the communication terminal device 1 sends an authentication request to the target device 3 (step S707). This authentication request is transmitted and received by the SPC.

Here, the key information authentication request includes the expiration date information of the key information, and the time limit based on the expiration date information is confirmed in the target device 3 (step S708). As a result of this confirmation, if the usable period has not passed, the target apparatus 3 confirms whether the key information is registered in advance and is valid (step S709). If the key information is registered and valid, authentication is established (step S710). As a result, the target device 3 transitions to an available state such as the operation being turned on (step S711). In the target device 3, the processing from step S707 to step S710 is periodically repeated at a predetermined cycle (for example, a cycle of about 1 second). As a result of periodically performing these processes, the process of step S708 is continuously performed to check whether the current date and time have passed the usable period. When the usable period has passed, an authentication error occurs and the operation of the target device 3 is turned off.
As described above, by including the expiration date information in the electronic key information downloaded and stored from the electronic key management server apparatus 2, the temporary key that can be used temporarily, that is, can be used only for a limited time. Can be realized.

FIG. 10 is a block diagram showing a configuration example for realizing the operation of FIG. In the figure, the electronic key system of this example includes a target device 3 that transitions to a usable state based on key information, a communication terminal device 1 that transmits key information for transitioning the target device to a usable state, And an electronic key management server device 2 for managing key information and the like.
The communication terminal device 1 includes a communication function 11 for realizing communication with other devices, an electronic key transmission function 13 for transmitting key information to the target device, and an operation unit for inputting various information. 15, a memory 20 for storing downloaded key information, a UIM 18 for identifying a user, and a CPU 19 for controlling each part of the apparatus. In the memory 20, for example, as shown in FIG. 11B, electronic key information, target information for identifying the target device, and usable time limit information indicating the usable time limit (date and time) of the electronic key device. Is stored. In this example, since the usable time limit information “20060126210000” is stored, it can be used until January 26, 2006 at 21:00:00.

  The electronic key management server device 2 includes a communication function 23 for realizing communication with other devices, a memory 24 that stores a list of key information (electronic key information) and information attached thereto, It is configured to include a UIM serial number verification function 25 for verifying the UIM serial number and a CPU 26 that controls each part of the apparatus. In the memory 24, for example, as shown in FIG. 11A, electronic key information, target information for identifying a target device, and a UIM number are stored together.

  The target device 3 has an electronic key receiving function 31 that receives key information, a memory 32 that stores a permitted electronic key information list, which is key information that can change the device itself to a usable state, and key information The electronic key collation function 33 that performs collation processing, a clock function 36 for managing time, and a CPU 34 that controls each part of the apparatus are included. For example, as shown in FIG. 11C, the memory 32 stores a permission electronic key that is key information that can change the target device to a usable state.

In this example, the UIM serial number is exchanged between the communication terminal device 1 and the electronic key management server device 2 by HTTP or the like. Further, exchange of key information between the electronic key transmission function 13 and the electronic key reception function 31 is performed by SPC or the like.
As described above, by including the expiration date information in the electronic key information downloaded and stored from the electronic key management server apparatus 2, the temporary key that can be used temporarily, that is, can be used only for a limited time. Can be realized.

(When sending key information from the electronic key management server)
FIG. 12 is a sequence diagram showing an operation in the electronic key system when key information is transmitted from the electronic key management server device and the target device is changed to an available state.
In the figure, the electronic key management server device 2 manages a unique identifier such as the manufacturing number of the UIM of the mobile phone in association with the key information (step S901). When the electronic key device 100 is lost due to loss or theft, an authentication request is sent from the electronic key management server device 2 to shift the target device 3 to an available state.
In this case, a user authentication request is sent from the communication terminal device 1 to the electronic key management server device 2 (step S902). When this user authentication request is transmitted, a unique identifier such as a device manufacturing number of the communication terminal device 1 or a UIM manufacturing number is simultaneously transmitted. Note that authentication using an ID or password may be performed simultaneously with the transmission of the unique identifier.

In the electronic key management server apparatus 2 that has received the unique identifier, a user confirmation process is performed (step S903). By this processing, the user authentication establishment state is established between the communication terminal device 1 and the electronic key management server device 2 (step S904).
In this state, an electronic key transmission request is transmitted from the communication terminal device 1 to the electronic key management server device 2 (step S905). Then, the electronic key management server device 2 sends an authentication request for key information managed by the device itself to the target device 3 using another line other than the mobile phone line (step S906). This authentication request causes the target device 3 to transition to an available state only once.

The target device 3 that has received the key information authentication request checks whether the key information is registered in advance and is valid (step S907). If the key information is registered and valid, authentication is established (step S908). As a result, the target device 3 transitions to an available state, such as the operation being turned on (step S909).
When the line connected between the electronic key management server device 2 and the target device 3 is disconnected, the electronic key management server device 2 stops the authentication request by sending the key information.

  FIG. 13 is a block diagram illustrating a configuration example for realizing the operation of FIG. In the figure, the electronic key system of the present example has a target device 3 that transitions to a usable state based on key information, an electronic key management server device 2 that manages key information and the like, and a target device that transitions to a usable state. And the communication terminal device 1 for sending a key information sending command for sending the key information for sending from the electronic key management server device 2.

The communication terminal device 1 includes a communication function 11 for realizing communication with other devices, an operation unit 15 for inputting various information, a browser 16, a display 17, a speaker 21, and a microphone 22. And a UIM 18 for identifying the user and a CPU 19 for controlling each part of the apparatus.
The electronic key management server device 2 includes a communication function 23 for realizing communication with other devices, a memory 24 for storing a list of key information (electronic key information) and information attached thereto, It includes a UIM serial number verification function 25 for verifying the UIM serial number and a CPU 26 that controls each part of the apparatus. In the memory 24, for example, as shown in FIG. 5A, electronic key information, target information for identifying a target device, and a UIM number are stored together.

The target device 3 has an electronic key receiving function 31 that receives key information, a memory 32 that stores a permitted electronic key information list, which is key information that can change the device itself to a usable state, and key information An electronic key collating function 33 that performs collation processing and a conversion function 37 that performs signal conversion are included. For example, as shown in FIG. 5B, the memory 32 stores a permission electronic key that is key information that can change the target device to a usable state.
In this example, a UIM serial number or an audio signal is exchanged between the communication terminal device 1 and the electronic key management server device 2 by HTTP or the like. Also, between the electronic key management server device 2 and the target device 3, key information is exchanged through a communication channel other than the mobile phone communication channel, and an authentication process is performed.

(Modification)
In the above description, SPC is used for communication between the electronic key device and the target device. However, the present invention is not limited to this, and communication is performed using Bluetooth (registered trademark), WLAN (Wireless Local Area Network), or the like. Also good.

  The present invention can be used as a countermeasure when the electronic key device that is always used is lost.

DESCRIPTION OF SYMBOLS 1 Communication terminal apparatus 2 Electronic key management server apparatus 3 Target apparatus 4 Alternative apparatus 11, 23 Communication function 12, 37 Conversion function 13 Electronic key transmission function 14 Line monitoring function 15 Operation part 16 Browser 17 Display 19, 26, 34 CPU
20, 24, 32 Memory 21 Speaker 22 Microphone 25 UIM serial number verification function 31 Electronic key reception function 33 Electronic key verification function 35 Frequency management function 36 Clock function 100 Electronic key device

Claims (2)

Key information acquisition means for acquiring key information necessary for authentication processing for transitioning the target device to a usable state from the external device after authentication processing with the external device, and key information acquired by the key information acquisition means Storage means for storing the key information transmission means for transmitting the key information acquired by the key information acquisition means to the target device in order to transition the target device to an available state,
The key information is appended with the number-of-transmissions limit information related to the information, and the key information transmission means transmits the key information to the target device only for the number of times corresponding to the number-of-transmissions limit information. A communication terminal device. Key information acquisition means for acquiring key information necessary for authentication processing for transitioning the target device to a usable state from the external device after authentication processing with the external device, and key information acquired by the key information acquisition means Storage means for storing the key information transmission means for transmitting the key information acquired by the key information acquisition means to the target device in order to transition the target device to an available state,
Expiration date information related to the information is added to the key information, and the key information transmitting means transmits the key information to the target device only by a time corresponding to the expiration date information. Communication terminal device.

Images