JP2018035515A - Electronic lock system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To configure an electronic lock system at a low cost and having a high level of security.SOLUTION: Concerning an electronic lock system used, a mobile terminal device includes short-distance wireless communication means for communicating with an electronic lock, the mobile terminal device having an authentication tool connected by wired or wireless communication means. The authentication tool has biometric authentication means, as well as means for creating encrypted data for user authentication by encrypting, using a cryptographic key of the authentication tool, user data authenticated by the biometric authentication means and authentication tool-side ID data, and then transmitting the created data to an authentication server through the mobile terminal device. The mobile terminal device has means for transmitting to the authentication server an electronic lock unlocking command request command that includes electronic lock-side ID data for identifying the electronic lock. When the authentication server determines effectiveness of unlocking of the electronic lock, the authentication server creates one-time unlocking command encryption data and transmits the data to the electronic lock through the mobile terminal device, thus unlocking the electronic lock.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an electronic lock system using an electronic lock, a portable terminal device, and an authentication server.

  At present, electronic locks that can be opened and closed by holding a non-contact IC card are becoming common. For example, an authentication key or ID number is stored in advance in a non-contact IC card (in advance), and a key stored in the non-contact IC card by a dedicated reader / writer installed in the electronic lock A method is generally used in which the ID number is read and authenticated and identified, and the electronic lock is opened and closed. In this method, an electromagnetic wave for NFC (Near Field Communication) communication is output from a reader / writer installed in the electronic lock, power is supplied to the non-contact IC card by the electromagnetic wave for NFC communication, and the ID number is assigned to the card. In order to obtain more, the electronic lock needs a power source for driving the reader / writer. On the other hand, it is not necessary to have a power source on the non-contact IC card side. NFC is a short-range wireless communication technology approved as an international standard.

  As disclosed in Patent Document 1, the electronic lock system has a function of a non-contact IC card in a portable terminal device, and an electronic lock, a gate, or the like that can be opened and closed by holding the portable terminal device over a reader / writer has already been provided. It has been put into practical use. At present, portable terminal devices with an NFC communication function are becoming popular as general portable terminal devices. Further, in the unlocking of electronic locks, unlocking electronic locks using a mobile terminal device has generally been widely used. In this case, the portable terminal device operating as a non-contact type IC card has a power source, but the operation is equivalent to that of the non-contact type IC card.

  A “key” is also used when using a personal computer or the like. This “key” usually takes the form of electronic information, usually a password.

  However, in the technique of Patent Document 1, there is a risk that a non-contact IC card or a portable terminal device having a non-contact IC card function may be stolen, and the stolen non-contact IC card is used by others. There was a problem that the electronic lock could be opened and closed. Also, passwords could be stolen and used by others.

  Patent Document 2 proposes an electronic lock system that uses an electronic lock, an electronic key, and an authentication server with enhanced security as follows.

  In the electronic lock system of Patent Document 2, an electronic key having an authentication parameter detection unit including a time detection unit communicates with an authentication server using a key side communication function unit. The electronic key authenticates the first authentication key stored by itself, biometric authentication data of the user's fingerprint read by adding the fingerprint authentication function unit to the electronic key as necessary, and time data detected by the authentication parameter detection unit Send to the server as key information.

  The authentication server has a database for storing an authentication key of the electronic lock associated with the first authentication key and authentication setting information, and the authentication server is configured to store the electronic lock based on the first authentication key received from the electronic key. The authentication key and authentication setting information are read from the database to authenticate the electronic key.

  Then, when authenticating the electronic key, the authentication server generates server-side validity determination information and returns it to the electronic key.

When the server side validity determination information is received from the authentication server, the electronic key generates key side verification electronic information based on the received server side validity determination information and transmits it to the electronic lock.

  Then, the electronic lock verifies the received key-side verification electronic information and performs a process of unlocking the electronic lock.

Japanese Patent Laying-Open No. 2015-094123 JP 2007-315149 A

  However, in the electronic lock system of Patent Document 2, it is necessary to provide a number of functions including a communication function in the electronic key, and the electronic key is used in parallel with the user's portable terminal device and is independent of the portable terminal device. Was the device. Therefore, there is a problem that the cost of the electronic lock system is increased because an electronic key configured with such many functions is used.

  This invention is made | formed in view of such a situation, and the subject of this invention is suppressing the cost of the electronic lock system with strong security, providing it low.

In order to solve the above problems, the present invention is an electronic lock system using an electronic lock, a mobile terminal device, and an authentication server,
The portable terminal device has short-range wireless communication means for communicating with the electronic lock;
An authenticator is connected to the portable terminal device by wired or wireless communication means, etc., and the authenticator has biometric authentication means,
User authentication data of the user authenticated by the biometric authentication means by the authenticator or user biometric authentication data, and encrypted data for user authentication in which the authenticator-side ID data is encrypted using an encryption key of the authenticator And has means for transmitting to the authentication server via the portable terminal device,
The portable terminal device has means for transmitting an unlocking command request command for an electronic lock including electronic lock side ID data for specifying an electronic lock to the authentication server,
When the authentication server determines the validity of the unlocking of the electronic lock based on the unlocking command request command, the authentication server creates one-time unlocking command encrypted data and stores it in the electronic lock via the portable terminal device. Send
The electronic lock system has an unlocking means for unlocking the electronic lock based on the one-time unlock command encryption data.

  With this configuration, the present invention enhances security by exchanging information encrypted by the authentication device, the authentication server, and the electronic lock using the encryption key, and the authentication device and the authentication server pass through the portable terminal device. Communication is effective in reducing the cost of the electronic lock system.

  The present invention is the above electronic lock system, wherein the one-time unlock command encryption data includes a random number or second generated by either the authentication server, the authenticator, or the portable terminal. The electronic lock system is characterized in that it includes a random component such as time, and the one-time unlock command encrypted data is made different information each time by the random component so that it can be used in one time.

The present invention is the above electronic lock system, wherein the authentication server stores electronic lock encryption key data, authenticator encryption key data, and electronic lock unlock permission information. Has a key database for locks,
The unlocking permission information of the electronic lock stores information associating the user, the authenticator, and the electronic lock,
The authentication server decrypts the user authentication encrypted data using the authenticator encryption key data to authenticate the authenticator, and retrieves the unlocking permission information of the electronic lock from the electronic lock corresponding key database. Determining the effectiveness of unlocking the electronic lock, and using the electronic lock encryption key data to create the one-time unlock command encryption data,
The electronic lock has a reader / writer that communicates with the unlocking means, a lock-side encryption key storage means, and the short-range wireless communication means of the portable terminal device;
The electronic means for unlocking the electronic lock when the unlocking means decrypts the one-time unlock command encrypted data and determines the validity of the one-time unlock command encrypted data. It is a lock system.

The present invention is the above electronic lock system, wherein the authentication server stores authentication server private key data, electronic lock public key data, and authenticator public key data, and the electronic lock The lock side encryption key storage means stores the electronic lock private key data,
In the electronic lock system, the authentication server encrypts and creates the one-time unlock command encryption data using the electronic lock public key data.

  Further, the present invention is the above electronic lock system, wherein a plurality of user ID data or biometric data of a user who can unlock one of the electronic locks is registered in the electronic lock corresponding key database, An electronic lock system that allows a plurality of users to unlock the electronic lock.

  The present invention is the above electronic lock system, wherein the authenticator is used by a plurality of users, and the authentication server includes user ID data or biometric data of each user, the authenticator, and the electronic lock. The electronic lock system is characterized in that the unlocking permission information of the electronic lock associated with is stored in the electronic lock corresponding key database.

  According to the present invention, an authentication device having biometric authentication means is connected to a portable terminal device, the authentication server registers and stores the authentication device in a database, and the authentication device authenticates the user with the biometric authentication means. The authenticator is authenticated by the authentication server by performing cryptographic communication with the authentication server via the mobile terminal device. Next, the mobile terminal device sends an unlock command request command designating the electronic lock desired to be unlocked to the authentication server, so that the authentication server determines the effectiveness of unlocking the electronic lock by the authenticated authenticator. To do. When the validity can be determined, the authentication server creates one-time unlock command encryption data for the electronic lock and transmits it to the electronic lock via the portable terminal device. The electronic lock uses the encryption key to decrypt the one-time unlock command encryption data, so that the electronic lock authenticates the authentication server and unlocks it.

  As such, the authentication server registers and stores the authenticator and the electronic lock in the database, and after authenticating the authenticator by performing encrypted communication, receives the unlock command request command for the electronic lock from the mobile terminal device, Since the effectiveness of unlocking is determined, general-purpose authenticators and portable terminal devices that are widely used can be used as keys for unlocking electronic locks. In this way, by exchanging information encrypted using an encryption key by an authenticator, an authentication server, and an electronic lock, communication with strong security can be performed using a widely used general-purpose authenticator and mobile terminal device. As a result, the cost of the electronic lock system can be kept low.

It is a block diagram which shows the structure of the electronic lock system of the 1st Embodiment of this invention. It is a block diagram which shows the structure of the authentication device of the 1st Embodiment of this invention. It is a block diagram which shows the structure of the authentication server of the 1st Embodiment of this invention. It is a figure which shows the data structure of the electronic lock corresponding | compatible key database of the authentication server of the 1st Embodiment of this invention. It is a block diagram which shows the structure of the electronic lock of the 1st Embodiment of this invention. It is a flowchart figure (the 1) which shows operation | movement of the electronic lock system of the 1st Embodiment of this invention. It is a flowchart figure (the 2) which shows operation | movement of the electronic lock system of the 1st Embodiment of this invention. It is a flowchart figure (the 3) which shows operation | movement of the electronic lock system of the 1st Embodiment of this invention. It is a flowchart figure (the 4) which shows operation | movement of the electronic lock system of the 1st Embodiment of this invention. It is a block diagram which shows the structure of the electronic lock system of the 2nd Embodiment of this invention. It is a block diagram which shows the structure of the authentication device of the 2nd Embodiment of this invention. It is a block diagram which shows the structure of the authentication server of the 2nd Embodiment of this invention. It is a figure which shows the data structure of the electronic lock corresponding | compatible key database of the authentication server of the 2nd Embodiment of this invention. It is a block diagram which shows the structure of the electronic lock of the 2nd Embodiment of this invention. It is a flowchart figure (the 1) which shows operation | movement of the electronic lock system of the 2nd Embodiment of this invention. It is a flowchart figure (the 2) which shows operation | movement of the electronic lock system of the 2nd Embodiment of this invention. It is a flowchart figure (the 3) which shows operation | movement of the electronic lock system of the 2nd Embodiment of this invention. It is a flowchart figure (the 4) which shows operation | movement of the electronic lock system of the 2nd Embodiment of this invention. It is a block diagram which shows the structure of the electronic lock system of the 4th Embodiment of this invention. It is a figure which shows the data structure of the electronic lock corresponding | compatible key database of the authentication server of the 5th Embodiment of this invention.

<First Embodiment>
FIG. 1 is a schematic block diagram showing the configuration of the electronic lock system according to the first embodiment of the present invention. First, the outline of the first embodiment according to the present invention will be described with reference to FIG.

(System configuration)
As shown in FIG. 1, the electronic lock system according to the first embodiment uses an electronic lock 40, a mobile terminal device 10, and an authentication server 30 connected via a communication network 100. An authentication device 20 is connected to the mobile terminal device 10 to provide an electronic key function. The authenticator 20 is provided with biometric authentication means 24 for biometric authentication of the user.

  The authentication server 30 is provided with an encryption key creating means 50 and an electronic lock corresponding key database 31. The electronic lock corresponding key database 31 stores the electronic lock unlocking permission information 31a storing the user ID data IDY that can unlock the electronic lock 40 of the electronic lock ID data ID2 and the authenticator 20 of the authenticator ID data ID1. sign up.

  The communication network 100 is a wireless communication network such as a mobile phone network or a wireless LAN network that connects the mobile terminal device 10 and the authentication server 30.

(Mobile terminal device 10)
The configuration of the portable terminal device 10 will be described using the portion of the portable terminal device 10 in FIG. As shown in the portion of the mobile terminal device 10 in FIG. 1, the mobile terminal device 10 includes a short-range wireless communication unit 11, a long-range wireless communication unit 12, and a storage unit 13.

  The storage unit 13 of the mobile terminal device 10 stores an electronic unlocking application program, and also stores an electronic lock side ID of the electronic lock 40 that can be unlocked by the mobile terminal device 10.

(Near field communication means 11)
The short-range wireless communication unit 11 of the mobile terminal device 10 communicates with the electronic lock 40 and the authenticator 20. For example, NFC communication, Bluetooth (registered trademark), infrared communication, or the like can be used as the communication method of the short-range wireless communication unit 11.

  The long-distance wireless communication unit 12 of the mobile terminal device 10 communicates with the authentication server 30 by a wireless communication system of a mobile phone network or a communication system used for a wireless LAN.

(Authentication device 20)
As shown in FIG. 2, the authenticator 20 connected to the portable terminal device 10 inputs the short-range wireless communication means 21, the clock function unit 22, the key side encryption key storage means 23, and the user biometric authentication data Y1. Biometric authentication means 24 is included.

  The biometric authentication unit 24 authenticates the user with the biometric authentication data. That is, the biometric authentication means 24 collates the input biometric authentication data Y1 with the user's biometric authentication data Y1 that the authenticator 20 names and stores with the authenticator registration user ID data IDY. If they match, the biometric authentication unit 24 authenticates the user of the authenticator registration user ID data IDY.

  In the present embodiment, the authenticator 20 is shown as an authenticator 20 that communicates with the portable terminal device 10 by the short-range wireless communication means 21 such as a wireless LAN. However, the USB key type authenticator 20 that is electrically connected to the portable terminal device 10 is shown. Can also be used.

(Key-side encryption key storage means 23)
The key-side encryption key storage means 23 of the authenticator 20 records the authenticator-side ID data, stores authentication server public key data Ws, and stores the authenticator encryption key data Kk.

(Biometric authentication means 24)
The authenticator 20 includes, as the biometric authentication unit 24, for example, a fingerprint authentication device, a vein authentication device, an iris authentication device, or the like.

(Authentication server 30)
As shown in FIG. 3, the authentication server 30 includes an encryption key generating means 50, an electronic lock corresponding key database 31 including an encryption key storage means 32 for storing encryption key data, a server-side clock function unit 33, a one-time It has unlocking command encrypted data creation means 34.

(Encryption key creation means 50 of authentication server 30)
The authentication server 30 registers the user when the user makes an application for registration into an electronic lock system that unlocks the user's electronic lock 40 using the user's mobile terminal device 10, and uses the encryption key creation means 50. Thus, the authenticator encryption key data Kk for the authenticator 20 of the user's portable terminal device 10 is created and shared by the authentication server 30 and the authenticator 20.

  Also, the encryption key creation means 50 creates electronic lock encryption key data Kj for the user's electronic lock 40 and shares it with the authentication server 30 and the user's electronic lock 40.

  For these encryption key data, shared key data shared by the authentication server 30 and other devices is used by a common key method. The authentication server 30 stores these encryption key data in the encryption key storage unit 32 of the electronic lock corresponding key database 31.

  Then, the authentication server 30 securely notifies the registered user of an access code and a password for accessing the authentication server 30 for the first time by using a sending means such as mail.

  The user securely connects the user's portable terminal device 10 to the authentication server 30 using the notified access code and password, and the authentication device encryption key data Kk for the user authentication device 20 and the user's electronic lock. The electronic key encryption key data Kj for 40 is received. Next, the user's mobile terminal device 10 registers the authenticator encryption key data Kk in the authenticator 20 and the electronic lock encryption key data Kj in the electronic lock 40.

  Since the authentication device encryption key data Kk is shared by the authentication device 20 and the authentication server 30, the authentication device 20 and the authentication server 30 can perform secure encrypted communication using the authentication device encryption key data Kk. Also, since the electronic lock encryption key data Kj is shared by the electronic lock 40 and the authentication server 30, the electronic lock 40 and the authentication server 30 perform secure encrypted communication using the electronic lock encryption key data Kj. be able to.

(Electronic lock key database 31)
As shown in FIG. 4, the electronic lock corresponding key database 31 of the authentication server 30 stores the electronic lock unlocking permission information 31a in which the electronic lock 40 that can be unlocked after the user is authenticated by the authenticator 20 is registered. . In the electronic lock unlocking permission information 31a, a set of user ID data IDY, authenticator side ID data ID1 of the authenticator 20 for authenticating the user, and electronic lock ID data ID2 is recorded.

  The user ID data IDY is ID information in which the authenticator 20 names the user of the biometric authentication data Y1, the authenticator ID data ID1 is unique ID information of the authenticator 20, and the electronic lock ID data ID2 is This is unique ID information of the electronic lock 40.

  The set of the user ID data IDY of the authenticator 20, the authenticator ID data ID1, and the electronic lock ID data ID2 of the electronic lock 40 in the unlocking permission information 31a of the electronic lock stored in the electronic lock corresponding key database 31 is obtained. Since the combination can be freely registered and registered in the unlocking permission information 31a of the electronic lock, for example, a group of unlocking permission information 31a of the electronic lock capable of unlocking one electronic lock 40 by a plurality of authenticators 20 is created. it can.

(Encryption key data of electronic lock 40 and authenticator 20)
The encryption key storage means 32 of the electronic lock corresponding key database 31 stores the authentication server private key data Cs, stores the electronic lock encryption key data Kj of the electronic lock 40 registered in the authentication server 30, and The authentication device encryption key data Kk of the authentication device 20 registered in the authentication server 30 is stored.

(One-time unlocking command encrypted data creation means 34)
The one-time unlocking command encrypted data creating means 34 of the authentication server 30 encrypts the one-time unlocking command encrypted data Q1 for commanding the unlocking of the electronic lock 40 using the electronic key encryption key data Kj. And create.

(Electronic lock 40)
The configuration of the electronic lock 40 will be described with reference to FIG. The electronic lock 40 includes a reader / writer 41 that performs short-range wireless communication, a clock function unit 42, a lock-side encryption key storage unit 43, and an unlocking unit 44.

(Reader / Writer 41)
The electronic lock 40 performs short-range wireless communication with the mobile terminal device 10 using the reader / writer 41, receives the one-time unlock command encryption data Q1 created by the authentication server 30 from the mobile terminal device 10, and receives the one-time After unlocking the unlocking command encrypted data Q1, the door of the house is unlocked.

(Lock-side encryption key storage means 43)
The lock side encryption key storage unit 43 stores electronic lock side ID data ID2 which is unique ID information of the electronic lock 40. Also, the electronic key encryption key data Kj is stored.

(Unlocking means 44)
The unlocking means 44 of the electronic lock 40 receives the one-time unlocking command encrypted data Q1 encrypted with the electronic lock encryption key data Kj from the authentication server 30 via the portable terminal device 10, and receives it as an electronic lock. By decrypting with the electronic lock encryption key data Kj stored in the memory 40, it is possible to confirm that the one-time unlock command encryption data Q1 has been created for the electronic lock 40 itself.

  Further, the unlocking means 44 stores the previously received one-time unlock command encrypted data Q1 in the storage means, and determines whether or not the received one-time unlock command encrypted data Q1 has already been received. Determination is made so that the electronic lock 40 is not unlocked a plurality of times with the one-time unlock command encryption data Q1.

  Then, the unlocking means 44 unlocks the door of the house according to the one-time unlock command encryption data Q1.

(Operation procedure of electronic lock system)
Next, the operation procedure of the electronic lock system according to the present embodiment when the present invention is applied to a house door key will be described with reference to the flowcharts of FIGS.

(User registration to the electronic lock system)
First, referring to the flowcharts of FIGS. 6 and 7, the procedure of the registration process of the user in the electronic lock system will be described.

(Step S1) User Registration Application The user communicates with the authentication server 30 using the user's portable terminal device 10 or a personal computer, and applies for user registration to the electronic lock system.

(Step S2)
The authentication server 30 transmits the software data of the service application program of the electronic lock system to the user's portable terminal device 10 when the registration application to the user's electronic lock system is received, and sends it to the user's portable terminal device 10. Remember.

(Modification 1)
As a first modification, the software data of the service application program of this electronic lock system is stored in the authentication server 30 by the user's mobile terminal device 10 using the access code and password notified from the authentication server 30 in the subsequent step S5. When connected, it may be transmitted to the user's mobile terminal device 10 and stored in the user's mobile terminal device 10.

  In the modified example 1, in addition to the above processing, when the authentication server 30 transmits the encryption key data Kk for the authenticator and the encryption key data Kj for the electronic lock to the user's portable terminal device 10 in step S13, the authentication server 30 However, the software data of the service application program of the electronic lock system may be transmitted to the user's mobile terminal device 10 and stored in the user's mobile terminal device 10.

(Step S3)
The authentication server 30 uses the encryption key creation means 50 to create the authentication device encryption key data Kk shared by the authentication server 30 and the authentication device 20 for the user's mobile terminal device 10 for each user who applied for registration. Then, the encryption key data Kj for electronic lock shared by the authentication server 30 and the electronic lock 40 of the user is generated.

(Step S4)
Then, the authentication server 30 securely notifies the user of an access code and a password for the user to access the authentication server 30 using shipping means such as mail.

(Step S5)
The user who receives the access code and password from the authentication server 30 starts registration processing of the electronic lock 40 to the authentication server 30.

  First, the portable terminal device 10 communicates with the electronic lock 40 via the short-range wireless communication means 11 to receive the electronic lock side ID data ID2 of the electronic lock 40, and uses the electronic lock side ID data ID2 as the authenticator 20. Send to.

  Then, the mobile terminal device 10 requests the user to input the biometric data Y1 from the authenticator 20.

(Step S6)
The user causes the biometric authentication unit 24 of the authenticator 20 to read the biometric authentication data Y1. When a fingerprint authentication device is used as the biometric authentication unit 24 of the authenticator 20, the biometric authentication unit 24 acquires fingerprint authentication information as biometric authentication data Y1 from the user's finger.

  The biometric authentication unit 24 authenticates the user with the biometric authentication data. That is, the biometric authentication means 24 collates the input biometric authentication data Y1 with the user's biometric authentication data Y1 that the authenticator 20 names and stores with the authenticator registration user ID data IDY. If they match, the biometric authentication unit 24 authenticates the user of the authenticator registration user ID data IDY.

(Step S7)
Next, the authenticator 20 transmits an authentication request signal from the authenticator 20 by the authentication server 30 to the mobile terminal device 10.

(Step S8)
The mobile terminal device 10 uses the access code and password notified from the authentication server 30 to securely connect to the web page specified by the access code of the authentication server 30 via the communication network 100, and to the authentication server 30. The authentication request signal of the authenticator 20 is transmitted.

(Step S9)
Upon receiving the authentication request signal from the authenticator 20, the authentication server 30 generates random number data called a challenge and transmits it to the mobile terminal device 10.

(Step S9 ')
The mobile terminal device 10 that has received the challenge random number data transmits the challenge random number data of the authentication server 30 to the authenticator 20 connected to the mobile terminal device 10.

(Step S10)
The authenticator 20 uses the authentication server public key data Ws to authenticate the received challenge random number data, the time data detected by the clock function unit 22 of the authenticator 20, and the biometric authentication data Y1 of the user. Encrypted data obtained by encrypting the user ID data IDY, the authenticator side ID data ID1 and the electronic lock side ID data ID2 is sent back to the authentication server 30 via the portable terminal device 10.

(Step S11)
The authentication server 30 decrypts the encrypted data received from the authenticator 20 using the authentication server private key data Cs, and compares it with the random number data created by itself. If they match, the authenticator 20 is authenticated by verifying that the encrypted data is response data from the authenticator 20 in response to a challenge from the authentication server 30.

(Step S12)
When the authentication server 30 can authenticate the authenticator 20, the authenticator side ID data ID1 of the authenticator 20 is stored in the electronic lock corresponding key database 31 in association with the authenticator encryption key data Kk. Data ID2 is stored in association with the electronic key encryption key data Kj.

  Then, the electronic lock corresponding key database 31 stores unlocking permission information 31a of the electronic lock in which the user ID data IDY that can be unlocked and the authenticator ID data ID1 are combined with the electronic lock ID data ID2.

(Step S13)
Next, the authentication server 30 receives the session key (common key), such as a secure socket layer (SSL), from the authenticator 20 through encrypted communication that is shared with the authenticator 20. The encrypted data obtained by encrypting the time data described in the encrypted data, the authenticator encryption key data Kk, and the electronic lock encryption key data Kj is generated and transmitted to the mobile terminal device 10.

(Step S14)
Next, the user's mobile terminal device 10 transmits the received encrypted data of the encryption key data Kk and Kj to the authenticator 20 via the short-range wireless communication unit 11.

(Step S15)
Upon receiving the encrypted data of the encryption key data, the authenticator 20 decrypts the encrypted data with the session key to obtain the authenticator encryption key data Kk, the electronic lock encryption key data Kj, and the time data.

(Step S16)
The authenticator 20 collates the received time data with the time data previously described in the encrypted data, and authenticates the received data if they match.

(Step S17)
When the data can be authenticated, the authenticator 20 stores the authenticator encryption key data Kk received by the authenticator 20 in the key-side encryption key storage unit 23.

(Step S18)
In addition, when the data can be authenticated, the authenticator 20 transmits the electronic lock encryption key data Kj received by the authenticator 20 to the electronic lock 40 via the mobile terminal device 10 and the short-range wireless communication unit 11. .

(Step S19)
The electronic lock 40 stores the received electronic lock encryption key data Kj in the lock side encryption key storage means 43.

  Here, the authentication server 30 can freely set / change the authenticator 20 that can unlock the electronic lock 40 by updating the unlocking permission information 31a of the electronic lock in the electronic lock corresponding key database 31. .

  Therefore, even if the authentication device 20 is lost, the user contacts the operator of the authentication server 30 and removes the registration of the lost authentication device 20 from the electronic lock corresponding key database 31 to thereby delete the lost authentication device. Unauthorized unlocking can be prevented so that the electronic lock 40 is not unlocked by 20.

(Unlocking procedure of electronic lock 40)
Next, the unlocking process procedure of the electronic lock 40 will be described with reference to the flowcharts of FIGS. 8 and 9, the authenticator 20 receives the one-time unlock command encryption data Q1 from the authentication server 30 via the portable terminal device 10, and uses it to open the electronic lock 40. The process flow of locking is shown.

(Step S21)
First, the user activates an electronic unlocking application program of the mobile terminal device 10. The electronic unlocking application program of the portable terminal device 10 notifies the user of an input request from the authenticator 20 for the biometric authentication data Y1.

(Step S22)
When the user causes the biometric authentication means 24 of the authenticator 20 to read the biometric authentication data Y1 of the user, the authenticator 20 authenticates the user of the registered user ID data IDY using the biometric authentication data Y1.

(Step S23)
Next, the authentication device 20 notifies the authentication server side ID data ID1 to the authentication server 30 via the mobile terminal device 10, and transmits an authentication request signal of the authentication device 20.

(Step S24)
Upon receiving the authentication request signal from the authenticator 20, the authentication server 30 generates random number data called a challenge and transmits it to the authenticator 20 via the mobile terminal device 10.

(Step S25)
The authenticator 20 that has received the random number data uses the authenticator encryption key data Kk to receive the challenge random number data, the user ID data IDY of the user who has been biometrically authenticated, and the authenticator side ID data ID1. Is encrypted and sent back to the authentication server 30 via the mobile terminal device 10.

(Step S26)
The authentication server 30 decrypts the encrypted data received from the authenticator 20 using the authenticator encryption key data Kk of the authenticator 20 of the authenticator side ID data ID1, and compares it with the random number data created by itself. When both match, the user of the user side IDY and the authenticator 20 are authenticated. And the authentication server 30 memorize | stores user ID data IDY and authenticator side ID data ID1.

(Step S27)
Next, the authentication server 30 transmits an authentication request signal of the authentication server 30 to the authenticator 20 via the mobile terminal device 10.

(Step S28)
Upon receiving the authentication request signal from the authentication server 30, the authenticator 20 generates random number data called a challenge and transmits it to the authentication server 30 via the mobile terminal device 10.

(Step S29)
Upon receiving the random number data, the authentication server 30 uses the encryption key data Kk for the authenticator to generate encrypted data obtained by encrypting the random number data of the received challenge and the ID data on the authentication server side. Then, the message is returned to the authenticator 20 via the mobile terminal device 10.

(Step S30)
The authenticator 20 decrypts the encrypted data received from the authentication server 30 using the authenticator encryption key data Kk, and compares it with the random number data created by itself. If the two match, the authentication server 30 is authenticated and the authentication result is notified to the mobile terminal device 10.

  In this way, the authenticator 20 and the authentication server 30 perform mutual authentication by a challenge response authentication process using a shared common key. It is desirable that the mutually authenticated authenticator 20 and authentication server 30 and the mobile terminal device 10 that mediates communication between them be configured to encrypt and transmit information with an encrypted communication system such as SSL.

(Step S31)
The electronic lock unlocking application program of the mobile terminal device 10 causes the user to specify the electronic lock 40 that the user desires to unlock, and transmits the electronic lock side ID data ID2 to be unlocked to the authentication server 30 as the unlock command request command.

(Step S32)
The authentication server 30 specifies the unlocking permission information 31a of the electronic lock that is a combination of the electronic lock ID data ID2 to be unlocked, the user ID data IDY, and the authenticator ID data ID1 specified by the unlock command request command. Is registered in the electronic lock corresponding key database 31.

(Step S33)
If the unlocking permission information 31a of the electronic lock of the combination is registered in the electronic lock corresponding key database 31, the authentication server 30 creates the one-time unlocking command encrypted data Q1.

  The one-time unlock command encryption data Q1 is created by encrypting data including the time data t obtained from the server-side clock function unit 33 using the electronic lock encryption key data Kj. That is, the one-time unlocking command encrypted data Q1 is one-time unlocking command encrypted data Q1 that is applied only to unlocking at the time when the data is created and becomes different encrypted data each time. .

The authentication server 30 creates the one-time unlock command encryption data Q1 by the following formula 1.
(Formula 1) Q1 = f (t, IDY, ID1, ID2)

  In Equation 1, t is time data when the authentication device 20 makes an unlock command request, which is included in the encrypted data of the unlock command request created by the authenticator 20. IDY is authentication device registration user ID data, ID1 is authentication device side ID data of the authentication device 20, and ID2 is electronic lock side ID data.

  The authentication server 30 transmits the one-time unlock command encryption data Q1 including the time data t to the mobile terminal device 10 via the communication line 100.

(Step S33 ')
Next, the mobile terminal device 10 causes the user to bring his / her mobile terminal device 10 closer to the electronic lock 40 and uses the short-range wireless communication unit 11 to connect the electronic lock 40 to the one-time created by the authentication server 30. Unlock command encryption data Q1 data is transmitted.

(Step S34)
In the electronic lock 40, the unlocking means 44 prevents the one-time unlock command encryption data Q1 from being illegally acquired and used illegally by a malicious other person. The storage means of the electronic lock 40 stores the lock command encrypted data Q1.

  If the received one-time unlocking command encrypted data Q1 is stored in the storage means of the electronic lock 40, it is determined that it is used encrypted data, and the one-time unlocking command The encrypted data Q1 restricts the electronic lock 40 from being unlocked.

  The unlocking means 44 of the electronic lock 40 decrypts the one-time unlock command encryption data Q1 received from the portable terminal device 10 using the electronic lock encryption key data Kj. When the decryption is successful, it is confirmed that the one-time unlock command encryption data Q1 is information created by the authentication server 30 addressed to the electronic lock 40.

  The unlocking means 44 uses the decrypted information transmitted from the authentication server 30 to the time data t and the authenticator when the authentication server 30 creates the one-time unlock command encryption data Q1. Data of side ID data ID1 and electronic lock side ID data ID2 is obtained.

(Step S35)
The unlocking means 44 compares the time of the time data t of the decrypted information with the time of the clock function unit 42 of the electronic lock 40, and confirms that the time difference is within a predetermined time.

  When the time is shifted by a predetermined time or more, the unlocking means 44 of the electronic lock 40 ends without executing the unlocking process of the house door.

(Step S36)
When the time difference between the time of the decoded time data t and the time of the clock of the electronic lock 40 is within a predetermined time, the unlocking means 44 of the electronic lock 40 is an effective one-time that matches the unlocking time. It is determined that it is an unlocking command, and the door of the house is unlocked.

  The unlocking means 44 of the electronic lock 40 determines whether or not the unlocking is possible by checking the time data t of the decrypted information in the determination process of whether or not the unlocking is possible in step S35, and the authenticator ID data. By collating ID1 with the electronic lock side ID data ID2, and further collating the authentication device registration user ID data IDY, a process for determining whether or not to unlock can be added.

  As described above, when the present invention is applied to a house door key, the authentication server 30 creates a one-time unlock command encryption data Q1 and the electronic door lock 40 of the house door via the portable terminal device 10. To unlock the electronic lock 40.

  In the electronic lock 40, the one-time unlocking command encrypted data Q1 satisfies the inspection conditions of the electronic lock 40, and the time data included in the information obtained by decrypting the one-time unlocking command encrypted data Q1 The unlocking process is performed only when t is close to the time of the clock function of the electronic lock 40.

  Here, since the authentication server 30 creates one-time unlocking command encrypted data Q1, which is different encrypted data every time, wireless transmission of the one-time unlocking command encrypted data Q1 via the communication network 100 is performed. In this case, there is an effect of increasing security against eavesdropping on information such as eavesdropping. In addition, the one-time unlock command encryption data Q1 received by the user's mobile terminal device 10 from the authentication server 30 in the past is reused by the user who later lost the unlock right to unlock the electronic lock 40. There is an effect that can prevent the trouble.

(Modification 2)
As a second modification, the mobile terminal device 10 transmits the one-time unlock command encryption data Q1 received from the authentication server 30 to the authenticator 20, and the authenticator 20 uses the short-range wireless communication means 21 to The one-time unlock command encryption data Q1 is sent from the authenticator 20 to the electronic lock by communicating with the reader / writer 41 of the lock 40 or by directly electrically connecting the authenticator 20 to the electrical connection terminal of the electronic lock 40. An electronic lock system that transmits directly to 40 can also be configured.

(Modification 3)
As a third modification, the parameters used by the authentication server 30 to create the one-time unlocking command encrypted data Q1 as different encrypted data each time are not limited to only the time data t of the clock function unit 22 of the authenticator 20. The time data detected by the clock function unit of the mobile terminal device 10 that mediates the transmission of information, or the time data detected by the server side clock function unit 33 of the authentication server 30 can also be used.

  Further, the parameters used for creating the one-time unlocking command encrypted data Q1 as different encrypted data each time are not limited to time data, and random number data generated at different values each time can be used as the authenticator 20 or the portable terminal. It can be generated by the device 10 or the authentication server 30 and used as a one-time parameter of the one-time unlock command encryption data Q1.

  Further, the authentication server 30 counts and stores the number of unlock command requests from the authenticator 20 for each authenticator 20, using the session counter, and stores the value of the session counter as one-time unlock command encrypted data Q1. It can also be used as a one-time parameter.

(Modification 4)
As modified example 4, in step S10, the authenticator 20 transmits to the authentication server 30 and sends the data to be registered in the electronic lock corresponding key database 31, and in step S25, the authenticator 20 transmits to the authentication server 30. The biometric authentication data Y1 of the user can be incorporated into each encrypted data for authentication request in the unlocking command request to be transmitted and transmitted to the authentication server 30.

  In step S12, the authentication server 30 uses the user's biometric authentication data Y1, the authenticator side ID data ID1, and the electronic lock side ID data ID2 as unlocking permission information 31a for the electronic lock stored in the electronic lock corresponding key database 31. Memorize the set.

  Then, in step S27, the authentication server 30 matches the user biometric authentication data Y1 included in the unlocking command request encrypted data with the user biometric authentication data Y1 stored in the electronic lock unlocking permission information 31a. The authenticator 20 is authenticated after confirming whether or not to do so.

<Second Embodiment>
FIG. 10 is a schematic block diagram showing the configuration of the electronic lock system according to the second embodiment of the present invention.

(System configuration)
As in the first embodiment, the electronic lock system of the second embodiment uses an electronic lock 40, the mobile terminal device 10, and an authentication server 30 connected via a communication network 100 as in the first embodiment. An authentication device 20 is connected to the mobile terminal device 10 to provide an electronic key function. The authenticator 20 is provided with biometric authentication means 24 for biometric authentication of the user.

(Encryption key creation means 51 of authenticator 20)
This embodiment is different from the first embodiment in that, as shown in FIGS. 10 and 11, the authenticator 20 has an encryption key creating means 51, and the authenticator 20 is encrypted key data by a public key cryptosystem. This is the point to create and use.

  The encryption key creating means 51 of the authenticator 20 creates the authenticator private key data Ck1 and the authenticator public key data Wk1 for the authentication server 30, and the authenticator private key data Ck1 is stored only by the authenticator 20 and authenticated. The authenticator 20 notifies the authentication server 30 of the public key data Wk1 for storage.

  The encryption key creating means 51 of the authenticator 20 can also create authenticator private key data Ck2 and authenticator public key data Wk2 for the electronic lock 40. The authenticator private key data Ck2 is stored only by the authenticator 20, and the authenticator public key data Wk2 is notified to the electronic lock 40 by the authenticator 20 and stored in the electronic lock 40.

(Encryption key creation means 50 of authentication server 30)
The encryption key creation means 50 of the authentication server 30 creates the authentication server private key data Cs and the authentication server public key data Ws, and creates the common key electronic lock encryption key data Kj for the user's electronic lock 40. To do. As in the first embodiment, the encryption key data Kj for the common key type electronic lock is shared between the authentication server 30 and the user's electronic lock 40. Only the authentication server 30 stores the authentication server private key data Cs, and the authentication server 30 notifies the authentication device 20 and the electronic lock 40 of the authentication server public key data Ws.

  The authentication server 30 stores the encryption key data and the authenticator public key data Wk1 acquired from the authenticator 20 in the encryption key storage unit 32 of the electronic lock corresponding key database 31.

(Key-side encryption key storage means 23 of authenticator 20)
The key-side encryption key storage unit 23 of the authenticator 20 stores the authenticator-side ID data ID1 and the authentication server public key data Ws. The authenticator private key data Ck1 for the authentication server 30 and the authenticator private key data Ck2 for the electronic lock 40 are stored.

  The authenticator private key data Ck1 is stored only by the key-side encryption key storage means 23 of the authenticator 20. The encrypted data encrypted by the authentication server 30 using the authenticator public key data Wk1 paired with the authenticator private key data Ck1 is decrypted only by the authenticator 20 using the authenticator private key data Ck1. Can be read.

  On the other hand, the encrypted data encrypted by the authenticator 20 using the authentication server public key data Ws is such that only the authentication server 30 is paired with the authentication server public key data Ws. Can be combined and read. When the authenticator 20 transmits the authenticator public key data Wk1 to the authentication server 30, the encrypted data obtained by encrypting the authenticator public key data Wk1 using the authentication server public key data Ws is transmitted to the authentication server 30. To do.

(Electronic lock unlocking permission information 31a)
FIG. 13 shows electronic lock unlocking permission information 31 a stored in the electronic lock corresponding key database 31 of the authentication server 30. As in the first embodiment, information on the authenticator 20 that can unlock the electronic lock 40 is registered in the unlocking permission information 31a for the electronic lock.

  The communication network 100 and the mobile terminal device 10 are configured in the same manner as in the first embodiment as shown in FIG. The authenticator 20 is configured as shown in FIG. 11, reads the user's biometric data Y1 using the biometric authentication means 24, authenticates the user whose biometric data Y1 is registered as the user ID data IDY, An unlock command request command including user ID data IDY is created and transmitted to the authentication server 30 via the mobile terminal device 10 and the communication network 100.

(Authentication server 30)
The authentication server 30 is configured as shown in FIG. 12, and when receiving the unlock command request command from the authenticator 20 via the portable terminal device 10, the authenticator 20 of the information included in the received unlock command command is received. Then, the electronic lock corresponding key database 31 is searched for the unlocking permission information 31a of the electronic lock for the combination of the electronic lock 40 to be unlocked.

(Electronic lock key database 31)
The encryption key storage means 32 of the electronic lock corresponding key database 31 stores the authentication server private key data Cs as shown in FIG. 13, and the electronic lock encryption key data Kj of the electronic lock 40 registered in the authentication server 30 is stored. And the registered authenticator public key data Wk1 of the authenticator 20 is stored.

  The electronic lock corresponding key database 31 stores the electronic lock unlock permission information 31a in which the user who can unlock the authenticator 20 of the mobile terminal device 10 and the electronic lock 40 are registered. The unlocking permission information 31a of the electronic lock stored in the electronic lock corresponding key database 31 is recorded in association with the user ID data IDY, the authenticator ID data ID1, and the electronic lock ID data ID2.

The user ID data IDY of the unlocking permission information 31a for the electronic lock is user ID information, and the authenticator ID data ID1 is unique ID information associated with the authenticator 20. The electronic lock side ID data ID2 is unique ID information associated with the electronic lock 40. Here, one electronic lock 40 can be unlocked by a plurality of authenticators 20 and a user.

  An electronic lock corresponding key with the correspondence relationship between the user ID data IDY of the authenticator 20 that can be unlocked, the authenticator side ID data ID1, and the electronic lock side ID data ID2 of the electronic lock 40 as the unlocking permission information 31a of the electronic lock. By storing in the database 31, for example, one electronic lock 40 can be unlocked by a plurality of authentication devices 20 and users.

  The authentication server 30 can freely set and change the authenticator 20 that can unlock the electronic lock 40 by updating the unlocking permission information 31a of the electronic lock in the electronic lock corresponding key database 31.

(One-time unlock command encrypted data Q1)
If the authentication server 30 determines that the unlocking permission information 31a for the electronic lock of the combination of the electronic lock 40 and the authenticator 20 is registered in the electronic lock corresponding key database 31, the one-time unlocking command encryption The data creation means 34 creates one-time unlocking command encrypted data Q1 to be transmitted to the electronic lock 40.

  The one-time unlocking command encrypted data Q1 is obtained by adding information obtained by adding time data t to the command information transmitted to the electronic lock 40 by the one-time unlocking command encrypted data creating unit 34. This is encrypted data that is encrypted using the key data Kj, and is different encrypted data that is applied to unlocking only at that time.

  This encrypted data is encrypted data destined for the electronic lock 40 with excellent secrecy that can be decrypted only by the electronic lock 40 using the electronic lock encryption key data Kj shared with the authentication server 30. .

(Modification 5)
This encrypted data is encrypted data that can be decrypted and read only by the electronic lock 40. In the process of transmitting this encrypted data from the authentication server 30 to the mobile terminal device 10, a malicious third There is a problem that data can be intercepted by an unauthorized person and used to unlock the electronic lock 40.

  In order to solve this problem, as a fifth modification, the encryption key creation means 51 of the authenticator 20 creates the authenticator private key data Ck2 and the authenticator public key data Wk2, and uses the authenticator public key data Wk2 as the modified key. The electronic lock 40 is notified and stored.

  The one-time unlock command encryption data Q1 is always transmitted to the authenticator 20 before the user's mobile terminal device 10 transmits it to the electronic lock 40.

  The authenticator 20 calculates a hash value of the one-time unlock command encryption data Q1 using a hash function shared by the authenticator 20 with the electronic lock 40, and uses the hash value for the authenticator (for the electronic lock). The signature data of the authenticator 20 is created by encrypting with the private key data Ck2 to create the signature data of the authenticator 20, and attaching the signature data to the one-time unlocking command encrypted data Q1 and transmitting it to the electronic lock 40. The security can be enhanced by decrypting the electronic lock 40 using the authenticator public key data Wk2 for verification.

(Modification 6)
As Modification 6, as in Modification 5, authentication device public key data Wk2 is notified to electronic lock 40 and stored. The one-time unlock command encryption data Q1 is always transmitted to the authenticator 20 before the user's mobile terminal device 10 transmits it to the electronic lock 40.

  The authenticator 20 encrypts data including the time data output from the clock function unit 22 by the authenticator 20 with the authenticator secret key data Ck2, and creates one-time authenticator data on the authenticator side. Then, the one-time authenticator data on the authenticator side is attached to the one-time unlock command encryption data Q1 and transmitted to the electronic lock 40. The electronic lock 40 combines the one-time authenticator data on the authenticator side with the public key data Wk2 for the authenticator, so that the authenticator 20 that mediates the transmission of the one-time unlock command encryption data Q1 Certify. Thereby, the authenticator 20 of the portable terminal device 10 that mediates transmission of the one-time unlocking command encrypted data Q1 is limited, and security can be enhanced.

(Electronic lock 40)
The electronic lock 40 is configured as shown in FIG. 14, and includes a reader / writer 41 that performs short-range wireless communication, a clock function unit 42, a lock-side encryption key storage unit 43, and an unlocking unit 44.

  The electronic lock 40 decrypts the one-time unlock command encryption data Q1 using the electronic lock encryption key data Kj. Further, if necessary, the authentication server 30 decrypts the signature data attached to the one-time unlock command encryption data Q1 using the authentication server public key data Ws and verifies the signature. It is also possible to increase the security of information by confirming that the unlock command encryption data Q1 has been created by the authentication server 30.

  The unlocking means 44 of the electronic lock 40 inspects the time data t of the contents obtained by decrypting the one-time unlocking command encrypted data Q1, and the effective one-time unlocking time that matches the unlocking time. Confirm that it is a lock command. The unlocking means 44 of the electronic lock 40 executes the unlocking process of the electronic lock 40 when the unlocking command is valid.

(Lock-side encryption key storage means 43)
The lock side encryption key storage means 43 of the electronic lock 40 stores the electronic lock side ID data ID2 of the electronic lock 40, and the electronic lock-like encryption key data Kj generated and notified by the authentication server 30 and the authentication server Public key data Ws is stored. Furthermore, the authenticator public key data Wk2 notified from the authenticator 20 can be stored.

(Modification 7)
As a modified example 7, the encryption key data Kj for the electronic lock is created by the encryption key creation means 51 of the authenticator 20, and the authenticator 20 creates the encryption key data Kj for the electronic lock created by the electronic lock 40 and the authentication server 30. Can be notified and stored.

  At that time, the authentication means 20 uses the means for the authentication device 20 to communicate with the electronic lock 40 via the portable terminal device 10 as the communication means for sending the electronic lock encryption key data Kj to the electronic lock 40, or A means for the authenticator 20 to directly communicate with the electronic lock 40 can be used.

(Operation procedure of electronic lock system)
Next, the operation procedure of the electronic lock system according to the present embodiment will be described with reference to the flowcharts of FIGS.

(User registration to the electronic lock system)
First, with reference to the flowcharts of FIGS. 15 and 16, a procedure of registration processing of the user in the electronic lock system will be described.

(Step S41)
The user causes the biometric authentication unit 24 of the authenticator 20 to read the user's biometric authentication data Y1. The authenticator 20 authenticates the user with the biometric authentication data.

(Step S42)
Next, the authenticator 20 transmits an authentication request signal of the authenticator 20 to the authentication server 30 via the mobile terminal device 10. The authentication request signal includes information on the authenticator side ID data ID1.

(Step S43)
Upon receiving the authentication request signal from the authenticator 20, the authentication server 30 generates random number data called a challenge and transmits it to the authenticator 20 via the mobile terminal device 10.

(Step S44)
Upon receiving the random number data, the authenticator 20 receives the secret key data Ck1 for the authenticator of the public key cryptosystem and the public key for the authenticator used by the encryption key creation means 51 of the authenticator 20 to register the authenticator 20 in the authentication server 30. A pair of data Wk1 is created. Only the authenticator 20 stores the authenticator private key data Ck1.

(Step S45)
Next, the authenticator 20 newly generates the received challenge random number data, user ID data IDY, authenticator ID data ID1, and encryption key generating means 51 using the authentication server public key data Ws. The encrypted data obtained by encrypting the authenticator public key data Wk1 is created. Then, the encrypted data is transmitted to the authentication server 30 via the portable terminal device 10.

(Step S46)
The authentication server 30 decrypts the encrypted data received from the authenticator 20 using the authentication server private key data Cs, and compares it with the random number data created by itself. If the two match, the authenticator 20 is authenticated. Then, the authentication server 30 registers the user ID data IDY, the authenticator side ID data ID1, and the authenticator public key data Wk1 of the authenticator 20.

(Step S47)
Next, the authentication server 30 transmits an authentication request signal of the authentication server 30 to the authenticator 20 via the mobile terminal device 10.

(Step S48)
Upon receiving the authentication request signal from the authentication server 30, the authenticator 20 generates random number data called a challenge and transmits it to the authentication server 30 via the mobile terminal device 10.

(Step S49)
Upon receiving the random number data, the authentication server 30 creates encrypted data obtained by encrypting the received random number data of the challenge and the authentication server side ID data using the authenticator public key data Wk1 received from the authenticator 20. . Then, the encrypted data is transmitted to the authenticator 20 via the mobile terminal device 10.

(Step S50)
The authenticator 20 decrypts the encrypted data received from the authentication server 30 using the authenticator private key data Ck1 and compares it with the random number data created by itself. If the two match, the authentication server 30 is authenticated. The authenticator 20 notifies the authentication result to the mobile terminal device 10.

Thus, the authenticator 20 and the authentication server 30 perform mutual authentication by a challenge response authentication process using a public key cryptosystem. It is desirable that the mutually authenticated authenticator 20 and authentication server 30 and the mobile terminal device 10 that mediates communication between them be configured to encrypt and transmit information with an encrypted communication system such as SSL.

(Step S51)
Next, the mobile terminal device 10 designates the electronic lock side ID data ID2 of the electronic lock 40 that is desired to register unlocking, and the user ID data IDY of the authentication device 20, the authentication device side ID data ID1, and the user are specified in the authentication server 30. The registration request command of the electronic lock side ID data ID2 of the electronic lock 40 is transmitted.

(Step S52)
The authentication server 30 registers the unlocking permission information 31a of the electronic lock in which the user ID data IDY, the authenticator ID data ID1, and the electronic lock ID data ID2 are associated with each other in the electronic lock corresponding key database 31.

(Step S53)
Next, the encryption key creating means 50 of the authentication server 30 creates the electronic key encryption key data Kj of the common key type for the user's electronic lock 40 and associates it with the electronic lock side ID data ID2 to create an electronic lock corresponding key database. It is stored in the encryption key storage means 32 of 31.

(Step S54)
The authentication server 30 creates encrypted data obtained by encrypting the electronic key encryption key data Kj and the time data t obtained from the server-side clock function unit 33 by using the authenticator public key data Wk1. Then, the encrypted data is transmitted to the authenticator 20 via the mobile terminal device 10.

(Step S55)
The authenticator 20 that has received the encrypted data of the encryption key data decrypts the encrypted data using the authenticator private key data Ck1 to obtain the electronic lock encryption key data Kj and the time data t.

(Step S56)
The authenticator 20 verifies the received time data t, and if the time data t is normal, the authenticator 20 receives the received electronic lock encryption key data Kj via the portable terminal device 10 and the short-range wireless communication means 11. 40.

(Step S57)
The electronic lock 40 stores the received electronic lock encryption key data Kj in the lock side encryption key storage means 43.

(Unlocking procedure of electronic lock 40)
Next, referring to the flowcharts of FIG. 17 and FIG. 18, the authenticator 20 receives the one-time unlock command encryption data Q1 from the authentication server 30 via the mobile terminal device 10 and uses it. A processing procedure for unlocking the electronic lock 40 will be described.

(Step S61)
First, the user activates an electronic unlocking application program of the mobile terminal device 10. The electronic unlocking application program of the portable terminal device 10 notifies the user of an input request from the authenticator 20 for the biometric authentication data Y1.

(Step S62)
When the user causes the biometric authentication means 24 of the authenticator 20 to read the biometric authentication data Y1 of the user, the authenticator 20 authenticates the user of the registered user ID data IDY using the biometric authentication data Y1.

(Step S63)
Next, the authenticator 20 transmits an authentication request signal of the authenticator 20 to the authentication server 30 via the mobile terminal device 10.

(Step S64)
Upon receiving the authentication request signal from the authenticator 20, the authentication server 30 generates random number data called a challenge and transmits it to the authenticator 20 via the mobile terminal device 10.

(Step S65)
The authenticator 20 that has received the random number data uses the authentication server public key data Ws to authenticate the received challenge random number data, biometrically authenticated user ID data IDY, and authenticator side ID. Encrypted data obtained by encrypting the data ID 1 is created and returned to the authentication server 30 via the mobile terminal device 10.

(Step S66)
The authentication server 30 decrypts the encrypted data received from the authenticator 20 using the authentication server private key data Cs, and compares it with the random number data created by itself. When both match, the user and the authenticator 20 are authenticated. And the authentication server 30 memorize | stores user ID data IDY and authenticator side ID data ID1.

(Step S67)
Next, the authentication server 30 transmits an authentication request signal of the authentication server 30 to the authenticator 20 via the mobile terminal device 10.

(Step S68)
Upon receiving the authentication request signal from the authentication server 30, the authenticator 20 generates random number data called a challenge and transmits it to the authentication server 30 via the mobile terminal device 10.

(Step S69)
Upon receiving the random number data, the authentication server 30 creates encrypted data obtained by encrypting the received random number data of the challenge and the authentication server side ID data using the authenticator public key data Wk1 received from the authenticator 20. . Then, the encrypted data is transmitted to the authenticator 20 via the mobile terminal device 10.

(Step S70)
The authenticator 20 decrypts the encrypted data received from the authentication server 30 using the authenticator private key data Ck1 and compares it with the random number data created by itself. If the two match, the authentication server 30 is authenticated and the authentication result is notified to the mobile terminal device 10.

  Thus, the authenticator 20 and the authentication server 30 perform mutual authentication by a challenge response authentication process using a public key cryptosystem. It is desirable that the mutually authenticated authenticator 20 and authentication server 30 and the mobile terminal device 10 that mediates communication between them be configured to encrypt and transmit information with an encrypted communication system such as SSL.

(Step S71)
The electronic lock unlocking application program of the mobile terminal device 10 allows the user to specify the electronic lock 40 to be unlocked, and the electronic lock side ID data ID to be unlocked as the unlock command request command
2 is transmitted to the authentication server 30.

(Step S72)
The authentication server 30 specifies the unlocking permission information 31a of the electronic lock that is a combination of the electronic lock ID data ID2 to be unlocked, the user ID data IDY, and the authenticator ID data ID1 specified by the unlock command request command. Is registered in the electronic lock corresponding key database 31.

(Step S73)
If the unlocking permission information 31a of the electronic lock of the combination is registered in the electronic lock corresponding key database 31, the authentication server 30 creates the one-time unlocking command encrypted data Q1.

  The one-time unlock command encryption data Q1 is created by encrypting data including the time data t obtained from the server-side clock function unit 33 using the electronic lock encryption key data Kj. That is, the one-time unlocking command encrypted data Q1 is one-time unlocking command encrypted data Q1 that is applied only to unlocking at the time when the data is created and becomes different encrypted data each time. .

  The authentication server 30 transmits the one-time unlock command encryption data Q1 including the time data t to the mobile terminal device 10 via the communication line 100.

(Step S73 ')
Next, the mobile terminal device 10 causes the user to bring his / her mobile terminal device 10 closer to the electronic lock 40 and uses the short-range wireless communication unit 11 to open the one-time opening created by the authentication server 30 to the electronic lock 40. The lock command encrypted data Q1 data is transmitted.

(Step S74)
The unlocking means 44 of the electronic lock 40 decrypts the one-time unlock command encryption data Q1 received from the portable terminal device 10 using the electronic lock encryption key data Kj. When the decryption is successful, it is confirmed that the one-time unlock command encryption data Q1 is data addressed to the electronic lock 40.

  The unlocking means 44 uses the decrypted information transmitted from the authentication server 30 to the time data t and the authenticator when the authentication server 30 creates the one-time unlock command encryption data Q1. Data of side ID data ID1 and electronic lock side ID data ID2 is obtained.

(Step S75)
The unlocking means 44 compares the time data t of the decrypted information with the time of the clock function unit 42 of the electronic lock 40, and confirms that the time difference is within a predetermined time.

  When the time is shifted by a predetermined time or more, the unlocking means 44 of the electronic lock 40 ends without executing the unlocking process of the house door.

(Step S76)
The unlocking means 44 of the electronic lock 40 unlocks the door of the house when the time difference between the decrypted time data t and the clock time of the electronic lock 40 is within a predetermined time.

  The unlocking means 44 of the electronic lock 40 confirms the time data t in the unlocking determination process in step S76 to determine whether the unlocking is possible, and the authenticator side ID data of the decrypted information. It is also possible to add a process for determining whether or not to unlock by checking ID1 and electronic lock side ID data ID2.

  As described above, when the present invention is applied to a house door key, the information from the authentication server 30 satisfies the inspection condition of the house door electronic lock 40 and is included in the decrypted information. The unlocking process is performed only when the data creation time data t is close to the time of the clock function of the electronic lock 40.

  Here, in the generation of the one-time unlocking command encrypted data Q1 in the authentication server 30, the value of the one-time unlocking command encrypted data Q1 is 1 by using time data t that is not a constant value in the authentication process. Since it is created with encrypted data of one-time use, there is an effect that security against eavesdropping on information such as eavesdropping in the wireless transmission of the one-time unlock command encrypted data Q1 via the communication network 100 is improved.

(Modification 8)
As a modification 8, the one-time unlock command encryption data Q1 is transmitted to the authenticator 20 before the user's portable terminal device 10 transmits the electronic lock 40, and the authenticator 20 Without using the short-range wireless communication means 21 to communicate directly with the reader / writer 41 of the electronic lock 40, or by directly connecting the authenticator 20 to the electrical connection terminal of the electronic lock 40, An electronic lock system that directly transmits the one-time unlock command encryption data Q1 and signature data to the electronic lock 40 can also be configured.

(Modification 9)
As a modified example 9, the authentication parameter between the authenticator 20 and the authentication server 30 used when the authentication server 30 creates the one-time unlock command encryption data Q1 is the server-side clock function unit of the authentication server 30. It is not limited only to the time data t detected by 33. The authentication server 30 can also be used for receiving the time data detected by the clock function unit of the mobile terminal device 10 from the mobile terminal device 10 and creating the one-time unlock command encryption data Q1. Alternatively, the authentication server 30 can receive time data detected by the clock function unit 22 of the authenticator 20 from the mobile terminal device 10 and use it to create the one-time unlock command encryption data Q1.

  In the present invention, the authenticator 20 having the encryption key creating means 51 creates and uses the authenticator private key data CK1 and the authenticator public key data Wk1 by the public key cryptosystem that strengthens the security. Then, the authenticator 20 communicates with the authentication server 30 via the portable terminal device 10 and performs mutual authentication with the authentication server 30 to exchange information, thereby providing an effect of strengthening security.

<Third Embodiment>
The electronic lock system of the third embodiment of the present invention is configured in the same manner as the schematic block diagram of the first embodiment of FIG. The third embodiment is different from the first embodiment in that the authentication server 30 encrypts the authenticator secret key data Ck for the user authenticator 20 and transmits the encrypted secret key data Ck to the authenticator 20. The electronic lock private key data Cs for the lock 40 is encrypted and transmitted to the electronic lock 40. These encrypted communications can be performed by SSL encrypted communications as in the first embodiment.

In the third embodiment, the encryption key creation unit 50 of the authentication server 30 creates the public key authentication server private key data Cs and the authentication server public key data Ws, and the encryption key creation unit 50 The authenticator private key data Ck and the authenticator public key data Wk for the user authenticator 20 used in the second embodiment are created, and the electronic lock private key data for the user electronic lock 40 is also created. Cj and electronic key public key data Ws are created.

  Then, similarly to steps S1 to S5 of the first embodiment, the authentication server 30 secures the access code and password for the user to access the authentication server 30 to the user by using a sending means such as mail. The user starts registration processing of the authenticator 20 and the electronic lock 40 to the authentication server 30 using the access code and password.

  In the third embodiment, after the authentication server 30 stores the authenticator private key data Ck in the authenticator 20 and the electronic lock 40 stores the electronic lock private key data Cs, the authentication server 30 Similarly to the flowcharts of FIGS. 17 and 18 of the second embodiment, encrypted communication in which the encrypted data encrypted using the authenticator public key data Wk1 is transmitted to the authenticator 20 can be performed.

  In the third embodiment, encrypted communication in which encrypted data encrypted using the electronic key public key data Wj is transmitted to the electronic lock 40 can be performed.

  Further, in the third embodiment, when the authentication server 30 creates the one-time unlocking command encrypted data Q1, the fact that the one-time unlocking command encrypted data Q1 is created by the authentication server 30 In order to prove, the original data is encrypted using the authentication server private key data Cs.

  That is, when creating the one-time unlocking command encrypted data Q1, the data including the time data t obtained from the server-side clock function unit 33 is encrypted using the authentication server private key data Cs. Further, it is encrypted and created using the electronic key public key data Wj. That is, the one-time unlocking command encrypted data Q1 is encrypted data that can be decrypted only by the electronic lock 40 using the electronic lock private key data Cj. The public key data Ws is used for decryption. Thereby, it is proved that the one-time unlock command encryption data Q1 has been created by the authentication server 30.

  Here, in order to prove that the one-time unlock command encrypted data Q1 has been created by the authentication server 30, as a method other than encrypting the original data using the authentication server private key data Cs, A method of attaching the following signature data can also be used.

  That is, the original data is encrypted using the electronic lock public key data Wj to create one-time unlocking command encrypted data Q1, and then the one-time unlocking command encrypted data Q1 is used as the authentication server 30. Calculates a hash value using a hash function shared with the electronic lock 40, encrypts the hash value with the authentication server private key data Cs (for the electronic lock), and creates signature data of the authentication server 30. The signature data is attached to the one-time unlock command encryption data Q1 and transmitted to the electronic lock 40.

  Then, the authentication server 30 generates the one-time unlock command encryption data Q1 by causing the electronic lock 40 to verify the signature data of the authentication server 30 by using the authentication server public key data Ws. I can prove things.

<Fourth Embodiment>
In the electronic lock system according to the fourth embodiment of the present invention, as shown in FIG. 19, the authenticator 20 has an encryption key creation means 51, and the electronic lock 40 further has an encryption key creation means 52.

(Encryption key creation means 52 of the electronic lock 40)
This embodiment is different from the first to third embodiments in that the electronic lock 40 has encryption key creation means 52, and the electronic lock 40 stores the encryption key data by the public key cryptosystem as shown in FIG. It is a point to create and use.

  The encryption key creation means 52 of the electronic lock 40 creates the electronic lock private key data Cj and the electronic lock public key data Wj. The electronic lock 40 encrypts the electronic key public key data Wj using the authentication server public key data Ws and transmits the encrypted data to the authentication server 30.

  In the fourth embodiment, each of the authentication server 30, the authenticator 20, and the electronic lock 40 independently creates a key pair of secret key data and public key data by a public key cryptosystem.

  The authenticator 20 encrypts the authenticator public key data Wk1 with the authentication server public key data Ws and transmits it to the authentication server 30, and the electronic lock 40 sends the electronic lock public key data Wj to the authentication server public key data Wk1. Is encrypted and transmitted to the authentication server 30.

  The authenticator 20, the authentication server 30, and the electronic lock 40 perform encrypted communication using a public key cryptosystem. In addition, the security of encrypted communication can be enhanced by appropriately creating signature data.

<Fifth Embodiment>
The electronic lock system of the fifth embodiment of the present invention constitutes the system as shown in FIG. 10 as in the second embodiment, while the living body of the user as in the fourth modification of the first embodiment. The authentication is performed by the authentication server 30.

(Electronic lock unlocking permission information 31a)
FIG. 20 shows unlocking permission information 31a for the electronic lock stored in the electronic lock corresponding key database 31 of the authentication server 30 in the fifth embodiment. In the fifth embodiment, similarly to the fourth modification of the first embodiment, as the unlocking permission information 31a of the electronic lock, the user's biometric authentication data Y1, the authenticator side ID data ID1, and the electronic lock side ID A set of data ID2 is stored.

(Operation procedure of electronic lock system)
The operation procedure of the electronic lock system of this embodiment is generally the same as the operation procedure of FIGS. 15 to 18 of the second embodiment.

(Step S45b)
In the fifth embodiment, in step S45 in FIG. 15, the authenticator 20 receives the challenge random number data, the user biometric authentication data Y1, the authenticator ID data ID1, and the encryption key creation means 51 newly. Encrypted data is created by encrypting the authenticator public key data Wk1 created in step 1 using the authentication server public key data Ws. Then, the encrypted data is returned to the authentication server 30 via the mobile terminal device 10.

(Step S46b)
In the fifth embodiment, in step S46 of FIG. 15, the authentication server 30 decrypts the encrypted data received from the authenticator 20 using the authentication server private key data Cs, Compare. If the two match, the authenticator 20 is authenticated. Then, the authentication server 30 registers the user biometric authentication data Y1, the authenticator ID data ID1, and the authenticator public key data Wk1 of the authenticator 20.

(Step S65b)
In the fifth embodiment, in the unlock request processing for the electronic lock 40, the authenticator 20 uses the authentication server public key data Ws in step S65 of FIG. Encrypted data obtained by encrypting the biometric authentication data Y1 and the authenticator-side ID data ID1 is created and returned to the authentication server 30 via the portable terminal device 10.

(Step S66b)
In the fifth embodiment, in step S66 of FIG. 17, the authentication server 30 decrypts the encrypted data received from the authenticator 20 by using the authentication server private key data Cs, Compare. When both match, the user and the authenticator 20 are authenticated. And the authentication server 30 memorize | stores a user's biometric data Y1 and authenticator side ID data ID1.

(Step S72b)
In the fifth embodiment, in step S72 of FIG. 17, the authentication server 30 specifies the electronic lock side ID data ID2 to be unlocked, the user's biometric data Y1 and the authenticator specified by the unlock command request command. Whether or not the unlocking permission information 31a of the electronic lock combined with the side ID data ID1 is registered in the electronic lock corresponding key database 31 is confirmed.

  The electronic lock system of this embodiment stores and uses the user's biometric authentication data Y1 in the electronic-compatible lock key database 31 of the authentication server 30, and opens the electronic lock 40 through processing generally similar to that of the second embodiment. Process to lock.

DESCRIPTION OF SYMBOLS 10 ... Portable terminal device 11 ... Short-range wireless communication means 12 ... Long-range wireless communication means 13 ... Storage means 20 ... Authentication device 21 ... Short-range wireless communication means 22 ... Clock function part,
23 ... Key-side encryption key storage means 24 ... Biometric authentication means 30 ... Authentication server 31 ... Electronic lock corresponding key database 31a ... Electronic lock unlocking permission information 32 ... Encryption key storage Means 33 ... Server side clock function part 34 ... One-time unlocking command encrypted data creation means 40 ... Electronic lock 41 ... Reader / writer 42 ... Clock function part 43 ... Lock side Encryption key storage means 44... Unlocking means 50... Encryption key creation means 51... (Authentication device) Encryption key creation means 52... (Electronic lock) encryption key creation means DESCRIPTION OF SYMBOLS 100 ... Communication network Cj ... Secret key data for electronic locks Ck1 ... Secret key data for authenticators for authentication servers Ck2 ... Secret key data for authenticators for electronic locks Cs ... Secrets for authentication servers Key data ID1 ... ID data on the authenticator side ID2 ... Electronic lock side ID data IDY ... User ID data Kj ... Electronic key encryption key data Kk ... Authentication key data Q1 ... One-time unlock command encryption data t. ..Time data Wj ... Public key data Wk1 for electronic lock (for authentication server) Public key data for authenticator Wk2 (for electronic lock) Public key data for authenticator Ws ... Public for authentication server Key data Y1 ... User biometric data

Claims (6)

An electronic lock system using an electronic lock, a portable terminal device and an authentication server,
The portable terminal device has short-range wireless communication means for communicating with the electronic lock;
An authenticator is connected to the portable terminal device by wired or wireless communication means, etc., and the authenticator has biometric authentication means,
User authentication data of the user authenticated by the biometric authentication means by the authenticator or user biometric authentication data, and encrypted data for user authentication in which the authenticator-side ID data is encrypted using an encryption key of the authenticator And has means for transmitting to the authentication server via the portable terminal device,
The portable terminal device has means for transmitting an unlocking command request command for an electronic lock including electronic lock side ID data for specifying an electronic lock to the authentication server,
When the authentication server determines the validity of the unlocking of the electronic lock based on the unlocking command request command, the authentication server creates one-time unlocking command encrypted data and stores it in the electronic lock via the portable terminal device. Send
The electronic lock system, wherein the electronic lock has an unlocking means for unlocking the electronic lock based on the one-time unlock command encryption data.   2. The electronic lock system according to claim 1, wherein the one-time unlock command encryption data includes a random number or second generated by either the authentication server, the authenticator, or the portable terminal. The electronic lock system is characterized in that it can be used in one time by changing the one-time unlock command encryption data to different information each time. 3. The electronic lock system according to claim 1, wherein the authentication server stores electronic lock encryption key data, authenticator encryption key data, and electronic lock unlock permission information. Has a key database for locks,
The unlocking permission information of the electronic lock stores information associating the user, the authenticator, and the electronic lock,
The authentication server decrypts the user authentication encrypted data using the authenticator encryption key data to authenticate the authenticator, and retrieves the unlocking permission information of the electronic lock from the electronic lock corresponding key database. Determining the effectiveness of unlocking the electronic lock, and using the electronic lock encryption key data to create the one-time unlock command encryption data,
The electronic lock has a reader / writer that communicates with the unlocking means, a lock-side encryption key storage means, and the short-range wireless communication means of the portable terminal device;
The electronic means for unlocking the electronic lock when the unlocking means decrypts the one-time unlock command encrypted data and determines the validity of the one-time unlock command encrypted data. Lock system. 4. The electronic lock system according to claim 3, wherein the authentication server stores authentication server private key data, electronic lock public key data, and authenticator public key data, and the lock side of the electronic lock. The encryption key storage means stores the electronic lock private key data,
The electronic lock system, wherein the authentication server encrypts and creates the one-time unlock command encryption data using the electronic lock public key data.   The electronic lock system according to claim 3 or 4, wherein a plurality of user ID data or biometric data of a user who can unlock one of the electronic locks is registered in the electronic lock corresponding key database. An electronic lock system that allows a plurality of users to unlock the electronic lock. The electronic lock system according to any one of claims 3 to 5, wherein the authenticator is used by a plurality of users, and the authentication server includes user ID data or biometric authentication data of each user and the authentication. An electronic lock system, wherein unlocking permission information of an electronic lock that associates a device with the electronic lock is stored in the electronic lock corresponding key database.

Images