JP5292862B2 - Security system, server device, security method, electronic key management method, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve the security of an electronic key for entering a room, and user convenience. <P>SOLUTION: There is provided a security system in which a server device 3 issues an electronic key for unlocking a door 1 of the room to a movable terminal 4, and the electronic key is provided for the movable terminal 4 in response to a request from the terminal 4. A key reading device 2 arranged in the door 1 reads the electronic key displayed on the movable terminal 4, and transmits it to the server device 3. The server device 3 carries out the authentication of the electronic key, and when the authentication is satisfied, the unlocking permission of the door 1 is transmitted to the key reading device 2, to thereby unlock the door 1. A terminal information reading device 8 set at an entrance 7 of a building reads identification information from the movable terminal 4, and transmits it to the server device 3. Then the server device 3 nullifies the electronic key issued to the movable terminal 4 based on the identification information received from the terminal information reading device 8. <P>COPYRIGHT: (C)2009,JPO&amp;INPIT

Description

  The present invention relates to a security system, a server device, a security method, an electronic key management method, and a program. For example, the present invention relates to a security system for increasing the safety of a room key such as a hotel room.

  Conventionally, a hotel room key (room key) is roughly classified into two types, a general key type and a card type. Regardless of the type of room key, the guest will receive the room key at the front of the hotel at check-in and leave the room key at the front when going out. Thus, when exchanging the room key between the guest and the hotel reception, there is a problem in terms of security as follows.

  If you leave your room key at the front desk when you go out, when you return from the office, you usually just tell your name and room number at the front desk, and the front desk staff will give you the keys you left. At this time, it is not required to present a certificate that identifies the individual, so if a third party impersonates the guest and says the guest's name and room number, the key can be easily obtained. There's a problem.

  On the other hand, if the room key is not stored at the front desk when the user goes out, there is a risk that the guest will drop the room key while going out and a third party may pick up the room key and misuse it. Also, if you say that a third party impersonates the guest while you are out and you have entered the key in the room at the front desk (forgetting to put the room key in the room with the auto-lock door) There is also a problem that the staff can easily unlock the door of the room.

  In order to solve such a security problem, for example, as disclosed in Patent Document 1, an electronic key realized using a mobile terminal and a reader is used as a room key. A method of reissuing the used electronic key and reissuing a new electronic key when the guest uses the room key next time can be considered.

JP 2003-286180 A

  However, in the method described in Patent Document 1, the electronic key that is a room key is invalidated at the time of entering a room, at the time of leaving, or after a predetermined period of time has elapsed by a timer. For this reason, even if the guest leaves the room and simply walks around the hotel, the room key is automatically invalidated, so a new room key must be reacquired when re-entering. There was a problem that it was complicated.

  On the other hand, if the room key is always set to be valid during the stay period, as described above, when the mobile terminal is lost or stolen when going out, the malicious third party who picked up the mobile terminal There is a security problem that the room key is displayed on the screen and it becomes possible to enter the room.

  Therefore, the present invention has been made in view of the above problems, and an object of the present invention is new and improved, which can improve the security of the electronic key for entering the room and the convenience of the user. Another security system, server device, security method, electronic key management method, and program are provided.

  In order to solve the above problems, according to one aspect of the present invention, a key reading device installed corresponding to a door of each room of a building, and a terminal information reading device installed corresponding to an entrance of the building And a security system including a mobile terminal carried by a user who uses the room, a terminal information reading device, the terminal information reading device, and a server device capable of communicating with the mobile terminal. The server device includes: a key issuing unit that issues an electronic key for unlocking the door of the room to the mobile terminal; the electronic key issued to the mobile terminal; and the mobile terminal A database for associating and storing identification information on the key, a key providing unit for providing the electronic key issued to the mobile terminal to the mobile terminal in response to a request from the mobile terminal, and the key reading device The key authentication unit that authenticates the electronic key received from the terminal and transmits the door unlocking permission to the key reading device when the authentication is successful, and the identification information regarding the mobile terminal received from the terminal information reading device And a key revocation unit for revoking the electronic key issued to the mobile terminal. The mobile terminal includes a key acquisition unit that acquires the electronic key issued to the mobile terminal from the server device, and a key display unit that displays the electronic key acquired from the server device. The key reader includes: a key reader that reads the electronic key displayed on the mobile terminal; a key transmitter that transmits the electronic key read by the key reader to the server device; and the server device. An unlocking control unit that controls to unlock the door according to the received unlocking permission of the door. The terminal information reading device includes an identification information reading unit that reads identification information about the mobile terminal from the mobile terminal, and identification information that transmits the identification information about the mobile terminal read by the identification information reading unit to the server device. A transmission unit.

  With this configuration, in the server device, an electronic key for unlocking the door of the room is issued to the mobile terminal, and the electronic key issued to the mobile terminal moves in response to a request from the mobile terminal Provided to the terminal. Next, in the mobile terminal, the electronic key issued from the server device to the mobile terminal is acquired, and the electronic key acquired from the server device is displayed. Further, in the key reading device, the electronic key displayed on the mobile terminal is read, and the read electronic key is transmitted to the server device. Thereafter, in the server device, the electronic key is received from the key reading device, the electronic key received from the key reading device is authenticated, and if the authentication is successful, the door unlocking permission is transmitted to the key reading device. Next, in the key reading device, the door unlocking permission is received from the server device, and the door is unlocked. Thereafter, in the terminal information reading device, the identification information relating to the mobile terminal is read from the mobile terminal, and the read identification information relating to the mobile terminal is transmitted to the server device. Next, in the server device, the identification information about the mobile terminal is received from the terminal information reading device, and the electronic key issued to the mobile terminal is invalidated based on the identification information about the mobile terminal received from the terminal information reading device. The Thus, the user can enter the room by unlocking the door of the room by holding the mobile terminal displaying the electronic key provided from the server device over the key reading device. In addition, the user can make the mobile terminal function as a room key by invalidating the electronic key issued to the mobile terminal by bringing the mobile terminal closer to the terminal information reading device.

  Further, after the electronic key issued to the mobile terminal is revoked, when the server device re-receives identification information about the mobile terminal from the terminal information reading device, the key issuing unit of the server device May reissue a new electronic key to the mobile terminal based on the identification information on the mobile terminal re-received from the terminal information reader. With this configuration, after the electronic key issued to the mobile terminal is revoked, when the identification information about the mobile terminal is read again from the mobile terminal in the terminal information reading device, the read identification information about the mobile terminal is Retransmitted to the device. Next, in the server device, the identification information about the mobile terminal is received again from the terminal information reading device, and a new electronic key is reissued to the mobile terminal based on the identification information about the mobile terminal. As a result, the user can enter and exit the room using the reissued new electronic key by bringing the mobile terminal closer to the terminal information reading device.

  The database of the server device stores a password set by the user of the mobile terminal in association with the electronic key issued to the mobile terminal, and provides the key of the server device. The unit checks the password stored in the database against the password received from the mobile terminal requesting the electronic key, and is issued to the mobile terminal when the passwords match. The electronic key may be provided to the mobile terminal. With this configuration, in the server device, the password set in advance by the user of the mobile terminal and stored in the database is compared with the password received from the mobile terminal requesting the electronic key, and the two passwords match. In addition, an electronic key issued to the mobile terminal is provided to the mobile terminal. Such password authentication prevents a third party from acquiring an electronic key using the mobile terminal.

  The key issuing unit of the server device notifies the mobile terminal of address information indicating a storage destination of the electronic key issued to the mobile terminal, and the mobile terminal is configured to transmit the server based on the address information. When accessing the device, the key providing unit of the server device may provide the mobile terminal with the electronic key stored in the storage destination represented by the address information. With this configuration, in the server device, address information indicating the storage destination of the electronic key issued to the mobile terminal is notified to the mobile terminal, and the mobile terminal accesses the server device based on the address information, and the mobile terminal The above-mentioned electronic key issued to is requested. Further, in the server device, the electronic key stored in the storage destination indicated by the address information is provided to the requesting mobile terminal.

  Further, the server device authenticates the identification information regarding the mobile terminal received from the terminal information reading device, and when the authentication is successful, transmits the unlocking permission of the entrance of the building to the terminal information reading device. The terminal information reading device further includes an identification information authenticating unit, and further includes an entrance / exit unlocking control unit that controls the entrance / exit to be unlocked according to the unlocking permission of the entrance / exit received from the server device. May be. With this configuration, the identification information received from the terminal information reading device is authenticated in the server device, and when the authentication is successful, the unlocking permission for the entrance of the building is transmitted to the terminal information reading device. Next, in the terminal information reading device, the doorway is unlocked in accordance with the unlocking permission of the doorway received from the server device. As a result, the user can unlock the entrance / exit by moving the mobile terminal closer to the terminal information reading device, so that the electronic key can be invalidated reliably.

  The mobile terminal further includes a non-contact type IC for non-contact communication with the terminal information reading device, and the identification information about the mobile terminal is identification information of the non-contact type IC, and the terminal information reading The identification information reading unit of the device may receive the identification information of the non-contact type IC from the non-contact type IC of the mobile terminal positioned within a predetermined range from the terminal information reading device. With this configuration, in the terminal information reading device, the identification information of the non-contact type IC is read from the non-contact type IC of the mobile terminal positioned within a predetermined range from the terminal information reading device. As a result, the user can simply invalidate the electronic key by simply holding the mobile terminal over the terminal information reading device.

  Moreover, in order to solve the said subject, according to another viewpoint of this invention, the key reader installed corresponding to the door of each room of a building, and the terminal installed corresponding to the entrance and exit of the said building There is provided a security system including an information reader, a key reader, the terminal information reader, and a server device capable of communicating with a mobile terminal carried by a user using the room. The server device includes: a key issuing unit that issues an electronic key for unlocking the door of the room to the mobile terminal; the electronic key issued to the mobile terminal; and the mobile terminal A database for associating and storing identification information on the key, a key providing unit for providing the electronic key issued to the mobile terminal to the mobile terminal in response to a request from the mobile terminal, and the key reading device The key authentication unit that authenticates the electronic key received from the terminal and transmits the door unlocking permission to the key reading device when the authentication is successful, and the identification information regarding the mobile terminal received from the terminal information reading device And a key revocation unit for revoking the electronic key issued to the mobile terminal. The key reader includes: a key reader that reads the electronic key displayed on the mobile terminal; a key transmitter that transmits the electronic key read by the key reader to the server device; and the server device. An unlocking control unit that controls to unlock the door according to the received unlocking permission of the door. The terminal information reading device includes an identification information reading unit that reads identification information about the mobile terminal from the mobile terminal, and identification information that transmits the identification information about the mobile terminal read by the identification information reading unit to the server device. A transmission unit.

  In order to solve the above-mentioned problem, according to another aspect of the present invention, a key reading device installed corresponding to a door of each room of a building, and terminal information installed corresponding to an entrance of the building A server device communicable with a reading device and a mobile terminal carried by a user who uses the room, and issues an electronic key for unlocking the door of the room to the mobile terminal In response to a request from the mobile terminal, a key issuing unit, a database that stores the electronic key issued to the mobile terminal and the identification information related to the mobile terminal in association with each other. A key providing unit that provides the issued electronic key to the mobile terminal and the electronic key received from the key reading device are authenticated, and when the authentication is successful, the door reading permission is given to the key reading device. Key to send to And a key revocation unit for revoking the electronic key issued to the mobile terminal based on identification information about the mobile terminal received from the terminal information reading device. A server device is provided.

  In addition, after the electronic key issued to the mobile terminal is revoked, when the identification information regarding the mobile terminal is received again from the terminal information reading device, the key issuing unit receives the information from the terminal information reading device. A new electronic key may be reissued to the mobile terminal based on the re-received identification information regarding the mobile terminal.

  The database stores a password set by the user of the mobile terminal in association with the electronic key issued to the mobile terminal, and the key providing unit is stored in the database. The password received from the mobile terminal requesting the electronic key, and if the two passwords match, the electronic key issued to the mobile terminal is used as the mobile terminal. You may make it provide.

  The key issuing unit notifies the mobile terminal of address information indicating a storage location of the electronic key issued to the mobile terminal, and the mobile terminal accesses the server device based on the address information. The key providing unit may provide the mobile terminal with the electronic key stored in the storage destination represented by the address information.

  In addition, an identification information authentication unit that authenticates identification information about the mobile terminal received from the terminal information reading device and, when the authentication is successful, transmits an unlocking permission for the entrance of the building to the terminal information reading device. You may make it provide further.

  Moreover, in order to solve the said subject, according to another viewpoint of this invention, in order for the server apparatus to unlock the door of the said room with respect to the mobile terminal carried by the user who utilizes the room of a building. A key issuing step for issuing the electronic key, and a key providing step in which the server device provides the mobile terminal with the electronic key issued to the mobile terminal in response to a request from the mobile terminal; A key reading device installed corresponding to the door of each room of the building reads the electronic key displayed on the mobile terminal, and the key reading device reads the electronic key read A key sending step for sending to the server device; a key receiving step for receiving the electronic key from the key reading device by the server device; and authenticating the electronic key received by the server device from the key reading device. When the authentication is successful, a key authentication step of transmitting the door unlocking permission to the key reading device, and the key reading device receiving the unlocking permission reception of receiving the door unlocking permission from the server device A door unlocking step for controlling the door to be unlocked according to the door unlocking permission received from the server device, and a door unlocking step corresponding to the entrance / exit of the building. An identification information reading step in which the terminal information reading device reads identification information related to the mobile terminal from the mobile terminal, and identification information in which the terminal information reading device transmits the read identification information related to the mobile terminal to the server device. A transmission step, an identification information receiving step in which the server device receives identification information about the mobile terminal from the terminal information reader, and the server device. And a key revocation step for revoking the electronic key issued to the mobile terminal based on the identification information about the mobile terminal received from the terminal information reading device. Is provided.

  In addition, after the electronic key issued to the mobile terminal is revoked in the key revocation step, the terminal information reader re-reads identification information related to the mobile terminal from the mobile terminal. An information rereading step, an identification information retransmitting step in which the terminal information reading device retransmits the identification information relating to the read mobile terminal to the server device, and the server device is transferred from the terminal information reading device to the mobile terminal. An identification information re-receiving step for re-receiving identification information relating to the mobile terminal, and re-issuing a new electronic key to the mobile terminal based on the identification information relating to the mobile terminal re-received from the terminal information reader by the server device And a key reissuing step.

  In the key providing step, the server device collates a password preset by the user of the mobile terminal and stored in the database with a password received from the mobile terminal that requested the electronic key. If the two passwords match, the electronic key issued to the mobile terminal may be provided to the mobile terminal.

  An address notification step in which the server device notifies the mobile terminal of address information indicating a storage location of the electronic key issued to the mobile terminal, and the mobile terminal is configured to transmit the server based on the address information. A key requesting step of accessing the device and requesting the electronic key issued to the mobile terminal, wherein in the key providing step, the server device stores in a storage destination represented by the address information The electronic key may be provided to the mobile terminal.

  In addition, the server device authenticates the identification information regarding the mobile terminal received from the terminal information reading device, and when the authentication is successful, transmits the unlocking permission of the entrance of the building to the terminal information reading device. An identification information authenticating step, an entrance / exit unlocking permission receiving step in which the terminal information reading device receives the unlocking permission of the entrance / exit from the server device, and an entry / exit of the entrance / exit received by the terminal information reading device from the server device. An entrance / exit unlocking step of controlling to unlock the entrance / exit according to the unlocking permission may be further included.

  The identification information about the mobile terminal is identification information of a non-contact type IC installed in the mobile terminal for non-contact communication with the terminal information reading device. In the identification information reading step, the terminal The identification information of the non-contact type IC may be received from the non-contact type IC of the mobile terminal positioned within a predetermined range from the information reading device.

  In order to solve the above problem, according to another aspect of the present invention, an electronic key for unlocking a door of the room is provided to a mobile terminal carried by a user who uses the room of the building. Corresponding to a key issuing step for issuing, a key providing step for providing the electronic key issued to the mobile terminal to the mobile terminal in response to a request from the mobile terminal, and a door of each room of the building A key receiving step for receiving the electronic key read from the mobile terminal by the key reading device, and authenticating the electronic key received from the key reading device. If successful, a key authentication step of transmitting an unlocking permission of the door to the key reading device, and a terminal information reading device installed corresponding to the entrance of the building, the terminal information reading device causes the moving terminal to The identification information receiving step for receiving the identification information regarding the mobile terminal read from the mobile terminal and the electronic key issued to the mobile terminal based on the identification information regarding the mobile terminal received from the terminal information reading device is invalidated An electronic key management method is provided, including a key revocation step.

  In order to solve the above problems, according to another aspect of the present invention, a program for causing a computer to execute the security method is provided.

  In order to solve the above problem, according to another aspect of the present invention, a program for causing a computer to execute the electronic key management method is provided.

  As described above, according to the present invention, the security of the electronic key for entering the room and the convenience for the user can be improved.

  Exemplary embodiments of the present invention will be described below in detail with reference to the accompanying drawings. In addition, in this specification and drawing, about the component which has the substantially same function structure, duplication description is abbreviate | omitted by attaching | subjecting the same code | symbol.

  The security system according to one embodiment of the present invention will be described below. In the security system according to the present embodiment, an example of a hotel guest room is given as an example of a building room in which a room key is used, and an example of an entrance of a hotel lobby is given as an entrance of the building. In addition, an example of a mobile phone owned by a user (hotel guest) is given as a mobile terminal, and an example of a reader device that performs non-contact communication with a non-contact type IC built in the mobile phone is given as a terminal information reading device. I will explain. However, the building, the room, the entrance / exit, the mobile terminal, the terminal information reading device, and the like of the present invention are not limited to such examples.

  First, an outline of the security system according to the present embodiment will be described. The security system according to the present embodiment is not a general key inserted into a lock hole or a card-type key (card key) as a room key of a hotel guest room, but an electronic key (for example, a barcode) issued by a server device , Digital data such as random numbers). The mobile terminal acquires an electronic key from the server device via the network. When the electronic key is acquired, authentication using a password registered in advance by an authorized guest is required. And the door of a guest room is unlocked by holding the mobile terminal which displays the electronic key acquired in this way on the key reading apparatus installed in the door of the guest room. Further, by mounting a wireless communication device (non-contact type IC, WPAN communication circuit, etc.) on the mobile terminal, the terminal information reading device at the entrance of the hotel is used for the mobile terminal when the guest goes out or at checkout. Identification information (such as identification information of a non-contact type IC) is detected, and an electronic key that is a room key is automatically invalidated. In addition, when the guest returns from the outside, the mobile terminal is detected by the terminal information reader at the hotel entrance, and a new electronic key is reissued. With this configuration, it is possible to cope with the loss of the room key, the impersonation of a malicious third party, and the like, and the security can be enhanced. Furthermore, since the electronic key can be appropriately invalidated and reissued according to the behavior of the guest, the convenience of the guest who handles the room key that is the electronic key can be improved.

  Next, a schematic configuration of the security system according to the present embodiment will be described with reference to FIG. FIG. 1 is a schematic configuration diagram showing a security system according to the present embodiment.

  As shown in FIG. 1, the security system according to the present embodiment includes a guest room door 1 provided in each guest room of a hotel, a key reading device 2 installed corresponding to the guest room door 1 of each guest room, and the front of the hotel. , A mobile terminal 4 used by a guest who uses a hotel guest room, an entrance door 7 provided at a hotel entrance (hotel entrance, back door, lobby entrance, etc.), and entrance door 7 And a terminal information reading device 8 installed corresponding to the above. The server device 3 is connected to the key reading device 2, the mobile terminal 4, and the terminal information reading device 8 via a wired or wireless network 9, and can perform data communication with each other.

  The cabin door 1 is, for example, an auto-lock type door device corresponding to an electronic key, and includes a locking device 11 for locking / unlocking the door. The locking device 11 unlocks the cabin door 1 based on an instruction from the key reading device 2 and automatically locks the cabin door 1 once opened.

  The key reading device 2 is configured by a reader device that can read an electronic key displayed on the mobile terminal 4. The key reading device 2 is connected to the cabin door 1 of each cabin with the locking device 11 of the cabin door 1. The key reading device 2 may be installed (built in or externally attached) to the cabin door 1 or may be installed on a wall surface adjacent to the cabin door 1. The key reading device 2 includes an imaging unit (not shown) that captures an image of an electronic key displayed on the mobile terminal 4, and an analysis unit (FIG. 3) that analyzes the captured image and extracts digital data of the electronic key. Not shown.). Thereby, the key reading device 2 can read the electronic key displayed on the key display unit 5 of the mobile terminal 4. The key reading device 2 is connected to the server device 3 via the network 9a, and transmits an electronic key authentication request read from the mobile terminal 4 to the server device 3 or from the server device 3 to the cabin door 1. Receive unlocking permission.

  The network 9a is a communication line that connects the server device 3, the key reading device 2, and the terminal information reading device, and includes, for example, a LAN (Local Area Network) installed in a hotel. From the viewpoint of security, the network 9a is preferably configured by a dedicated line network such as various LANs, WAN (Wide Area Network), and IP-VPN (Internet Protocol-Virtual Private Network). However, the present invention is not limited to this example, and part or all of the network 9a may be a public line network such as the Internet, a telephone line network, and a satellite communication network. The communication method of the network 9a may be wired or wireless.

  The server device 3 is composed of a computer device such as a personal computer, and has a database 10 for storing various types of registration information. The server device 3 is installed, for example, in a hotel reception, a management room, and the like, and collectively manages room keys (electronic keys) of each hotel room. The server device 3 issues an electronic key to the mobile terminal 4 of the guest in each guest room as a room key for each guest room in the hotel. The electronic key is, for example, a random number (random number), a one-dimensional barcode, a two-dimensional code (also referred to as “two-dimensional barcode”), or the like. The server device 3 stores the issued electronic key of each guest room in the database 10 in association with the mobile terminal 4 of the guest who uses the guest room. Then, the server device 3 provides the mobile terminal 4 with the electronic key stored in the database 10 in response to a request from the legitimate mobile terminal 4. Further, the server device 3 invalidates the electronic key issued to the mobile terminal 4 or reissues a new electronic key in response to the notification from the terminal information reading device 8. Details of the server device 3 will be described later.

  The mobile terminal 4 is a mobile terminal (user terminal) carried by a user who uses a hotel room (for example, a guest who uses a hotel room). The mobile terminal 4 according to the present embodiment is composed of, for example, a mobile phone that is privately owned by a guest. However, the mobile terminal of the present invention is not limited to such an example. For example, a PDA (Personal Digital Assistant), a PHS (Personal Handyphone System) terminal, a digital terminal can be used as long as it is a device that can be carried by a user who uses a building room. It may be an arbitrary portable terminal such as a camera, a portable game machine, a portable video / audio player, or an electronic notebook. In addition, the mobile terminal 4 may be a mobile terminal prepared by a hotel (for example, rental of a mobile terminal owned by a hotel to a guest), or may be a mobile terminal owned by an individual user.

  The mobile terminal 4 functions as a room key of the cabin door 1 instead of a general key or card key, and displays an electronic key as a room key. The mobile terminal 4 has a function of communicating with the server device 3 via a wireless network 9b (for example, a wireless LAN, a mobile phone network, etc.), and wirelessly communicates various data with the server device 3. For example, the mobile terminal 4 acquires an electronic key that is a room key from the server device 3. The mobile terminal 4 includes a key display unit 5 that displays an electronic key. The key display unit 5 can use, for example, a display device generally provided in the mobile terminal 4 such as a liquid crystal display and an organic EL display (Organic Electroluminescence Display). The mobile terminal 4 displays on the key display unit 5 the electronic key issued to the mobile terminal 4 by the server device 3. When the mobile terminal 4 on which the electronic key is displayed on the key display unit 5 is held over the key reading device 2, the key reading device 2 can read the displayed electronic key.

  Further, the mobile terminal 4 includes a non-contact type IC 6 as a wireless communication device for wirelessly communicating with the terminal information reading device 8. The non-contact type IC 6 is an integrated circuit that has an antenna and a non-volatile memory inside, and transmits and receives data using weak radio waves transmitted from an external reader device (for example, the terminal information reader 8). When the non-contact type IC 6 is positioned within a predetermined distance from the terminal information reading device 8, the non-contact type IC 6 performs non-contact communication with the terminal information reading device 8 to identify identification information about the mobile terminal 4 (for example, identification information of the non-contact type IC 6, movement Terminal 4 itself identification information) is transmitted to the terminal information reader 8. This non-contact type IC 6 functions as a device for controlling the invalidation timing and reissue timing of the room key (electronic key) issued to the mobile terminal 4.

  The entrance door 7 is comprised by the automatic door which can be locked, for example. The entrance door 7 is provided at an entrance for entering the hotel from outside (for example, entrances such as a front entrance and a back entrance of a lobby), and a guest passes through the entrance door 7 when going out.

  The terminal information reading device 8 is installed, for example, at a position adjacent to the entrance door 7. The terminal information reading device 8 reads identification information related to the mobile terminal 4 from the mobile terminal 4 by wireless communication with the non-contact type IC 6 of the mobile terminal 4 positioned within a predetermined distance. In this embodiment, the identification information of the non-contact type IC 6 included in the mobile terminal 4 is used as the identification information related to the mobile terminal 4, but other than that, for example, the identification information of the mobile terminal 4 itself (device ID, mobile phone) A telephone number, a mail address, etc.), identification information (for example, a user ID, a name, etc.) of the user who owns the mobile terminal 4 can also be used.

  The terminal information reading device 8 is connected to the server device 3 via the network 9a, and transmits the identification information of the mobile terminal 4 read from the mobile terminal 4 to the server device 3 via the network 9a. Thereby, the terminal information reading device 8 can notify the server device 3 of the identification information regarding the mobile terminal 4 carried by the guest who goes out through the entrance door 7 and returns from the outing.

  The terminal information reading device 8 is connected to the entrance door 7 and can also control the unlocking / locking of the entrance door 7. When the terminal information reading device 8 receives the unlocking permission of the entrance door 7 from the server device 3 through the network 9a, the terminal information reading device 8 controls to unlock and open the locking device of the entrance door 7. As described above, when the entrance door 7 is configured to open on the condition that the mobile terminal 4 is held over the terminal information reading device 8, the guest stays out of the hotel or returns from the hotel to the hotel. The mobile terminal 4 is always held over the terminal information reading device 8. Therefore, the server apparatus 3 can grasp | ascertain exactly the going out of the guest who has the mobile terminal 4, and the return from going out based on the identification information regarding the mobile terminal 4 held over the terminal information reading apparatus 8. FIG. As described above, the server device 3 invalidates the electronic key issued to the mobile terminal 4 of the guest while the guest is out and returns to the new electronic key as the room key when returning from the guest. Reissue.

  The terminal information reader 8 may be installed in a place other than the vicinity of the entrance door 7 described above, for example, in a hotel front, lobby, elevator hall, or the like. Even in this case, the guest goes out of the hotel from the terminal information reader 8 to the server device 3 by holding the mobile terminal 4 over the terminal information reader 8 when going out of the hotel or returning from the hotel. Or it can be notified of going back and forth. In addition, when there is only one hotel entrance, it is sufficient to install at least one terminal information reader 8 corresponding to the one entrance, and when there are a plurality of entrances (for example, the front entrance) A plurality of terminal information reading devices 8 may be provided corresponding to each doorway.

  Next, with reference to FIG. 2, the hardware configuration of each device configuring the security system according to the present embodiment will be described. FIG. 2 is a block diagram showing a hardware configuration of the server device 3 according to the present embodiment.

  As shown in FIG. 2, the server device 3 includes, for example, a CPU (Central Processing Unit) 101, a ROM (Read Only Memory) 102, a RAM (Random Access Memory) 103, an input device 104, an output device 105, and the like. A storage device 106, a connection port 107, a drive 108, a communication device 109, and a bus 110 for connecting these devices to each other.

  The CPU 101 functions as an arithmetic processing device and a control device, and controls each device in the server device 3. The CPU 101 executes various processes according to a program stored in the ROM 102 or a program loaded from the storage device 106 to the RAM 103. The CPU 101 functions as each unit shown in FIG. 3 described later by operating according to a program. The RAM 103 stores, for example, programs executed by the CPU 101, parameters that change as appropriate during the execution, and the like. The RAM 103 also functions as a buffer for reducing access from the CPU 101 to the storage device 106.

  The input device 104 includes, for example, an input unit such as a keyboard, a mouse, a touch panel, a button, a switch, and a lever, and an input control circuit that generates an input signal according to a user operation on the input unit and outputs the input signal to the CPU 101. . A user (a hotel front staff or the like) can input various data to the server device 3 or instruct a processing operation by operating the input device 104. The output device 105 includes a display device such as a liquid crystal display (LCD) device and an audio output device such as a speaker. The display device displays, for example, information on hotel guests registered in the database 10 and information on electronic keys on the display screen.

  The storage device 106 includes, for example, a magnetic storage device such as a hard disk drive, an optical disk recording device, a semiconductor memory, or the like. The storage device 106 stores various data such as a program executed by the CPU 101, information on hotel guests, and information on electronic keys. The storage device 106 constitutes the database 10 of the server device 3 and stores a registration information table 12 and an electronic key database 13 which will be described later. The drive 108 is loaded with a removable medium such as an optical disk or a magnetic disk, and writes / reads various data to / from the medium.

  The connection port 108 is an external interface for connecting an external device to the server device 3. The communication device 109 is a communication device for connecting the server device 3 to the networks 9a and 9b, for example. The communication device 109 is connected to the key reading device 2, the terminal information reading device 8, and the mobile terminal 4 connected via the networks 9a and 9b. Various data such as a key, identification information related to the mobile terminal 4, and control commands are transmitted and received.

  Heretofore, the hardware configuration (for example, a configuration example using a personal computer) of the server device 3 according to the present embodiment has been exemplified. In addition, the key reading device 2, the terminal information reading device 8, and the mobile terminal 4 according to the present embodiment are, for example, the CPU 101, the ROM 102, the RAM 103, the input device 104, the output device 105, and the storage device 106 as shown in FIG. And a communication device 109. Further, the key reading device 2 also includes a reader device (not shown) including an imaging device, a code analysis device, and the like for reading an electronic key image (such as a two-dimensional code) displayed on the mobile terminal 4. The mobile terminal 4 also includes a non-contact IC 6 as a wireless communication device. The terminal information reading device 8 also includes a reader device (not shown) for non-contact communication with the non-contact type IC 6 of the mobile terminal 4.

  Next, the functional configuration of the server device 3 according to the present embodiment will be described with reference to FIGS. 3 and 4. FIG. 3 is a functional block diagram showing the configuration of the server device 3 according to the present embodiment. FIG. 4 is an explanatory diagram showing the registration information table 12 stored in the database 10 of the server device 3 according to the present embodiment.

  As shown in FIG. 3, the server device 3 includes a terminal registration unit 31, a key issuing unit 32, a key providing unit 33, a key receiving unit 34, a key authenticating unit 35, an identification information receiving unit 36, an identification The information authentication part 37, the key invalidation part 38, the input part 39, and the database 10 are provided. The database 10 includes a registration information table 12 and an electronic key database 13.

  The terminal registration unit 31 registers information (hereinafter referred to as “registration information”) regarding the guest who uses each guest room of the hotel in the database 10. As a method of inputting the registration information to the server device 3, for example, the front staff of the hotel inputs the registration information by operating the input unit 39 of the server device 3 at the time of check-in to the hotel or reservation of accommodation. Alternatively, the guest himself / herself may input each registration information to the server device 3 by network communication using a user terminal (for example, the mobile terminal 4 or other electronic device) owned by the guest. .

  Such registration information is stored in the registration information table 12 in the database 10. In the registration information table 12, for example, as shown in FIG. 4, the room number assigned to the guest, the e-mail address of the guest's mobile terminal 4 (e-mail address for the mobile phone), the password set by the guest, Identification information (hereinafter referred to as “non-contact type IC-ID”) of the non-contact type IC 6 included in the guest terminal 4 of the guest, identification information of the mobile terminal 4 (hereinafter referred to as “mobile terminal ID”), user information ( For example, the name, age, address, telephone number, date of stay, etc. of the guest), address information indicating the storage location of the electronic key issued as the room key to the guest terminal 4 of the guest, etc. Saved in association with. The address information indicating the storage location of the electronic key is, for example, a URL (Uniform Resource Locator) where the electronic key is stored in the electronic key database 13 of the database 10. This electronic key address information is registered in the database 10 by the next key issuing unit 32.

  The key issuing unit 32 issues an electronic key as a room key for unlocking the guest room door 1 to a mobile terminal of a guest who uses each guest room of the hotel. As this electronic key, as described above, arbitrary secret information such as a one-dimensional bar code, a two-dimensional code (for example, a stack type two-dimensional code, a matrix type two-dimensional code), a random number, or the like can be used. Hereinafter, an example in which a QR code (Quick Response code) which is an example of a matrix type two-dimensional code is used as an electronic key will be described. Regardless of whether the electronic key is, for example, a two-dimensional code such as a QR code, a normal one-dimensional barcode, or a random number, the data constituting the electronic key is simply a sequence of alphanumeric characters. The issuance of an electronic key is to newly generate data enumerating these alphanumeric characters. The electronic key thus issued is managed in the database 10 in association with each mobile terminal 4. The key issuing unit 32 stores the issued electronic key in the electronic key database 13 of the database 10 and writes the storage destination address information (for example, URL) in the registration information table 12.

  As described above, when the registration information of the guest (for example, e-mail address, password, etc. of the guest's mobile terminal 4) is registered at the time of check-in, the key issuing unit 32 stores the guest's mobile terminal 4 in the guest's mobile terminal 4. An electronic key is issued. The key issuing unit 32 does not immediately provide the issued electronic key to the mobile terminal 4 but stores the electronic key itself in the database 10. Then, the key issuing unit 32 notifies the mobile terminal 4 of address information (for example, URL) indicating the storage destination of the electronic key issued to the mobile terminal 4 by e-mail or the like. Thereby, the mobile terminal 4 can acquire the electronic key issued with respect to the mobile terminal 4 itself by accessing the server device 3 based on the URL in the electronic mail.

  Upon receiving an electronic key acquisition request from the mobile terminal 4, the key providing unit 33 reads the electronic key issued to the mobile terminal 4 from the database 10 and provides the mobile terminal 4 with the acquisition request. . This electronic key acquisition request includes the URL of the storage destination of the electronic key issued to the requesting mobile terminal 4. The key providing unit 33 reads the content (including the electronic key) of the web page with the URL specified by the mobile terminal 4 from the database 10 and transmits the content to the mobile terminal 4. For example, QL code) is displayed. As described above, the key providing unit 33 according to the present embodiment transmits the electronic key to the mobile terminal 4 in the form of a web document such as an HTML document or an XML document. However, the present invention is not limited to this example, and other data formats are used. An electronic key may be provided to the mobile terminal 4.

  When providing such an electronic key, the key providing unit 33 performs password authentication in order to prevent a malicious third party from illegally acquiring the electronic key using another person's mobile terminal 4. That is, the electronic key acquisition request from the mobile terminal 4 includes, for example, a password (input password) input by the user on the mobile terminal 4 side when the electronic key acquisition request is made. On the other hand, the database 10 stores a password (regular password) set and registered in advance by a regular guest at the time of check-in. When the key providing unit 33 receives an electronic key acquisition request from the mobile terminal 4, the key providing unit 33 collates the regular password registered in advance in the database 10 with the input password received from the mobile terminal 4. As a result, if the two passwords match, it means that the authentic authentication of the authorized guest has succeeded, so the key providing unit 33 uses the electronic key issued to the requesting mobile terminal 4 as the mobile terminal. 4 to provide. On the other hand, if the passwords do not match, there is a possibility of impersonation of a malicious third party, so an electronic key is not sent to the mobile terminal 4 and an error notification that the passwords are different is sent.

  The key receiving unit 34 receives the electronic key read by the key reading device 2 from the key reading device 2 via the network 9a. The key authentication unit 35 performs authentication processing of the electronic key received from the key reading device 2 by the key receiving unit 34. Specifically, when the key reading device 2 reads the electronic key displayed on the mobile terminal 4, the key reading device 2 transmits the electronic key to the server device 3 and makes an authentication request for the electronic key. In response to an authentication request from the key reading device 2, the key authentication unit 35 receives the electronic key read from the mobile terminal 2 and the electronic key of the guest room of the key reading device 2 stored in the electronic key database 13. The electronic key is authenticated based on whether or not the two electronic keys match. As a result, when the two electronic keys match and the authentication is successful, the key authenticating unit 35 transmits the unlocking permission of the cabin door 1 to the requesting key reading device 2. On the other hand, if the two electronic keys do not match and the authentication fails, the key authenticating unit 35 transmits an error notification indicating that the electronic key authentication has failed to the requesting key reading device 2.

  The identification information receiving unit 36 receives identification information (for example, non-contact type IC-ID) regarding the mobile terminal 4 read by the terminal information reading device 8 from the terminal information reading device 8 via the network 9a. The identification information authentication unit 37 performs authentication processing of identification information (for example, non-contact IC-ID) related to the mobile terminal 4 received from the terminal information reading device 8 by the identification information receiving unit 36. Specifically, when the terminal information reading device 8 performs non-contact communication with the non-contact type IC 6 of the mobile terminal 4 and reads the non-contact type IC-ID, the terminal information reading device 8 transmits the non-contact type IC-ID to the server device 3. Then, an authentication request for the contactless IC-ID is made. In response to an authentication request from the terminal information reading device 8, the identification information authenticating unit 37 is a non-contact type IC-ID read from the mobile terminal 2 registered in the registration information table 12 of the database 10. Based on whether or not the contact IC-ID is used, authentication of the non-contact IC-ID is performed. As a result, when the authentication succeeds as a normal non-contact IC-ID, the identification information authenticating unit 37 transmits the unlocking permission of the entrance door 7 which is a hotel entrance to the requesting terminal information reading device 8. The entrance door 7 is unlocked and opened. On the other hand, if the authentication fails instead of the regular non-contact IC-ID, the terminal information reading device 8 transmits an error notification indicating that the authentication of the mobile terminal 4 has failed to the requesting terminal information reading device 8, The front door 7 is not unlocked.

  The key revocation unit 38 revokes an electronic key issued to the mobile terminal 4 held over the terminal information reading device 8. The invalidation of the electronic key is to delete the issued electronic key in the electronic key database 13 of the database 10 of the server device 3. If the electronic key is deleted (that is, invalidated) from the database 10 of the server device 3 in this way, the electronic key previously obtained by the mobile terminal 4 can be displayed and read by the key reading device 2, In the authentication of the electronic key by the key authenticating unit 35, since the read electronic key does not match the electronic key database 13, the authentication is not successful and the cabin door 1 is not unlocked. In such invalidation processing, the corresponding electronic key in the electronic key database 13 of the database 10 is deleted, and the URL of the storage destination of the electronic key is also deleted from the registration information table 12. As a result, the mobile terminal 4 cannot successfully authenticate the acquired electronic key, and cannot acquire the electronic key even when accessing the server device 3.

  Specifically, in the key revocation unit 38, the server device 3 receives identification information (for example, a non-contact IC-ID) regarding the legitimate mobile terminal 4 from the terminal information reading device 8, and authentication by the identification information authentication unit 37 is performed. If successful, the electronic key issued to the mobile terminal 4 is invalidated. Thereby, when the guest goes out of the hotel, the electronic key issued to the mobile terminal 4 is invalidated by holding the mobile terminal 4 over the terminal information reading device 8 at the entrance of the hotel. . Thus, by invalidating the electronic key (that is, the room key) when going out, the room key of the guest room corresponding to the mobile terminal 4 does not exist. For this reason, even if a regular guest loses the mobile terminal 4 on the go, the mobile terminal 4 does not already function as a room key, so the security is high.

  Further, the regular guest holds the mobile terminal 4 over the terminal information reading device 8 even when returning from the outside to the hotel. In response to this, the terminal information reading device 8 reads identification information (for example, non-contact type IC-ID) related to the mobile terminal 4 from the mobile terminal 4 and transmits it to the server device 3. Based on whether or not the electronic key of the mobile terminal 4 is revoked, the server device 3 receives the non-contact type IC-ID when the guest leaves or returns from the outside. Can be determined.

  As described above, when the guest returns from the outside after the electronic key issued to the mobile terminal 4 is revoked when the guest goes out, the server device 3 receives the non-contact type from the terminal information reading device 8. IC-ID is received again. Then, the identification information authenticating unit 37 of the server device 3 performs authentication processing of the non-contact type IC-ID received from the terminal information reading device 8, and notifies the key issuing unit 32 when the authentication is successful. The key issuing unit 32 reissues a new electronic key to the mobile terminal 4 in response to the notification of re-reception of the contactless IC-ID, stores the new electronic key in the electronic key database 13, and The mobile terminal 4 is notified of the URL of the storage location of the electronic key by e-mail or the like. As a result, an authorized guest can perform the above password authentication and then unlock his / her cabin door 1 using the newly issued electronic key.

  Next, the functional configuration of the mobile terminal 4 according to the present embodiment will be described with reference to FIG. FIG. 5 is a functional block diagram showing the configuration of the mobile terminal 4 according to the present embodiment.

  As shown in FIG. 5, the mobile terminal 4 includes a registration unit 41, a key acquisition unit 42, an input unit 43, the key display unit 5, and the non-contact type IC 6.

  The registration unit 41 registers information related to the mobile terminal 4 in the server device 3 by performing data communication with the server device 3. For example, based on the user input to the input unit 43, the registration unit 41 receives the mail address (such as an e-mail address for a mobile phone), password, user information (see FIG. 4) of the mobile terminal 4 from the server device 3. Register with.

  The key acquisition unit 42 acquires the electronic key by receiving the electronic key (room key) issued from the server apparatus 3 to the mobile terminal 4 by the server apparatus 3 via the network 9b. Specifically, as described above, the key issuing unit 32 of the server device 3 uses e-mail to send address information (for example, URL) indicating the storage location in the server device 3 of the electronic key issued to the mobile terminal 4. Or the like to notify the mobile terminal 4. The key acquisition unit 42 requests the server device 3 to acquire the issued electronic key from the mobile terminal 4 by accessing the URL in the electronic mail based on the user instruction. In response to this acquisition request, when a web page including the electronic key in the URL is provided from the server device 3, the key acquisition unit 42 acquires the web page. The key acquisition unit 42 displays the web page acquired from the server device 3 on the key display unit using a browser.

  The key display unit 5 displays the electronic key acquired by the key acquisition unit 42 on a display screen such as an LCD. This electronic key is, for example, a two-dimensional code such as a QR code. FIG. 1 shows a state in which a QR code as a room key is displayed on the key display unit 5 of the mobile terminal 4. With the QR code displayed on the key display unit 5 in this way, the key reading device 2 can read the QR code displayed on the key display unit 5 by holding the mobile terminal 4 over the key reading device 2. it can.

  The non-contact type IC 6 includes an ID storage unit 61 configured by a non-volatile memory such as a flash memory, a non-contact communication unit 62 configured by an antenna, a modulation / demodulation circuit, and a control unit 63 configured by a CPU or the like. Prepare. The ID storage unit 61 stores various data including identification information (non-contact type IC-ID) uniquely given to the non-contact type IC 6. The non-contact communication unit 62 performs non-contact communication of various data such as a non-contact type IC-ID and a command with a reader device such as the terminal information reading device 8 based on an instruction from the control unit 63. The control unit 63 controls the operation of each unit of the non-contact type IC 6. For example, when the mobile terminal 4 is positioned within the communication range with the terminal information reading device 8, the control unit 63 reads the non-contact type IC-ID from the ID storage unit 61, and the terminal information reading device via the communication unit 62. 8 to send.

  The mobile terminal 4 configured as described above functions as a hotel room key by acquiring and displaying an electronic key (for example, a QR code) from the server device 3. In addition, the terminal information reading device 8 arranged at the hotel entrance / exit and the non-contact type IC 6 card communicate with each other as a sensor for notifying the server device 3 of going out / out of the hotel from the hotel. Also works.

  Next, the functional configuration of the key reading device 2 according to the present embodiment will be described with reference to FIG. FIG. 6 is a functional block diagram showing the configuration of the key reading device 2 according to the present embodiment.

  As shown in FIG. 6, the key reading device 2 includes a key reading unit 21, a key transmission unit 22, an unlocking control unit 23, and an output unit 24.

  The key reading unit 21 is a reader device that reads the electronic key displayed on the mobile terminal 2 as described above, for example, a two-dimensional code reader that reads a two-dimensional code such as a QR code. The key reading unit 21 captures an image of the electronic key displayed on the mobile terminal 4, analyzes the captured image, and extracts digital data of the electronic key, thereby reading the electronic key.

  The key transmission unit 22 transmits the electronic key read by the key reading unit 21 to the server device 3 via the network 9a. At this time, the key transmission unit 22 adds the identification information (for example, the guest room number) of the guest room in which the key reading device 2 is installed to the electronic key, and transmits the electronic key to the server device 3. With this guest room number, the server device 3 can identify the guest room of the key reading device 2 that has read the received electronic key. As a result, the server device 3 authenticates whether or not the received electronic key is the electronic key of the guest room. If the authentication is successful, the server device 3 transmits an unlocking permission of the guest room door 1 to the key reading device 2, If authentication fails, an error signal is transmitted to the key reading device 2.

  When receiving the unlocking permission of the passenger door 1 from the server device 3, the unlocking control unit 23 instructs the locking device 11 of the passenger door 1 to unlock the passenger door 1. In response to this instruction, the locking device 11 unlocks the cabin door 1 so that the guest can enter the cabin. On the other hand, when the authentication of the electronic key fails and an error signal is received, the unlock control unit 23 instructs the output unit 24 to output an error notification. The output unit 24 includes, for example, a display device such as an LCD or an audio output device such as a speaker. In response to an instruction from the unlock control unit 23, the output unit 24 displays an error notification indicating that it is not a valid room key or Output audio and let the user recognize.

  Next, a functional configuration of the terminal information reading apparatus 8 according to the present embodiment will be described with reference to FIG. FIG. 7 is a functional block diagram showing a configuration of the terminal information reading device 8 according to the present embodiment.

  As illustrated in FIG. 7, the terminal information reading device 8 includes an identification information reading unit 81, an identification information transmitting unit 82, an entrance / exit unlocking control unit 83, and an output unit 84.

  The identification information reading unit 81 is configured by, for example, a reader device that performs non-contact communication with a general non-contact IC card, and is similar to the communication unit 62 and the control unit 63 (see FIG. 5) of the non-contact type IC 6 described above. Have a device. The identification information reading unit 81 reads identification information (for example, non-contact type IC-ID) related to the mobile terminal 4 by performing wireless communication with the mobile terminal 4 positioned within a predetermined range from the terminal information reading device 8. . When the guest goes out / returns from the home, when the mobile terminal 4 is held over the terminal information reading device 8, the identification information reading unit 81 performs non-contact communication with the non-contact type IC 6 of the mobile terminal 4, thereby A contactless IC-ID is received from the contact IC6.

  The identification information transmitting unit 82 transmits the identification information read by the identification information reading unit 81 to the server device 3 via the network 9a. As a result, the server device 3 authenticates the received identification information. If the authentication is successful, the server device 3 invalidates the electronic key of the mobile terminal 4 and transmits the unlocking permission of the entrance door 7 to the terminal information reading device 8. If the authentication fails, an error signal is transmitted to the terminal information reading device 8.

  When receiving the unlocking permission of the entrance door 7 from the server device 3, the entrance / exit unlocking control unit 83 instructs the locking device (not shown) of the entrance door 7 to unlock the entrance door 7. In response to this instruction, the locking device for the entrance door 7 unlocks the entrance door 7 so that the guest can go out from the entrance. On the other hand, when the authentication of identification information fails and an error signal is received, the doorway unlocking control unit 83 instructs the output unit 84 to output an error notification. For example, the output unit 84 includes a display device such as an LCD or an audio output device such as a speaker, and the electronic key corresponding to the mobile terminal 4 is invalidated in response to an instruction from the entrance / exit unlocking control unit 83. An error notification indicating that the error has not been made is displayed or output as a voice so that the user can recognize it.

  Heretofore, the functional configurations of the server device 3, the mobile terminal 4, the key reading device 2, and the terminal information reading device 8 according to the present embodiment have been described. The functional units of the server device 3, the mobile terminal 4, the key reading device 2, and the terminal information reading device 8 may be realized as software by installing a program having the functions of the functional units described above in the computer. Alternatively, hardware having each function can be realized.

  Next, a security method in the security system according to the present embodiment and a key management method in the server device 3 will be described with reference to FIG. FIG. 8 is a sequence diagram showing the operation of each device in the security system according to the present embodiment.

  In the following explanation, a hotel guest (1) reserves and checks in a hotel, then (2) enters the guest room, (3) leaves the guest room, walks through the hotel, and then returns to the guest room. A series of operations of the security system from entering the room, (4) going out of the hotel, (5) going back to the hotel, (6) entering the room again, and (7) checking out will be described.

  First, with reference to FIG. 8A, (1) Operation | movement when a user (guest | operator) reserves and checks in at a hotel is demonstrated. When a user stays for the first time at a hotel in which the security system according to the present embodiment is introduced, software (for example, a mobile phone application) for controlling the non-contact type IC 6 built in the mobile terminal 4 of the guest is used. Then, it is downloaded from the server device 3 to the mobile terminal 4 (step S10) and installed in the mobile terminal 4 (step S12). Further, identification information related to the mobile terminal 4, for example, a non-contact type IC-ID of the non-contact type IC 6 is transmitted from the mobile terminal 4 to the server device 3 (step S 14), and non-contact is made to the database 10 of the server device 3. The type IC-ID is registered (step S16).

  Next, when the guest checks into the hotel, the e-mail address (for example, e-mail address for the mobile phone) of the mobile terminal 4 owned by the guest and the password for obtaining the electronic key, etc. at the front of the hotel The registration information is registered in the database 10 of the server device 3 (step S18). Such a registration process is not limited to the check-in time. For example, the registration process may be performed through a website from any user terminal at the time of lodging reservation.

  When the registration process is completed, the server device 3 issues an electronic key, which is a room key of the guest room used by the guest, to the registered guest terminal 4 (step S20). Next, the server device 3 transmits an e-mail in which a URL for displaying the issued electronic key (QR code) is described to the e-mail address of the registered mobile terminal 4 (step S22). Thereby, the storage destination address of the electronic key which is a room key is notified from the server apparatus 3 to the mobile terminal 4 so that the guest can acquire the electronic key at an arbitrary timing using his / her mobile terminal 4. Become.

  Next, (2) an operation when the guest enters the guest room will be described. First, for example, the guest accesses the site of the notified URL using the mobile terminal 4 in front of the guest room door 1 (step S30). Next, when the guest inputs the password registered at the time of check-in to the mobile terminal 4, the mobile terminal 4 transmits the input password to the server device 3 (step S32). The server device 3 performs password authentication by comparing the input password received from the mobile terminal 4 with a regular password registered in advance in the database 10 (step S34). If the password authentication is successful, the server device 3 transmits the electronic key site issued in S20 and stored in the database 10 to the mobile terminal 4 to the mobile terminal 4 (step S36). The mobile terminal 4 can acquire and display the electronic key (QR code) issued from the server device 3 to the mobile terminal 4 by receiving and displaying the site from the server device 3 and displaying it on the key display unit 5. (Step S38).

  As described above, password authentication is necessary for the mobile terminal 4 to acquire an electronic key. As a result, even if a legitimate guest loses or steals the mobile terminal 4 in the hotel, the third party does not know the legitimate password and therefore cannot obtain and display the electronic key on the mobile terminal 4. . Therefore, the security of the room key using the electronic key can be improved.

  Next, when the guest holds the mobile terminal 4 on which the electronic key is displayed in S38 over the key reading device 2 provided in the cabin door 1, the key reading device 2 reads the electronic key from the mobile terminal 4 (step) S40). Further, the key reading device 2 transmits the read electronic key and identification information (for example, a guest room number) of the key reading device 2 to the server device 3, and requests authentication of the electronic key (step S42). When the server device 3 receives the electronic key authentication request, the server device 3 compares the electronic key received from the key reading device 2 with the electronic key of the corresponding room stored in the database 10 to authenticate the received electronic key. (Step S44). If this authentication is successful, the server device 3 transmits the unlocking permission of the passenger door 1 to the key reading device 2 (step S46). When the key reading device 2 receives the unlocking permission from the server device 3, the key reading device 2 controls the locking device 11 of the cabin door 1 to unlock the cabin door 1 (step S48). Thereby, the guest can open the cabin door 1 and enter the cabin.

  Next, with reference to FIG. 8B, (3) an operation when the guest leaves the room and walks in the hotel and then reenters the room will be described. When the guest leaves the room, there is no room key such as a general key or a card key, so it is only necessary to leave the room with the mobile terminal 4 alone. When the guest leaves the guest room, the guest room door 1 is automatically locked by the automatic lock function of the guest room door 1. The room key (electronic key) issued to the mobile terminal 4 is invalid if the vacant stays in the hotel, such as a restaurant, shop, or public bath, without going out of the hotel. It is not converted. Therefore, since the reissuing work of the electronic key is unnecessary, the convenience for the guest can be improved.

  When the guest returns to the guest room and re-enters, the guest room door 1 is unlocked by the same processing as S30 to S48 described above (step S50). The electronic key acquired in S36 is stored in the mobile terminal 4, so that the access to the server device 3 at the time of re-entry (S30) and the password input and authentication (S32 to S34) can be omitted. Good. Thereby, the operability of the electronic key using the mobile terminal 4 is more important than the security during walking in the hotel, and the convenience of the guest can be further improved.

  Next, (4) an operation when the guest goes out of the hotel will be described. When going out, the guest holds the mobile terminal 4 over the terminal information reading device 8 installed in the entrance door 7 such as a hotel lobby. Then, the terminal information reading device 8 reads the non-contact type IC-ID from the non-contact type IC 6 of the mobile terminal 4 (step S60), and transmits the read non-contact type IC-ID to the server device 3, thereby The apparatus 3 is requested to authenticate the ID (step S62). When the server device 3 receives the ID authentication request, the server device 3 compares the contactless IC-ID received from the key reading device 2 with the contactless IC-ID stored in the database 10 to match. It is authenticated whether or not there is (step S64). If this authentication is successful, the server device 3 transmits the unlocking permission of the entrance door 7 to the terminal information reading device 8 and instructs the unlocking of the entrance door 7 (step S66). When receiving the unlocking permission from the server device 3, the terminal information reading device 8 controls the entrance door 7 to unlock and open (step S68). Thereby, the guest can go out through the entrance door 7 which is the doorway of a hotel.

  Further, when the authentication in S64 is successful, the server device 3 invalidates the electronic key (room key) issued to the mobile terminal 4 corresponding to the authenticated non-contact IC-ID, and The URL of the electronic key is also invalidated (step S70). Thereby, when the guest goes out, the issued electronic key is invalidated and the room key of the guest room does not exist, so that security can be improved. If the mobile terminal 4 is lost or stolen while the guest is out, a third party who does not know the legitimate password cannot use the mobile terminal 4 to misuse the electronic key.

  Next, (5) an operation when the guest returns from the outside to the hotel will be described. When returning from the outside, the guest holds the mobile terminal 4 over the terminal information reading device 8 installed at the entrance door 7 in the same manner as when going out. Then, the terminal information reading device 8 reads the non-contact type IC-ID from the non-contact type IC 6 of the mobile terminal 4 (step S80), and transmits the read non-contact type IC-ID to the server device 3, thereby The apparatus 3 is requested to authenticate the ID (step S82). When the server device 3 receives the ID authentication request, the server device 3 compares the contactless IC-ID received from the key reading device 2 with the contactless IC-ID stored in the database 10 to match. Whether or not the electronic key of the mobile terminal 4 corresponding to the contactless IC-ID has been revoked is confirmed based on the registration information in the database 10 (step S84). ).

  When the authentication is successful and the electronic key is revoked, the server device 3 reissues a new electronic key to the mobile terminal 4 corresponding to the contactless IC-ID ( Step S86). Further, similarly to S20, the server device 3 transmits an e-mail in which a URL for displaying the reissued electronic key (QR code) is described to the e-mail address of the registered mobile terminal 4. (Step S88). As a result, the guest can display the reissued electronic key on the mobile terminal 4 and cause the key reading device 2 to read it, thereby unlocking the cabin door 1 and reentering the cabin.

  Thus, (6) when the guest enters the room again after going out, the cabin door 1 is unlocked by the same processing as S30 to S48 described above (step S90). (7) When the guest checks out, the guest holds the mobile terminal 4 over the terminal information reading device 8 when passing through the entrance door 7. Accordingly, the room key (electronic key) is invalidated by the same processing as in S60 to S70 described above (step S100). This makes it possible to automatically invalidate room keys that are no longer required upon checkout, which is convenient and prevents the guest from re-entering the same room at a later date using a past electronic key.

  The security system according to the present embodiment, the security method using the security system, and the key management method in the server device 3 have been described above. According to the present embodiment, as a room key of a hotel guest room, not a general key or a card key, but an electronic key issued to the mobile terminal 4 of a regular guest by the server device 3 is used. The mobile terminal 4 acquires an electronic key from the server device 3 via the network. Thereby, even if a third party impersonates a hotel guest and improperly reissues the electronic key, the reissued room key is stored in the mobile terminal 4 registered in the server device 3. Since it is delivered to the e-mail address, third parties cannot enter the room. Furthermore, since an unrecognized e-mail arrives from the server device 3 to the guest terminal 4 of the guest, there is also an advantage that it is understood that impersonation is being performed.

  Further, by mounting a wireless communication device such as a non-contact IC 6 on the mobile terminal 4, identification information about the mobile terminal 4 by the terminal information reading device 8 at the hotel entrance door 7 when the guest goes out or at checkout. (Non-contact IC-ID etc.) is detected and the electronic key which is a room key is automatically invalidated. In addition, even when the guest returns from the outside, the mobile terminal 4 is detected by the terminal information reader 8 at the entrance door 7 of the hotel, and a new electronic key is reissued. Thereby, even if the mobile terminal 4 is lost or stolen while the guest is out, the address information for acquiring the room key from the server device 3 even if the third party acquires the mobile terminal 4 Since the URL of the electronic key storage destination is locked with a password, a third party cannot obtain the room key. In this way, it is possible to cope with loss or theft of the mobile terminal 4 as a room key or impersonation of a third party, so that the security of the electronic key using the mobile terminal 4 can be improved.

  Furthermore, the room key is not invalidated when the guest strolls in the hotel. Therefore, the guest does not need to reissue / reacquire the room key every time the user leaves the room, so that the convenience of the guest can be improved.

  As described above, as long as the guest stays in the hotel, the electronic key is valid and can be re-entered any number of times. The electronic key is never revoked. On the other hand, the electronic key is automatically invalidated when the guest goes out of the hotel, and is automatically reissued when the guest goes out. Therefore, the electronic key can be appropriately invalidated and reissued in accordance with the behavior pattern of the hotel guest, so that the convenience of the guest handling the electronic key can be improved and the security of the electronic key can be improved.

  The preferred embodiments of the present invention have been described in detail above with reference to the accompanying drawings, but the present invention is not limited to such examples. It is obvious that a person having ordinary knowledge in the technical field to which the present invention pertains can come up with various changes or modifications within the scope of the technical idea described in the claims. Of course, it is understood that these also belong to the technical scope of the present invention.

  For example, in the above-described embodiment, an example in which the security system is applied to a hotel having a plurality of guest rooms and a lobby has been described, but the present invention is not limited to such an example. For example, if the security system of the present invention is a building having an entrance and a plurality of rooms, for example, a ryokan, a guest house, a condominium, an office, a school, a public office, an apartment, an apartment, a shopping mall, a cartoon cafe, a tanning salon, a rental It can be applied to various buildings such as rooms.

  In the above embodiment, the mobile terminal 4 is a mobile phone owned by a hotel guest, the electronic key is a QR code (two-dimensional code) compatible with the mobile phone, and the short-range wireless communication device of the mobile terminal 4 is The example of using the non-contact type IC 6 has been described. However, the electronic key of the present invention is not limited to the QR code. For example, other two-dimensional codes such as various stack-type two-dimensional codes and matrix-type two-dimensional codes, one-dimensional bar codes, random numbers, etc. are used. You can also

  Also, the wireless communication means for invalidating the electronic key (room key) is not limited to the above-described non-contact type IC 6. For example, Bluetooth, UWB (Ultra Wide Band), RFID (Radio Frequency Identification) Alternatively, any wireless communication method such as WPAN (Wireless Personal Area Network) such as ZigBee may be used.

  In the security system according to the above embodiment, as shown in FIG. 8, each time a guest enters a guest room, the mobile terminal 4 is used to access the server device 3 to obtain an electronic key. Although security has been improved, the present invention is not limited to such an example. For example, when the mobile terminal 4 first obtains an electronic key from the server device 3 (S36) and displays it on the screen (S38) at the time of first entry after check-in in (2) of FIG. The image of the electronic key stored in the mobile terminal 4 is displayed without accessing the server device 3 in the subsequent re-entry (3). You may let them. Thereby, the guest does not need to access the server apparatus 3 using the mobile terminal 4 every time when entering the room, and can enter the room by displaying the electronic key easily and quickly.

It is a schematic block diagram which shows the security system concerning one Embodiment of this invention. It is a block diagram which shows the hardware constitutions of the server apparatus concerning the embodiment. It is a functional block diagram which shows the structure of the server apparatus concerning the embodiment. It is explanatory drawing which shows the registration information table stored in the database of the server apparatus concerning the embodiment. It is a functional block diagram which shows the structure of the mobile terminal concerning the embodiment. It is a functional block diagram which shows the structure of the key reader concerning the embodiment. It is a functional block diagram which shows the structure of the terminal information reading apparatus concerning the embodiment. It is a sequence diagram showing operation | movement of each apparatus in the security system concerning the embodiment. It is a sequence diagram showing operation | movement of each apparatus in the security system concerning the embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Guest room door 2 Key reader 3 Server apparatus 4 Mobile terminal 5 Key display part 6 Non-contact type IC
DESCRIPTION OF SYMBOLS 7 Entrance door 8 Terminal information reader 9a, 9b Network 10 Database 11 Locking device 12 Registration information table 13 Electronic key database 21 Key reading part 22 Key transmission part 23 Unlocking control part 24 Output part 31 Terminal registration part 32 Key issuing part 33 Key providing unit 34 Key receiving unit 35 Key authentication unit 36 Identification information receiving unit 37 Identification information authentication unit 38 Key invalidation unit 39 Input unit 41 Registration unit 42 Key acquisition unit 43 Input unit 61 ID storage unit 62 Non-contact communication unit 63 Control Unit 81 Identification information reading unit 82 Identification information transmission unit 83 Entrance / exit unlocking control unit 84 Output unit

Claims (16)

A key reader installed corresponding to the door of each room of the building, a terminal information reader installed corresponding to the entrance of the building, a mobile terminal carried by a user using the room, A security information system comprising a terminal information reader, a server device capable of communicating with the terminal information reader and the mobile terminal,
The server device
A key issuing unit that issues an electronic key for unlocking the door of the room to the mobile terminal;
A database that stores the electronic key issued to the mobile terminal in association with identification information about the mobile terminal;
A key providing unit that provides the mobile terminal with the electronic key issued to the mobile terminal in response to a request from the mobile terminal;
A key authentication unit that authenticates the electronic key received from the key reading device, and transmits the door unlocking permission to the key reading device when the authentication is successful;
A key revocation unit that revokes the electronic key issued to the mobile terminal based on the identification information about the mobile terminal received from the terminal information reader;
With
The mobile terminal
A key acquisition unit that acquires the electronic key issued to the mobile terminal from the server device;
A key display unit for displaying the electronic key acquired from the server device;
With
The key reader is
A key reading unit for reading the electronic key displayed on the mobile terminal;
A key transmission unit that transmits the electronic key read by the key reading unit to the server device;
In response to the unlocking permission of the door received from the server device, an unlocking control unit that controls to unlock the door;
With
The terminal information reader is
An identification information reading unit that reads identification information about the mobile terminal from the mobile terminal;
An identification information transmitting unit that transmits identification information about the mobile terminal read by the identification information reading unit to the server device;
A security system comprising:   After the electronic key issued to the mobile terminal is revoked, when the server device re-receives identification information about the mobile terminal from the terminal information reading device, the key issuing unit of the server device is: The security system according to claim 1, wherein a new electronic key is reissued to the mobile terminal based on identification information regarding the mobile terminal re-received from the terminal information reading device. The database of the server device stores a password set by the user of the mobile terminal in association with the electronic key issued to the mobile terminal,
The key providing unit of the server device collates the password stored in the database with the password received from the mobile terminal requesting the electronic key, and when the two passwords match, The security system according to claim 1, wherein the electronic key issued to the mobile terminal is provided to the mobile terminal. The key issuing unit of the server device notifies the mobile terminal of address information indicating a storage destination of the electronic key issued to the mobile terminal;
When the mobile terminal accesses the server device based on the address information, the key providing unit of the server device provides the mobile terminal with the electronic key stored in the storage destination represented by the address information. The security system according to claim 1, wherein: The server device
An identification information authenticating unit that authenticates identification information related to the mobile terminal received from the terminal information reading device and transmits permission to unlock the entrance of the building to the terminal information reading device when the authentication is successful. ,
The terminal information reader is
The door opening / closing control part which controls to unlock the door according to the unlocking permission of the doorway received from the server device, further comprises an doorway unlocking control unit. Security system. The mobile terminal further includes a non-contact type IC for non-contact communication with the terminal information reading device,
The identification information related to the mobile terminal is identification information of the contactless IC,
The identification information reading unit of the terminal information reading device receives the identification information of the non-contact type IC from the non-contact type IC of the mobile terminal positioned within a predetermined range from the terminal information reading device. The security system according to claim 1, wherein the security system is characterized. Using a key reading device installed corresponding to a door of each room of a building, a terminal information reading device installed corresponding to an entrance of the building, the key reading device, the terminal information reading device, and the room A server system capable of communicating with a mobile terminal carried by a user,
The server device
A key issuing unit that issues an electronic key for unlocking the door of the room to the mobile terminal;
A database that stores the electronic key issued to the mobile terminal in association with identification information about the mobile terminal;
A key providing unit that provides the mobile terminal with the electronic key issued to the mobile terminal in response to a request from the mobile terminal;
A key authentication unit that authenticates the electronic key received from the key reading device, and transmits the door unlocking permission to the key reading device when the authentication is successful;
A key revocation unit that revokes the electronic key issued to the mobile terminal based on the identification information about the mobile terminal received from the terminal information reader;
With
The key reader is
A key reading unit for reading the electronic key displayed on the mobile terminal;
A key transmission unit that transmits the electronic key read by the key reading unit to the server device;
In response to the unlocking permission of the door received from the server device, an unlocking control unit that controls to unlock the door;
With
The terminal information reader is
An identification information reading unit that reads identification information about the mobile terminal from the mobile terminal;
An identification information transmitting unit that transmits identification information about the mobile terminal read by the identification information reading unit to the server device;
A security system comprising: Can communicate with a key reader installed corresponding to the door of each room of the building, a terminal information reader installed corresponding to the entrance of the building, and a mobile terminal carried by a user using the room Server device,
A key issuing unit that issues an electronic key for unlocking the door of the room to the mobile terminal;
A database that stores the electronic key issued to the mobile terminal in association with identification information about the mobile terminal;
A key providing unit that provides the mobile terminal with the electronic key issued to the mobile terminal in response to a request from the mobile terminal;
A key authentication unit that authenticates the electronic key received from the key reading device, and transmits the door unlocking permission to the key reading device when the authentication is successful;
A key revocation unit that revokes the electronic key issued to the mobile terminal based on the identification information about the mobile terminal received from the terminal information reader;
A server device comprising:   After the electronic key issued to the mobile terminal is revoked, when the identification information about the mobile terminal is received again from the terminal information reading device, the key issuing unit re-receives from the terminal information reading device. The server apparatus according to claim 8, wherein a new electronic key is reissued to the mobile terminal based on the identification information regarding the mobile terminal. The database stores a password set by the user of the mobile terminal in association with the electronic key issued to the mobile terminal,
The key providing unit collates the password stored in the database with the password received from the mobile terminal requesting the electronic key, and when the two passwords match, The server device according to claim 8 or 9, wherein the electronic key issued in this manner is provided to the mobile terminal. The key issuing unit notifies the mobile terminal of address information indicating a storage destination of the electronic key issued to the mobile terminal;
When the mobile terminal accesses the server device based on the address information, the key providing unit provides the mobile terminal with the electronic key stored in the storage destination represented by the address information. The server apparatus in any one of Claims 8-10.   An identification information authenticating unit that authenticates identification information related to the mobile terminal received from the terminal information reading device and transmits permission to unlock the entrance of the building to the terminal information reading device when the authentication is successful. The server device according to any one of claims 8 to 11, wherein the server device is characterized in that A key issuing step in which the server device issues an electronic key for unlocking a door of the room to a mobile terminal carried by a user who uses the room of the building;
A key providing step in which the server device provides the mobile terminal with the electronic key issued to the mobile terminal in response to a request from the mobile terminal;
A key reading step in which a key reading device installed corresponding to the door of each room of the building reads the electronic key displayed on the mobile terminal; and
A key transmitting step in which the key reading device transmits the read electronic key to the server device;
A key receiving step in which the server device receives the electronic key from the key reading device;
A key authentication step of authenticating the electronic key received from the key reading device and transmitting the door unlocking permission to the key reading device when the authentication is successful;
The key reading device receives the unlocking permission of the door from the server device;
A door unlocking step for controlling the key reading device to unlock the door according to the unlocking permission of the door received from the server device;
An identification information reading step in which a terminal information reading device installed corresponding to the entrance of the building reads identification information about the mobile terminal from the mobile terminal;
An identification information transmitting step in which the terminal information reading device transmits identification information about the read mobile terminal to the server device;
An identification information receiving step in which the server device receives identification information about the mobile terminal from the terminal information reader;
A key revocation step in which the server device revokes the electronic key issued to the mobile terminal based on identification information about the mobile terminal received from the terminal information reading device;
A security method comprising: A key issuing step for issuing an electronic key for unlocking the door of the room to a mobile terminal carried by a user using the room of the building;
A key providing step of providing the mobile terminal with the electronic key issued to the mobile terminal in response to a request from the mobile terminal;
A key receiving step of receiving the electronic key read from the mobile terminal by the key reading device from a key reading device installed corresponding to the door of each room of the building;
A key authentication step of authenticating the electronic key received from the key reading device, and transmitting the door unlocking permission to the key reading device when the authentication is successful;
An identification information receiving step for receiving identification information relating to the mobile terminal read from the mobile terminal by the terminal information reading device, from a terminal information reading device installed corresponding to the entrance of the building;
A key revocation step of revoking the electronic key issued to the mobile terminal based on the identification information about the mobile terminal received from the terminal information reader;
An electronic key management method comprising:   A program for causing a computer to execute the security method according to claim 13.   A program for causing a computer to execute the electronic key management method according to claim 14.

Images