JP2021005870A - Use control system, use permit issuance device, use control method, and computer-readable program - Google Patents

Abstract

To reduce security risks while improving the convenience of use control technology of an object to be used.SOLUTION: A use permit issuance device 1 is configured to: store, for each user, authentication data and an authentication method in association with identification information of one or more users; upon receipt of a use permit issuance request from a setting terminal 5, issue a use permit and generates a signature, and also identifies the authentication data associated with the user identification information and the authentication method included in the issuance request; and notify the setting terminal 5 of setting information including the use permit, the signature and the authentication data. The setting terminal 5 registers the setting information in a use permit notification device 4. The use permit notification device 4 acquires authentication data from a user, and transmits the use permit and the signature of the setting information including the authentication data to a use control device 3. The use control device 3 verifies the signature and, if the signature verification is successful, unlocks use restrictions of an object to be used if a use condition included in the use permit is satisfied.SELECTED DRAWING: Figure 1

Description

The present invention includes locking / unlocking and access including real estate such as hotels, inns, private lodging facilities, houses, warehouses, rooms, moving objects such as automobiles and bicycles, and reading terminals for electronic media such as electronic medical records and electronic books. The present invention relates to a usage control technology for a usage target whose usage can be restricted by control or encryption / decryption.

In Patent Document 1, various services including unlocking and locking of a room, cashless eating and drinking, and purchase are used in facilities such as companies, hospitals, amusement parks, and public facilities simply by carrying a room key. The systems that can be disclosed are disclosed.

This system stores authentication data such as room number, personal identification number, and customer information, and reads and writes information to a room key having a readable and writable RFID (Radio Frequency Identification) radio tag and an RFID radio tag of the room key. RFID readers installed in various places in the facility, a database that stores information about each room and each facility in the facility, and each room and each in the facility connected to the RFID reader and database via a network. It is equipped with a server that manages equipment. Then, one of the RFID readers reads the authentication data stored in the RFID wireless tag of the room key and transmits it to the server, and the server receiving the authentication data authenticates the user using the authentication data received from the RFID reader. By doing so, the service associated with the RFID reader is provided to the user carrying the room key.

Japanese Unexamined Patent Publication No. 2003-132435

However, the system described in Patent Document 1 can use the common authentication data stored in the RFID radio tag of the room key in the service provided at any place in the facility where the RFID reader is installed. This is a premise, and it is not assumed that services that adopt different authentication methods will coexist.

Further, the system described in Patent Document 1 is premised on the case where the same service provider provides a plurality of services, and does not assume the case where a plurality of service providers exist. For example, when the service provider is different for each service, the user may request the face recognition data even if the face recognition data has been registered in order to use the service of the service provider B. When using the service for the first time, face recognition data must be registered separately, which is complicated.

Further, the system described in Patent Document 1 does not assume a case where a plurality of people use the facility. In this case, a representative is selected from a plurality of users who use the facility, and the representative is entrusted with the management of the room key and the unlocking / locking of the facility, which imposes a heavy burden on the representative. On the other hand, users other than the representative cannot freely unlock and lock the facility independently, which is inconvenient.

Further, the system described in Patent Document 1 is based on the premise that the room key is lent and returned at the reception of facilities such as companies, hospitals, amusement parks, and public facilities. That is, the user must borrow the room key from the reception when using the facility and return the room key to the reception after using the facility. Therefore, if the facility and the reception are geographically separated, the convenience is poor.

In addition, in the system described in Patent Document 1, RFID readers installed in various places in the facility read the information stored in the RFID radio tag of the room key and transmit it to the server via the network. Therefore, for example, when the server is installed outside the facility and the RFID readers installed in various places in the facility and the server installed outside the facility are connected via the Internet, the RFID reader is the RFID of the room key. Every time the information is read from the wireless tag, the read information is transmitted on the Internet, which increases the security risk.

The present invention has been made in view of the above circumstances, and an object of the present invention is to provide real estate such as hotels, inns, private lodging facilities, houses, warehouses, rooms, moving objects such as automobiles and bicycles, electronic medical records, electronic books, and the like. Reduce security risks while improving convenience in usage control technology for users whose use can be restricted by locking / unlocking, access control, or encryption / decryption, including electronic media browsing terminals. The purpose is.

In order to solve the above problems, the present invention provides a usage permit issuing device that issues a usage permit including usage conditions of the usage target, and locks / unlocks based on the usage permit provided for each usage target. A usage control device that controls the usage of the usage target by access control or encryption / decryption, a usage permit notification device that notifies the usage permit to the usage control device, and a usage permit are set in the usage permit notification device. It is equipped with a setting terminal.

The usage permit issuing device stores at least one authentication data for each user in association with at least one identification information such as an e-mail address, a mobile phone number, an employee number, and a membership number together with the authentication method. .. In addition, the private key used for signing the usage permit is stored for each usage target. Then, from the setting terminal, the user's identification information, the usage target, the specific information that can identify the authentication method adopted by the usage permission notification device corresponding to this usage target, and the usage permit including the usage conditions of this usage target. When the issuance request is accepted, a usage permit including the usage conditions included in this usage permit issuance request is issued, and the private key associated with the usage target included in this usage permit issuance request is issued. Use to generate a signature for the license. In addition, the authentication method specified by the specific information included in this usage permit issuance request from the authentication data associated with the user identification information included in this usage permit issuance request. The authentication data is specified, and the usage permit and signature are notified to the setting terminal together with the specified authentication data.

When the setting terminal receives the usage permit, signature, and authentication data from the usage permit issuing device in response to the usage permit issuance request, the usage permission corresponding to the usage target included in this usage permit issuance request is received. The usage permit, signature, and authentication data received from the usage permit issuing device are registered in the certificate notification device in association with each other.

The usage permit and signature are registered in the usage permit notification device in association with the authentication data. Then, when the usage permit notification device acquires the authentication data from the user, the usage permit and signature associated with the acquired authentication data are selected from the usage permit and signature stored in the own device. The identified and identified usage permit and signature are transmitted to the usage control device paired with the own device by short-range wireless communication.

The usage control device can communicate only by short-range wireless communication and is disconnected from the network. Hall data including a public key required for verification of a usage permit (a public key paired with a private key used for signing a usage permit) is set in this usage control device. When the usage control device receives the usage permit and signature from the usage permit notification device paired with its own device, it verifies this signature with the public key included in the hall data, and if the signature verification is successful, Obtain the terms of use included in this license. Then, if the acquired usage conditions are satisfied, the usage restrictions for the usage target are lifted.

For example, the present invention
It is a usage control system that controls the usage of the usage target.
A usage permit issuing device that issues a usage permit including the usage conditions of the usage target, and
A usage control device provided for each usage target and controlling the usage of the usage target by locking / unlocking, access control, or encryption / decryption based on the usage permit, and the usage control device. A usage permit notification device that notifies the usage permit, and
Following the instruction of the operator, a usage permit issuing request including the designation of the usage target is transmitted to the usage permit issuing device, and setting information including the usage permit is acquired from the usage permit issuing device. It is provided with a setting terminal for notifying the acquired setting information to the usage permit notification device provided corresponding to the usage target specified in the usage permit issuance request.
The usage permit issuing device is
An authentication data storage means that stores at least one authentication data for each user in association with at least one identification information together with the authentication method of the authentication data.
A key information storage means for storing key information including a private key used for signing the usage permit for each usage target.
Issuance of the usage permit including the user's identification information, the designation of the usage target, the specific information that can identify the authentication method adopted by the usage permission notification device corresponding to the usage target, and the usage conditions of the usage target. When the request is received from the setting terminal, the usage permit issuing means for issuing the usage permit including the usage conditions included in the usage permit issuance request, and
The usage permit issuing means using the private key included in the key information stored in the key information storage means associated with the usage target specified in the usage permit issuance request. A signature generation means for generating a signature for the usage permit issued by
Among the authentication data stored in the authentication data storage means linked to the user's identification information included in the usage permit issuance request, the usage permit issuance request is included. An authentication data specifying means for specifying the authentication data of the authentication method specified by the specific information, and
The usage permit issuance of the setting information including the usage permit issued by the usage permit issuing means, the signature generated by the signature generating means, and the authentication data specified by the authentication data specifying means. It has a setting information transmitting means for transmitting to the setting terminal which is a transmission source of the request.
The usage permit notification device is
A setting information storage means for storing the setting information notified by the setting terminal, and
An authentication data acquisition means for acquiring the authentication data from a user according to a predetermined authentication method,
A setting information search means for searching the setting information including the authentication data acquired by the authentication data acquisition means from the setting information storage means, and
A usage permit transmitting means for transmitting the usage permit and the signature included in the setting information searched by the setting information search means to the usage control device paired with the own device by short-range wireless communication. Have,
The utilization control device is
Communication is possible only by short-range wireless communication,
Hall data storage means for storing hall data including a public key used for verification of the usage permit, and
The signature received from the usage permit notification device together with the usage permit is verified by the public key included in the hall data stored in the hall data storage means, and if the verification is successful, the said. The terms of use acquisition means for acquiring the terms of use included in the license, and
If the usage conditions acquired by the usage condition acquisition means are satisfied, the usage condition acquisition means has a release means for releasing the usage restriction of the usage target.

In the present invention, the usage permit issuing device stores authentication data for each user in association with at least one identification information together with the authentication method, and receives a usage permit issuing request from the setting terminal. , Issuing a usage permit, generating a signature for this usage permit, and issuing this usage permit from the authentication data associated with the user's identification information included in the usage permit issuance request. The authentication data of the authentication method specified by the specific information included in the request is specified, and the usage permit and signature are notified to the setting terminal together with the specified authentication data. Then, the setting terminal links the usage permit, signature, and authentication data received from the usage permit issuing device with each other and registers them in the usage permit notification device. Therefore, even if the user uses a certain usage target for the first time, if the authentication data of the authentication method adopted by the usage license notification device corresponding to this usage target has already been registered in the usage permit issuing device, the user Does not need to separately register its own authentication data with the service provider that provides the service to be used.

In addition, by associating the user's usage permit with the user's authentication data and registering it in the usage permit notification device in advance, the user can have the usage permit notification device read his / her own authentication data. As a result, it is possible to use the usage target under the usage conditions included in this usage permit. Therefore, when a plurality of people use the target of use, each of the plurality of users can freely use the facility, etc. under the usage conditions included in their own usage permit, and the plurality of users can use the facilities. It is not necessary to decide a representative from among the persons and leave the management of room keys, etc. and the unlocking / locking of facilities to the representative.

Further, in the present invention, the usage control device releases the usage restriction of the usage target only when the usage conditions included in the usage license are satisfied, and does not release the usage restriction of the usage target when the usage conditions are not satisfied. Therefore, by including the usage conditions such as the expiration date and the number of times of use, in the situation where these usage conditions are not satisfied, this usage permit will be invalid even if its validity is proved. There is no need to have the user return the usage permit.

Therefore, according to the present invention, convenience is improved.

Further, in the present invention, the utilization control device can communicate only by short-range wireless communication and is separated from the network, so that it is not attacked from the outside via a network such as the Internet. In addition, the validity of the usage permit used to lift the usage restrictions of the usage target can be verified by verifying the signature attached to this usage permit using the public key included in the hall data. Prove. Therefore, according to the present invention, the security risk is reduced.

As described above, according to the present invention, in the usage control technology of the usage target whose use can be restricted by locking / unlocking, access control, or encryption / decryption, the security risk is increased while improving the convenience. It can be reduced.

FIG. 1 is a schematic configuration diagram of a utilization control system according to an embodiment of the present invention. FIG. 2 is a sequence diagram showing an example of a setting information registration operation for registering setting information in the usage permit notification device 4. FIG. 3 is a sequence diagram showing an example of the usage restriction release operation of the usage target by the usage control device 3. FIG. 4 is a schematic functional configuration diagram of the usage permit issuing device 1. FIG. 5 is a diagram schematically showing an example of registered contents of the identification information table 1030. FIG. 6 is a diagram schematically showing an example of registered contents of the authentication data table 1031. FIG. 7 is a diagram schematically showing an example of registered contents of the key information storage unit 104. FIG. 8 is a flow chart for explaining the operation of the usage permit issuing device 1. FIG. 9 is a schematic functional configuration diagram of the utilization control device 3. FIG. 10 is a flow chart for explaining the operation of the utilization control device 3. FIG. 11 is a schematic functional configuration diagram of the usage permit notification device 4. FIG. 12 is a diagram schematically showing an example of registered contents of the setting information storage unit 43. FIG. 13 is a flow chart for explaining the operation of the usage permit notification device 4. FIG. 14 is a diagram schematically showing an example of registered contents of the account information table 1033.

Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

FIG. 1 is a schematic configuration diagram of a utilization control system according to the present embodiment.

As shown in the figure, the usage control system according to the present embodiment includes real estate such as hotels, inns, private lodging facilities, houses, warehouses, rooms, moving objects such as automobiles and bicycles, and electronic media such as electronic medical records and electronic books. A usage permit issuing device 1 that issues a usage permit including usage conditions of the usage target such as a viewing terminal of the user, and a usage control unit 2-1 to 2-n (hereinafter, simply a usage control unit 2) provided for each usage target. Also called) and a setting terminal 5. Further, the usage control unit 2 is a usage control device 3 that controls the usage of the usage target by locking / unlocking, access control, or encryption / decryption based on the usage permit, and a usage control device paired with the own device. It is provided with a usage permit notification device 4 for notifying the usage permit to 3.

The usage permit issuing device 1 is connected to a WAN (Wide Area Network) 60, and for each user, at least one authentication data is sent by e-mail together with the authentication method (face authentication, vein authentication, password authentication, etc.). It is stored in association with at least one identification information such as an address, mobile number, employee number, and membership number. In addition, key information including a private key used for signing a usage permit and a common key used for encrypting usage conditions included in the usage permit is stored for each usage target.

The utilization control device 3 can communicate only by short-range wireless communication 63 such as IrDA (Infrared Data Association) and Bluetooth (registered trademark), and is separated from the network. Further, the usage control device 3 is set with hall data including a public key required for signature verification of the usage permit and a common key required for decrypting the usage conditions included in the usage permit.

At least one setting information including a usage permit, a signature for the usage permit, and user authentication data is registered in the usage permit notification device 4.

The setting terminal 5 is provided for each service provider who provides the service to be used, for example. The setting terminal 5 is connected to the WAN 60 via a wireless network 62 and a relay device 61 such as a wireless base station or an access point, and acquires setting information from the usage permit issuing device 1. Then, the acquired setting information is transmitted to the usage permit notification device 4 by the short-range wireless communication 63 and registered.

FIG. 2 is a sequence diagram showing an example of a setting information registration operation for registering setting information in the usage permit notification device 4.

Here, the service provider receives a usage permission request from the user via e-mail, mobile phone, etc., and specifies the usage target and usage conditions (use start / end date / time, etc.), and grants this request. To do.

First, when the setting terminal 5 receives a login operation from the service provider (S100), the setting terminal 5 transmits a login request including the login information (user ID and password) of the service provider to the usage permit issuing device 1 (S101). .. In response to this, the usage permit issuing device 1 performs an authentication process using the password included in the login request and the password managed in association with the user ID included in the login request. It is carried out (S102). Then, if the authentication is successful, the login of the setting terminal 5 which is the transmission source of the login request is permitted, and the login permission notification is transmitted to the setting terminal 5 (S103).

Next, in the setting terminal 5, the service provider provides an object ID that is identification information of the usage target specified in the usage permission request, and a usage permit notification device 4 of the usage control unit 2 corresponding to the usage target. The authentication method to be adopted (bioauthentication (face authentication, vein authentication, etc.), password authentication, etc.), the usage conditions specified in the usage permission request, and the user of the usage permission request source known by the service provider When the usage permit issuance operation with the identification information (email address, mobile number, employee number, membership number, etc.) is accepted (S104), a usage permit issuance request with the designation of these information is generated, and this The usage permit issuance request is transmitted to the usage permit issuing device 1 (S105).

In response to this, the usage permit issuing device 1 issues a usage permit including the usage conditions specified in the usage permit issuance request (S106). In addition, the usage conditions included in the issued usage permit are encrypted using the common key included in the key information stored in association with the object ID specified in the usage permit issuance request. At the same time, the private key included in this key information is used to generate a signature for the usage permit (S107). Specifically, the usage permit, a predetermined part of the usage permit, or a message digest thereof is encrypted with a private key, and the encrypted information is used as a signature.

Further, the usage permit issuing device 1 is designated by the usage permit issuance request from the authentication data stored in association with the user identification information specified in the usage permit issuance request. The authentication data of the authentication method is specified (S108).

Then, the usage permit issuing device 1 generates setting information including the usage permit issued as described above, the generated signature, and the specified authentication data, and issues the usage permit with this setting information. It is transmitted to the setting terminal 5 which is the transmission source of the request (S109).

Next, the setting terminal 5 is brought close to the usage permit notification device 4 of the usage control unit 2 associated with the usage target specified in the usage permission request received from the user, from the service provider. When the setting operation is accepted (S110), the setting information received from the usage permit issuing device 1 is transmitted to the usage permit notification device 4 by the short-range wireless communication 63 (S111). In response to this, the usage permit notification device 4 registers the setting information received from the setting terminal 5 (S112).

FIG. 3 is a sequence diagram showing an example of the usage restriction release operation of the usage target by the usage control device 3.

First, the user approaches the usage permit notification device 4 of the usage control unit 2 associated with the usage target licensed by the service provider, and transfers his / her own authentication data to the usage permit notification device 4. When the authentication data reading operation to be read is performed (S120), the usage permit notification device 4 reads the authentication data from the user according to a predetermined authentication method such as biometric authentication (face authentication, vein authentication, etc.) and password authentication (S120). S121). Then, the usage permit notification device 4 searches for setting information including the authentication data read from the user (S122). Then, the usage permit and signature included in the searched setting information are transmitted to the usage control device 3 paired with the own device 4 by the short-range wireless communication 63 (S123).

In response to this, the usage control device 3 receives the usage permit from the usage permit notification device 4 by the short-range wireless communication 63 using the public key included in the hall data set in the own device 3. The signature is verified (S124). If the signature verification is successful, the encrypted usage conditions (hereinafter referred to as encrypted usage conditions) included in the usage permit are decrypted using the common key included in the hall data. (S125).

Next, the utilization control device 3 confirms that the decrypted usage conditions are satisfied (S126). For example, if the usage condition is the usage start / end time, it is confirmed that the current date and time is within the period specified by the usage start / end time. Then, when it can be confirmed that the usage control device 3 satisfies the usage conditions, the usage control device 3 releases the usage restriction of the usage target (S127). For example, if the target of use is real estate such as a hotel, inn, private lodging facility, house, warehouse, room, etc., the auto-lock device at the entrance / exit of the real estate is unlocked.

After that, the usage control device 3 transmits a usage restriction release notification to the usage permit notification device 4 by the short-range wireless communication 63 (S128). In response to this, the usage permit notification device 4 executes a predetermined cancellation message output process such as displaying a message indicating that the usage restriction of the usage target has been unlocked, outputting a message sound to that effect, and the like ( S129).

Next, the details of the usage permit issuing device 1 and the usage control unit 2 that constitute the usage control system according to the present embodiment will be described. Since existing mobile terminals such as smart phones and tablet terminals having a short-range wireless communication function can be used as the setting terminal 5, detailed description thereof will be omitted.

First, the details of the usage permit issuing device 1 will be described.

FIG. 4 is a schematic functional configuration diagram of the usage permit issuing device 1.

As shown in the figure, the usage permit issuing device 1 includes a WAN interface unit 100, a storage unit 101, a login processing unit 105, a usage permit issuing unit 106, an encryption unit 107, and a signature generation unit 108. It includes an authentication data identification unit 109 and a setting information transmission unit 110.

The WAN interface unit 100 is an interface for connecting to the WAN 60.

The storage unit 101 includes a login information storage unit 102, an authentication data storage unit 103, and a key information storage unit 104.

The login information storage unit 102 stores login information (user ID, password) for logging in to the usage permit issuing device 1 for each service provider.

The following identification information table 1030 and authentication data table 1031 are stored in the authentication data storage unit 103 for each user.

FIG. 5 is a diagram schematically showing an example of registered contents of the identification information table 1030.

As shown in the figure, the identification information table 1030 is provided for each user in association with the route ID 1032 given to the user. The identification information table 1030 stores a record 10301 of user identification information. The identification information record 10301 has a field 10302 for registering the type and use of the identification information such as an e-mail address, a mobile phone number, an employee number, and a member number, and a field 10303 for registering the user's identification information.

FIG. 6 is a diagram schematically showing an example of registered contents of the authentication data table 1031.

As shown in the figure, the authentication data table 1031 is provided for each user in association with the route ID 1032 given to the user. The authentication data table 1031 stores a record 10311 of user authentication data. The authentication data record 10311 has a field 10312 for registering an authentication method such as face authentication, vein authentication, password authentication, and the like, and a field 10313 for registering user authentication data.

The key information storage unit 104 stores key information for each usage target.

FIG. 7 is a diagram schematically showing an example of registered contents of the key information storage unit 104.

As shown in the figure, the key information storage unit 104 stores a record 1040 of key information for each usage target. The key information record 1040 contains a field 1041 for registering an object ID which is identification information of a usage target and a field 1042 for registering a private key used for signing a usage permit for the usage control unit 2 corresponding to the usage target. It also has a field 1043 for registering the public key paired with the private key, and a field 1044 for registering the common key used for encrypting / decrypting the usage conditions included in the usage permit.

The login processing unit 105 processes the login request received from the setting terminal 5 with reference to the login information storage unit 102.

The usage permit issuing unit 106 issues a usage permit including the encrypted usage conditions received from the setting information transmitting unit 110 in accordance with the instruction of the setting information transmitting unit 110.

The encryption unit 107 follows the instruction of the setting information transmission unit 110, and sets the common key included in the key information stored in the key information storage unit 104 associated with the object ID received from the setting information transmission unit 110. The usage conditions received from the setting information transmission unit 110 are encrypted to generate the encrypted usage conditions.

The signature generation unit 108 follows the instruction of the setting information transmission unit 110, and sets the private key included in the key information stored in the key information storage unit 104 associated with the object ID received from the setting information transmission unit 110. It is used to generate a signature for the usage permit received from the setting information transmission unit 110.

The authentication data identification unit 109 refers to the authentication data storage unit 103 in accordance with the instruction of the setting information transmission unit 110, and the user identification information received from the setting information transmission unit 110 and the authentication data associated with the authentication method. To identify.

The setting information transmitting unit 110 is included in the usage permit issuing request in cooperation with the usage permit issuing unit 106 and the encryption unit 107 in accordance with the usage permit issuing request received from the setting terminal 5 via the WAN interface unit 100. A usage permit including the encrypted usage conditions generated from the usage conditions is issued, and a signature for the usage license is generated in cooperation with the signature generation unit 108. Further, in cooperation with the authentication data identification unit 109, the authentication included in the usage permit issuance request of the user specified by the identification information included in the usage permit issuance request from the authentication data storage unit 103. Identify the authentication data by method. Then, the setting information including the usage permit, the signature, and the authentication data is transmitted to the setting terminal 5.

The schematic functional configuration of the usage permit issuing device 1 shown in FIG. 4 may be realized by an integrated logic IC such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array). Alternatively, it may be realized by software by a computer such as a DSP (Digital Signal Processor). Alternatively, in a general-purpose computer provided with a CPU (Central Processing Unit), a memory, an auxiliary storage device such as a flash memory and a hard disk drive, and a communication device such as a NIC (Network Interface Card), the CPU executes a predetermined program. It may be realized by loading it from the auxiliary storage device into the memory and executing it. Further, it may be realized on a distributed system consisting of cooperation of a plurality of general-purpose computers.

FIG. 8 is a flow chart for explaining the operation of the usage permit issuing device 1.

This flow is started when the WAN interface unit 100 receives a login request from the setting terminal 5 via the WAN 60.

First, the WAN interface unit 100 notifies the login processing unit 105 of the received login request. In response to this, the login processing unit 105 performs login authentication (S200). Specifically, the password stored in the login information storage unit 102 linked to the user ID of the service provider included in the login request is searched, and the searched password is included in the login request. If the password matches, login is permitted (authentication established), and if it does not match, login is denied (authentication not established).

Next, when the login authentication fails (NO in S201), the login processing unit 105 transmits an error message to the setting terminal 5 which is the source of the login request via the WAN interface unit 100, or the like. Perform error processing (S209).

On the other hand, when the login authentication is successful (YES in S201), the login permission notification is transmitted to the setting terminal 5 which is the source of the login request via the WAN interface unit 100 (S202). Then, the setting information transmitting unit 110 waits for a usage permit issuance request to be sent from the setting terminal 5 that has been permitted to log in via the WAN interface unit 100 (S203).

When the setting information transmission unit 110 receives the usage permit issuance request from the setting terminal 5 that has been permitted to log in via the WAN interface unit 100 (YES in S203), the object to be used included in the usage permit issuance request. The ID and the usage conditions are passed to the encryption unit 107 to instruct the generation of the encryption usage conditions. In response to this, the encryption unit 107 searches the key information record 1040 from the key information storage unit 104 using the object ID received from the setting information transmission unit 110 as a key. Then, using the common key registered in the field 1044 of the searched record 1040, the usage condition received from the setting information transmission unit 110 is encrypted to generate the encrypted usage condition (S204).

Next, the setting information transmission unit 110 permits the use of the object ID of the usage target included in the usage permit issuance request, the user identification information, and the encryption usage conditions generated by the encryption unit 107. It is handed over to the certificate issuing unit 106 to instruct the issuance of a usage permit. In response to this, the usage permit issuing unit 106 issues a usage permit including the object ID of the usage target received from the setting information transmitting unit 110, the user identification information, and the encrypted usage conditions (S205).

Next, the setting information transmission unit 110 passes the object ID of the use target included in the usage permit issuance request and the usage permit issued by the usage permit issuing unit 106 to the signature generation unit 108. , Instruct signature generation. In response to this, the signature generation unit 108 searches the key information record 1040 from the key information storage unit 104 using the object ID received from the setting information transmission unit 110 as a key. Then, using the private key registered in the field 1042 of the searched record 1040, a signature for the usage permit received from the setting information transmission unit 110 is generated (S206). Specifically, the usage permit, a predetermined part of the usage permit, or a message digest thereof is encrypted with a private key, and the encrypted information is used as a signature.

In addition, the setting information transmission unit 110 passes the user identification information and the authentication method included in the usage permit issuance request to the authentication data identification unit 109, and instructs the user to specify the authentication data. In response to this, the authentication data identification unit 109 refers to the authentication data storage unit 103, and obtains the user identification information received from the setting information transmission unit 110 and the user authentication data associated with the authentication method. Identify (S207). Specifically, the authentication data storage unit 103 searches the identification information table 1030 having the identification information record 10301 in which the user identification information received from the setting information transmission unit 110 is registered in the field 10303. Then, the authentication method received from the setting information transmission unit 110 from the authentication data table 1031 associated with the route ID 1032 associated with the searched identification information table 1030 and stored in the authentication data storage unit 103 is field 10312. The record 10311 of the authentication data registered in is searched, and the authentication data of the user registered in the field 10313 of the searched record 10311 is specified.

Then, the setting information transmitting unit 110 includes a usage permit issued by the usage permit issuing unit 106, a signature generated by the signature generating unit 108, and user authentication data specified by the authentication data specifying unit 109. The setting information including, is generated, and this setting information is transmitted to the setting terminal 5 which is the transmission source of the usage permit issuance request via the WAN interface unit 100 (S208).

Next, the details of the utilization control unit 2 will be described.

As described above, the use control unit 2 has a use control device 3 and a use permit notification device 4.

First, the details of the utilization control device 3 will be described.

FIG. 9 is a schematic functional configuration diagram of the utilization control device 3.

As shown in the figure, the utilization control device 3 includes a short-range wireless communication unit 30, a hall data storage unit 31, a usage restriction release unit 32, a signature verification unit 33, and a decoding unit 34.

The short-range wireless communication unit 30 communicates with the usage permit notification device 4 by short-range wireless communication such as IrDA and Bluetooth (registered trademark).

The hall data storage unit 31 stores hall data. The hall data includes a public key used for signature verification of the usage permit and a common key for decrypting the encrypted usage conditions included in the usage permit. These public keys and common keys are stored in the key information storage unit 104 in the usage permit issuing device 1 in association with the object ID of the usage target associated with the usage control unit 2 including the own device 3. It is the same as the public key and common key registered in the record 1040 of the existing key information.

The usage restriction release unit 32 sets the own device 3 when the verification of the signature received from the usage permit notification device 4 together with the usage permit is established and the usage conditions included in the usage permit are satisfied. The usage restriction of the usage target associated with the usage control unit 2 including the usage control unit 2 is released. For example, when the target of use is real estate such as a hotel, inn, private lodging facility, house, warehouse, room, etc., an unlocking command is output to an auto-lock device installed at the door of the entrance / exit of the real estate.

The signature verification unit 33 verifies the signature on the usage permit by using the public key contained in the hall data stored in the hall data storage unit 31.

The decryption unit 34 decrypts the encryption usage condition included in the usage permit by using the common key contained in the hall data stored in the hall data storage unit 31.

The schematic functional configuration of the utilization control device 3 shown in FIG. 9 may be realized by hardware such as an integrated logic IC such as ASIC or FPGA, or by software by a computer such as DSP. It may be. Alternatively, in a general-purpose computer including a CPU, a memory, an auxiliary storage device such as a flash memory and a hard disk drive, and a short-range wireless communication device such as an IrDA communication device and a Bluetooth (registered trademark) communication device, a CPU is specified. The program may be realized by loading the program from the auxiliary storage device into the memory and executing the program.

FIG. 10 is a flow chart for explaining the operation of the utilization control device 3.

This flow is started when the short-range wireless communication unit 30 receives the usage permit from the usage permit notification device 4 together with the signature by the short-range wireless communication 63.

The usage restriction release unit 32 passes the usage permit and the signature received from the usage permit notification device 4 to the signature verification unit 33 via the short-range wireless communication unit 30, and instructs the signature verification. In response to this, the signature verification unit 33 verifies the signature on the usage permit using the public key included in the hall data stored in the hall data storage unit 31 (S300). Specifically, the signature is decrypted using the public key, and it is determined whether or not the decryption information matches the usage permit, a predetermined part of the usage permit, or their message digest. To verify the validity of the signature.

Next, the signature verification unit 33 notifies the usage restriction release unit 32 of the signature verification result. In response to this, if the usage restriction release unit 32 succeeds in the signature verification and can prove the validity of the signature (YES in S301), the decryption unit 34 tells the decryption unit 34 the encryption included in the usage permit. Instruct decryption by passing the usage conditions. On the other hand, if the signature verification fails and the validity of the signature cannot be proved (NO in S301), an error notification is transmitted to the usage permit notification device 4 via the short-range wireless communication unit 30 (S306).

Next, when the decryption unit 34 receives the encryption usage condition together with the decryption instruction from the usage restriction release unit 32, the decryption unit 34 stores the common key contained in the hall data stored in the hall data storage unit 31. This encryption usage condition is decrypted by using (S302). Then, the decrypted usage conditions are passed to the usage restriction release unit 32.

In response to this, the usage restriction release unit 32 determines whether or not the situation satisfies the decoded usage conditions (S303). For example, when the usage condition is the available start / end time, it is determined whether or not the current date and time is within the period specified by the available start / end time.

Next, when the usage restriction releasing unit 32 determines that the usage conditions are satisfied (YES in S303), the usage restriction releasing unit 32 releases the usage restriction of the usage target associated with the usage control unit 2 including the own device 3 (YES in S303). S304). For example, when the target of use is real estate such as a hotel, inn, private lodging facility, house, warehouse, room, etc., an unlocking command is output to an auto-lock device installed at the door of the entrance / exit of the real estate. Then, the usage restriction release unit 32 transmits a usage restriction release notification to the usage permit notification device 4 via the short-range wireless communication unit 30 (S305).

On the other hand, when the usage restriction release unit 32 determines that the usage conditions are not satisfied (NO in S303), the usage restriction release unit 32 transmits an error notification to the usage permit notification device 4 via the short-range wireless communication unit 30 (S306). ..

Next, the details of the usage permit notification device 4 will be described.

FIG. 11 is a schematic functional configuration diagram of the usage permit notification device 4.

As shown in the figure, the usage permit notification device 4 includes a short-range wireless communication unit 40, an authentication data acquisition unit 41, a display unit 42 such as an LCD (Liquid Crystal Display) and an organic EL (Electroluminescence), and setting information. It includes a storage unit 43, a setting information receiving unit 44, a setting information search unit 45, a usage permit transmitting unit 46, and a notification receiving unit 47.

The short-range wireless communication unit 40 communicates with the usage control device 3 and the setting terminal 5 by short-range wireless communication 63 such as IrDA and Bluetooth (registered trademark).

The authentication data acquisition unit 41 acquires authentication data from the user according to a predetermined authentication method such as face authentication, vein authentication, and password authentication. For example, in the case of face recognition, the authentication data acquisition unit 41 includes a camera and captures the user's face to acquire face authentication data. Further, in the case of vein authentication, the authentication data acquisition unit 41 is provided with a vein sensor, detects the vein pattern of the user, and acquires the vein authentication data. Further, in the case of password authentication, the authentication data acquisition unit 41 is provided with an input device such as a keyboard and a touch panel, or a card reader, and either accepts the password input from the user by the input device, or the user carries it by the card reader. Read the password from the ID card.

The setting information is stored in the setting information storage unit 43.

FIG. 12 is a diagram schematically showing an example of registered contents of the setting information storage unit 43.

As shown in the figure, the setting information storage unit 43 stores the setting information record 430. The setting information record 430 has a field 431 for registering authentication data, a field 432 for registering a use permit, and a field 433 for registering a signature for the use permit.

The setting information receiving unit 44 receives the setting information from the setting terminal 5 via the short-range wireless communication unit 40, and stores the received setting information in the setting information storage unit 43.

The setting information search unit 45 searches the setting information storage unit 43 for the record 430 of the setting information including the authentication data acquired by the authentication data acquisition unit 41.

The usage permit transmitting unit 46 controls the use of the usage permit and signature included in the setting information record 430 searched by the setting information search unit 45 by the short-range wireless communication unit 40 in pairs with the own device 4. It is transmitted to the device 3.

The notification receiving unit 47 receives various notifications from the usage control device 3 via the short-range wireless communication unit 40 and displays them on the display unit 42.

As with the usage control device 3, the schematic functional configuration of the usage permit notification device 4 shown in FIG. 11 may be realized in hardware by an integrated logic IC such as an ASIC or FPGA, or a computer such as a DSP. It may be realized by software. Alternatively, in a general-purpose computer including a CPU, a memory, an auxiliary storage device such as a flash memory and a hard disk drive, and a short-range wireless communication device such as an IrDA communication device and a Bluetooth (registered trademark) communication device, a CPU is specified. The program may be realized by loading the program from the auxiliary storage device into the memory and executing the program.

FIG. 13 is a flow chart for explaining the operation of the usage permit notification device 4.

When the setting information receiving unit 44 receives the setting information from the setting terminal 5 via the short-range wireless communication unit 40 (YES in S400), the setting information receiving unit 44 stores the setting information in the setting information storage unit 43 (S401). Specifically, the authentication data included in the setting information received from the setting terminal 5 is registered in the field 431. If the setting information record 430 is not registered in the setting information storage unit 43, a new setting is made. The information record 430 is added to the setting information storage unit 43, and the authentication data, the usage permit, and the signature included in the setting information received from the setting terminal 5 are registered in the fields 431 to 433 of the record 430. On the other hand, if the record 430 of the setting information in which the authentication data included in the setting information received from the setting terminal 5 is registered in the field 431 is registered in the setting information storage unit 43, the field 432 of this record 430 433 is updated with the usage permit and signature included in the setting information received from the setting terminal 5.

Further, when the authentication data acquisition unit 41 receives the authentication data reading operation from the user (YES in S402), the authentication data acquisition unit 41 acquires the authentication data from the user according to a predetermined authentication method such as face authentication, vein authentication, and password authentication (YES in S402). S403). Then, the acquired authentication data is passed to the setting information search unit 45. In response to this, the setting information search unit 45 searches the setting information record 430 from the setting information storage unit 43 using the acquired authentication data as a key (S404).

Here, if the setting information record 430 including the authentication data received from the authentication data acquisition unit 41 is not stored in the setting information storage unit 43 and the search fails (NO in S405), the setting information search unit 45 , A predetermined error process such as displaying an error message on the display unit 42 is performed (S408).

On the other hand, when the setting information record 430 including the authentication data received from the authentication data acquisition unit 41 is stored in the setting information storage unit 43 and the search is successful (YES in S405), the searched setting information record 430 is stored. The included usage permit and signature are passed to the usage permit transmission unit 46. In response to this, the usage permit transmitting unit 46 transmits the usage permit and signature received from the setting information retrieval unit 45 to the usage control device 3 via the short-range wireless communication unit 40 (S406). After that, the notification receiving unit 47 receives a notification (either a usage restriction release notification or an error notification) from the usage control device 3 via the short-range wireless communication unit 40, and displays this notification on the display unit 42 ( S407).

The embodiment of the present invention has been described above.

In the present embodiment, the usage permit issuing device 1 stores the authentication data for each user in association with at least one identification information together with the authentication method, and issues the usage permit from the setting terminal 5. When the request is accepted, a usage permit is issued, a signature for this usage permit is generated, and this is displayed from the authentication data associated with the user's identification information included in the usage permit issuance request. The authentication data of the authentication method included in the usage permit issuance request is specified, and the setting information including the usage permit, the signature, and the specified authentication data is notified to the setting terminal 5. Then, the setting terminal 5 registers the setting information received from the usage permit issuing device 1 in the usage permit notification device 4. Therefore, even when the user uses a certain usage target for the first time, the usage permit issuing device uses the authentication data of the authentication method adopted by the usage permit notification device 4 of the usage control unit 2 associated with the usage target. If it has already been registered in 1, it is not necessary to separately register its own authentication data with the service provider that provides the service to be used.

Further, by associating the user's usage permit with the user's authentication data and registering it in the usage permit notification device 4 in advance, the user can send his / her own authentication data to the usage permit notification device 4. By reading it, it becomes possible to use the usage target under the usage conditions included in this usage permit. Therefore, for example, when a plurality of people use the target of use, each of the plurality of users can freely use the facility or the like independently under the usage conditions included in their own license. It is not necessary to decide a representative from among the users and leave the management of room keys, etc. and the unlocking / locking of facilities to the representative.

Further, in the present embodiment, the usage control device 3 releases the usage restriction of the usage target only when the usage condition included in the usage permit is satisfied, and removes the usage restriction of the usage target when the usage condition is not satisfied. Do not release. Therefore, by including the usage conditions such as the expiration date and the number of times of use, in the situation where these usage conditions are not satisfied, this usage permit will be invalid even if its validity is proved. There is no need to have the user return the usage permit or have the user delete the usage permit.

Therefore, according to the present embodiment, convenience is improved.

Further, in the present embodiment, since the utilization control device 3 can communicate only by the short-range wireless communication 63 and is separated from the network, it is not attacked from the outside via a network such as the Internet. In addition, the validity of the usage permit used to lift the usage restrictions of the usage target can be verified by verifying the signature attached to this usage permit using the public key included in the hall data. Prove. Therefore, according to this embodiment, the security risk is reduced.

As described above, according to the present embodiment, in the usage control technology of the usage target whose use can be restricted by locking / unlocking, access control, or encryption / decryption, the convenience is improved and the security is improved. The risk can be reduced.

The present invention is not limited to the above embodiment, and many modifications can be made within the scope of the gist thereof.

For example, in the above embodiment, the usage permit issuing device 1 encrypts the usage conditions included in the usage permit with the common key included in the hall data set in the usage control device 3 (encryption). (Usage conditions), the usage control device 3 decrypts the encrypted usage conditions included in the usage permit received from the usage permit notification device 4. However, the present invention is not limited to this. The use permit issuing device 1 may include the terms of use in the use permit in plain text without encryption. In this case, the common key may be omitted from the hall data set in the usage control device 3.

Further, in the above embodiment, the usage condition may be a condition for releasing the usage restriction of the usage target. For example, as the usage condition, the number of times of use may be used instead of the available start / end time or together with the available start / end time. In this case, in the usage control device 3, the usage restriction release unit 32 stores the number of times of use of the usage target for each user in association with the identification information of the user. Then, in S303 of FIG. 10, the number of times of use included in the usage permit received from the usage permit notification device 4 as a usage condition is linked to the user identification information included in the usage permit. If it is less than the number of times of use stored in the above, it is judged that the conditions of use are satisfied. Further, in S304 of FIG. 10, when the usage restriction of the usage target is released, the number of usages associated with the user identification information included in the usage permit and stored is incremented by one.

Further, in the above embodiment, the setting terminal 5 uses the authentication method adopted by the usage permission notification device 4 of the usage control unit 2 corresponding to the usage target in response to the usage permit issuance request transmitted to the usage permit issuing device 1. , The present invention is not limited to this, although it is included together with the identification information of the user who requested the usage permission that the service provider knows. In the usage permit issuing device 1, the specific information that can identify the authentication method adopted by the usage permission notification device 4 of the usage control unit 2 corresponding to the usage target is sent to the usage permit issuance request together with the user's identification information. It suffices if it is included.

For example, the type and use of the user identification information associated with the user authentication data of the authentication method adopted by the usage permission notification device 4 of the usage control unit 2 corresponding to the usage target is used as specific information for the service. It may be included in the usage permit issuance request together with the identification information of the user who requested the usage permission that the provider knows.

In this case, the authentication data storage unit 103 of the storage unit 101 of the usage permit issuing device 1 has an account information table shown in FIG. 14 instead of the identification information table 1030 shown in FIG. 5 and the authentication data table 1031 shown in FIG. 1033 is stored.

The account information table 1033 is provided for each user in association with the route ID 1032 given to the user. In the account information table 1033, the record 10331 of the user's account information is stored. The account information record 10331 includes a field 10332 for registering the type / use of the identification information such as an email address, a mobile number, an employee number, a member number, and a field 10333 for registering the identification information of the user of the type / use. , A field 10334 for registering an authentication method such as face authentication, vein authentication, password authentication, etc., and a field 10335 for registering authentication data of a user of the authentication method.

Further, in S104 and S105 of FIG. 2, the setting terminal 5 receives the object ID, which is the identification information of the usage target specified in the usage permission request, and the usage permission request grasped by the service provider. The type and use of the user's identification information linked to the original user's identification information and the user's authentication data of the authentication method adopted by the usage permission notification device 4 corresponding to this usage target, and the usage permission. When the usage permit issuance operation with the usage conditions specified in the request is accepted, a usage permit issuance request with the specification of this information is generated, and this usage permit issuance request is sent to the usage permit issuing device. Send to 1.

Further, in S108 of FIG. 2, the usage permit issuing device 1 records the account information in which the user identification information specified in the usage permit issuance request is registered in the field 10333 from the authentication data storage unit 103. Identify the account information table 1033 having 10331. Then, from the specified account information table 1033, the record 10331 of the account information whose type / use specified in the usage permit issuance request is registered in the field 10332 is further specified. Then, the authentication data registered in the field 10335 of the authentication method registered in the field 10334 of the record 10331 is used corresponding to the usage target specified by the object ID specified in the usage permit issuance request. It is specified as the authentication data of the user of the authentication method adopted by the usage permission notification device 4 of the control unit 2.

1: Usage permit issuing device 2, 2-1-2-n: Usage control unit 3: Usage control device 4: Usage permit notification device 5: Setting terminal 30: Short-range wireless communication unit 31: Hall data storage unit 32 : Usage restriction release unit 33: Sign verification unit 34: Decryption unit 40: Short-range wireless communication unit 41: Authentication data acquisition unit 42: Display unit 43: Setting information storage unit 44: Setting information receiving unit 45: Setting information search unit 46: Usage permit transmission unit 47: Notification reception unit 60: WAN 61: Relay device 62: Wireless network 63: Short-range wireless communication 100: WAN interface unit 101: Storage unit 102: Login information storage unit 103: Authentication data storage unit 104: Key information storage unit 105: Login processing unit 106: Usage permit issuing unit 107: Encryption unit 108: Signature generation unit 109: Authentication data identification unit 110: Setting information transmission unit

Claims (7)

It is a usage control system that controls the usage of the usage target.
A usage permit issuing device that issues a usage permit including the usage conditions of the usage target, and
A usage control device provided for each usage target and controlling the usage of the usage target by locking / unlocking, access control, or encryption / decryption based on the usage permit, and the usage control device. A usage permit notification device that notifies the usage permit, and
Following the instruction of the operator, a usage permit issuing request including the designation of the usage target is transmitted to the usage permit issuing device, and setting information including the usage permit is acquired from the usage permit issuing device. It is provided with a setting terminal for notifying the acquired setting information to the usage permit notification device provided corresponding to the usage target specified in the usage permit issuance request.
The usage permit issuing device is
An authentication data storage means that stores at least one authentication data for each user in association with at least one identification information together with the authentication method of the authentication data.
A key information storage means for storing key information including a private key used for signing the usage permit for each usage target.
Issuance of the usage permit including the user's identification information, the designation of the usage target, the specific information that can identify the authentication method adopted by the usage permission notification device corresponding to the usage target, and the usage conditions of the usage target. When the request is received from the setting terminal, the usage permit issuing means for issuing the usage permit including the usage conditions included in the usage permit issuance request, and
The usage permit issuing means using the private key included in the key information stored in the key information storage means associated with the usage target specified in the usage permit issuance request. A signature generation means for generating a signature for the usage permit issued by
Among the authentication data stored in the authentication data storage means linked to the user's identification information included in the usage permit issuance request, the usage permit issuance request is included. An authentication data specifying means for specifying the authentication data of the authentication method specified by the specific information, and
The usage permit issuance of the setting information including the usage permit issued by the usage permit issuing means, the signature generated by the signature generating means, and the authentication data specified by the authentication data specifying means. It has a setting information transmitting means for transmitting to the setting terminal which is a transmission source of the request.
The usage permit notification device is
A setting information storage means for storing the setting information notified by the setting terminal, and
An authentication data acquisition means for acquiring the authentication data from a user according to a predetermined authentication method,
A setting information search means for searching the setting information including the authentication data acquired by the authentication data acquisition means from the setting information storage means, and
A usage permit transmitting means for transmitting the usage permit and the signature included in the setting information searched by the setting information search means to the usage control device paired with the own device by short-range wireless communication. Have,
The utilization control device is
Communication is possible only by short-range wireless communication,
Hall data storage means for storing hall data including a public key used for verification of the usage permit, and
The signature received from the usage permit notification device together with the usage permit is verified by the public key included in the hall data stored in the hall data storage means, and if the verification is successful, the said. The terms of use acquisition means for acquiring the terms of use included in the license, and
A usage control system comprising, if the usage conditions acquired by the usage condition acquisition means are satisfied, a cancellation means for releasing the usage restriction of the usage target. The usage control system according to claim 1.
The specific information is an authentication method for authentication data, and is
The authentication data identification means is
Among the authentication data stored in the authentication data storage means linked to the user's identification information included in the usage permit issuance request, the usage permit issuance request is included. A usage control system characterized by specifying the authentication data of the authentication method. The usage control system according to claim 1.
The authentication data storage means includes
At least one account information including authentication data, its authentication method, identification information and its type / use is stored for each user.
The specific information is the type and use of the identification information.
The authentication data identification means is
Issuing the usage permit from the account information stored in the authentication data storage means associated with the user specified by the user's identification information included in the usage permit issuance request. A usage control system characterized in that account information including the above-mentioned type and use included in a request is specified, and authentication data included in the account information is specified. The usage control system according to any one of claims 1 to 3.
The authentication data storage means is
Each user is characterized in that at least one of the authentication data and the authentication method associated with each other and at least one identification information are stored in association with the route ID given to the user. Usage control system. A usage permit issuing device that issues a usage permit that includes the terms of use for use.
An authentication data storage means that stores at least one authentication data for each user in association with at least one identification information together with the authentication method of the authentication data.
A key information storage means for storing key information including a private key used for signing the usage permit for each usage target.
User identification information, designation of usage target, specific information that can identify the authentication method adopted by the usage permission notification device corresponding to the usage target, and a usage permit issuance request including the usage conditions of the usage target When accepted, the usage permit issuing means for issuing the usage permit including the usage conditions included in the usage permit issuance request, and
The usage permit issuing means using the private key included in the key information stored in the key information storage means associated with the usage target specified in the usage permit issuance request. A signature generation means for generating a signature for the usage permit issued by
Among the authentication data stored in the authentication data storage means linked to the user's identification information included in the usage permit issuance request, the usage permit issuance request is included. An authentication data specifying means for specifying the authentication data of the authentication method specified by the specific information, and
The usage permit issuance of the setting information including the usage permit issued by the usage permit issuing means, the signature generated by the signature generating means, and the authentication data specified by the authentication data specifying means. A usage permit issuing device including a setting information transmitting means for transmitting a request to a source of a request. A usage permit issuing device that issues a usage permit including the usage conditions of the usage target, and a lock / unlock, access control, or encryption / decryption based on the usage permit provided for each usage target. A usage control device that controls the use of the usage target, a usage permit notification device that notifies the usage control device of the usage permit, and a setting terminal that notifies the usage permit notification device of the usage permit. , Is a usage control method for controlling the usage of the usage target.
The usage permit issuing device is
At least one authentication data and its authentication method are stored in association with at least one identification information for each user, and key information including a private key used for signing the usage permit is stored for each usage target. I remember
Use including user identification information, designation of use target, specific information that can specify the authentication method adopted by the use permission notification device corresponding to the use target, and usage conditions of the use target from the setting terminal. When a permit issuance request is accepted
Issuing the usage permit including the usage conditions included in the usage permit issuance request,
A signature for the issued usage permit is generated using the private key included in the key information stored in association with the usage target included in the usage permit issuance request. And
It is specified by the specific information included in the usage permit issuance request from the authentication data stored in association with the user identification information included in the usage permit issuance request. The authentication data of the authentication method is specified, and the issuance of the usage permit, the generated signature, and the setting information including the specified authentication data are sent from the source of the usage permit issuance request. Is sent to the setting terminal, which is
The setting terminal is
Following the instruction of the operator, the usage permit issuing request is transmitted to the usage permit issuing device, the setting information is acquired from the usage permit issuing device, and the setting information is acquired.
The acquired setting information is notified to the usage permit notification device provided corresponding to the usage target specified in the usage permit issuance request.
The usage permit notification device is
The setting information notified from the setting terminal is stored, and the setting information is stored.
The authentication data is acquired from the user according to a predetermined authentication method, and the setting information including the authentication data is searched for.
The usage permit and the signature included in the searched setting information are transmitted to the usage control device paired with the own device by short-range wireless communication.
The utilization control device is
Communication is possible only by short-range wireless communication,
It stores hall data including the public key used to verify the usage permit.
The signature received from the use permit notification device together with the use permit is verified with the public key included in the hall data, and if the verification is successful, the use included in the use permit. A usage control method characterized in that the usage restriction of the usage target is released when the conditions are satisfied. A computer-readable program
The program
Make the computer function as a usage permit issuing device that issues a usage permit that includes the terms of use for use.
The usage permit issuing device is
An authentication data storage means that stores at least one authentication data for each user in association with at least one identification information together with the authentication method of the authentication data.
A key information storage means for storing key information including a private key used for signing the usage permit for each usage target.
User identification information, designation of usage target, specific information that can identify the authentication method adopted by the usage permission notification device corresponding to the usage target, and a usage permit issuance request including the usage conditions of the usage target When accepted, the usage permit issuing means for issuing the usage permit including the usage conditions included in the usage permit issuance request, and
The usage permit issuing means using the private key included in the key information stored in the key information storage means associated with the usage target specified in the usage permit issuance request. A signature generation means for generating a signature for the usage permit issued by
Among the authentication data stored in the authentication data storage means linked to the user's identification information included in the usage permit issuance request, the usage permit issuance request is included. An authentication data specifying means for specifying the authentication data of the authentication method specified by the specific information, and
The usage permit issuance of the setting information including the usage permit issued by the usage permit issuing means, the signature generated by the signature generating means, and the authentication data specified by the authentication data specifying means. A computer-readable program that comprises a means of transmitting configuration information to be sent to the source of the request.

Images