JP2017133286A - Electronic lock system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an electronic lock system that is capable of using a non-contact type IC card and a portable terminal, as an electronic key, and secures safety in performing paring between an electronic lock and the portable terminal.SOLUTION FOR THE PROBLEM: An electronic lock system, when an NFC communication unit of an electronic lock 1 receives communication from a non-contact type IC card 26 to which an electronic key ID is previously written by an electronic key management server 23, stores the electronic key ID of the IC card 26 in a memory of the electronic lock 1 to make the IC card be an electronic key. The electronic lock system, when the NFC communication unit receives communication from a portable terminal registration IC card 22 to which an electronic key ID for the portable terminal and encryption key information are previously written by the electronic key management server 23, stores the electronic key ID and encryption key information of the portable terminal registration IC card 22 in the memory of the electronic lock 1, and performs paring by a portable terminal 24 regularly acquiring an electronic key ID encrypted using the encryption key information from the electronic key management server 23 to make the portable terminal 24 be an electronic key.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an electronic lock system, and more particularly to an electronic lock system in which both a non-contact type IC card and a portable terminal can be used as an electronic key.

  Conventionally, an electronic lock is attached to a door of a condominium or an apartment. In an electronic lock system that locks and unlocks the electronic lock, a non-contact IC card (hereinafter simply referred to as an “IC card”) is used as an electronic key. That uses a mobile terminal such as a smartphone (Patent Document 2). Both of these use short-range wireless communication technology. In general, the NFC (Near Field Communication) communication standard approved as an international standard is used for an IC card, and the international standard is also used for a portable terminal. BLE (Bluetooth (registered trademark) Low Energy) communication standard approved as

  By the way, even if it is the same short-range wireless communication, the communication range is usually several cm to 10 cm in NFC communication, and is usually several m to several tens m in BLE communication. For this reason, in the case of an IC card using NFC communication, it is necessary to perform authentication by approaching the communication unit of the electronic lock in order to determine whether or not the IC card is a legitimate IC card. Therefore, there is a problem that when the baggage is held in both hands, the unlocking operation or the locking operation cannot be performed smoothly and quickly. In addition, when moving into and out of a room frequently within a certain period of time, such as a moving contractor, there is a problem that it is complicated to perform an unlocking operation or a locking operation each time it enters or exits.

  On the other hand, when using a portable terminal by BLE communication, the above-mentioned problem does not occur, but when pairing between the electronic lock and the portable terminal, the unencrypted electronic key ID is in the range of several meters to several tens of meters. Since the electronic key ID is wirelessly intercepted and stolen, there is a problem in terms of safety. Here, if the NFC communication is used also in the portable terminal, this problem can be solved. However, in this case, the same problem as the above-described IC card occurs, which is not desirable.

JP 2010-174477 A JP 2005-139644 A

  As described above, although the IC card and the portable terminal as electronic keys are inconvenient, the user of the electronic key selects one of the electronic keys according to his / her lifestyle or needs both. It is desirable to use it safely according to the usage. For that purpose, in one electronic lock system, it is necessary to be able to use either an IC card or a portable terminal as an electronic key, and to ensure safety during pairing between the electronic lock and the portable terminal. The present invention has been made in view of such circumstances, and both an IC card and a portable terminal can be used as an electronic key, and also prevents wireless interception during pairing between the electronic lock and the portable terminal. An object of the present invention is to provide an electronic lock system that ensures safety.

  To achieve this object, an electronic lock system according to claim 1 of the present invention includes an electronic lock and an electronic key management server, and the electronic lock communicates with an NFC communication unit that communicates with an IC card, and with a mobile terminal. A BLE communication unit that stores the electronic key ID received by each of these communication units, an encryption / decryption unit that decrypts the electronic key ID when it is encrypted, and whether the electronic key ID is valid An authentication unit that authenticates the electronic key ID, a lock / unlock signal output control unit that outputs a lock signal or an unlock signal when the electronic key ID is normal, and a control unit that controls each operation. When there is communication from an IC card that should be an electronic key to which an electronic key has been written in advance by the electronic key management server, the electronic key ID of the IC card is stored in the memory and can be used as an electronic key. NFC Communication Department When there is communication from the mobile terminal registration IC card in which the electronic key ID for the mobile terminal and the encryption key information used for encryption and decryption are written in advance by the electronic key management server, the electronic key ID and the encryption key Information is stored in the memory, and the portable terminal communicates with the electronic key management server, and when the electronic key ID encrypted with the encryption key information is properly obtained from the server, the portable terminal is used as an electronic key. It is intended to be used.

  According to this configuration, when there is communication from the IC card to be an electronic key to the NFC communication unit of the electronic lock, the IC card is stored by storing the electronic key ID of the IC card in the memory of the electronic lock. It becomes an electronic key for locking and unlocking the electronic lock. Also, the electronic key ID encrypted with the encryption key information written by the electronic key management server on the mobile terminal registration IC card is written from the mobile terminal registration IC card to the memory of the electronic lock, while the mobile terminal By communicating with the key management server and properly acquiring the electronic key ID encrypted with the encryption key information, pairing is performed without communicating with the BLE communication unit of the electronic lock, and the electronic lock is unlocked. It becomes an electronic key to lock.

  In order to achieve the above object, an electronic lock system according to a second aspect of the present invention includes the operation mode setting unit in addition to the configuration of the first aspect of the invention, and an electronic key registration mode is provided by the operation mode setting unit. In the state set to, when there is communication from the IC card to be the electronic key to the NFC communication unit, the electronic key ID of the IC card is stored in the memory and can be used as an electronic key. Similarly, in a state where the electronic key registration mode is set, when there is communication from the mobile terminal registration IC card to the NFC communication unit, the electronic key ID and encryption key information are stored in the memory, and the electronic key management is performed. The portable terminal that has obtained the electronic key ID encrypted with the encryption key information from a server can be used as an electronic key.

  According to this configuration, when the electronic key registration mode is set by the operation mode setting unit, the registration operation using the IC card or the portable terminal as the electronic key is performed.

  In order to achieve the above object, an electronic lock system according to a third aspect of the present invention includes a normal operation confirmation information input means in addition to the configuration of the first or second aspect of the invention, and the normal operation confirmation information. Communication between the NFC communication unit and an IC card to be used as an electronic key or an IC card for portable terminal registration is possible after the authentication unit authenticates normal operation confirmation information indicating that the operation is a normal operation input from an input unit. It is to make.

  According to this configuration, if the normal operation confirmation information is input from the normal operation confirmation information input means and it is not confirmed that the operation is a normal operation, the IC card or portable terminal registration IC to be used as an electronic key Communication between the card and the NFC communication part of the electronic lock is impossible. That is, after it is confirmed that the operation is normal, communication between the IC card and the NFC communication unit of the electronic lock becomes possible, and the electronic key ID previously written in the IC card is stored in the memory of the electronic lock. Thus, the IC card becomes an electronic key for locking and unlocking the electronic lock. In addition, after confirming that the operation is normal, the electronic key ID encrypted with the encryption key information by the IC card for portable terminal registration is written in the memory of the electronic lock, and the portable terminal communicates with the electronic key management server. By obtaining the electronic key ID properly, pairing is performed without communicating with the BLE communication unit of the electronic lock, and an electronic key for unlocking and unlocking the electronic lock is obtained.

  In order to achieve the above object, according to a fourth aspect of the present invention, in the electronic lock system according to the third aspect, the regular operation confirmation information input means has an NFC communication function, and the ID of the electronic lock system is the electronic lock in advance. It consists of an IC card written in a memory.

  According to this configuration, the normal operation confirmation information from the IC card as the normal operation confirmation information input means, for example, the ID of the IC card, is received by the NFC communication unit and authenticated by the authentication unit. That is confirmed.

  According to the electronic lock system according to claim 1 or 2 of the present invention, it is possible to use either an IC card or a portable terminal as an electronic key, and BLE of unencrypted information between the electronic lock and the portable terminal. Since pairing can be performed without performing communication, there is no risk of theft of the electronic key ID due to wireless interception during pairing, and the effect of improving safety is achieved.

  According to the electronic lock system of the third aspect of the present invention, in addition to the effect produced by the first or second aspect of the invention, the electronic keying is performed after it is confirmed that the operation is a regular operation. There is an effect that the property is further improved.

  Further, according to the electronic lock system of claim 4 of the present invention, in addition to the effect of the invention of claim 3, the normal operation confirmation information is input by communicating from the IC card to the NFC communication unit of the electronic lock. Therefore, there is an effect that the input operation can be surely and easily performed.

The block diagram which shows the whole in one Embodiment of this invention. The perspective view which similarly shows the external appearance of an electronic lock. The block diagram which similarly shows the communication and control mechanism of an electronic lock. The flowchart which similarly shows the registration operation | movement of an electronic key. The flowchart which similarly shows the authentication operation | movement of an electronic key.

  Hereinafter, a preferred embodiment of the present invention will be described with reference to the accompanying drawings. First, the electronic lock will be described. As shown in FIG. 2, the electronic lock 1 includes a cylindrical main body 2, and the entire front surface of the main body 2 is a touch panel 3 serving as a communication unit. The touch panel 3 is provided with three LEDs 4a, 4b and 4c which are LED display units 4 (see FIG. 3). Further, a push button 5a, which is an input member of the operation mode setting unit 5 (see FIG. 3), is provided on the front side edge of the main body 2. Further, a locking / unlocking mechanism 6 for locking and unlocking by driving a dead bolt or the like is provided on the rear surface side of the main body 2.

  A communication / control mechanism is housed inside the main body 2 of the electronic lock 1. As shown in FIG. 3, in addition to the LED display unit 4 and the operation mode setting unit 5 described above, the communication / control mechanism includes an NFC communication unit 7 that communicates with an IC card that is an electronic key, and a smartphone that is also an electronic key. BLE communication part 8 which communicates with portable terminals, such as these, and microcomputer 14. The microcomputer 14 includes a memory 9 that stores various information such as an electronic key ID received by the communication units 7 and 8, and an encryption / decryption unit 10 that decrypts the electronic key ID when the electronic key ID is encrypted. And an authentication unit 11 that authenticates whether or not the electronic key ID and the normal operation confirmation information are authentic, a locking / unlocking signal output unit 12, and a control unit 13 that controls various operations.

  Next, a registered management IC card (hereinafter referred to as “registered management card”) for inputting regular operation confirmation information, and a mobile terminal registration IC card (hereinafter referred to as “electronic card”) used for registering the mobile terminal as an electronic key. "Mobile terminal registration card") will be described. The registered management card 21 is an IC card having an NFC communication function, and a preset ID is registered in the memory 9 of the electronic lock 1 (see FIG. 1). And this registered management card 21 writes the ID in the electronic lock 1 of all the apartments and apartments when the electronic locks 1 are installed in the apartments and apartments. And can be used.

  The mobile terminal registration card 22 is also an IC card having an NFC communication function, and an electronic key ID and encryption key information generated by the electronic key management server 23 are stored in the memory by the electronic key management server 23. It has been written (see FIG. 1). The encryption key information is used to encrypt and decrypt the electronic key ID.

  Here, based on FIG. 1, the pairing with the portable terminal 24 which has BLE communication functions, such as a smart phone used as an electronic key, and the electronic lock 1 performed using the portable terminal registration card 22 will be described. First, the portable terminal registration card 22 is held over the touch panel 3 of the electronic lock 1 to communicate with the NFC communication unit 7, and the electronic key ID and encryption key information are written and registered in the memory 9 of the electronic lock 1.

  On the other hand, for example, an electronic key ID stored in the memory of the portable terminal registration card 22 is input to a portable terminal electronic key registration requesting machine 25 formed of a computer having a communication function. The electronic key ID is transmitted to the key management server 23 together with a telephone number which is a unique identification number of the portable terminal 24 to be an electronic key. The electronic key management server 23 determines whether or not the received electronic key ID is a legitimate one generated by itself, and if it is legitimate, generates a PIN code and sends it to the portable terminal 24 having the telephone number. Send the PIN code.

  When the portable terminal 24 downloads application software in advance and receives the PIN code, it transmits the PIN code and its own telephone number to the electronic key management server 23. When the electronic key management server 23 confirms that the electronic key is a legitimate portable terminal 24 to be used as an electronic key by the PIN code and the telephone number, it generates primary unlocking information. This primary unlocking information is obtained by encrypting an electronic key ID and primary additional information with encryption information. The primary additional information is, for example, the start date / time and end date / time and the primary unlocking information issuance date / time when the portable terminal 24 is used as an electronic key.

  Then, the electronic key management server 23 transmits primary unlocking information that is encrypted information to the portable terminal 24 together with the encrypted information.

  The mobile terminal 24 adds secondary additional information, for example, the current time, to the received primary unlocking information, encrypts it using the received encryption information, and generates secondary unlocking information. The unlocking information is stored in its own memory. Thereby, since the same electronic key ID is stored in the portable terminal 24 and the electronic lock 1, substantial pairing is completed without performing BLE communication between the portable terminal 24 and the electronic lock 1. The portable terminal 24 can be used as an electronic key.

  Next, an operation of registering the IC card 26 (see FIG. 1), in which the electronic key ID is written in advance by the electronic key management server 23, used as an electronic key, in the electronic lock 1 will be described with reference to FIG. First, the push button 5a of the main body 2 of the electronic lock 1 is pressed twice for a short time to set the electronic key registration mode (step 101). Next, it is determined whether the IC card is held over the touch panel 3 within 5 seconds (steps 102 and 103). If the IC card is not held over the touch panel 3 within 5 seconds, each LED 4a, An error is displayed, for example, by blinking 4b and 4c (step 104), and the process ends.

  On the other hand, if it is determined in steps 102 and 103 that the IC card is held over the touch panel 3 within 5 seconds, it is determined whether or not this IC card is a registered management card 21 (step 105). If it is determined that it is not a registered management card 21, that is, if it is an unauthorized operation, the process proceeds to step 104 and an error is displayed. If it is determined that it is a registered management card 21, that is, it is determined that it is a regular operation, the process proceeds to step 106. If it is determined that an unregistered IC card 26 to be used as an electronic key is held over the touch panel 3 within 5 seconds (steps 106 and 107), the electronic key ID of the IC card 26 is written in the memory 9. (Step 108), the electronic key registration operation of the IC card 26 is terminated.

  If it is determined in step 107 that the IC card 26 is not unregistered, the process proceeds to step 109, where it is determined whether the IC card held over the touch panel 3 is the mobile terminal registration card 22, and mobile terminal registration is performed. If the card 22 is not used, an error is displayed after 5 seconds (steps 106 and 104). On the other hand, if it is determined in step 109 that the card is a portable terminal registration card 22, the electronic key ID and the encryption key information stored in the memory of the card 22 are written in the memory 9 of the electronic lock 1 (step 108). ), The electronic key registration operation of the portable terminal registration card 22 is terminated.

  Next, an authentication operation for determining whether or not the electronic key is valid when the electronic key is used will be described with reference to FIG. First, the button 5a of the main body 2 of the electronic lock 1 is pressed once for a short time to set the authentication mode (step 201). Next, the NFC communication unit 7 scans the IC card until 5 seconds elapse (steps 202 and 203). When the communication response to the NFC communication unit 7 by the IC card 26 is made within 5 seconds (step 204), the IC card is scanned. The electronic key ID is received from the card 26 and the process proceeds to step 206.

  Then, it is determined whether or not the electronic key ID matches the electronic key ID stored in the memory 9 (step 206). If it is determined that the electronic key ID does not match, each LED 4a, 4b, 4c of the LED display unit 4 is determined. An error is displayed by blinking or the like (step 208), and the process is terminated. On the other hand, if it is determined in step 206 that they match, an unlock signal is output from the lock / unlock signal output unit 11 (step 207), and a motor (not shown) is unlocked and the process ends.

  On the other hand, if it is determined in step 202 that 5 seconds have elapsed, each LED 4a, 4b, 4c of the LED display unit 4 is displayed with an error, for example, by blinking (step 208), and the process ends.

  If there is no communication response from the IC card to the NFC communication unit 7 in step 204, the IC card scan is stopped (step 209), and the BLE communication unit 8 starts the BLE scan (step 210). When the mobile terminal 24 makes a communication response to the BLE communication unit 8 (step 211), the process proceeds to step 205, where the encryption / decryption unit 10 decrypts the encrypted electronic key ID. What is sent from the portable terminal 24 is the above-described secondary unlocking information. The encryption / decryption unit 10 first decrypts the encrypted information to obtain the primary unlocking information and the secondary additional information, and then The primary unlocking information is further decrypted with encryption information to obtain an electronic key ID and primary additional information.

  Next, the process proceeds to step 206, where the authentication unit 11 determines whether or not the decrypted electronic key ID matches the electronic key ID stored in the memory 9, and if it does not match, the LED display An error is displayed, for example, by blinking the LEDs 4a, 4b, 4c of the unit 4 (step 208), and the process ends. On the other hand, if it is determined in step 206 that they match, an unlock signal is output from the lock / unlock signal output unit 11 (step 207), and a motor (not shown) is unlocked and the process ends.

  On the other hand, if it is determined in step 211 that there is no communication response to the BLE communication unit 8 by the portable terminal 24, the BLE scan is stopped (step 212), the process returns to step 202, and the push button 5a is pressed once for a short time. It is determined whether or not 5 seconds have passed since it is determined. If it is determined that 5 seconds have not elapsed, the process proceeds to step 203, and thereafter, the above-described operation from step 204 is performed. If it is determined in step 202 that 5 seconds have elapsed, the process proceeds to step 208, an error is displayed, and the process ends.

  As described above, when the electronic key ID is authenticated, the unlocking operation is performed. However, the locking operation is performed when the electronic key ID is authenticated in the unlocked state. Since the authentication in the locking operation is the same as the authentication in the unlocking operation described above, the description thereof is omitted.

  The present invention is not limited to the above-described embodiment. For example, the normal operation confirmation information input means may be a push button instead of the registered management card 21. A case where the button is pressed for a combination of times may be input as regular operation confirmation information. Further, the communication / control mechanism may be housed in an appropriate case and installed near the body 2 outside the room, instead of being housed in the body 2. Furthermore, although the smart phone is suitable as the portable terminal 24, it should just be provided with the BLE communication function, and is not necessarily restricted to a smart phone.

1 Electronic lock 2 Body 4 LED display 4a, 4b, 4c LED
DESCRIPTION OF SYMBOLS 5 Operation mode setting part 5a Push button 7 NFC communication part 8 BLE communication part 9 Memory 10 Encryption / decryption part 11 Authentication part 12 Locking / unlocking signal output part 13 Control part 14 Microcomputer 21 Registered management card 22 Mobile terminal registration card 23 Electronic key Management server 24 Mobile terminal 25 Mobile terminal electronic key request machine 26 IC card

Claims (4)

An electronic lock and an electronic key management server;
The electronic lock includes an NFC communication unit that communicates with a contactless IC card, a BLE communication unit that communicates with a mobile terminal, a memory that stores an electronic key ID received by each of these communication units, and an electronic key ID that is encrypted. An encryption / decryption unit that decrypts the electronic key ID, an authentication unit that authenticates whether the electronic key ID is valid, and an unlocking signal that outputs a locking signal or an unlocking signal when the electronic key ID is valid An output control unit and a control unit for controlling each operation;
When there is communication from the non-contact type IC card to be used as the electronic key in which the electronic key ID is written in advance by the electronic key management server to the NFC communication unit, the electronic key ID of the non-contact type IC card is stored in the memory. While memorizing it as an electronic key,
When there is communication in the NFC communication unit from a mobile terminal registration IC card in which an electronic key ID for mobile terminal and encryption key information used for encryption and decryption are written in advance by the electronic key management server, When the key ID and the encryption key information are stored in the memory, and the portable terminal communicates with the electronic key management server and obtains the electronic key ID encrypted with the encryption key information from the server, An electronic lock system characterized in that the terminal is an electronic key. The electronic lock further includes an operation mode setting unit,
When there is communication from the non-contact type IC card to be used as the electronic key to the NFC communication unit in the state set in the electronic key registration mode by the operation mode setting unit, the electronic key ID of the non-contact type IC card Is stored in the memory as an electronic key,
Similarly, when there is communication from the mobile terminal registration IC card to the NFC communication unit in the state set to the electronic key registration mode by the operation mode setting unit, the electronic key ID and encryption key information are stored in the memory. The portable key that communicates with the electronic key management server and obtains the electronic key ID encrypted with the encryption key information from the server is used as the electronic key. The electronic lock system described. In addition to the electronic lock and electronic key management server, it has a regular operation confirmation information input means,
After the authentication unit authenticates the regular operation confirmation information indicating that the electronic lock is a regular operation input from the regular operation confirmation information input unit,
The electronic device according to claim 1 or 2, wherein communication between the NFC communication unit and the contactless IC card or the mobile terminal registration IC card to be used as the electronic key is possible. Lock system. 4. The electronic lock according to claim 3, wherein the normal operation confirmation information input means is a non-contact type IC card having an NFC communication function and whose ID information is previously written in a memory of the electronic lock. system.

Images