JP4820143B2 - Control system and portable terminal - Google Patents

Description

  The present invention relates to a control system that performs control such as unlocking a key attached to an apparatus using a mobile terminal, and more particularly, to a technology that performs the control via another mobile terminal.

Conventionally, when the user who locked the locker wants another person to take out the item in the locker, and the locker and the unlocker are different, the locker can be safely unlocked by preventing loss or theft of the key. There is provided a locker system that can be used (see Patent Document 1).
This locker system is composed of a mobile phone of the user who uses the locker and a server that manages the usage status of the locker, and the locker locker is provided with information such as the locker's phone number and unlocking password in advance. The information such as the telephone number of the cellular phone having the unlocking authority is registered in the server using its own cellular phone.

The server requests the unlocking password from the mobile phone of the locker when a unlocking request is issued from a mobile phone having an unlocking authority different from that of the locker, and only when the unlocking password is transmitted from the locker. Unlock the appropriate locker.
According to the technique of the above-mentioned patent document 1, it is possible to request the unlocking of the locker without teaching the unlocking person the unlocking password or the like.
Japanese Patent Laid-Open No. 2004-011397

However, with the technique of Patent Document 1, only the mobile phone of a specific user who has the unlocking authority registered in advance in the server by the locker can unlock the locker. For this reason, there is a problem that it is impossible to request other users to unlock in a situation where it is difficult for the registered user to unlock due to absence or the like.
Accordingly, the present invention has been made in view of such problems, and in the case where control of a control device that requires control such as unlocking is performed using a mobile terminal such as a mobile phone, the mobile terminal of an unspecified user An object of the present invention is to provide a control system that can be controlled safely via the.

  In order to solve the above problems, a control system according to the present invention is a control system that controls a control target device from a first mobile terminal via a second mobile terminal, wherein the first mobile terminal uses an encryption key. An encryption key holding means for holding, and a transmission means for transmitting encrypted authentication information obtained by encrypting authentication information using the encryption key to the second portable terminal, wherein the second portable terminal Receiving means for receiving encrypted authentication information from a terminal; and authentication information transmitting means for transmitting the encrypted authentication information to the control target device by short-range communication, wherein the control target device corresponds to the encryption key. A decryption key holding means for holding a decryption key; an authentication information receiving means for receiving the encrypted authentication information by short-range communication; and performing a predetermined authentication process by decrypting the encrypted authentication information with the decryption key, The result is valid Only if, characterized in that it comprises a control means for performing predetermined control.

The predetermined control may be control for unlocking or locking a key attached to the device to be controlled.
Further, in order to solve the above problem, the portable terminal that controls the control target device generates encryption authentication information by encrypting authentication information using the encryption key and encryption key holding means that holds the encryption key. An encryption processing unit, a transmission / reception unit that transmits and receives the encrypted authentication information, and an authentication information transmission unit that transmits the encrypted authentication information to the control target device by short-range communication.

  According to the above configuration, for example, in the case of controlling the unlocking of a device to be controlled such as a locker, when the key locker and the unlocker are different, the locker is a portable terminal of a specific user who has the unlocking authority in advance. Without registering, it is possible to request unlocking to the unlockable user. In addition, the first mobile terminal that is the user's mobile terminal that requests unlocking encrypts the authentication information for unlocking the second mobile terminal that is the user's mobile terminal that is temporarily given the unlocking authority. Therefore, it is possible to prevent the authentication information from being leaked or falsified to a third party and to be unlocked without the authentication information being known by the user who has been given the unlocking authority.

  Furthermore, even when a third party eavesdrops on encrypted authentication information exchanged between the first mobile terminal and the second mobile terminal, the authentication information is encrypted and the first mobile terminal and the control target device In the location of the device to be controlled, the agent performs the short-range wireless communication such as infrared communication between the second mobile terminal and the device to be controlled. Leakage of encrypted authentication information can be prevented only by considering the surroundings without the need for a wired connection or the like.

The first portable terminal and the second portable terminal can communicate with each other, and the transmission means transmits the encrypted authentication information to the second portable terminal when making a call with the second portable terminal. It is good.
According to this configuration, the first of the user (hereinafter referred to as “owner”) who requested the second portable terminal of the user (hereinafter referred to as “agent”) requested to control the control target device. Only when a voice call is being made with the mobile terminal, the encrypted authentication information is sent to the second mobile terminal. Information can be sent to the agent.

Further, the authentication information transmitting means may transmit the encrypted authentication information to the control target device during a call with the first portable terminal.
According to this configuration, the second mobile terminal encrypts data transmitted from the first mobile terminal only when a voice call is made between the second mobile terminal of the agent and the first mobile terminal of the owner. Since the authentication information is transmitted to the device to be controlled, the owner can control the transmission timing of the encrypted authentication information by the second portable terminal and prevent the encrypted authentication information from being transmitted at any time by the agent. be able to.

The second mobile terminal further includes a transmission instruction receiving unit that receives a transmission instruction for transmitting the encrypted authentication information from a user, and the authentication information transmitting unit receives the transmission instruction when the transmission instruction is received. Information may be transmitted to the device to be controlled by short-range communication.
According to this configuration, the second mobile terminal transmits the encrypted authentication information to the control target device only when the agent instructs the transmission of the encrypted authentication information by a button operation or the like. It is possible to transmit the encrypted authentication information after confirming safety by moving closer to the target device.

  The transmitting means further transmits period information indicating a valid period together with the encrypted authentication information to the second portable terminal, and the receiving means receives the encrypted authentication information and the period information, and The information transmitting means transmits the encrypted authentication information and the period information to the control target apparatus by short-range communication, the control target apparatus further includes a time measuring means, and the authentication information receiving means is the encrypted information Authentication information and the period information are received by short-range communication, and the control means performs the predetermined control only when the authentication result is valid and the authentication time point is within the valid period indicated by the period information. It is good as well.

According to this configuration, the owner can specify and request an effective period during which the control target device can be controlled. Therefore, after passing the effective period, the third party who intercepted the agent and the encrypted authentication information It is possible to prevent a person from controlling the device to be controlled using the encrypted authentication information.
The encryption key holding means holds a plurality of encryption keys, the decryption key holding means holds a decryption key corresponding to each encryption key, and the transmission means further includes the encryption key. An encryption key specifying unit configured to change and specify the encryption key held by the key holding unit every predetermined time, and encrypting authentication information obtained by encrypting the authentication information using the specified encryption key and the predetermined time Is transmitted to the second portable terminal, and the control means further corresponds to an encryption key used for encryption based on the time information among the decryption keys held in the decryption key holding means. A decryption key identifying unit for identifying a decryption key to be performed, and the encrypted authentication information may be decrypted using the identified decryption key to perform a predetermined authentication process.

According to this configuration, the owner can specify the encryption key every time when the control is requested, and can encrypt the authentication information using the specified encryption key. The same encrypted authentication information is used by the person or the agent, and the probability that the control target device is controlled can be reduced.
Further, the encryption key is a public key of the control target device, and the decryption key holding unit holds a secret key corresponding to the first public key as a decryption key, and the control target device further includes: Public key transmitting means for transmitting the first public key to the second portable terminal by short-range communication, wherein the second portable terminal further receives the first public key from the control target device by short-range communication. Public key receiving means, and the first portable terminal further comprises receiving means for receiving the first public key from the second portable terminal and holding the first public key in the encryption key holding means. It is good.

According to this configuration, the control target device transmits the public key of the control target device to the owner's first mobile terminal via the agent's second mobile terminal, and only the control target device has a secret corresponding to the public key. Since the key is held, it is possible to reduce the possibility that the encrypted authentication information is decrypted by the third party or the agent who acquired the encrypted authentication information and the control target device is controlled.
Further, the public key transmitting means further transmits the second public key to the second portable terminal by near field communication, and the public key receiving means further transmits the second public key from the control target apparatus to the near field communication. The encrypted authentication information is transmitted by the authentication information transmitting unit by encrypting the encrypted authentication information with a second public key, and the authentication information receiving unit includes: The encrypted authentication information encrypted with the second public key is received, and the control means decrypts the encrypted authentication information encrypted with the second public key with a secret key corresponding to the second public key. Later, a predetermined authentication process may be performed by decrypting with the private key corresponding to the first public key, and the predetermined control may be performed only when the authentication result is valid.

  According to this configuration, the control target device transmits a public key to the second mobile terminal of the agent, and the second mobile terminal further encrypts the encrypted authentication information using the public key and transmits the encrypted authentication information to the control target device. Therefore, even if the encrypted authentication information is leaked, it can be prevented from being controlled by the encrypted authentication information, and encryption can be performed between the communication between the second portable terminal and the control target device. When the authentication information is leaked, the probability that the authentication information is decrypted can be reduced.

<Embodiment 1>
FIG. 6 shows an example of a control system according to the present invention.
In the figure, when the owner of the locker 200 that is the device to be controlled causes the agent to unlock the key 201 of the locker 200 from a remote location, the owner uses the mobile phone 100 to give the unlocking instruction to the agent's mobile phone. It transmits to the telephone 101 through a telephone line. Using the mobile phone 101, the agent transmits the received unlocking instruction to the locker 200 by infrared communication.

The locker 200 authenticates the unlocking instruction received from the mobile phone 101 and controls the unlocking of the locker 200 according to the authentication result.
In this embodiment, the locker 200 performs locking and unlocking by infrared communication.
<Configuration>
FIG. 1 shows a functional configuration diagram of the control system in the present embodiment. Hereinafter, the configuration of the control system will be described.

FIG. 1A shows a functional configuration diagram of the mobile phones 100 and 101 in the present embodiment. In the present embodiment, it is assumed that the mobile phone 101 and the mobile phone 100 have the same configuration.
The cellular phones 100 and 101 include a wireless communication unit 110, an infrared communication unit 120, a communication control unit 130, an encryption processing unit 140, a time measuring unit 150, a storage unit 160, a display control unit 143, a display unit 170, and an input reception unit 180. It is configured.

<Wireless communication unit 110>
The wireless communication unit 110 receives a signal transmitted from a base station via an antenna, amplifies the received signal, A / D converts it, demodulates it into a received voice signal and a received data signal, and is A / D converted. The received voice signal is D / A converted and sounded from a speaker (not shown). Also, the transmission voice signal acquired from a microphone (not shown) is A / D converted, and the transmission voice signal that has been A / D converted and the transmission data signal sent from the communication control unit 130 are modulated and amplified. Function to output to the antenna.

<Infrared communication unit 120>
The infrared communication unit 120 performs baseband modulation on the serial signal sent from the communication control unit 130, converts the infrared signal into infrared rays using a light emitting diode, and outputs the infrared signal, converts the infrared signal into an electrical signal using a photodiode, It has a function of performing baseband demodulation and sending it to the communication control unit 130.

<Communication control unit 130>
The communication control unit 130 has a function of acquiring the reception data signal transmitted from the wireless communication unit 110 and generating a transmission data signal based on the data signal transmitted from the control unit 140. Further, it has a function of converting the serial signal sent from the infrared communication unit 120 into parallel data, and a function of converting the parallel data sent from the encryption processing unit 140 into a serial signal.

In the present embodiment, communication control unit 130 receives the data signal indicating the encrypted authentication information sent from control unit 140 and then makes a voice call between mobile phone 100 and mobile phone 101. It is assumed that encrypted authentication information is stored in a memory or the like, and the encrypted authentication information is transmitted to the wireless communication unit 110 or the infrared communication unit 120 when a voice call is made.
<Control unit 140>
The control unit 140 includes a CPU and a memory (ROM and RAM), and has a function of controlling each unit of the mobile phone 100 when the CPU executes a program stored in the ROM in response to a user operation. The control unit 140 includes an encryption processing unit 141 and a display control unit 143.

The encryption processing unit 141 includes a public key specifying unit 142, and encrypts authentication information by encrypting a password input by the user using the public key specified by the public key specifying unit 142. It has a function of generating and transmitting encrypted authentication information and time information described later to the wireless communication unit 110.
The public key specifying unit 142 generates a random number based on the time measured by the time measuring unit 150, specifies a public key corresponding to the random number from the public keys held in the storage unit 160, and a random number It has a function of sending time information indicating the time that is the basis of occurrence to the cryptographic processing unit 141.

The display control unit 143 has a function of generating an image such as an email received in response to a user operation and causing the display unit 170 to display the image.
<Timer 150>
The timer unit 150 has a function of measuring the current date and time.
<Storage unit 160>
The storage unit 160 is realized by a hard disk or the like, and has a function of holding information such as a public key of the locker 200, a telephone number of the mobile phone 101, and an email address.

<Display unit 170>
The display unit 170 is realized by a liquid crystal display or the like, and has a function of displaying an image instructed by the display control unit 143.
<Input reception unit 180>
The input receiving unit 180 includes operation buttons such as a numeric keypad, and has a function of receiving a press of an operation button from a user and sending a signal corresponding to the pressed button to the control unit 140.

Next, the functional configuration of the locker 200 will be described.
FIG. 1B shows a functional configuration diagram of the locker 200.
In the figure, the locker 200 includes an infrared communication unit 210, a communication control unit 220, a control unit 230, a storage unit 240, and a time measuring unit 250.
<Infrared communication unit 210>
The infrared communication unit 210 performs baseband modulation on the serial signal sent from the communication control unit 220, converts the infrared signal into infrared rays with a light emitting diode, and outputs the infrared signal, converts it into an electrical signal with a photodiode, It has a function of performing baseband demodulation and sending it to the communication control unit 220.

<Communication control unit 220>
The communication control unit 220 has a function of converting the parallel data sent by the control unit 230 into a serial signal and sending it to the infrared communication unit 210, and a function of converting the serial signal sent from the infrared communication unit 210 into parallel data. Have.
<Control unit 230>
The control unit 230 includes a CPU and memory (ROM and RAM), and includes an authentication processing unit 231 and a lock control unit 233. The control unit 230 has a function of controlling each unit of the locker 200 when the CPU executes a program stored in the ROM.

The authentication processing unit 231 includes a key specifying unit 232, and has a function of decrypting the encrypted authentication information using the secret key specified by the key specifying unit 232 and authenticating the authenticity of the authentication information. .
The key specifying unit 232 includes a random number generator similar to the public key specifying unit 142 of the mobile phone 100, and obtains a random number from time information transmitted together with the encrypted authentication information, and has a function of specifying a secret key corresponding to the random number. Have.

The lock control unit 233 has a function of controlling the unlocking of the key attached to the locker 200 according to the authentication result of the authentication processing unit 231.
<Storage unit 240>
The storage unit 240 is implemented by a hard disk or the like, and has a function of holding a plurality of public / private key pairs and authentication information for unlocking the keys.

<Timer 250>
The timer unit 250 has a function of measuring the current date and time.
<Data>
FIG. 2 shows table data used by the mobile phone 100 and the locker 200 according to the present invention.

Hereinafter, table data used in the present embodiment will be described.
FIG. 2A shows the key table 10 of the locker 200, and the key table 10 is stored in the storage unit 240 of the locker 200 in association with the public key 11 and the secret key 12.
The public key stored in the public key 11 and the private key stored in the private key 12 correspond to each other. For example, data encrypted with the public key 1 can be decrypted with the private key 1. Shall.

2B shows the public key list 20 held in the storage unit 160 of the owner's mobile phone 100. The public key 21 is stored in the public key 11 of the key table 10. FIG. The same public key as the public key is held.
In this embodiment, the public key specifying unit 142 specifies the public key having the same number as the random number generated based on the time information. For example, when the random number is N, the public key N is specified. To do.
<Operation>
FIG. 4 shows an operation flowchart of the control system in the present embodiment. The operation of the control system will be described below with reference to FIG.

The locker 200 is assumed to be locked by the owner's mobile phone 100 in advance.
In step S11, when the public key specifying unit 142 of the mobile phone 100 receives a button operation for instructing control of the locker 200 from the owner via the input receiving unit 180, the public key specifying unit 142 reads the current time indicated by the time measuring unit 150, A random number is generated based on time information indicating the time. In addition, the public key specifying unit 142 specifies the public key corresponding to the generated random number from the public key list 20 of the storage unit 160.

For example, if the current time is 09:05 on October 5, 2005, “200510050905” is used as time information A to generate a random number. If the generated random number is 3, among the public keys in the public key list 20, The public key 3 is specified.
In step S12, the display control unit 143 causes the display unit 170 to display a key control input image for instructing the locker 200 to unlock.

Here, FIG. 3A shows a display example of the key control input image.
On the key control input screen, the name of the key to be controlled and the state 31 of the key are displayed, and the e-mail address, password 33, validity period 34, and unlock / lock button 35 of the agent's mobile phone 101 are input. Accept from the owner.
The validity period 34 indicates the period during which the locker 200 can be unlocked and the validity period of the public key, and can be unlocked if the time point when the locker 200 is authenticated is within the validity period.

Using the public key specified by the public key specifying unit 142, the encryption processing unit 141 generates encrypted authentication information by encrypting the password or the like input on the key control input screen, and the encrypted authentication information and time information A is sent to the communication control unit 130.
In step S13, the wireless communication unit 110 transmits the telephone number of the agent's mobile phone 101 by operating the owner's button, and the agent's mobile phone 101 receives an incoming call from the mobile phone 100 and owns it with the agent. The person makes a voice call (step S21).

Subsequent to step S13, the communication control unit 130 of the owner's mobile phone 100 transmits the encrypted authentication information and time information A to the wireless communication unit 110, and the wireless communication unit 110 transmits the encrypted authentication information and time information A. Wireless transmission is performed to the mobile phone 101 (step S14).
In the proxy mobile phone 101, the wireless communication unit 110 receives the encrypted authentication information and the time information A from the mobile phone 100 (step S22).

In step S <b> 23, the communication control unit 130 transmits the received encrypted authentication information and time information A from the infrared communication unit 120 to the locker 200 during a call with the owner.
Next, in the locker 200, the infrared communication unit 210 receives the encrypted authentication information and time information A from the agent's mobile phone 101 (step S31).
In step S32, the key specifying unit 232 generates a random number based on the time information A, specifies a secret key corresponding to the random number generated from the key table 10 in the storage unit 240, and the authentication processing unit 231 The encrypted authentication information received using the secret key specified by the unit 231 is decrypted.

The secret key is specified in the same manner as the above-described public key, and the secret key having the same numerical value as the random number is specified. In the above example, the secret key 3 is specified.
Subsequently, the authentication processing unit 231 reads the authentication information from the storage unit 240, reads the current time from the timekeeping unit 250, and the result decrypted in step S32 matches the authentication information, and the current time is within the valid period. (Step S34: Y), the lock control unit 233 is notified of this, and in step S35, the lock control unit 233 performs an unlocking process.

In step S <b> 35, the lock control unit 233 sends control result information indicating unlocking to the communication control unit 220, and the communication control unit 220 transmits control result information from the infrared communication unit 210 to the mobile phone 101.
Subsequently, in the proxy mobile phone 101, when the infrared communication unit 120 receives the control result information transmitted from the locker 200, the communication control unit 130 transmits the control result information from the wireless communication unit 110 to the owner mobile phone 100. Transmit (step S24).

Subsequently, in the owner's mobile phone 100, the communication control unit 130 receives the control result information transmitted from the mobile phone 101 by the wireless communication unit 110, and sends the control result information to the display control unit 143.
The display control unit 143 generates a result notification image based on the control result information and causes the display unit 170 to display the result notification image.

Here, FIG. 3B shows a display example of the result notification image.
On the result notification screen, the key name to be controlled and the current state 41 of the key, the mail address 42 of the agent's mobile phone 101, and the control result 43 are displayed, and the owner must visually confirm the result notification image. Thus, it can be confirmed whether or not the key of the locker 200 is unlocked.
<Modification>
In the above-described embodiment, the proxy mobile phone 101 transmits the encrypted authentication information and the time information A to the locker 200 by infrared communication at the time of a call with the owner. When a call is made to the locker 200, the unlocking request is transmitted to the locker 200 by infrared, and the public key is received from the locker 200 by infrared, and the encrypted authentication information and the time information A are encrypted using the received public key. A case where the encrypted information is transmitted to the locker 200 will be described.
<Operation>
FIG. 5 shows an operation flowchart of the control system in the present modification.

The same operations as those in the embodiment shown in FIG. 4 are denoted by the same reference numerals as those in FIG.
In the proxy mobile phone 101, the communication control unit 130 receives the encrypted authentication information and the time information A (step S 22) when talking with the owner's mobile phone 100 (step S 21), and then from the infrared communication unit 120. A control request for requesting key unlocking control is transmitted to the locker 200 (step S231).

In the locker 200, when receiving the control request from the mobile phone 101, the communication control unit 220 notifies the key specifying unit 231 to that effect (step S320).
Subsequently, the key specifying unit 231 generates a random number from the current time indicated by the time measuring unit 250, specifies the public key corresponding to the random number from the public keys stored in the public key 301 of the key table 10 in the storage unit 240, Key information indicating the specified public key is stored in the memory, and the specified public key is transmitted to the mobile phone 101 via the infrared communication unit 210.

Subsequently, in the proxy mobile phone 101, the communication control unit 130 receives the public key from the locker 200 via the infrared communication unit 120 and sends the received public key to the encryption processing unit 140.
The encryption processing unit 140 sends the encrypted authentication information and the time information A received from the mobile phone 100 with the received public key to the communication control unit 130. The communication control unit 130 is an infrared communication unit. The encrypted information is transmitted from 120 to the locker 200 (step S232).

Subsequently, in the locker 200, when the communication control unit 220 receives the encryption information from the mobile phone 101 via the infrared communication unit 120, the communication control unit 220 sends the encryption information to the key specifying unit 231.
The key specifying unit 231 reads the key information from the memory, specifies the secret key corresponding to the public key indicated by the key information from the secret keys held in the key table 10, and decrypts the encrypted information using the specified secret key To do.

The key specifying unit 231 generates a random number based on the time information A included in the decrypted encrypted information, and a secret key corresponding to the generated random number is held in the key table 10 in the storage unit 240. The encrypted authentication information is decrypted using the identified secret key (step S311).
With the above configuration, the infrared communication is established in order to establish the infrared communication connection between the locker 200 and the mobile phone 101 and transmit the encrypted authentication information and time information A encrypted after the infrared communication is enabled. It is possible to prevent the failure.

<Supplement>
As described above, the control system according to the present invention has been described based on the embodiment and the modification. However, the control system can be modified as follows, and the present invention is not limited to the control system shown in the above-described embodiment and the like. Of course.
(1) In the above-described embodiment and modification, it has been described that the control result notification is transmitted to the mobile phone 101 when the locker 200 unlocks, but the locker 200 unlocks the mobile phone 101. When the control result notification is received, the encrypted authentication information held in the memory or the like may be deleted.

With such a configuration, when the agent controls unlocking of the locker 200 using the encrypted authentication information in the mobile phone 101, the encrypted authentication information is prevented from being used due to theft of the mobile phone 101 or the like. be able to.
(2) In the above-described embodiment and modification, it has been described that the authentication information is encrypted and decrypted using the public key encryption method, but other encryption methods such as a common key encryption method may be used.
(3) In the above-described embodiment and modification, it has been described that IrDA standard infrared communication is performed between the locker 200 and the mobile phone 101. However, the short tooth communication is not limited to this, and Blue tooth (registered) Trademark) or wireless LAN, or wired communication connected through an interface such as USB. Note that the short-range communication in the present invention preferably has a communication distance as short as possible so that the encrypted authentication information is not easily intercepted.
(4) In the above-described embodiment and modification, the mobile phone 100 and the locker 200 obtain a random number based on a common random number generator and time information indicating the current time, and obtain a public key and a secret key corresponding to the random number. Although described as being specified, the mobile phone 100 and the locker 200 specify a key in accordance with a common algorithm that can specify a corresponding key, such as using a valid time indicated by a valid period as time information. Also good.
(5) In the above-described embodiment and modification, it has been described that the owner's mobile phone 100 holds the public key of the locker 200 in advance. However, as shown in FIG. The public key may be acquired from the locker 200 via the human mobile phone 101.

In this case, when the owner makes a call with the agent, the owner transmits a key control request to the locker 200 via the agent's mobile phone 101 (step S131). When the locker 200 receives a control request from the mobile phone 100 via the mobile phone 101, the locker 200 specifies the public key and transmits the specified public key to the owner's mobile phone 100 via the mobile phone 101. (Step S2311, Step S3101)
The cellular phone 100 encrypts the authentication information using the public key received via the cellular phone 101, and transmits the encrypted authentication information to the cellular phone 101 (steps S2312, S141).

After the locker 200 receives the encrypted authentication information (step S3111), the processing from step S3211 is performed as in the embodiment and the modification.
According to this configuration, the owner's mobile phone 100 cannot control the key of the locker outside the service area, but does not need to hold the public key list and needs to transmit the time information A to the locker 200. There is no.
(6) In the embodiment and the modification described above, the locker 200 is described as transmitting the unlock notification to the agent when the determination result is YES in step S33 (FIGS. 4 and 5), that is, unlocking. However, even when the determination result is NO in step S33, that is, when the unlocking fails, the unlocking result containing the unlocking failure is transmitted to the agent's mobile phone 101, and the agent's mobile phone 100 is transferred from the agent. The unlocking result may be transmitted to (see step S33: N in FIG. 7).

When the agent's mobile phone 101 is out of the service area, the agent's mobile phone 101 receives the unlocking result indicating the unlocking success or the unlocking failure from the locker 200, and then the agent moves into the service area. The telephone set 101 may send an unlocking result to the owner by e-mail. Thereby, the owner can control the key of the key control device outside the service area.
(7) In the above-described embodiment and modification, it has been described that the key is controlled when the owner and the agent are making a voice call. However, after step S22 (FIGS. 4 and 5), You may stop the call. In this case, if the agent is not near the locker 200, the agent moves to the locker 200 after the call and performs the process of step S23.
(8) In the above-described embodiment and modification, the owner is described as inputting the agent's e-mail address on the key control input screen. However, the owner's mobile phone 101 may be the phone number, and the owner The mobile phone 100 may automatically input the phone number of the agent when the agent calls.
(9) A program for causing a processor to execute the control processing described above can be recorded on a recording medium or distributed and distributed via various communication paths. Such recording media include IC cards, hard disks, optical disks, flexible disks, ROMs, and the like. The distributed and distributed program is used by being stored in a memory or the like that can be read by the processor, and the processor executes the program so that the portable terminal and the control target shown in the embodiment and the modification example The function of the device is realized.

  The control system according to the present invention can be used in a locker system or the like that controls unlocking of a key using a mobile terminal such as a mobile phone.

FIG. 1A is a diagram illustrating a functional configuration of the mobile phones 100 and 101 according to the embodiment, and FIG. 1B is a diagram illustrating a functional configuration of the locker 200 according to the embodiment. 2A is a diagram illustrating a key table of the locker 200 according to the embodiment, and FIG. 2B is a diagram illustrating a public key list of the mobile phone 100 according to the embodiment. 3A is a diagram showing a display example of a control request input screen of mobile phone 100 according to the present embodiment, and FIG. 3B is a result notification screen of mobile phone 100 according to the present embodiment. It is a figure which shows the example of a display. It is a figure which shows the operation | movement flow of the control system which concerns on this Embodiment. It is a figure which shows the operation | movement flow of the control system which concerns on a modification. It is a figure which shows the image of the control system which concerns on this Embodiment. It is an operation | movement flowchart which shows the operation example of the control system which concerns on this invention.

Explanation of symbols

100, 101 Mobile phone 110 Wireless communication unit 120, 210 Infrared communication unit 130, 220 Communication control unit 140, 230 Control unit 141 Cryptographic processing unit 142 Public key identification unit 143 Display control unit 150, 250 Timekeeping unit 160 Storage unit 170 Display unit 180 input reception unit 200 locker 231 authentication processing unit 232 key identification unit 233 lock control unit 240 storage unit

Claims (9)

A control system for controlling a control target device from a first mobile terminal via a second mobile terminal,
The first portable terminal is
An encryption key holding means for holding the encryption key;
The authentication information encrypted authentication information encrypted using the encryption key and transmitting means for transmitting to the second mobile terminal,
The second portable terminal is
Receiving means for receiving encrypted authentication information from the first portable terminal;
Authentication information transmitting means for transmitting the encrypted authentication information to the control target device by short-range communication,
The device to be controlled is
Decryption key holding means for holding a decryption key corresponding to the encryption key;
Authentication information receiving means for receiving the encrypted authentication information by short-range communication;
Control means for performing predetermined authentication processing by decrypting the encrypted authentication information with the decryption key, and performing predetermined control only when the authentication result is valid ;
The encryption key holding means holds a plurality of encryption keys,
The decryption key holding means holds a decryption key corresponding to each encryption key,
The transmission means further includes an encryption key specifying unit that specifies the encryption key held by the encryption key holding means by changing every predetermined time, and encrypts the authentication information using the specified encryption key. Transmitting the encrypted authentication information and the time information indicating the predetermined time to the second portable terminal,
The control means further includes
A decryption key identifying unit that identifies a decryption key corresponding to the encryption key used for encryption based on the time information among the decryption keys retained in the decryption key retaining unit, and using the identified decryption key A control system for decrypting the encrypted authentication information and performing a predetermined authentication process . A control system for controlling a control target device from a first mobile terminal via a second mobile terminal,
The first portable terminal is
An encryption key holding means for holding the encryption key;
Transmission means for transmitting encrypted authentication information obtained by encrypting authentication information using the encryption key to the second portable terminal,
The second portable terminal is
Receiving means for receiving encrypted authentication information from the first portable terminal;
Authentication information transmitting means for transmitting the encrypted authentication information to the control target device by short-range communication,
The device to be controlled is
Decryption key holding means for holding a decryption key corresponding to the encryption key;
Authentication information receiving means for receiving the encrypted authentication information by short-range communication;
Control means for performing predetermined authentication processing by decrypting the encrypted authentication information with the decryption key, and performing predetermined control only when the authentication result is valid;
The encryption key is a public key of the device to be controlled,
The decryption key holding means holds a secret key corresponding to the first public key as a decryption key,
The control target device further includes public key transmission means for transmitting the first public key to the second portable terminal by short-range communication,
The second portable terminal further includes public key receiving means for receiving the first public key from the control target device by short-range communication,
The control system further comprising a receiving unit that receives the first public key from the second portable terminal and holds the first public key in the encryption key holding unit . The second portable terminal further includes:
A transmission instruction receiving means for receiving a transmission instruction for transmitting the encrypted authentication information from a user;
3. The control system according to claim 1, wherein the authentication information transmitting unit transmits the encrypted authentication information to the control target device by short-range communication when receiving the transmission instruction. 4. The transmission means further includes:
Transmits the period information indicating a validity period with the encrypted authentication information to the second mobile terminal,
The receiving means receives the encrypted authentication information and the period information;
The authentication information transmitting means transmits the encrypted authentication information and the period information to the control target device by short-range communication,
The device to be controlled further includes a time measuring means,
The authentication information receiving means receives the encrypted authentication information and the period information by near field communication,
3. The control system according to claim 1, wherein the control unit performs the predetermined control only when an authentication result is valid and an authentication time point is within an effective period indicated by the period information. . The public key transmitting means further transmits via near field communication a second public key to the second mobile terminal,
The public key receiving means further receives a second public key from the control target device by near field communication,
Transmission of the encrypted authentication information by the authentication information transmitting means is performed by transmitting the encrypted authentication information after encrypting the encrypted authentication information with a second public key,
The authentication information receiving means receives encrypted authentication information encrypted with the second public key;
The control means decrypts the encrypted authentication information encrypted with the second public key with a secret key corresponding to the second public key, and then decrypts the encrypted authentication information with a secret key corresponding to the first public key. The control system according to claim 2, wherein an authentication process is performed, and the predetermined control is performed only when an authentication result is valid. Wherein the predetermined control is a control system according to claim 1 or 2 characterized in that the control for unlocking or locking of the key which is attached to the control target device. A portable terminal that controls a device to be controlled,
An encryption key holding means for holding the encryption key;
Encryption processing means for encrypting authentication information using the encryption key and generating encrypted authentication information;
Transmitting / receiving means for transmitting / receiving the encrypted authentication information;
Authentication information transmitting means for transmitting the encrypted authentication information to the control target device by short-range communication ,
The encryption key holding means holds a plurality of encryption keys,
The encryption processing means further includes an encryption key specifying unit that changes and specifies the encryption key held by the encryption key holding means every predetermined time,
The transmitting / receiving means transmits the authentication information encrypted by the encryption processing means using the specified encryption key and time information indicating the predetermined time to another portable terminal. Terminal. A portable terminal that controls a device to be controlled,
An encryption key holding means for holding the encryption key;
Encryption processing means for encrypting authentication information using the encryption key and generating encrypted authentication information;
Transmitting / receiving means for transmitting / receiving the encrypted authentication information;
Authentication information transmitting means for transmitting the encrypted authentication information to the control target device by short-range communication,
The encryption key is a public key of the device to be controlled,
The portable terminal further includes a key receiving unit that receives the public key from the device to be controlled by short-range communication and holds the public key in the encryption key holding unit.
A portable terminal characterized by that. A control method for controlling a control target device from a first mobile terminal via a second mobile terminal,
The first portable terminal is
An encryption key holding step for holding an encryption key;
The authentication information encrypted authentication information encrypted using the encryption key and a transmission step of transmitting to the second mobile terminal,
The second portable terminal is
Receiving the encrypted authentication information from the first portable terminal;
An authentication information transmission step of transmitting the encrypted authentication information to the device to be controlled by short-range communication,
The device to be controlled is
A decryption key holding step for holding a decryption key corresponding to the encryption key;
An authentication information receiving step for receiving the encrypted authentication information by short-range communication;
Performs predetermined authentication processing by decrypting the encrypted authentication information in the decryption key only when the authentication result is valid, it viewed including a control step of performing a predetermined control,
In the encryption key holding step, a plurality of encryption keys are held,
In the decryption key holding step, a decryption key corresponding to each encryption key is held,
The transmitting step further includes an encryption key specifying sub-step for specifying the encryption key held in the encryption key holding step by changing every predetermined time, and encrypting the authentication information using the specified encryption key. Transmitting the encrypted authentication information and the time information indicating the predetermined time to the second portable terminal,
The control step further comprises:
A decryption key identifying sub-step for identifying a decryption key corresponding to an encryption key used for encryption based on the time information, among the decryption keys retained in the decryption key retaining step, A control method characterized in that the encrypted authentication information is decrypted and a predetermined authentication process is performed .

Images