JP2021004512A - Lock system - Google Patents

Abstract

To provide a lock system that can improve security while improving convenience.SOLUTION: The lock system includes: a first lock device 3 that locks a first door 2 positioned at an entrance for a private area 1; and a second lock device 6 that is set on a second door 5 positioned at an entrance for a shared area 4 such as an entrance hall communicating with the private area 1, and that can perform authentication operation for limited authentication codes provided for users who are only allowed to enter the shared area 4 in addition to unlimited authentication codes that are set in advance. The second lock device 6 performs unlocking operation on condition that authentication for a limited authentication code entered in the second lock device 6 succeeds and the locked state of the first door 2 is detected.SELECTED DRAWING: Figure 1

Description

The present invention relates to a locking system.

A lock system described in Patent Document 1 is known as a lock system capable of unlocking operation using a disposable temporary unlocking cord.

In this conventional example, the electric lock installed on the front door of the house can be unlocked by using the temporary unlocking code, and for example, a servicer such as a courier can enter the house.

Japanese Unexamined Patent Publication No. 2017-223092

However, in the above-mentioned conventional example, no matter how the security of the temporary unlocking code is enhanced, there is a problem that the security is inevitably lowered due to the entry of an unfamiliar stranger into the house.

The present invention has been made to eliminate the above drawbacks, and an object of the present invention is to provide a lock system capable of improving security while improving convenience.

According to the present invention, the above object
A first lock device 3 that locks the first door 2 arranged at the entrance of the private area 1 and
A user who is installed in the second door 5 arranged at the entrance of the shared area 4 such as the entrance leading to the private area 1 and is only allowed to enter the shared area 4 in addition to the preset unlimited authentication code. It has a second lock device 6 capable of performing an authentication operation for the limited authentication code assigned to the door.
The second lock device 6 provides a lock system that unlocks on the condition that the limited authentication code input to the second lock device 6 is authenticated and the locked state of the first door 2 is detected. Achieved.

In the present invention, the house is divided into a common area 4 such as an entrance and a private area 1 which is a living space for residents, and the first door 2 arranged at the boundary between the common area 4 and the private area 1. The first lock device 3 is installed, and in order to enter the private area 1 from the outside, first, the second lock device 6 is unlocked, the second door 5 is opened, and then the private area 1 is entered. You need to go through the entrance of.

The unlocking of the second lock device 6 is limited to allowing access only to the shared area 4 in addition to the unlimited authentication code set mainly for users who are allowed to enter the private area 1, such as residents. Since the unlocking operation can be performed by the authentication code, the courier company or the like who has properly acquired the limited authentication code can enter the room, which improves convenience.

Further, the second lock device 6 can completely restrict the above-mentioned courier company from entering the private area 1 in order to make the unlocking operation condition that the first door 2 is in the locked state. Can be secured and convenience can be improved.

Also,
When the first lock device 3 is in the unlocked state and a locking system is configured that locks when the authentication for the limited authentication code input to the second lock device 6 is established, the first lock is locked. Even if it is not in the state, when the delivery company or the like enters the common area 4, it shifts to the locked state, so that the system can be operated efficiently.

in this case,
When the first door 2 is an automatic door closing door and the first locking device 3 constitutes a locking system that is a non-automatic locking device, the first door 2 is always closed by an auto closer or the like. In addition to being able to be locked, the first lock device 3 is not an automatic lock device, and the lock operation is performed by a resident or the like, or the lock is unlocked when the limited authentication code of the second lock device 6 is not authenticated. Since it is in a state, it is not necessary to unlock the first door 2 which is often opened and closed for going back and forth, which improves convenience.

Further, if the first lock device 3 is configured to be a lock device that unlocks by an unlocking operation using the unlimited authentication code of the second lock device 6, convenience is improved.

Further, the limited authentication code may be electronic information carried on a card-shaped medium or the like, but if a one-time password is used, the issuance and management of the card or the like becomes unnecessary, which improves convenience. To do.

In addition, for the above systems,
A one-time password analysis unit 7 that analyzes a time-synchronous type one-time authentication code generated by a predetermined one-time code generation unit is provided.
In addition to the preset unlimited authentication code, an entrance lock capable of performing an authentication operation for the one-time authentication code can be used.

This entrance lock is used as the second lock device 6 of the system described above, and a time-synchronous one-time password is used as a limited authentication code. A time-synchronous one-time password is a password generated by applying a predetermined calculation formula to the current time, and the current time information and the calculation formula are used as a means for generating a one-time password such as a token and an authentication unit. Just by holding it, authentication operation becomes possible without installing a special authentication server, etc., and the system can be easily constructed.

According to the present invention, it is possible to allow a courier or the like to enter the shared area 4 while ensuring security, so that convenience can be improved.

The floor plan of the house to which the lock system according to the present invention is applied, (a) is a diagram showing an example of the floor plan, and (b) is a diagram showing another example. It is a system block diagram of a lock system. It is a system block diagram which shows the other embodiment. It is an external view of the entrance lock. It is a flowchart which shows the operation of a lock system.

FIG. 1A shows a house to which the lock system of the present invention is applied. In this example, the inside of the house is divided into a common area 4 where a certified third party can enter and a private area 1 where a resident can enter, as described later, and the private area 1 can be entered. The first door 2 is installed at the entrance, and the entrance door as the second door 5 is installed at the entrance from the outside to the inside.

In FIG. 1, the private area 1 is shown by hatching downward to the left, and the shared area 4 is shown by hatching downward to the right.

In this example, three rooms (1A, 1B, 1C) are arranged in the private area 1, and the second and third rooms (1B, 1C) cannot be reached without passing through the entrance to the first room (1A). Therefore, the boundary between the common area 4 and the first room (1A) is the first door 2, and the first lock device 3 is installed in the first door 2.

In the above example, the lock system shows the case where the first and second lock devices 6 each have one, but in addition to this, for example, as shown in FIG. 1 (b), the first lock system is shown. When the first room (1A) to the third room (1C) communicate with the common area 4, the door of each room becomes the first door 2, and in this case, the lock system is the three first lock devices 3. And one second lock device 6.

FIG. 2 shows a system configuration diagram of this system. The locking system includes a first locking device 3 attached to the first door 2 to lock and unlock the first door 2, a second locking device 6 attached to the second door 5, and a control device 8. ..

The first locking device 3 includes a lock control unit 3b controlled by a control unit 3a, a lock / unlock state detection unit 3c, a door open / close state detection unit 3d, an unlock code input unit 3e, an authentication unit 3f, a lock unit 3g, and an on. It has an output unit 3h.

The locking unit 3g includes an electric actuator such as a motor, a dead bolt driven by the electric actuator, or a locking body such as a latch, and is locked / unlocked by a locking / unlocking command from the locking control unit 3b. The locking / unlocking state of the locking unit 3g is detected by the locking / unlocking state detecting unit 3c, and the open / closed state of the first door 2 is detected by the door open / closed state detecting unit 3d provided in the first locking device 3.

The door open / closed state detection unit 3d is configured by mounting a detector on a lock box or the like, which protrudes when the first door 2 is in the open state, interferes with the door frame in the closed state, and retracts into the first door 2. be able to.

The unlocking code input unit 3e is a device having a reading device for reading the card key in which the unlocking code is stored, an input device for inputting a password such as a personal identification number, and both functions. , The unlock code input from the unlock code input unit 3e is collated with the authentication information registered in advance in the authentication unit 3f, and if they match, an authentication establishment signal is output.

When the control unit 3a confirms the output of the authentication establishment signal, the control unit 3a sets the lock / unlock signal on condition that the output of the door close signal is detected from the door open / close state detection unit 3d, and locks / unlocks the lock unit 3g.

Further, in the first locking device 3, when the input / output unit 3h receives the locking / unlocking signal from the control device 8 described later, the locking signal is set in the locking control unit 3b to lock / unlock the locking unit 3g. Make it work.

An auto-closing device such as a door closer is attached to the first door 2 so that the first locking device 3 can reliably perform the locking operation when a predetermined condition is satisfied. In this example, the resident In order to avoid the need for unlocking operation each time to enter the private area 1 and improve usability, it is a non-automatic locking specification, and the locking operation should be performed only when the resident needs it. Can be done.

The second lock device 6 has a lock control unit 6b, an unlock code input unit 6c, an authentication unit 6d, a lock unit 6e, and an input / output unit 6f that are controlled and operated by the control unit 3a, and is operated by a resident or the like. It is possible to access with both the preset unlimited authentication code and the limited authentication code given to the courier company or the like by limiting the access range to the shared area 4.

These unlimited or limited authentication codes may be stored in an appropriate physical storage medium such as a card key or a password such as a personal identification number, but the limited authentication code is one-time in consideration of security. It is desirable to use a password, a disposable card, etc.

The unlocking code input unit 6c is a device having a card lock reading device, an input device for inputting a password such as a personal identification number, and both functions corresponding to the authentication code used. , The authentication unit 6d collates the unlock code input from the unlock code input unit 6c with the pre-registered unlimited authentication code, and if they match, sets the lock / unlock signal in the lock control unit 6b. Then, the locking unit 6e is locked and unlocked.

Further, when the authentication unit 6d authenticates the unlimited authentication code in the unlocking operation of the second lock device 6, the control unit 6a sets the first lock unlock instruction signal in the input / output unit 6f. The control device 8 that has received the first lock / unlock instruction signal outputs an unlock signal to the first lock device 3, and when the first lock device 3 is in the locked state, the first lock device 3 is unlocked. Let me.

In this example, the authentication unit 6d performs an authentication operation only for the unlimited authentication code, and the authentication operation for the limited authentication code is executed in the control device 8.

Therefore, if the authentication code input to the unlock code input unit 6c is not authenticated at the time of authentication, it is assumed to be a limited authentication code and output to the control device 8, and the authentication operation in the control device 8 is performed. ..

As will be described later, in the control device 8, in addition to the success or failure of the authentication for the limited authentication code, other unlocking conditions are determined, and when it is determined that the unlocking is possible, the input / output unit 8c is permitted to unlock. A signal is output. The control unit 6a of the second locking device 6 that has detected the unlocking permission signal sets the unlocking signal in the lock control unit 6b, and causes the locking unit 6e to unlock.

On the other hand, the control device 8 is wired or wireless to the limited authentication code authentication unit 8b and the determination unit 8d that are controlled and operated by the control unit 8a, and the input / output units 3h and 6f of the first and second lock devices 6. The input / output unit 8c connected by is provided.

As described above, the limited authentication code authentication unit 8b authenticates the authentication code input to the unlock code input unit 6c of the second lock device 6, and when the authentication is established, the determination unit 8d determines the unlock condition. To.

When the authentication of the limited authentication code is established, the determination unit 8d determines the output of the door open / closed state detection unit 3d of the first lock device 3, and when the door open state is detected, an error signal is output to the input / output unit 8c. Set to.

On the other hand, when the door open / closed state detecting unit 3d outputs the door closed state and the locking / unlocking state detecting unit 3c outputs the unlocked state, a locking signal is sent to the first locking device 3. Upon receiving the output, the first lock device 3 sets the lock signal in the lock control unit 3b and locks the lock unit 3 g as described above. After that, the lock control unit 3b of the first lock device 3 determines the output of the lock / unlock state detection unit 3c again, and if the lock state is not confirmed, outputs an error signal to the control device 8 and outputs the error signal to the control device 8. Sets an error signal in the input / output unit 8c.

When the system includes a plurality of first lock devices 3, the determination unit 8d outputs an unlocking signal only when all the first lock devices 3 satisfy the determination conditions, and any of the first locks If the device 3 does not satisfy the determination condition, an error signal is output.

The error signal from the control device 8 is monitored by the control unit 6a of the second lock device 6, and when the control unit 6a detects the error signal, an appropriate warning means such as a buzzer arranged in the second lock device 6 (FIG. Not shown) informs the operator.

Further, when the determination unit 8d of the control device 8 confirms that the above-mentioned determination conditions are satisfied, that is, the closed state of the first door 2 and the locked state of the first lock device 3, an unlocking permission signal is sent to the input / output unit 8c. The second lock device 6 that outputs and detects this sets an unlock signal in the lock control unit 6b to unlock the lock unit 6e.

In the above, the limited authentication code is likely to be issued to a large number of third parties, and it is necessary to set, register, change, etc. the authentication code for each issue destination. Although the case where the limited authentication code authentication unit 8b is arranged in 8, the authentication unit 6d of the second lock device 6 may be provided with the authentication function of the limited authentication code.

FIG. 3 shows a system configuration of another embodiment suitable for using a one-time password as the limited authentication code.

A time-synchronous one-time password is used as the one-time password, and the control device 8 has a one-time password issuing unit 8e that issues the above-mentioned one-time password, an authentication unit 8b for authenticating the download authority, and a determination. The unit 8d further includes an input / output unit 8c connected to the first lock device 3 and the second lock device 6.

The one-time password issuing unit 8e supplies predetermined software including a calculation formula for generating a password based on the current time to the mobile terminal requested to be registered.

The mobile terminal on which the download authority is authenticated by the authentication unit 8b and the software is installed can be operated as a token thereafter, and when a one-time password display request is made to the mobile terminal, one-time is calculated by the above formula. The password is calculated and displayed on the display screen.

In the above, the case where the one-time password issuing unit 8e substantially functions as a supply means of the password generation calculation formula is shown, but the password is directly supplied to the mobile terminal or the like by communicating with the mobile terminal or the like. In this case, for example, when the website managed by the control device 8 receives a one-time password request from a courier or the like, the one-time password is subject to the establishment of authentication by the authentication unit 8b. The issuing unit 8e transmits the one-time password.

The determination unit 8d is activated when the control unit 8a receives the one-time password authentication establishment information from the second lock device 6, and detects the door open / closed state of the first lock device 3 as in the above-described embodiment. The open / closed state of the unit 3d and the first door 2 is determined, and an error signal, an unlocking permission signal, or a locking signal for the first locking device 3 is output.

The second lock device 6 includes a lock control unit 6b controlled by the control unit 6a, an unlock code input unit 6c, a one-time password analysis unit 7, an authentication unit 6d, a lock unit 6e, and an input / output unit 6f. ..

FIG. 3 shows the appearance of the second lock device 6. The unlocking code input unit 6c formed by the liquid crystal display surface is on the upper portion of the main body portion 9 incorporating the control unit 6a and the like, and the unlocking code input unit 6c is on the lower portion. 2 A handle 10 for opening and closing the door 5 is arranged.

In this example, the unlock code input unit 6c has a password input unit such as a password and a card reading unit that holds the authentication code, and the user selects one of them to perform the authentication operation. be able to. In order to save power, the unlock code input unit 6c holds the backlight in a non-energized state in the normal state, and the password input number displayed brightly by pressing the operation button 11 arranged on the main body 9. By touching 12, the password can be entered as a password, or the unlocking code can be entered by holding the card-type electronic key in which the predetermined unlocking code is stored.

The one-time password provided as the password is input by touching the password input number 12 appearing on the unlock code input unit 6c.

The authentication unit 6d authenticates the unlock code input from the unlock code input unit 6c, and if the input unlock code matches the unlimited authentication code preset for the resident, the authentication unit 6d authenticates. The control unit 6a that outputs the establishment signal and detects the result sets the unlocking signal in the lock control unit 6b to unlock the lock unit 6e.

On the other hand, when the authentication is not established for the input value from the unlock code input unit 6c, the control unit 6a starts the analysis by the one-time password analysis unit 7 for the input value. The one-time password analysis unit 7 stores the above-mentioned calculation formula for generating the one-time password. When the one-time password is input, the above-mentioned calculation formula is applied to the input time and the password is applied. Generate.

The generated password is compared with the input one-time password by the authentication unit 6d, and when both match, a one-time password authentication establishment signal is output, and this signal is passed through the input / output unit 6f to the control device 8. Is transmitted to.

In this example, the one-time password shows the case where the password is generated only from the time information for easy understanding. For example, the ID information is added to the mobile terminal from which the generation calculation formula is downloaded, and this ID is used. By generating a password with an element of information added, it becomes possible to link the password with the mobile terminal, and it becomes possible to further enhance security.

FIG. 5 is a flowchart showing the operation of the system. When the operation is started and the control unit 6a of the second lock device 6 detects that the operation start button is pressed (step S1), the back panel of the unlock code input unit 6c Is energized to light the numeric keypad (step S2). After that, when the password is input (step S3), the authentication operation in the authentication unit 6d is executed.

In the authentication operation, first, the entered PIN is executed as an unlimited authentication code, and then if it is not authenticated as an unlimited authentication code, the input value is executed as a restricted authentication code, that is, a one-time password. That is, first, when the input value is authenticated as an unlimited authentication code (step S4), the first lock unlock instruction signal is set in the input / output unit 6f, and the first lock device 3 is set via the control device 8. When the first lock device 3 is in the locked state, the first lock device 3 is unlocked (step S41), and then the second lock device 6 is unlocked (step S7). ..

On the other hand, if it is not authenticated as an unlimited authentication code in step S4 and is authenticated as a one-time password (step S5), the determination by the determination unit 8d, that is, whether the first lock device 3 is in the locked state (step S6). ), Further, it is detected whether the first door 2 is in the closed state (step S61), and when the first lock device 3 is in the unlocked state and the first door 2 is in the open state, An error message such as "Unable to unlock" is output from the second lock device 6.

On the other hand, when the first door 2 is closed in step S61, the first lock device 3 is locked (step S62), the second lock device 6 is unlocked (step S7), and then. , The numeric keypad is turned off (step S8), and the control is terminated.

1 Private area 2 1st door 3 1st lock device 4 Shared area 5 2nd door 6 2nd lock device 7 One-time password analysis unit

Claims (6)

The first lock device that locks the first door located at the entrance of the private area,
It was installed at the second door located at the entrance of a common area such as the entrance leading to the private area, and was given to users who are only allowed to enter the common area in addition to the preset unlimited authentication code. It has a second lock device that can perform authentication operation for the limited authentication code.
The second lock device is a lock system that unlocks on the condition that the limited authentication code input to the second lock device is authenticated and the locked state of the first door is detected. The locking system according to claim 1, wherein the first locking device locks when authentication for the limited authentication code input to the second locking device is established in the unlocked state. The locking system according to claim 2, wherein the first door is an automatic closing door, and the first locking device is a non-automatic locking device. The lock system according to claim 1, 2 or 3, wherein the first lock device is unlocked by an unlocking operation using an unlimited authentication code of the second lock device. The lock system according to claim 1, 2, 3 or 4, wherein the limited authentication code is a one-time password. A one-time password analysis unit 7 that analyzes a time-synchronous type one-time password generated by a predetermined one-time code generation unit is provided.
In addition to the preset unlimited authentication code, the entrance lock that can authenticate the one-time password.

Images