JP2017182604A - Key data distribution system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a key data distribution system which can increase the safety of distribution of key data and distribute key data to a legitimate terminal device alone.SOLUTION: A key data distribution system 1 according to the present invention includes: a terminal device 4 for sending key data 6 to an electric lock device 2 by a non-contact communication and for locking or unlocking the electric lock device 2; and a key data distribution device 3 for distributing the key data 6 to the terminal device 4 wirelessly. The key data distribution device 3 is designed to provide a token 7 related to the key data 6 directly to the terminal device 4 or to a user of the terminal device 4. The terminal device 4 is designed to be capable of inputting the token 7 and to send a request to distribute the key data 6 based on the input token 7 to the key data distribution device 3 by a short-range radio communication. After the key data distribution device 3 receives the request to distribute the key data 6 from the terminal device 4, the device sends the key data 6 to the terminal device 4 by a short-range radio communication if the device has authenticated the correspondence between the key data 6 and the token 7.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a key data distribution system that distributes key data to a terminal device that locks and unlocks an electric lock device.

  2. Description of the Related Art Conventionally, in facilities such as hotels, an electric lock device is provided on a door of an exclusive part in order to restrict entry into and exit from an exclusive part such as each room. Some electric lock devices are configured such that a non-contact IC card or the like can be locked and unlocked as a key medium. For example, in a hotel, a system that manages a key medium of an electric lock device in each room is known as a hotel card lock system.

  Further, in recent years, the key data is stored in a terminal device such as a smartphone or a tablet owned by a user in the exclusive section, and the key data is transmitted from the terminal device to the electric lock device, thereby unlocking and unlocking the electric lock device. There is something to do.

  For example, a key data request processing system disclosed in Patent Document 1 includes a mobile terminal that stores key data and can use a plurality of services, and a key data processing device that processes key data through contactless communication with the mobile terminal. Is provided. The mobile terminal also has a function of notifying the owner of the mobile terminal when there is a key data transmission request from an unregistered key data processing device, and whether or not the mobile terminal owner can transmit key data. Confirm the will.

JP 2014-071635 A

  In a key data distribution system, a key data distribution device that manages key data distributes key data to a terminal device using a communication method such as NFC (Near Field Communication) having a communication range of several centimeters to 1 m. There is something to do. In such a key data distribution system, key data cannot be used by a terminal device such as iPhone (registered trademark) that does not support NFC. Therefore, in the key data distribution system, the key data distribution device or the like transmits the key data to the terminal device by a short-range wireless communication method such as Bluetooth (registered trademark) having a communication range of several meters to several tens of meters. There is. However, in this case, if there is another terminal that should not distribute the key data in addition to the terminal device that should distribute the key data within the communication range of the short-range wireless communication, the key data is also transmitted to the other terminals. Will be delivered.

  The present invention has been made to solve the above-described problems, and an object of the present invention is to provide a key data distribution system that increases the security of key data distribution and distributes key data only to legitimate terminal devices. It is.

  In order to achieve the above-described object, the present invention provides a terminal device that transmits and receives key data to the electric lock device by non-contact communication to lock and unlock the electric lock device, and the key data to the terminal device at a short distance. A key data distribution system including a key data distribution device that distributes by wireless communication, wherein the key data distribution device directly provides a token associated with the key data to the terminal device or a user of the terminal device The terminal device is configured to be capable of inputting the token, and transmits the key data distribution request based on the input token to the key data distribution device by the short-range wireless communication. When the key data distribution device further receives the key data distribution request from the terminal device, the key data distribution device authenticates the correspondence between the key data and the token. And transmitting to the terminal device the key data by the short range wireless communication.

  With this feature, the key data distribution system can distribute the key data only to the terminal device that has input the token in a configuration in which the key data is distributed from the key data distribution device to the terminal device by short-range wireless communication. it can. In addition, since the key data distribution device directly provides a token associated with the key data to the terminal device or a user of this terminal device, the key data distribution device knows the token to other terminals that do not intend to distribute the key data and users of the terminal. The confidentiality of the token can be improved. Therefore, even when other terminals other than the terminal device exist within the communication range of the key data distribution device, the key data is distributed only to the terminal device intended to distribute the key data, and the key data is not intended to be distributed. The distribution of the key data to the terminal can be prevented, and the security of the distribution of the key data and the use of the exclusive part can be improved.

  In the key data distribution system according to the present invention, the key data distribution device may generate the token with a two-dimensional code.

  By providing this feature, the key data distribution system can further enhance the confidentiality of the token.

  Further, in the key data distribution system according to the present invention, the key data distribution device provides the token based on identification information of the electric lock device or an exclusive part whose entry / exit is restricted by locking / unlocking of the electric lock device. It may be characterized by.

  By providing this feature, the key data distribution system can further enhance the confidentiality of the token.

  In the key data distribution system according to the present invention, the key data distribution device may provide the token based on identification information of the terminal device or a user who owns the terminal device.

  By providing this feature, the key data distribution system can further enhance the confidentiality of the token.

  Further, in the key data distribution system according to the present invention, the terminal device has a function of inputting the token, a function of requesting distribution of the key data associated with the token based on the token, and the key data. A program having a function of receiving from the key data distribution device and a function of transmitting the key data to the electric lock device may be stored, and a control unit that executes the program may be provided.

  By providing this feature, the key data distribution system can improve the operability of the terminal device and perform token input and key data transmission / reception without imposing a burden on the user.

  According to the present invention, there is provided a key data distribution system that increases the security of key data distribution and distributes key data only to legitimate terminal devices.

1 is a block diagram showing an overall configuration of a key data distribution system according to an embodiment of the present invention. It is a flowchart which shows the operation example which distributes key data according to the authentication of the token of the key data distribution system which concerns on one Embodiment of this invention.

  A key data distribution system according to an embodiment of the present invention will be described with reference to the accompanying drawings. FIG. 1 is a block diagram illustrating an outline of a configuration of a key data distribution system according to an embodiment of the present invention, and FIG. 2 is a flowchart illustrating an operation example of the key data distribution system according to an embodiment of the present invention.

  In the present embodiment, the key data distribution system 1 is a system that distributes key data 6 used for locking / unlocking or unlocking the electric lock device 2, and as shown in FIG. Device 4. Although one terminal device 4 is illustrated in FIG. 1, a plurality of terminal devices 4 may be provided.

  The electric lock device 2 is provided to lock and unlock a door that restricts entry / exit (entrance / exit) into / from an exclusive part such as a hotel room. For example, when there are a plurality of exclusive parts, an electric lock device 2 is provided for each exclusive part, and each electric lock device 2 is unlocked or unlocked using unique key data 6.

  The electric lock device 2 includes a locking / unlocking mechanism 10 attached to a door, a reader 11 that receives key data 6 by short-range wireless communication such as Bluetooth (registered trademark), and control for authenticating the key data 6 received by the reader 11. Part 12. The reader 11 and the control unit 12 may be configured integrally, but may be configured separately.

  The locking / unlocking mechanism 10 includes, for example, a dead bolt, an electric actuator that moves the dead bolt, and a drive unit such as a motor for driving the electric actuator (not shown). The dead bolt moves so as to protrude from the door and is locked in the strike of the door frame to lock the door so that the door cannot be opened, and on the other hand, it moves so as to be removed from the strike and pulled into the door. The door is unlocked and opened. The locking / unlocking mechanism 10 is configured such that, based on the locking signal or the unlocking signal from the control unit 12, the driving unit drives the electric actuator to lock or unlock the door.

  Alternatively, the locking / unlocking mechanism 10 is always locked when the door is closed, can always be unlocked from the inside of the exclusive part, and based on the unlocking signal from the control part 12 from the outside of the exclusive part. And may be configured to unlock.

  The reader 11 is provided in the vicinity of the door outside the exclusive portion. The reader 11 is a receiving device capable of non-contact communication with the terminal device 4 by the short-range wireless communication method, and receives the key data 6 from the terminal device 4 and transmits it to the control unit 12.

  The control unit 12 is a computer including a CPU, a memory, and the like, and stores key data (stored key data) unique to the electric lock device 2. The storage key data may be registered in advance in the control unit 12 by the administrator, or may be transmitted from the key data distribution device 3 to the control unit 12 via a predetermined network and registered in advance.

  Further, when receiving the key data 6 (transmission key data) transmitted from the terminal device 4 from the reader 11, the control unit 12 authenticates whether the transmission key data 6 matches the storage key data. Then, when authenticating the transmission key data 6, the control unit 12 transmits a locking signal or an unlocking signal to the locking / unlocking mechanism 10.

  The key data distribution device 3 manages and distributes key data 6 unique to each electric lock device 2, and is provided in, for example, a hotel reception or a facility management room. The key data distribution device 3 is configured to be capable of contactless communication with the terminal device 4 by short-range wireless communication such as Bluetooth (registered trademark), and configured to be able to transmit the key data 6 to the terminal device 4.

  For example, the key data distribution device 3 includes a control unit 20 composed of a CPU, a memory, and the like, a communication unit 21 that realizes the short-range wireless communication, and a token issuing unit that issues a token 7 associated with the key data 6. 22. In the present embodiment, a configuration in which the token issuing unit 22 is provided integrally with the key data distribution device 3 will be described. However, the token issuing unit 22 may be provided in a device separate from the key data distribution device 3. .

  The control unit 20 has a function of managing the key data 6, and includes identification information of the electric lock device 2 and the exclusive unit provided with the electric lock device 2, and key data 6 corresponding to the electric lock device 2. Are stored in the memory in association with each other. When the control unit 20 distributes the key data 6 to the terminal device 4, the key data 6, the terminal device 4 that has distributed the key data 6, and the identification information of the user who owns the terminal device 4 May be stored in the memory in association with each other.

  Further, the control unit 20 functions as a distribution control unit 23 that controls the distribution of the key data 6. The distribution control unit 23 inputs a distribution instruction of the key data 6 to be distributed by a distribution operation using an operation unit (not shown) such as a keyboard provided in the key data distribution device 3. The distribution control unit 23 may input a distribution instruction for the key data 6 by wireless communication from the terminal device 4. Then, the distribution control unit 23 creates key data 6 for which distribution is instructed, and transmits a token issuance instruction regarding the key data 6 to the token issuance unit 22. The token issuance instruction includes the identification information of the electric lock device 2 corresponding to the key data 6 and the exclusive part, and may include the identification information of the terminal device 4 to which the key data 6 is distributed and the user.

  Further, when the distribution control unit 23 receives a distribution request for the key data 6 from the terminal device 4, the distribution control unit 23 authenticates whether the token 7 included in the distribution request corresponds to the key data 6. When the distribution control unit 23 authenticates that the token 7 corresponds to the key data 6, the distribution control unit 23 causes the communication unit 21 to transmit the key data 6 by one-to-one communication with the terminal device 4 that transmitted the distribution request. Control.

  The communication unit 21 operates based on a short-range wireless communication method having a communication range of about several meters to several tens of meters. For example, the communication unit 21 receives a distribution request for the key data 6 from the terminal device 4, and the control unit 20 The key data 6 instructed from is transmitted (distributed) to the terminal device 4. Further, the communication unit 21 is configured to be able to distribute the key data 6 using NFC to the terminal device 4 compatible with NFC (Near Field Communication) having a communication range of several cm to 1 m. Also good.

  When the token issuing unit 22 receives the token issuing instruction from the distribution control unit 23, the token issuing unit 22 generates the token 7 associated with the key data 6 based on the token issuing instruction, and the terminal device 4 and the terminal device 4 are It is configured to issue a token 7 to the user who holds it.

  The token issuing unit 22 generates a token 7 using a random number that cannot be inferred, and encrypts and issues the token 7 with a two-dimensional code such as a QR code (registered trademark) or a one-dimensional code such as a barcode. May be. The token issuing unit 22 generates the token 7 based on the identification information of the electric lock device 2 and the exclusive part corresponding to the key data 6 included in the token issuing instruction, for example, the room number of the hotel room as the exclusive part. May be. Further, the token issuing unit 22 may generate the token 7 based on the identification information of the terminal device 4 or the user that is the distribution destination of the key data 6 included in the token issuing instruction. Alternatively, the token issuing unit 22 may generate the token 7 based on a combination of the identification information of the electric lock device 2 or the exclusive unit and the identification information of the terminal device 4 or the user.

  Further, the token issuing unit 22 issues, for example, the token 7 by displaying the two-dimensional code or the one-dimensional code obtained by encrypting the token 7 on the display 24 included in the key data distribution device 3 or printing it on paper. To do. Alternatively, the token issuing unit 22 may issue the token 7 using NFC to the terminal device 4 that supports NFC. Further, the token issuing unit 22 may provide a user, the terminal device 4 with a numerical value, a character, or a symbol (for example, a room number) indicating the token 7.

  The terminal device 4 is configured to be capable of non-contact communication with the electric lock device 2 and the key data distribution device 3 by short-range wireless communication such as Bluetooth (registered trademark), and receives key data 6 from the key data distribution device 3. It has a reception function and a key data transmission function for transmitting the key data 6 to the electric lock device 2. For example, the terminal device 4 is configured by a mobile terminal such as a smartphone or a tablet.

  For example, the terminal device 4 includes a control unit 30 including a CPU and a memory, a communication unit 31 that realizes the short-range wireless communication, and a token input unit 32 that inputs the token 7 issued from the key data distribution device 3. With.

  The control unit 30 is configured to control the communication unit 31 to realize the key data reception function and the key data transmission function. For example, the terminal device 4 composed of a smartphone, a tablet, or the like has a key data reception function and a key data transmission function, and can store the received key data 6 (hereinafter referred to as a key application 33). Is stored in the memory of the control unit 30, and the CPU is configured to execute the key application 33. The key application 33 is a hotel card lock application that is distributed via the key data distribution device 3 or the Internet and can be installed in advance.

  The communication unit 31 operates based on a short-range wireless communication system having a communication range of about several meters to several tens of meters, for example, transmits a distribution request for key data 6 to the key data distribution apparatus 3, The key data 6 is received from the key data distribution device 3. Further, the communication unit 31 uses NFC to transmit a distribution request for the key data 6 and to transmit key data to the terminal device 4 compatible with NFC (Near Field Communication) having a communication range of several cm to 1 m. 6 may be configured to receive itself.

  The token input unit 32 is configured to input the token 7 issued by the token issuing unit 22 of the key data distribution device 3. For example, when a token 7 of a two-dimensional code or a one-dimensional code is issued, the token input unit 32 encrypts the two-dimensional code or the one-dimensional code using an imaging unit such as a CCD provided in the terminal device 4. The read token 7 is read and decrypted. Alternatively, the token input unit 32 is configured to be able to input the token 7 by an operation unit such as a numeric keypad or a keyboard provided in the terminal device 4 when the token 7 is provided as a numerical value, a character, or a symbol.

  Further, the token input unit 32 creates a distribution request for the key data 6 associated with the token 7 based on the token 7 input as described above. The distribution request for the key data 6 includes the token 7 and terminal information such as an address for permitting one-to-one communication with the terminal device 4. The token input unit 32 causes the communication unit 31 to transmit this distribution request to the key data distribution device 3.

  The function of inputting the token 7 of the token input unit 32 and the function of requesting the distribution of the key data 6 based on the token 7 may be configured to be executed by the key application 33 described above.

  Next, in the key data distribution system 1 having such a configuration, an operation example of distributing the key data 6 in response to the authentication of the two-dimensional code token 7 will be described with reference to the flowchart of FIG.

  First, in the key data distribution system 1, a user or the like who uses an exclusive part installs the key application 33 in the terminal device 4 in advance using the terminal device 4 owned by the user. When the user or the like obtains the key data 6 of the electric lock device 2 in order to use the exclusive part that is locked and unlocked by the electric lock device 2, the administrator or the like obtains the key for managing the key data 6. An instruction to distribute key data 6 is input using the data distribution device 3 (step S1).

  In the key data distribution device 3, the distribution control unit 23 creates the key data 6 instructed to be distributed (step S <b> 2), and further transmits a token issuance instruction regarding the key data 6 to the token issuance unit 22.

  The token issuing unit 22 generates a token 7 of a two-dimensional code corresponding to the key data 6 in response to the token issuing instruction and displays the token 7 on the display 24 of the key data distribution device 3. (Step S3).

  On the other hand, the user or the like activates the key application 33 using his / her terminal device 4, and further executes the token input unit 32 by the key application 33 to obtain the token 7 of the two-dimensional code displayed on the display 24. Read and input (step S4). The token input unit 32 that has read the token 7 of the two-dimensional code decrypts the two-dimensional code to obtain the token 7, and sends a distribution request for the key data 6 including the token 7 by the communication unit 31. It transmits to the key data distribution apparatus 3 by a communication system (step S5).

  In the key data distribution device 3, the communication unit 21 receives the distribution request for the key data 6 from the terminal device 4. Further, the distribution control unit 23 determines whether the token 7 included in the distribution request corresponds to the key data 6. No is authenticated (step S6). When the token 7 is authenticated to correspond to the key data 6, the communication control unit 21 is controlled by the distribution control unit 23, and the one-to-one communication between the terminal device 4 that has transmitted the distribution request and the key data distribution device 3. Is established, and the key data 6 is transmitted to the terminal device 4 by the short-range wireless communication method (step S7).

  In the terminal device 4, when the key data 6 is received from the key data distribution device 3 by the communication unit 31, the key application 33 stores the key data 6 (step S8), and the terminal device 4, the key data distribution device 3, End communication. The terminal device 4 can transmit the stored key data 6 to the electric lock device 2 by executing the key data transmission function of the key application 33, and can lock and unlock the electric lock device 2. It becomes possible.

  As described above, according to the key data distribution system 1 according to the present embodiment, the terminal device 4 that transmits and receives the key data 6 to the electric lock device 2 by non-contact communication and unlocks the electric lock device 2, and the terminal A key data distribution device 3 that wirelessly distributes the key data 6 to the device 4; The key data distribution device 3 is configured to directly provide the token 7 associated with the key data 6 to the terminal device 4 or the user of the terminal device 4. The terminal device 4 is configured to be able to input the token 7 and transmits a distribution request for the key data 6 based on the input token 7 to the key data distribution device 3 by short-range wireless communication. Further, when the key data distribution device 3 receives a distribution request for the key data 6 from the terminal device 4 and authenticates that the key data 6 and the token 7 correspond to each other, the key data 6 is transmitted by the short-range wireless communication. It transmits to the terminal device 4.

  With such a configuration, the key data distribution system 1 inputs the token 7 in a configuration in which the key data 6 is distributed from the key data distribution device 3 to the terminal device 4 by short-range wireless communication such as Bluetooth (registered trademark). The key data 6 can be distributed only to the terminal device 4. Further, since the key data distribution device 3 directly provides the token 7 associated with the key data 6 to the terminal device 4 or the user of the terminal device 4, another terminal that does not intend to distribute the key data 6 or its terminal The token 7 is not known to the user and the confidentiality of the token 7 can be improved. Therefore, even when other terminals other than the terminal device 4 exist within the communication range of the key data distribution device 3, the key data 6 is distributed only to the terminal device 4 intended to distribute the key data 6. It is possible to prevent the key data 6 from being distributed to other terminals that are not intended to be distributed, and to improve the security of the distribution of the key data 6 and the use of the exclusive part.

  In the key data distribution system 1 according to the present embodiment, the key data distribution device 3 generates the token 7 with a two-dimensional code.

  With such a configuration, the key data distribution system 1 can further enhance the confidentiality of the token 7.

  Further, in the key data distribution system 1 according to the present embodiment, the key data distribution device 3 uses the token based on the identification information of the electric lock device 2 or the exclusive part whose entry / exit is restricted by the locking / unlocking of the electric lock device 2. 7 is provided.

  With such a configuration, the key data distribution system 1 can further enhance the confidentiality of the token 7.

  In the key data distribution system 1 according to the present embodiment, the key data distribution device 3 provides the token 7 based on the identification information of the terminal device 4 or the user who owns the terminal device 4.

  With such a configuration, the key data distribution system 1 can further enhance the confidentiality of the token 7.

  In the key data distribution system 1 according to the present embodiment, the terminal device 4 has a function of inputting a token 7, a function of requesting distribution of the key data 6 associated with the token 7 based on the token 7, and a key A program such as a key application 33 having a function of receiving the data 6 from the key data distribution device 3 and a function of transmitting the key data 6 to the electric lock device 2 is stored, and a control unit 30 that executes this program is stored. Prepare.

  With such a configuration, the key data distribution system 1 can improve the operability of the terminal device 4 and perform input of the token 7 and transmission / reception of the key data 6 without imposing a burden on the user.

  Moreover, since the above description of each embodiment of the present invention describes a preferred embodiment in the key data distribution system according to the present invention, various technically preferable limitations may be attached. However, the technical scope of the present invention is not limited to these embodiments unless specifically described to limit the present invention. That is, the above-described components in the embodiment of the present invention can be appropriately replaced with existing components and the like, and various variations including combinations with other existing components are possible. The description of the embodiment of the present invention described above does not limit the contents of the invention described in the claims.

DESCRIPTION OF SYMBOLS 1 Key data delivery system 2 Electric lock device 3 Key data delivery device 4 Terminal device 6 Key data 7 Token 10 Locking / unlocking mechanism 11 Reader 12 Control unit 20 Control unit 21 Communication unit 22 Token issue unit 23 Distribution control unit 24 Display unit 30 Control Unit 31 Communication unit 32 Token input unit 33 Key application

Claims (5)

A terminal device for transmitting and receiving the key data to the electric lock device by non-contact communication to lock and unlock the electric lock device; and a key data distribution device for distributing the key data to the terminal device by short-range wireless communication. Key data distribution system,
The key data distribution device is configured to directly provide a token associated with the key data to the terminal device or a user of the terminal device,
The terminal device is configured to be able to input the token, and transmits the key data distribution request based on the input token to the key data distribution device by the short-range wireless communication.
When the key data distribution device further receives the key data distribution request from the terminal device and authenticates that the key data corresponds to the token, the key data distribution device transmits the key data to the short-range wireless communication. The key data distribution system is characterized in that the data is transmitted to the terminal device.   The key data distribution system according to claim 1, wherein the key data distribution device generates the token with a two-dimensional code.   The key data distribution device provides the token based on identification information of the electric lock device or an exclusive part whose entry / exit is restricted by locking / unlocking of the electric lock device. 2. The key data distribution system according to 2.   4. The key according to claim 1, wherein the key data distribution device provides the token based on identification information of the terminal device or a user who owns the terminal device. 5. Data distribution system.   The terminal device has a function of inputting the token, a function of requesting distribution of the key data associated with the token based on the token, a function of receiving the key data from the key data distribution device, and 5. The storage device according to claim 1, further comprising a control unit that stores a program having a function of transmitting key data to the electric lock device and executes the program. Key data distribution system.

Images