JP2024011232A - Device for authenticating temporary entering person, method and program therefore - Google Patents

Abstract

To provide a method for authenticating a temporary entering person in a rental housing having a plurality of private rooms provided with a lock of an unlocking type by an electric signal and having no need of a network facility for connecting a lock of each private room to an IP network.SOLUTION: When a use date when an entering person enters a room is inputted to an input field 210 of a pass code issuance screen 200 to select an "SMS transmission" button by a click or a tap, a property information management device 110 transmits a corresponding issuance request to an authority information management device 120 (S301), and the authority information management device 120 generates a pass code personal identification number (S302), and transmits a pass code with a corresponding expiry date to an entering person terminal 140 by SMS with a designated telephone number as a destination (S303) if a person in charge using a company terminal 130 or his/her belonging property management company is successful in authentication.SELECTED DRAWING: Figure 3

Description

TECHNICAL FIELD The present invention relates to a device, method, and program for authenticating temporary room occupants.

Locks have a long history as devices for securing doors so that they cannot be opened, and locks and unlocks have been performed using metal keys. However, in Japan, for example, hundreds of thousands of such physical keys are lost every year. Additionally, the cost of replacing keys when moving is said to be several tens of billions of yen per year.

In order to deal with such problems such as the danger and uneconomical nature of physical keys, the use of so-called electronic locks or electric locks has increased in recent years. Examples include a method in which the PIN is entered using a numeric keypad installed near the door, a method in which the door is automatically unlocked when a person approaches the door with a special device, and a method in which the card key is input into a receiver installed near the door. Examples include a holding method, a method in which a dedicated application (hereinafter also referred to as "app") is installed on a smartphone, and the application is used to transmit an unlock signal. The passcode is expressed as an electrical signal, and the lock is unlocked when the lock receives it and successfully authenticates it.

Locks that unlock using electrical signals without using a physical key are highly convenient, but if you try to use them in a rental house with multiple private rooms, for example, the unlocking method set on the lock There is a burden of frequently changing passcodes each time a visitor visits.

If the lock is connected to an IP network such as the Internet, a passcode change request can be sent from the management server that communicates with the lock via the IP network before the inspection. Connecting the lock of a private room to an IP network is not desirable from the viewpoint of costs such as installation cost and maintenance cost.

The above-mentioned problem also exists not only for previewers but also for persons in charge of companies such as property management companies, cleaning companies, etc. who require temporary access to rooms.

The present invention has been made in view of these points, and its object is to provide a lock that is unlocked by electrical signals and does not require network equipment to connect the locks of each private room to an IP network. An object of the present invention is to provide a device, a method, and a program for temporarily authenticating a person entering a rental house having a plurality of private rooms.

In order to solve such problems, a first aspect of the present invention is a method for authenticating temporary occupants in rental housing having a plurality of private rooms equipped with locks that are unlocked by electrical signals. The method includes the steps of receiving a passcode issuance request including a room ID that identifies one of the plurality of private rooms, and a passcode stored in a lock identified by a lock ID linked to the room ID. The method includes the steps of generating a passcode using the same private key as the private key, and transmitting the passcode to the room entry terminal used by the room occupant.

Further, a second aspect of the present invention is the method of the first aspect, in which the transmission is by SMS.

A third aspect of the present invention is the method according to the first aspect, which includes the step of receiving a linking request between the room ID and a lock ID that identifies a lock of a room identified by the room ID. Including further.

Further, a fourth aspect of the present invention is the method according to the first aspect, in which the generation includes the same private key as the private key stored in the lock identified by the lock ID, and a period during which entry is possible. This is done using period information representing the period.

Further, a fifth aspect of the present invention is the method according to the fourth aspect, in which the period information includes the usage date.

Further, a sixth aspect of the present invention is the method according to the fourth aspect, wherein the period information includes a start time and a valid period.

Further, a seventh aspect of the present invention is to cause a computer to execute a method for authenticating a temporary occupant in a rental housing having a plurality of private rooms equipped with locks that are unlocked by electrical signals. The program includes the steps of receiving a passcode issuance request including a room ID that identifies one of the plurality of private rooms, and identifying the passcode by a lock ID linked to the room ID. The method includes the steps of generating a passcode using the same private key as the private key stored in the lock, and transmitting the passcode to an entry terminal used by the room entry person.

Further, an eighth aspect of the present invention is an apparatus for authenticating a temporary occupant in a rental house having a plurality of private rooms equipped with locks that are unlocked by electrical signals, A passcode issuance request including a room ID that identifies one of the private rooms is received, and the same secret key as the secret key stored in the lock identified by the lock ID linked to the room ID is received. , generates a passcode, and transmits the passcode to the room entry terminal used by the room entry person.

According to one aspect of the present invention, in order to authenticate a temporary occupant of a rental house that has a plurality of private rooms equipped with locks that are unlocked by electrical signals, one of the plurality of private rooms is used. receives a passcode issuance request that includes a room ID that identifies the room ID, and generates a passcode using the same private key as the private key stored in the lock identified by the lock ID linked to the room ID. do. Then, by sending the generated passcode to the resident terminal used by the person entering the room, temporary authentication of the person entering the room is possible without the need for network equipment to connect the lock of each private room to the IP network. It becomes possible.

FIG. 1 is a diagram illustrating a system according to an embodiment of the present invention. 3 shows an example of a passcode issuance request input screen according to an embodiment of the present invention. FIG. 3 is a diagram showing a passcode issuance procedure according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

FIG. 1 shows a system for authenticating a person entering a room according to an embodiment of the present invention. The system 100 includes a property information management device 110 that manages property information, an authority information management device 120 that manages authority information, a company terminal 130 used by a person in charge of the property management company, and an occupant terminal 140 used by a person entering the room. , and a lock 150 provided in the private room to be entered.

The property information management device 110 stores property information corresponding to the property registration information transmitted from the company terminal 130. The property information includes the room ID of the private room, and may further include the name of the property, the name of the building in which the room is located, the address of the room or building, a telephone number, a photo of the room or building, and the like. The property information may be the same as the property registration information input at the company terminal 130, but for example, a room ID is generated for the property registration information received by the property information management device 110, and property information including the room ID is generated. may be memorized.

The property information management device 110 transmits passcode issuance request input screen display information to the company terminal 130, and displays a passcode issuance request input screen as shown in FIG. You can display the issue screen. The passcode issuance screen 200 has an input field 210 for requesting the issuance of a daily PIN, which is a passcode for entering a designated property. In FIG. 2, when a person entering the room enters the usage date and selects it by clicking or tapping the "Send SMS" button, the issuance request is sent to the authority information management device 120 (S301), and the authority information management device 120 If the authentication of the person in charge using the company terminal 130 or the property management company to which the person belongs is successful, a daily PIN is generated (S302) and an SMS is sent to the resident terminal 140 using the specified phone number as the destination. The daily password is transmitted (S303). Examples of destinations include e-mail addresses in addition to telephone numbers.

Here, a daily PIN number is issued, but it is also possible to enter the start date and time of the period of entry and the validity period, and a date and time PIN number is issued.More generally, a password with an expiration date can be issued. It can be a code. Further, if the usage date, start date and time, validity period, etc. are not input, default values may be used. Furthermore, instead of the start date and time and the validity period, the user may be prompted to input a start date and time and an end date and time, or to select a time zone.

Authentication of the person in charge or the property management company to which the person belongs may be performed before displaying the passcode issuing screen 200, for example, when logging into the property information management service provided by the property information management device 110. The property information management device 110 or a storage device or storage medium (not shown) accessible from the property information management device 110 has a plurality of property management companies and one or more storage devices that each property management company can request for issuance. The association with the property can be stored as the issuance authority of these property management companies. The association may further include a period during which an issuance request can be made, a flag indicating whether an issuance request can be made at the current time, and the like. The association may represent the issuance authority for each person in charge of the property management company, rather than the issuance authority for each property management company. It is sufficient if the authority information management device 120 can determine whether or not the user has authority.

Further, the telephone number of the person entering the room to whom the SMS message is addressed may be inputtable in FIG. 2, or an input screen may be provided before or after FIG. 2 and inputable. Here, input by the person in charge of the property management company may be performed by transmitting the input screen display information as a file in HTML format, for example, and from the input screen displayed on the display screen of the company terminal 130 on a web browser, or by It is possible to operate an application installed on the terminal 130 and use an input screen displayed on the application. Note that the "input screen" can take various formats such as a web page, modal window, pop-up window, etc. when displayed on a web browser, and when displayed on an app, it can take the form of a web page, modal window, pop-up window, etc. It can be one screen. In any case, any screen that includes an area having an input field for input is considered an input screen, and the same applies to all input screens referred to in this specification.

In the passcode issuing screen 200 of FIG. 2, a property called room 202 in a building named "ABC Residence" is specified. For example, a person in charge of a property management company can enter a room ID in the search field 220 to display properties determined by property information that includes the room ID, or input a building name in the search field 220 to display properties that include the building name. A plurality of properties determined by the information may be displayed, and further properties determined by selecting a room may be displayed.

The passcode generation process in the authority information management device 120 will be described in detail below. The authority information management device 120 includes a communication unit 121 such as a communication interface, a processing unit 122 such as a processor or CPU, and a storage unit 123 including a storage device or storage medium such as a memory or a hard disk, and is configured to perform various processing. This program can be configured by executing the program in the processing unit 122. The authority information management device 120 may include one or more devices, computers, or servers. Further, the program may include one or more programs, and may be recorded on a computer-readable storage medium to form a non-transitory program product. The program can be stored in a storage device or a storage medium such as the database 124 that can be accessed from the storage unit 123 or the authority information management device 120 via an IP network, and then executed by the processing unit 122. Data described below as being stored in storage unit 123 may be stored in database 124, and vice versa. Further, the property information management device 110 can also have a similar configuration.

The authority information management device 120 that receives a passcode issuance request from the property information management device 110 performs authentication as necessary, and then stores the passcode in the lock of the private room identified by the room ID included in the issuance request. Generate a passcode using the same private key as the one you created. More specifically, the passcode is created using a common secret key that is the same as the secret key stored in the lock of the private room identified by the room ID included in the issue request, and period information indicating the period during which entry is possible. Obtainable. For example, a common secret key and period information or a value obtained using the same may be input into a hash function, and a portion of the obtained hash value may be used as a passcode. The passcode is, for example, a predetermined number of digits, symbols, or a combination thereof. Examples of period information include usage date, start date and time, valid period, start date and time, end date and time, or time zone identifier. A time period such as 09:00 to 12:00 can be selected on the passcode issuance screen 200, and an identifier representing the selected time period can be included in the period information, or the start date and time and validity period entered on the passcode issuance screen 200. Alternatively, the period information may include an identifier representing a time zone corresponding to the start date and time and the end date and time.

The person entering the room using the person terminal 140 that has received the passcode can enter the passcode using the numeric keypad of the lock 150, for example. Even if an application for authenticating the person using the terminal 140 is not installed on the person entering the room, the passcode may be received, for example, by SMS or email. The lock 150 generates a passcode using the private key stored therein, verifies the received passcode by comparing it with the received passcode, and if the verification is successful, proceeds to unlocking processing.

If the period information used to generate the passcode in the authority information management device 120 is the date of use, the lock 150 uses the date on which the passcode was received as the period information and uses the same calculation as the authority information management device 120 to generate the pass code. Generate code. If the period information is the start date and time of the period during which entry is possible and the validity period, the lock 150 needs to know the start date and time and the validity period, and the authority information management device 120 needs to know the start date and time and the validity period, or It may be received by lock 150 as part of the passcode.

The private key stored in the lock 150 is a private key generated by the authority information management device 120 embedded in a secure manner, and is stored in the authority information management device 120 in association with the lock ID. Further, the lock ID may be stored in the authority information management 120 in association with the serial number printed on the lock 150. After the lock 150 is installed in the private room, the authority information management device 120 receives the lock ID and the room ID of the private room from a terminal (not shown) that has undergone the required authentication with the authority information management device 120, or A link request including the serial number printed on the lock 150 and the room ID of the private room is received. The serial number can be represented by a two-dimensional code printed on the lock 150, for example. The authority information management device 120 that has received the association request can thereby associate the lock ID and the room ID. The terminal used here is, for example, a terminal of a manufacturer of the lock 150, a terminal of a private room in which the lock 150 is installed, or a terminal of a construction company of a building having the same. After the association request, a command to enable the passcode function in the lock 150 may be transmitted from the terminal to the lock 150.

In this way, by storing the secret key stored in the lock 150 identified by the lock ID linked to the room ID in the authority information management device 120 in advance, the lock 150 can be connected to the IP network when entering the room. It becomes possible to provide a passcode for unlocking the lock 150 to the occupant terminal 140 without requiring any network equipment for the purpose of unlocking the lock 150.

In the above-described passcode generation method, if the room IDs are the same and the period information is also the same, the same passcodes are generated. Different passcodes may be generated depending on the property management company or its person in charge who inputs the issue request, or depending on the destination of the passcode. Alternatively or additionally, different passcodes may be generated depending on the number of times they are issued. For example, by preparing a plurality of common secret keys stored in the lock 150 and the authority information management device 120, and selecting the secret key to be used even if the room IDs included in the issuance requests are the same, the above-mentioned It is possible to generate different passcodes.

Although FIG. 1 shows an example in which the property information management device 110 and the authority information management device 120 are separate servers, they may be the same server. The authority information management device 120 also has a first server that provides an API for the property information management device 110 to send a passcode issue request and other APIs, and a passcode that responds to the request received by the first server. It may also be separated into a second server that performs processing such as issuing codes.

In addition, in the above-mentioned embodiment, unless there is a description of "only" such as "based only on XX", "according only to XX", "in the case of only XX", the present specification does not refer to Note that it is envisaged that additional information may also be considered. Also, as an example, note that the statement ``if a, do b'' does not necessarily mean ``if a, do b'' or ``do b immediately after a'', unless explicitly stated. I want to be Moreover, the description "each a constituting A" does not necessarily mean that A is composed of a plurality of constituent elements, but includes that the constituent element is singular.

Also, just to be sure, even if there is an aspect in which a method, program, terminal, device, server, or system (hereinafter referred to as a "method, etc.") performs a different operation from that described in this specification, each of the present invention Aspects are directed to operations that are the same as any of the operations described in this specification, and the existence of operations that are different from those described in this specification does not make the method, etc. It should be added that this is not outside the scope of the present invention.

Furthermore, "start" and "end" shown in FIG. 3 are merely examples, and it is understood that the method according to the present embodiment always starts and ends in the illustrated steps. It doesn't mean anything.

100 System 110 Property information management device 120 Authority information management device 130 Company terminal 140 Entrant terminal 150 Lock 200 Passcode issuance screen 210 Issuance request input field 220 Search field

Claims (8)

A method for authenticating a temporary occupant in a rental house having a plurality of private rooms equipped with locks that are unlocked by electrical signals, the method comprising:
receiving a passcode issuance request including a room ID identifying one of the plurality of private rooms;
generating a passcode using the same secret key as the secret key stored in the lock identified by the lock ID linked to the room ID;
and transmitting the passcode to a room entry terminal used by the room entry person. The method according to claim 1, comprising:
The transmission is by SMS. The method according to claim 1, comprising:
The method further includes receiving a request for associating the room ID with a lock ID that identifies a lock of the room identified by the room ID. The method according to claim 1, comprising:
The generation is performed using the same secret key as the secret key stored in the lock identified by the lock ID and period information indicating the period during which entry is possible. 5. The method according to claim 4,
The period information includes the usage date. 5. The method according to claim 4,
The period information includes a start time and a valid period. A program for causing a computer to execute a method for temporarily authenticating a person entering a rental house having a plurality of private rooms equipped with locks that are unlocked by electrical signals, the method comprising:
receiving a passcode issuance request including a room ID identifying one of the plurality of private rooms;
generating a passcode using the same secret key as the secret key stored in the lock identified by the lock ID linked to the room ID;
and transmitting the passcode to a room entry terminal used by the room entry person. A device for temporarily authenticating a person entering a rental house having a plurality of private rooms equipped with locks that are unlocked by electrical signals, the device comprising:
receiving a passcode issuance request including a room ID identifying one of the plurality of private rooms;
Generate a passcode using the same secret key as the secret key stored in the lock identified by the lock ID linked to the room ID,
The passcode is transmitted to the room entry terminal used by the room entry person.

Images