JP7497799B2 - Security Systems - Google Patents

Description

The present invention relates to a security system.

Conventionally, there is a locking/unlocking system such as that disclosed in Patent Document 1 below. This type of locking/unlocking system is applied to, for example, front doors and common area automatic doors that use intercoms, and is equipped with a portable device carried by the resident, a control device that communicates with the portable device, an operation unit connected to the control device, and an electric lock installed on the door. After authentication is established by operating the touch switch unit, this locking/unlocking system can be unlocked from outside the room, provided that the ID code transmitted from the portable device carried by the user is also authenticated.

JP 2015-212481 A

However, in the above-mentioned locking/unlocking systems, the control device needs to have a communication function with the portable device. Furthermore, in the above-mentioned locking/unlocking systems, communication is performed through the door, so if the door is made of metal or there is interference with external radio waves, it is difficult for radio waves to reach between the portable device and the control device, and malfunctions due to poor communication can occur. Therefore, the above-mentioned locking/unlocking systems have problems such as high power consumption and the need for measures to deal with malfunctions due to communication failures.

In addition, some security systems now being offered allow users to communicate with the control device using general-purpose communication terminals such as smartphones, instead of a dedicated mobile device. Even with such a configuration, there are problems such as increased power consumption and the need to take measures against malfunctions caused by communication failures, as mentioned above. In addition, when using a smartphone or the like, there is a problem that communication with the control device can be hindered depending on the model, OS, application version, etc., and measures to address this issue are incurring extra effort and cost.

As a solution to the above problem, it is possible to make it possible to lock and unlock the door using a password that is set so that it can be changed according to the duration of use. However, with such a configuration, the door can be repeatedly locked and unlocked using the same password for a certain period of time, which is problematic in that sufficient security cannot be guaranteed. Another possible method is to make the control device connectable to a server or the like via a communication network such as the Internet, so that the password can be changed at any time from the server. However, with such a configuration, problems arise, such as the need to install communication equipment to connect the control device to the server, the costs of maintaining the communication network, and electricity usage fees.

The present invention aims to provide a security system that is superior in terms of security and allows for operational control of a security device without a communication connection to a control device.

(1) The security system of the present invention, which is provided to solve the above-mentioned problems, has a control device that controls the operation of a security device, and operates using information obtained using a server and a client terminal provided separately from the security system, and the server has an authority authentication unit that authenticates the operation control authority of the security device related to the security device based on information input via the client terminal, and an input authentication information output unit that accepts input of information from the client terminal that has been authenticated as having operation control authority, generates input authentication information using a predetermined algorithm for generating authentication information based on the input information, and outputs the information to the client terminal. The control device has a random authentication information output unit that outputs random authentication information that is partially or completely generated randomly, a matching authentication information generation unit that generates matching authentication information corresponding to the random authentication information using the predetermined algorithm, an information input unit that accepts information input by a user operation, and an authentication control unit that performs authentication control related to operational control of the security device based on the information input to the information input unit and the matching authentication information, and is characterized in that the authentication control unit allows operational control of the security device on the condition that the information input to the information input unit corresponds to the matching authentication information generated based on the random authentication information previously output.

When controlling the operation of a security device in the security system of the present invention, the user authenticates the operation control authority via a client terminal such as a smartphone. Furthermore, the random authentication information output by the random authentication output unit is input to the input authentication information output unit via the client terminal that has been authenticated as having the operation control authority, whereby input authentication information is generated on the server side. The input authentication information generated on the server can be acquired by the client terminal.

On the other hand, the control device can generate authentication information for comparison by processing the random authentication information output by the random authentication information output unit with a predetermined algorithm in the authentication information for comparison generation unit. The control device also allows operational control of the security device on the condition that the information input to the information input unit by user operation corresponds to authentication information for comparison generated based on the random authentication information output in advance. Therefore, when input authentication information generated by inputting random authentication information output in advance to the server and output to the client terminal is input to the information input unit by user operation, operational control of the security device is allowed. On the other hand, even if irrelevant information different from the input authentication information generated based on the random authentication information is input to the information input unit, operational control of the security device is not allowed.

As described above, the security system of the present invention requires information communication between the client terminal and the server, but does not require communication between the control device and the client terminal, or between the control device and the server. Therefore, the security system of the present invention can control the operation of the security device without a communication connection to the control device. Furthermore, the security system of the present invention uses authentication information for verification obtained by further processing random authentication information, which is partially or completely generated at random, with a predetermined algorithm, and authentication information for input to determine whether or not to permit the operation control of the security device. Because of this configuration, the security system of the present invention can exhibit excellent characteristics in terms of security.

(2) In the security system of the present invention, it is preferable that the algorithm generates authentication information based on identification information for identifying an individual security device.

With this configuration, even if the same random authentication information is generated in different security devices, the matching authentication information and input authentication information can be different for each security device. Therefore, the present invention can provide a security system with even higher security.

(3) The security system of the present invention may have a display device that sequentially displays the multiple characters that make up the random authentication information, and is characterized in that the display of the next character is delayed until a specified operation is performed.

This configuration makes it easier for the user to accurately recognize the multiple characters that make up the random authentication information in order. Therefore, the present invention can improve the usability of the security system. Furthermore, with the above-mentioned configuration, even if a display panel capable of displaying different numbers, letters, or other characters, symbols, etc., for each area is used as a display device for displaying the random authentication information, it is possible to display random authentication information in which the same characters or symbols are repeated. Therefore, with the above-mentioned configuration, various devices can be used as display devices for displaying the random authentication information.

(4) The security system of the present invention is preferably characterized in that it has a display device capable of displaying multiple characters that may constitute the random authentication information in different areas corresponding to each character, and capable of displaying multiple characters that constitute the random authentication information to be displayed in succession in order, and that after the display of the previous character is erased, the display of the next character is delayed until a predetermined time has elapsed.

With this configuration, even random authentication information consisting of a series of identical characters or symbols can be displayed so that the user can accurately understand it.

(5) The security system of the present invention is preferably characterized in that predetermined release information consisting of a character string exceeding the number of characters constituting the input authentication information is set, and, on condition that the release information is input into the information input section, either or both of the restriction on execution of the authentication control and the release of the restriction on execution of the authentication control can be performed.

According to this configuration, when authentication control is no longer necessary, it is possible to switch to restricting the execution of authentication control or to lift the restriction on the execution of authentication control by inputting the lift information. In addition, since the lift information is made up of a character string that exceeds the number of characters constituting the input authentication information, authentication information for comparison that is identical to the lift information is not generated. Therefore, according to the above-mentioned configuration, it is possible to avoid the risk of erroneously restricting the execution of authentication control or lifting the restriction on the execution when input authentication information is input.

(6) The security system of the present invention may be characterized in that the random authentication information output unit generates the random authentication information by adding characters associated with predetermined information to randomly generated characters.

With this configuration, the random authentication information can be used not only for authentication control but also for various other purposes, such as notifying specific information.

(7) The security system of the present invention may be characterized in that output of random authentication information that overlaps with previously output random authentication information is restricted until all of the candidates usable as the random authentication information consisting of a plurality of character strings have been used, and, on the condition that all of the candidates usable as the random authentication information have been used, the algorithm generates input authentication information and verification authentication information under conditions different from those before all of the candidates usable as the random authentication information have been used.

With this configuration, it is possible to minimize the possibility that the same random authentication information will be used. Furthermore, with the above-mentioned configuration, even if random authentication information that has been used before is to be used after all of the candidates that can be used as random authentication information have been used, it is possible to make the input authentication information and the verification authentication information different from those used previously. Therefore, the security system of the present invention can be used without a decrease in security, even if random authentication information that has been used previously is to be used.

(8) The security system of the present invention may be characterized in that the security device ensures security related to the opening and closing of the door, and the control device controls the opening and closing of the door.

With this configuration, it is possible to control the operation of a security device to ensure security regarding the opening and closing of a door without a communication connection to a control device. Note that, as a security device to ensure security regarding the opening and closing of a door, for example, a lock device attached to the door, an automatic door opening and closing device using an intercom, etc., can be suitably used.

(9) In the above-described security system, the output algorithm of the input authentication information in the server accepts information input from the client terminal that has been authenticated as having operation control authority, and outputs the same input authentication information until an input authentication information generation process that generates the input authentication information based on the input information is repeated a predetermined number of times, and the output algorithm of the matching authentication information in the control device preferably operates according to an algorithm that outputs the same matching authentication information until a matching authentication information generation process that generates the matching authentication information is repeated a predetermined number of times.

In the above-mentioned security system, the input authentication information and the verification authentication information are updated to different information on the condition that the generation process is repeated a predetermined number of times. Therefore, in a security device that is operated frequently, such as a security device used in a common area such as an automatic door opening and closing device, it is possible to ensure high security accuracy while preventing the variation that can be output as the input authentication information and the verification authentication information from being exhausted.

(10) In the above-mentioned security system, the output algorithm of the input authentication information in the server accepts information input from the client terminal authenticated as having operation control authority, outputs first input authentication information until a predetermined update condition is satisfied, and sequentially performs an input authentication information update process to update the first input authentication information to a second input authentication information different from the first input authentication information, on condition that the update condition is satisfied; the output algorithm of the matching authentication information in the control device performs a process to output first matching authentication information corresponding to the first input authentication information and second matching authentication information corresponding to the second input authentication information; the authentication control unit allows the operation control, on condition that the information input to the information input unit corresponds to the first matching authentication information; and the authentication control unit allows the operation control, on condition that the information input to the information input unit corresponds to the second matching authentication information, and executes a matching authentication information update process to update the second matching authentication information to the first matching authentication information and generate new second matching authentication information.

This configuration can ensure high security accuracy while suppressing the frequency of updates to the input authentication information and the verification authentication information. Therefore, the above-mentioned configuration can provide a security system that can be suitably used in security devices that are operated frequently, such as security devices used in common areas, such as automatic door opening and closing devices.

(10) In the above-mentioned security system, it is preferable that the update condition in the input authentication information update process is that the input authentication information generation process is repeated a predetermined number of times.

This configuration makes it possible to provide a security system with high security accuracy while minimizing the frequency of input authentication information update processing.

(11) In the above-described security system, the matching authentication information update process may be performed under an update condition that information corresponding to the second matching authentication information is input to the information input unit, and the authentication control unit performs a process of allowing the operation control multiple times in succession.

With this configuration, for example, if information corresponding to the second matching authentication information is input to the information input section due to an erroneous operation, it is possible to prevent the matching authentication information from being updated by the matching authentication information update process at an inappropriate time.

(12) In the above-mentioned security system, it is preferable that the input authentication information update process is performed irreversibly.

This configuration can prevent the input authentication information from accidentally reverting to a previous state.

(13) It is preferable that the above-mentioned security system is capable of notifying the number of times the verification authentication information update process has been performed.

(14) In the above-mentioned security system, it is preferable that the control device operates without communicating with the server and the client terminal.

The present invention makes it possible to control the operation of a security device without a communication connection to a control device, and provides a security system with excellent security.

FIG. 1 is an explanatory diagram illustrating a configuration in which a security system according to an embodiment of the present invention is installed on a door. 1 is a block diagram showing the configuration of a security system according to an embodiment of the present invention, and devices used in conjunction with the security system; 2 is a flowchart showing an example of the operation of the security system of FIG. 1 . 2 is a flowchart showing an example of the operation of the security system of FIG. 1 . FIG. 11 is a block diagram showing the configuration of a security system according to a second embodiment of the present invention, and devices used in conjunction with the security system. 6 is a flowchart showing an example of the operation of the security system of FIG. 5 . 6 is a flowchart showing an example of the operation of the security system of FIG. 5 . 6 is a timing chart showing the operation of the security system of FIG. 5 .

First Embodiment
A security system 1 according to a first embodiment of the present invention will be described in detail below with reference to the drawings. The security system 1 can be applied to various security devices, but in this embodiment, the security device is a locking device, and the application example to control locking and unlocking of the locking device will be described as an example.

The security system 1 of this embodiment controls the operation of the locking device 10, which is a security device (controlling the on/off of the security function), i.e., controls locking and unlocking. The security system 1 includes the locking device 10, a control device 30, and a server 50.

As shown in Figures 1 and 2, the locking device 10 includes a locking mechanism 20 that is provided on a door 12. The door 12 is provided, for example, on a building such as a house, or on various machines, tools, devices, etc. In this embodiment, the door 12 is provided, for example, at the entrance of a house, etc., to separate the inside and outside of the building (indoors and outdoors). The door 12 also includes a handle 14. The door 12 can be opened and closed by operating the handle 14. Specifically, the handle 14 inputs power to an operating mechanism 24 of the locking mechanism 20, which will be described in detail later, to retract the latch 28 toward the inside of the door 12, thereby opening and closing the door 12.

The locking mechanism 20 is attached to the door 12. The locking mechanism 20 includes an actuator 22, an operating mechanism 24, a deadbolt 26, and a latch 28. The locking mechanism 20 transmits the power generated in the actuator 22 to the deadbolt 26 via the operating mechanism 24 to operate the deadbolt 26, thereby performing an operation to lock and unlock the door 12 (locking and unlocking operation).

The actuator 22 is, for example, a motor or an electric cylinder, and is electrically operable. The operating mechanism 24 includes a mechanism that connects the actuator 22 and the deadbolt 26 so that power can be transmitted. The operating mechanism 24 also includes a mechanism that transmits the power input from the handle 14 to the latch 28.

The deadbolt 26 can protrude and retract from the side of the door 12 by receiving power from the actuator 22 via the operating mechanism 24. The locking mechanism 20 can lock the door 12 by protruding the deadbolt 26 toward a striker provided on the door frame (not shown), and can unlock the door 12 by retracting the deadbolt 26 toward the door 12.

The latch 28 is biased to protrude from the side of the door 12 by a biasing member (not shown) such as a spring provided in the locking mechanism 20. The latch 28 is capable of retracting toward the inside of the door 12 against the biasing force of the spring by receiving power from the handle 14 via the operating mechanism 24. The latch 28 can maintain the door 12 in a closed state by protruding toward a receiving metal fitting (strike) provided on the door frame (not shown). In addition, the door 12 can be opened and closed by operating the handle 14 to retract the latch 28 from the receiving metal fitting (strike).

The control device 30 has a lock mechanism control unit 32, an information input unit 34, a random authentication information output unit 36, a matching authentication information generation unit 38, and an authentication control unit 40.

The lock mechanism control unit 32 controls the operation of the lock mechanism unit 20. The lock mechanism control unit 32 is electrically connected to the actuator 22. The lock mechanism control unit 32 transmits a control signal to control the operation of the actuator 22, thereby controlling the advancement and retreat of the deadbolt 26 and locking and unlocking.

The information input unit 34 is a part that accepts information input by user operation. The information input unit 34 has an operation unit 34a that is attached to the front side (outside the room) of the door 12. The operation unit 34a can be configured, for example, by a capacitive touch panel. The panel that constitutes the operation unit 34a can be divided into a plurality of areas (for example, 12 areas of 4 rows x 3 columns), and numbers, symbols, etc. can be assigned to each area. More specifically, the operation unit 34a can assign 10 numbers consisting of "0" to "9" and symbols such as "*" and "#" to the 12 areas formed on the panel that constitutes it, and can input the numbers and symbols assigned to the area by touching each area. In addition, the operation unit 34a can display information by arranging a backlight for each area and turning it on and off for each area. That is, in this embodiment, the operation unit 34a constituting the information input unit 34 functions both as an input device for inputting information and as a display device for displaying information.

The random authentication information output unit 36 is for outputting randomly generated random authentication information of a predetermined number of digits. The random authentication information output unit 36 can output (notify) the random authentication information to the user via the operation unit 34a of the information input unit 34. The method of notifying the random authentication information can be any appropriate method, but for example, the random authentication information can be notified by lighting up the predetermined number of digits that make up the random authentication information in order, starting from the first digit.

The matching authentication information generating unit 38 generates matching authentication information corresponding to the random authentication information generated by the random authentication information output unit 36 using a predetermined algorithm. The algorithm used by the matching authentication information generating unit 38 to generate matching authentication information is capable of generating authentication information based on identification information for identifying an individual lock device 10, such as the manufacturing number or serial number of the lock device 10 (security device). Therefore, the matching authentication information generating unit 38 can generate different matching authentication information for each lock device 10. The matching authentication information generated by the matching authentication information generating unit 38 is stored so as not to be leaked from the control device 30 to the outside.

The authentication control unit 40 performs authentication control for the operation control (control related to locking and unlocking) of the lock device 10 based on the information input to the information input unit 34 and the matching authentication information generated by the matching authentication information generation unit 38. The authentication control unit 40 allows the operation control of the lock device 10 on the condition that the information input to the information input unit 34 matches (corresponds to) the matching authentication information generated based on the random authentication information previously output by the random authentication information output unit 36.

As described above, the matching authentication information generated by the matching authentication information generating unit 38 is stored so as not to be leaked to the outside. Therefore, the user cannot access the control device 30 and learn information that matches the matching authentication information. In the security system 1 of this embodiment, the server 50 authenticates the authority to control the operation of the locking device 10 (authority to turn the security function on and off), and when it is determined that the user has the authority to lock and unlock, the random authentication information output by the matching authentication information generating unit 38 is input to the server 50, whereby input authentication information that matches the matching authentication information can be obtained. The server 50 is configured as follows:

The server 50 is connected so as to be able to communicate via a communication network such as the Internet. The server 50 is capable of communicating with client terminals 60, which may be devices equipped with communication functions such as smartphones, mobile phones, PDAs, and personal computers. The server 50 is equipped with an authority authentication unit 52 and an input authentication information output unit 54.

The authority authentication unit 52 has a function of authenticating (user authentication) whether or not a user who has connected to the server 50 using the client terminal 60 has the authority to control the operation of the security functions related to the lock device 10. User authentication can be performed, for example, by an authentication method using an ID code assigned to each user and a password linked to the ID code.

The input authentication information output unit 54 accepts information input from the client terminal 60 that has been determined to have operation control authority as a result of user authentication by the authority authentication unit 52, and generates authentication information based on the input information. The input authentication information output unit 54 generates input authentication information using the same algorithm as the above-mentioned matching authentication information generation unit 38. The algorithm for the input authentication information output unit 54 to generate input authentication information is, like the matching authentication information generation unit 38, capable of generating authentication information based on identification information for identifying an individual lock device 10, such as the manufacturing number or serial number of the lock device 10 (security device), and outputting the authentication information to the client terminal 60. In this way, the input authentication information output unit 54 generates authentication information using the same algorithm and in the same manner as the matching authentication information generation unit 38. Therefore, if the random authentication information output by the random authentication information output unit 36 is accurately input, authentication information identical to the matching authentication information generated by the matching authentication information generation unit 38 is generated as input authentication information.

Here, it is assumed that multiple locking devices 10 are linked to a user authenticated by the authority authentication unit 52. Taking such a case into consideration, for example, when multiple locking devices 10 are linked to a single user, the input authentication information output unit 54 may allow the user to select which locking device 10 they are trying to lock or unlock, and generate authentication information based on the identification information of the selected locking device 10.

The client terminal 60 is provided separately from the security system 1. As described above, the client terminal 60 is configured by a device equipped with a communication function, such as a smartphone, a mobile phone, a PDA, or a personal computer. The client terminal 60 may be any device that can access the server 50, input information for user authentication, input information to the input authentication information output unit 54, and output (notify) the input authentication information. The security system 1 may be capable of inputting and outputting the various information described above via a specific application installed in the client terminal 60, but by making it possible to input and output the various information described above via a general-purpose browser, for example, it becomes possible to input and output various information regardless of the type or model of the client terminal 60, the OS, the version of the application, etc.

Next, regarding the operation when controlling the locking and unlocking of the locking device 10 using the security system 1, first the flow of operations by the user will be explained step by step, and then the processing performed by the control device 30 and the server 50 will be explained in detail with reference to the flowcharts in Figures 3 and 4.

<<User operation flow>>
A user of the security system 1 operates the information input unit 34 of the control device 30 provided on the door 12 to start authentication control by the control device 30. The operation to start authentication control can be, for example, an operation of pressing a specific or arbitrary area or button constituting the information input unit 34. When the operation to start authentication control by the control device 30 is performed, the control device 30 generates random authentication information according to the flow of Fig. 3 described in detail later, and notifies the user using the information input unit 34.

Meanwhile, the user accesses the server 50 using a client terminal 60, such as a smartphone or mobile phone owned by the user. When access to the server 50 is successful, the client terminal 60 is in a state where information required for user authentication, such as an ID code or password, can be input. In this state, when regular user authentication information registered in the server 50 is input, the user is logged into the server 50. In this state, when the user inputs random authentication information via the client terminal 60, a calculation process is performed using a specified algorithm in the input authentication information output unit 54 of the server 50. When the calculation is completed, the user is able to check the input authentication information on the client terminal 60.

When the user inputs the input authentication information via the information input unit 34 of the control device 30 after the input authentication information has been output as described above, the authority authentication unit 52 of the control device 30 compares the input authentication information with the verification authentication information previously derived by the verification authentication information generation unit 38. If the user has correctly input the input authentication information via the information input unit 34, locking and unlocking are permitted, and an operation signal is output from the lock mechanism control unit 32 to the actuator 22.

To realize the above-mentioned series of operations by the user, the control device 30 and the server 50 perform operation control in accordance with the flowcharts in Figs. 3 and 4. Below, we will first explain the operation control performed by the control device 30.

(Step 1-1)
In step 1-1, the control device 30 checks whether or not a start-up operation has been performed by the user using the information input unit 34. If a start-up operation by the user has been confirmed, the control flow proceeds to step 1-2.

(Step 1-2)
In step 1-2, the random authentication information output unit 36 performs a process of randomly generating random authentication information consisting of a predetermined number of digits. The random authentication information output unit 36 also outputs (reports) the random authentication information via the information input unit 34. After that, the control flow proceeds to step 1-3.

(Step 1-3)
In step 1-3, the verification authentication information generating unit 38 generates verification authentication information corresponding to the random authentication information generated by the random authentication information output unit 36 using a predetermined algorithm. The control device 30 holds the verification authentication information so that it is not leaked to the outside. After that, the control flow proceeds to step 1-4.

(Step 1-4)
In step 1-4, the control device 30 checks whether any information has been input via the information input unit 34. The control device 30 waits until the input of information is confirmed. When the control device 30 confirms that information has been input, the control flow proceeds to step 1-5.

(Step 1-5)
In step 1-5, the authentication control unit 40 performs authentication for the operational control (control related to locking and unlocking) of the lock device 10 based on the information input to the information input unit 34 in step 1-4 and the reference authentication information previously generated by the reference authentication information generation unit 38 in step 1-3. If the information input to the information input unit 34 does not match the reference authentication information, the authentication control unit 40 returns the control flow to step 1-1. On the other hand, if the information input to the information input unit 34 matches the reference authentication information, the authentication control unit 40 advances the control flow to step 1-6.

(Step 1-6)
In step 1-6, the lock mechanism control section 32 outputs an operation signal to the actuator 22 to permit locking and unlocking of the lock device 10. This completes a series of control flows performed by the control device 30.

Next, the operational control performed by the server 50 to realize the series of operations by the user described above will be explained with reference to the flowchart in FIG. 4.

(Step 2-1)
In step 2-1, the server 50 checks whether or not there is access from the client terminal 60. If access from the client terminal 60 is confirmed, the control flow proceeds to step 2-2.

(Step 2-2)
In step 2-2, the authority authentication unit 52 judges whether or not the user authentication of the client terminal 60 that has accessed the server 50 is proper. Specifically, the authority authentication unit 52 performs user authentication, for example, by checking whether or not an ID code assigned to each user and a password linked to the ID code match pre-registered information. If the user is thus authenticated as being proper, the control flow proceeds to step 2-3.

(Step 2-3)
In step 2-3, a check is made as to whether or not random authentication information has been input via the client terminal 60. If input of random authentication information has been confirmed, the control flow proceeds to step 2-4.

(Step 2-4)
In step 2-4, the input authentication information output unit 54 generates the input authentication information by the same method and using the same algorithm as the matching authentication information generation unit 38. The input authentication information output unit 54 also outputs the generated input authentication information to the client terminal 60. This completes a series of control flows performed in the server 50.

As described above, in the security system 1 of this embodiment, information communication is necessary between the client terminal 60 and the server 50, but communication is not required between the control device 30 and the client terminal 60, or between the control device 30 and the server 50. Therefore, the security system 1 of this embodiment is capable of controlling the operation of the lock device (locking and unlocking) without a communication connection to the control device 30. In addition, the security system 1 of this embodiment uses the verification authentication information obtained by further processing the random authentication information with a specified algorithm, and the input authentication information, to determine whether or not to allow the operation control of the lock device 10. Therefore, the security system 1 can exhibit excellent characteristics in terms of security.

In addition, in the security system 1 of this embodiment, the algorithm generates authentication information based on identification information for identifying individual lock devices 10. Therefore, in the security system 1, even if the same random authentication information is generated in different lock devices 10, the matching authentication information and input authentication information can be different for each lock device 10, thereby further improving security.

In the present embodiment, an example is shown in which the algorithm generates authentication information based on identification information for identifying an individual lock device 10, but the present invention is not limited to this, and the algorithm may not have such a function. Furthermore, the algorithm used to generate authentication information in the security system 1 may generate authentication information by taking into account another element instead of or in addition to the identification information for identifying an individual lock device 10.

The above-mentioned security system 1 is merely an example of the present invention, and various modifications are possible within the scope of the present invention. For example, when the above-mentioned security system 1 is provided with a display device that sequentially displays multiple characters constituting the random authentication information, such as the operation unit 34a, the display of the next character may be delayed until a predetermined operation is performed, rather than displaying characters one after another. For example, the security system 1 may delay the display of the next character constituting the random authentication information until a predetermined key operation, such as pressing the "#" key on the operation unit 34a, is performed. With such a configuration, the user can easily accurately recognize the multiple characters constituting the random authentication information in sequence, and usability can be improved. Furthermore, with the above-mentioned configuration, it is possible to display random authentication information in which the same characters or symbols are consecutive, even if a display device such as the operation unit 34a is used.

In addition, when the security system 1 described above has a display device, such as the operation unit 34a, that can display multiple characters that may constitute random authentication information in different areas corresponding to each character, and can display multiple characters that constitute the random authentication information to be displayed consecutively in order, the display of the next character may be delayed until a predetermined time has elapsed after the previous character is erased. Even with such a configuration, it is possible to display random authentication information that consists of a series of the same characters or symbols in a way that the user can accurately understand.

The above-mentioned security system 1 may be configured such that predetermined release information consisting of a character string that exceeds the number of characters constituting the input authentication information is set in advance, and the execution restriction of authentication control or the release of the execution restriction of authentication control is performed on the condition that the release information is input to the information input unit 34. With this configuration, when the authentication control is no longer necessary, the execution restriction of authentication control can be performed, and when the authentication control becomes necessary, the execution restriction of authentication control can be released. Also, as described above, if the release information consists of a character string that exceeds the number of characters constituting the input authentication information, matching authentication information identical to the release information is not generated. Therefore, if the number of characters of the release information exceeds the number of characters constituting the input authentication information as described above, the risk of a malfunction in which authentication control is switched off when the input authentication information is input can be reduced.

The above-described security system 1 may be configured such that the random authentication information output unit 36 generates random authentication information by adding characters associated with predetermined information to randomly generated characters. Specifically, the characters associated with the predetermined information may be, for example, characters that indicate the degree of battery consumption or the need for maintenance. With this configuration, the random authentication information can be used for various purposes, such as notifying predetermined information, in addition to authentication control.

The above-mentioned security system 1 preferably restricts the output of random authentication information that overlaps with previously output random authentication information until all of the candidates that can be used as random authentication information consisting of multiple character strings have been used. With such a configuration, it is possible to minimize the possibility of the same random authentication information being used. In addition, in the case of such a configuration, it is preferable that the algorithm generates the input authentication information and the verification authentication information under conditions that are different from those before all of the candidates that can be used as random authentication information are used, on the condition that all of the candidates that can be used as random authentication information are used. With such a configuration, even if previously used random authentication information is to be used after all of the candidates that can be used as random authentication information have been used, the input authentication information and the verification authentication information can be made different from the previous ones. As a result, even if previously used random authentication information is to be used, it is possible to use it without causing a decrease in security.

The above-mentioned security system 1 employs a locking device 10 as a security device, and the control device 30 controls the locking and unlocking by the locking device 10, but the present invention is not limited to this. Specifically, the security system 1 can be suitably used to control the operation of security devices used to ensure security in various machines, instruments, devices, etc., such as automobiles, safes, industrial equipment, and machine tools. In addition, in the above embodiment, the locking device 10 is exemplified as an example of a security device for ensuring security related to the opening and closing of doors, but the present invention is not limited to this, and may be, for example, an automatic door opening and closing device that uses an intercom, etc.

Second Embodiment
Next, a security system 100 according to a second embodiment will be described in detail with reference to the drawings. Since the security system 100 has a common configuration with the security system 1 according to the first embodiment, the common parts are denoted by the same reference numerals and detailed description will be omitted.

As shown in FIG. 5, the security system 100 is applied to an automatic door opening/closing device 110. The automatic door opening/closing device 110 is a device for opening and closing an automatic door 112 installed at the entrance of a building such as an apartment complex or a building. The automatic door opening/closing device 110 is equipped with a terminal 114 such as an intercom, and is capable of inputting information such as a room number via the terminal 114, and of communicating with a terminal (not shown) separately installed in the room of the apartment or building. The automatic door opening/closing device 110 also includes a locking device 116, an operating mechanism 124 for operating the locking device 116, an actuator 122 for applying power to the operating mechanism 124, etc.

The security system 100 includes a control device 130 equivalent to the control device 30 described above. The control device 130 includes a lock mechanism control unit 32 and a random authentication information output unit 36, similar to the control device 30 described above. The control device 130 is also electrically connected to a terminal 114 of the automatic door opening and closing device 110. This allows the function equivalent to the information input unit 34 included in the control device 30 described above to be performed by the operation unit 114a of the terminal 114. Furthermore, the control device 130 includes a matching authentication information generation unit 138 and an authentication control unit 140, which will be described in detail later, instead of the matching authentication information generation unit 38 and the authentication control unit 40 described above.

The matching authentication information generating unit 138 generates the matching authentication information according to a predetermined algorithm, like the above-mentioned matching authentication information generating unit 38, but the output algorithm of the matching authentication information is different from that of the matching authentication information generating unit 38. That is, the above-mentioned matching authentication information generating unit 38 outputs different matching authentication information each time it generates, whereas the matching authentication information generating unit 138 operates according to an algorithm that outputs the same matching authentication information until the matching authentication information generating process for generating the matching authentication information is repeated a predetermined number of times. In this embodiment, the matching authentication information generating unit 138 outputs the first matching authentication information VC1 corresponding to the first input authentication information IC1 generated in the server 150 described later, and sequentially performs a process of outputting the second matching authentication information VC2 corresponding to the second input authentication information IC2 to be used as the input authentication information after the first input authentication information IC1.

The authentication control unit 140, like the authentication control unit 40 described above, performs authentication control of the operation control (control related to locking and unlocking) of the lock device 10 based on the information input to the operation unit 114a and the verification authentication information generated by the verification authentication information generation unit 138. The authentication control unit 140 allows the operation control of the lock device 10 on the condition that the information input to the operation unit 114a matches (corresponds to) the first input authentication information IC1 generated by the verification authentication information generation unit 138. The authentication control unit 140 also allows the operation control of the lock device 10 on the condition that the information input to the operation unit 114a matches (corresponds to) the second input authentication information IC2 generated by the verification authentication information generation unit 138.

In this embodiment, the information input to the operation unit 114a is deemed to match (correspond) to the second input authentication information IC2 generated by the reference authentication information generating unit 138, and the reference authentication information generating unit 138 performs an update process for the first input authentication information IC1 and the second input authentication information IC2, on the condition that the reference authentication information generating unit 138 is permitted to control the operation of the automatic door opening and closing device 110 multiple times. Specifically, the reference authentication information generating unit 138 replaces the authentication information previously set as the first input authentication information IC1 with the information previously set as the second input authentication information IC2, and performs a process of setting a new different information as the second input authentication information IC2.

The security system 100 includes a server 150 equivalent to the server 50 described above. Like the server 50, the server 150 is communicably connected via a communication network such as the Internet. The server 150 is capable of communicating with a client terminal 60, which may be a device with a communication function such as a smartphone, a mobile phone, a PDA, or a personal computer. The server 150 has a similar configuration to the server 50 described above in that it includes an authority authentication unit 52, but differs in that it includes an input authentication information output unit 154 instead of the input authentication information output unit 54.

The input authentication information output unit 154 is similar to the above-mentioned input authentication information output unit 54 in that it accepts information input from a client terminal 60 that has been determined to have operation control authority as a result of user authentication by the authority authentication unit 52, and generates authentication information based on the input information. Here, the input authentication information output unit 154 differs from the above-mentioned input authentication information output unit 54 in the algorithm for generating input authentication information. That is, the input authentication information output unit 154 performs an input authentication information generation process for generating input authentication information based on input information, but continues to output the same input authentication information until a predetermined update condition is satisfied. In this embodiment, the input authentication information output unit 154 sets the update condition as the input authentication information generation process being repeated a predetermined number of times, and continues to output the same input authentication information until the input authentication information generation process is repeated a predetermined number of times, and performs a process for updating the input authentication information when the input authentication information generation process is repeated a predetermined number of times.

In this embodiment, the input authentication information output unit 154 accepts input of information from the client terminal 60 that has been authenticated as having operation control authority, and outputs the first input authentication information IC1 until the input authentication information generation process for generating input authentication information based on the input information is repeated a predetermined number of times. In addition, the input authentication information output unit 154 sequentially performs an input authentication information update process for updating the input authentication information IC1 to a second input authentication information IC2 different from the first input authentication information IC1, on the condition that the input authentication information generation process is repeated a predetermined number of times. The input authentication information update process by the input authentication information output unit 154 is performed irreversibly. In other words, after the input authentication information output unit 154 updates the input authentication information IC1 to a second input authentication information IC2 different from the first input authentication information IC1 by the input authentication information update process, it does not perform a process of returning the first input authentication information IC1 and the second input authentication information IC2 to their pre-update state.

Next, the security system 100 according to the second embodiment will be described in detail with reference to the flowcharts in Figs. 6 and 7 and the explanatory diagram in Fig. 8. In the following description, the control flow on the control device 130 side will first be described with reference to Fig. 6, and then the control flow on the server 150 side will be described with reference to Fig. 7.

(Step 3-1)
In step 3-1, the control device 130 checks whether or not a start-up operation has been performed by the user. If a start-up operation by the user has been confirmed, the control flow proceeds to step 3-2.

(Step 3-2)
In step 3-2, the random authentication information output unit 36 randomly generates random authentication information consisting of a predetermined number of digits. The random authentication information output unit 36 also outputs (reports) the random authentication information via the information input unit 34. After that, the control flow proceeds to step 3-3.

(Step 3-3)
In step 3-3, the reference authentication information generating unit 138 generates reference authentication information by a predetermined algorithm. Specifically, the reference authentication information generating unit 138 outputs first reference authentication information VC1 corresponding to first input authentication information IC1 generated in the server 150, and performs processing to output second reference authentication information VC2 corresponding to second input authentication information IC2 to be used as input authentication information after the first input authentication information IC1. The control device 130 holds the first reference authentication information VC1 and the second reference authentication information VC2 so as not to leak to the outside. Thereafter, the control flow proceeds to step 3-4.

(Step 3-4)
In step 3-4, the control device 130 checks whether any information has been input via the operation unit 114a of the terminal 114. The control device 130 waits until the input of information is confirmed. When the control device 130 confirms that information has been input, the control flow proceeds to step 3-5.

(Step 3-5)
In step 3-5, the authentication control unit 40 compares the information input to the information input unit 34 in step 3-4 with the first reference authentication information VC1 and the second reference authentication information VC2 previously generated and stored by the reference authentication information generating unit 138 in step 3-3, and performs authentication for the operation control (control related to locking and unlocking) of the lock device 10 based on the result. If the information input to the information input unit 34 does not match either the first reference authentication information VC1 or the second reference authentication information VC2, the authentication control unit 40 returns the control flow to step 3-1. On the other hand, if the information input to the information input unit 34 matches either the first reference authentication information VC1 or the second reference authentication information VC2, the authentication control unit 40 advances the control flow to step 3-6.

(Step 3-6)
In step 3-6, the control device 130 permits the automatic door opening and closing device 110 to be locked or unlocked by the lock mechanism control section 32 outputting an operation signal to the actuator 22. Thereafter, the control device 130 advances the control flow to step 3-7.

(Step 3-7)
In step 3-7, the control device 130 checks whether the information input to the information input unit 34 in step 3-5 matches the first reference authentication information VC1 or the second reference authentication information VC2. As described above, on the condition that the automatic door opening and closing device 110 is permitted to be controlled in operation multiple times (n times), the reference authentication information generating unit 138 performs an update process of the first input authentication information IC1 and the second input authentication information IC2 at the next timing (n+1 times) (see FIG. 8). Therefore, while the first input authentication information IC1 is being output from the server 150, the first input authentication information IC1 is input to the information input unit 34 and matches the first reference authentication information VC1. In this case, a series of control flows performed in the control device 130 is completed. On the other hand, when the input authentication information output from the server 150 changes from the same first input authentication information IC1 as before to information updated by the second input authentication information IC2, the information input to the information input unit 34 matches the second matching authentication information VC2 in the matching process. In this case, a series of control flows performed in the control device 130 is completed. Thus, in step 3-7, if the information input to the information input unit 34 is different from before and has changed from the first matching authentication information VC1 to information corresponding to the second matching authentication information VC2, the control flow proceeds to step 3-8.

(Step 3-8)
In step 3-8, the control device 130 performs a process of replacing the information that has been the first verification authentication information VC1 with the second verification authentication information VC2 to update it. At the same time, the control device 130 generates new information as the second verification authentication information VC2. This completes a series of control flows.

Next, the control flow performed on the server 150 side will be explained in detail with reference to FIG. 7.

(Step 4-1)
In step 4-1, the server 150 checks whether or not there is access from the client terminal 60. If access from the client terminal 60 is confirmed, the control flow proceeds to step 4-2.

(Step 4-2)
In step 4-2, the authority authentication unit 52 judges whether or not the user authentication of the client terminal 60 that has accessed the server 150 is proper, in the same manner as in the case of the above-mentioned security system 1. If the user is authenticated as being proper, the control flow proceeds to step 4-3.

(Step 4-3)
In step 4-3, server 150 checks whether random authentication information has been input via client terminal 60. If input of random authentication information has been confirmed, control flow proceeds to step 4-4.

(Step 4-4)
In step 4-4, the input authentication information output unit 154 generates the input authentication information by a predetermined algorithm. Here, as described above, the input authentication information output unit 154 outputs the same first input authentication information IC1 until the input authentication information generation process is repeated a predetermined number of times, with the update condition being that the input authentication information generation process is repeated a predetermined number of times. In addition, the input authentication information output unit 154 sequentially performs an input authentication information update process for updating the first input authentication information IC1 to a second input authentication information IC2 different from the first input authentication information IC1, with the condition being that the input authentication information generation process is repeated a predetermined number of times. Therefore, in step 4-4, the input authentication information output unit 154 checks whether the number of times the first input authentication information IC1 is output is less than a predetermined number of times N. Here, if the number of times the first input authentication information IC1 is output is N or more, the control flow proceeds to step 4-5, and if the number of times the first input authentication information IC1 is output is less than N, the control flow proceeds to step 4-6.

(Step 4-5)
When the process proceeds to step 4-5, the number of times the first input authentication information IC1 has been output is equal to or greater than N. Therefore, the input authentication information output unit 154 performs a process of updating the first input authentication information IC1 that has been output so far to a different second input authentication information IC2. After that, the control flow proceeds to step 4-6.

(Step 4-6)
When the process proceeds to step 4-6, the input authentication information output unit 154 outputs the first input authentication information IC1. Here, when the process proceeds from step 4-4 to step 4-6 described above, the same first input authentication information IC1 as before is output. On the other hand, when the process proceeds from step 4-5 to step 4-6, information after the update process in step 4-5 is output as the first input authentication information IC1, which is different from what was output previously. This completes a series of control flows.

As described above, in the security system 100 of the second embodiment, the input authentication information and the matching authentication information are updated to different information on the condition that the generation process is repeated a predetermined number of times. Therefore, in a device that is operated frequently, such as an automatic door opening and closing device 110 that is used in a common area, it is possible to ensure high security accuracy while preventing the variation that can be output as input authentication information and matching authentication information from being exhausted.

In addition, in the above-mentioned security system 100, the output algorithm of the input authentication information in the server 150 accepts information input from the client terminal 60 that has been authenticated as having operation control authority, outputs the first input authentication information IC1 until a predetermined update condition is satisfied, and sequentially performs an input authentication information update process to update the input authentication information to a second input authentication information IC2 different from the first input authentication information IC1, provided that the update condition is satisfied. In addition, the output algorithm of the matching authentication information in the control device 130 performs a process of outputting the first matching authentication information VC1 corresponding to the first input authentication information IC1 and the second matching authentication information VC2 corresponding to the second input authentication information IC2. In security system 100, on the condition that the information input to operation unit 114a does not correspond to first matching authentication information VC1 but corresponds to second matching authentication information VC2, authentication control unit 140 allows operation control and executes matching authentication information update processing to update second matching authentication information VC2 as first matching authentication information VC1 and generate new second matching authentication information VC2. Because of this configuration, security system 100 can ensure high security accuracy while suppressing the frequency of updates to input authentication information and matching authentication information.

As described above, in the security system 100 of the second embodiment, the update condition in the input authentication information update process is that the input authentication information generation process is repeated a predetermined number of times. This configuration can enhance security while minimizing the frequency of the input authentication information update process. Note that, in this embodiment, the update condition in the input authentication information update process is that the input authentication information generation process is repeated a predetermined number of times, but the present invention is not limited to this. Specifically, the security system 100 may set another condition as an update condition instead of or in addition to the input authentication information generation process being repeated a predetermined number of times. For example, the security system 100 may set a condition such as the time from the time the input authentication information was updated as one of the update conditions in the input authentication information update process.

In the security system 100 described above, the matching authentication information update process may have as one of its update conditions that information corresponding to the second matching authentication information VC2 is input to the operation unit 114a, causing the authentication control unit 140 to perform a process of allowing operational control multiple times in succession. With this configuration, it is possible to prevent the matching authentication information from being updated by the matching authentication information update process at an inappropriate time when, for example, information corresponding to the second matching authentication information VC2 is input to the operation unit 114a due to an erroneous operation or the like.

As described above, it is preferable that the security system 100 performs the input authentication information update process irreversibly. This configuration can prevent the input authentication information from erroneously returning to a previous state. Note that, in this embodiment, an example is shown in which the input authentication information update process is performed irreversibly, but the present invention is not limited to this, and the input authentication information update process may be performed reversibly.

The security system 100 described above may also be capable of reporting the number of times the matching authentication information update process has been performed. With this configuration, it becomes easier to perform appropriate maintenance, for example, when a discrepancy occurs in updating the matching authentication information and the input authentication information.

The present invention is not limited to the above-described embodiments and variations, and other embodiments may be possible within the scope of the claims, based on the teachings and spirit of the invention. The components of the above-described embodiments may be arbitrarily selected and combined. Any component of the embodiment may also be arbitrarily combined with any component described in the means for solving the invention or any component that embodies any component described in the means for solving the invention. We intend to obtain rights to these as well through amendments to this application or divisional applications, etc.

The present invention can be suitably used in security systems in general that include security devices, such as locking devices, used to ensure security.

1: Security system 10: Lock device 30: Control device 34: Information input section 36: Random authentication information output section 38: Verification authentication information generation section 40: Authentication control section 50: Server 52: Authority authentication section 54: Input authentication information output section 60: Client terminal 100: Security system 110: Automatic door opening/closing device 114a: Operation section 130: Control device 140: Authentication control section 150: Server IC1: First input authentication information IC2: Second input authentication information VC1: First verification authentication information VC2: Second verification authentication information

Claims (14)

A security system having a control device that controls the operation of a security device,
The security system operates using information obtained by using a server provided separately from the security system and a client terminal provided separately from the security system,
The server,
an authority authentication unit that authenticates an operational control authority of the security device based on information input via a client terminal;
an input authentication information output unit that receives information input from the client terminal that has been authenticated as having operation control authority, generates input authentication information based on the input information using a predetermined algorithm for generating authentication information, and outputs the generated input authentication information to the client terminal;
and
The control device,
a random authentication information output unit that outputs random authentication information that is partially or entirely generated randomly;
a verification authentication information generating unit that generates verification authentication information corresponding to the random authentication information by the predetermined algorithm;
an information input unit that accepts information input by a user operation;
an authentication control unit that performs authentication control related to the operation control based on the information input to the information input unit and the verification authentication information,
the authentication control unit permits the operation control on the condition that the information input to the information input unit corresponds to the verification authentication information generated based on the random authentication information previously output,
a display device that displays the plurality of characters constituting the random authentication information in sequence and continuously;
A security system in which the display of the next character is delayed until a predetermined operation is performed. A security system having a control device that controls the operation of a security device,
The security system operates using information obtained by using a server provided separately from the security system and a client terminal provided separately from the security system,
The server,
an authority authentication unit that authenticates an operational control authority of the security device based on information input via a client terminal;
an input authentication information output unit that receives information input from the client terminal that has been authenticated as having operation control authority, generates input authentication information based on the input information using a predetermined algorithm for generating authentication information, and outputs the generated input authentication information to the client terminal;
and
The control device,
a random authentication information output unit that outputs random authentication information that is partially or entirely generated randomly;
a verification authentication information generating unit that generates verification authentication information corresponding to the random authentication information by the predetermined algorithm;
an information input unit that accepts information input by a user operation;
an authentication control unit that performs authentication control related to the operation control based on the information input to the information input unit and the verification authentication information,
the authentication control unit permits the operation control on the condition that the information input to the information input unit corresponds to the verification authentication information generated based on the random authentication information previously output,
a display device capable of displaying a plurality of characters that may constitute the random authentication information in different areas corresponding to each character, and capable of successively displaying the plurality of characters that constitute the random authentication information to be displayed in order;
A security system in which the display of a next character is delayed until a predetermined time has elapsed after the previous character has been erased. A security system having a control device that controls the operation of a security device,
The security system operates using information obtained by using a server provided separately from the security system and a client terminal provided separately from the security system,
The server,
an authority authentication unit that authenticates an operational control authority of the security device based on information input via a client terminal;
an input authentication information output unit that receives information input from the client terminal that has been authenticated as having operation control authority, generates input authentication information based on the input information using a predetermined algorithm for generating authentication information, and outputs the generated input authentication information to the client terminal;
and
The control device,
a random authentication information output unit that outputs random authentication information that is partially or entirely generated randomly;
a verification authentication information generating unit that generates verification authentication information corresponding to the random authentication information by the predetermined algorithm;
an information input unit that accepts information input by a user operation;
an authentication control unit that performs authentication control related to the operation control based on the information input to the information input unit and the verification authentication information;
the authentication control unit permits the operation control on the condition that the information input to the information input unit corresponds to the verification authentication information generated based on the random authentication information previously output,
Predetermined release information consisting of a character string exceeding the number of characters constituting the input authentication information is set,
A security system characterized in that, on the condition that the lifting information is input into the information input unit, either one or both of the restriction on execution of the authentication control and the lifting of the restriction on execution of the authentication control can be performed. A security system having a control device that controls the operation of a security device,
The security system operates using information obtained by using a server provided separately from the security system and a client terminal provided separately from the security system,
The server,
an authority authentication unit that authenticates an operational control authority of the security device based on information input via a client terminal;
an input authentication information output unit that receives information input from the client terminal that has been authenticated as having operation control authority, generates input authentication information based on the input information using a predetermined algorithm for generating authentication information, and outputs the generated input authentication information to the client terminal;
and
The control device,
a random authentication information output unit that outputs random authentication information that is partially or entirely generated randomly;
a verification authentication information generating unit that generates verification authentication information corresponding to the random authentication information by the predetermined algorithm;
an information input unit that accepts information input by a user operation;
an authentication control unit that performs authentication control related to the operation control based on the information input to the information input unit and the verification authentication information;
the authentication control unit permits the operation control on the condition that the information input to the information input unit corresponds to the verification authentication information generated based on the random authentication information previously output,
A security system comprising: the random authentication information output unit generating the random authentication information by adding characters associated with predetermined information to randomly generated characters. A security system having a control device that controls the operation of a security device,
The security system operates using information obtained by using a server provided separately from the security system and a client terminal provided separately from the security system,
The server,
an authority authentication unit that authenticates an operational control authority of the security device based on information input via a client terminal;
an input authentication information output unit that receives information input from the client terminal that has been authenticated as having operation control authority, generates input authentication information based on the input information using a predetermined algorithm for generating authentication information, and outputs the generated input authentication information to the client terminal;
and
The control device,
a random authentication information output unit that outputs random authentication information that is partially or entirely generated randomly;
a verification authentication information generating unit that generates verification authentication information corresponding to the random authentication information by the predetermined algorithm;
an information input unit that accepts information input by a user operation;
an authentication control unit that performs authentication control related to the operation control based on the information input to the information input unit and the verification authentication information;
the authentication control unit permits the operation control on the condition that the information input to the information input unit corresponds to the verification authentication information generated based on the random authentication information previously output,
output of the random authentication information that overlaps with the random authentication information previously output is restricted until all of the candidates that can be used as the random authentication information consisting of a plurality of character strings are used;
A security system characterized in that, on the condition that all of the candidates usable as the random authentication information have been used, the algorithm generates input authentication information and comparison authentication information under conditions different from those before all of the candidates usable as the random authentication information have been used. A security system having a control device that controls the operation of a security device,
The security system operates using information obtained by using a server provided separately from the security system and a client terminal provided separately from the security system,
The server,
an authority authentication unit that authenticates an operational control authority of the security device based on information input via a client terminal;
an input authentication information output unit that receives information input from the client terminal that has been authenticated as having operation control authority, generates input authentication information based on the input information using a predetermined algorithm for generating authentication information, and outputs the generated input authentication information to the client terminal;
and
The control device,
a random authentication information output unit that outputs random authentication information that is partially or entirely generated randomly;
a verification authentication information generating unit that generates verification authentication information corresponding to the random authentication information by the predetermined algorithm;
an information input unit that accepts information input by a user operation;
an authentication control unit that performs authentication control related to the operation control based on the information input to the information input unit and the verification authentication information;
the authentication control unit permits the operation control on the condition that the information input to the information input unit corresponds to the verification authentication information generated based on the random authentication information previously output,
The output algorithm of the input authentication information in the server is
an input authentication information generating process for receiving input of information from the client terminal that has been authenticated as having operation control authority, generating the input authentication information based on the input information, and outputting the same input authentication information until the input authentication information generating process is repeated a predetermined number of times;
The output algorithm of the verification authentication information in the control device is
A security system characterized in that it operates according to an algorithm that outputs the same reference authentication information until a reference authentication information generation process that generates reference authentication information is repeated a predetermined number of times. A security system having a control device that controls the operation of a security device,
The security system operates using information obtained by using a server provided separately from the security system and a client terminal provided separately from the security system,
The server,
an authority authentication unit that authenticates an operational control authority of the security device based on information input via a client terminal;
an input authentication information output unit that receives information input from the client terminal that has been authenticated as having operation control authority, generates input authentication information based on the input information using a predetermined algorithm for generating authentication information, and outputs the generated input authentication information to the client terminal;
and
The control device,
a random authentication information output unit that outputs random authentication information that is partially or entirely generated randomly;
a verification authentication information generating unit that generates verification authentication information corresponding to the random authentication information by the predetermined algorithm;
an information input unit that accepts information input by a user operation;
an authentication control unit that performs authentication control related to the operation control based on the information input to the information input unit and the verification authentication information,
the authentication control unit permits the operation control on the condition that the information input to the information input unit corresponds to the verification authentication information generated based on the random authentication information previously output,
The output algorithm of the input authentication information in the server is
accepts input of information from the client terminal that has been authenticated as having operation control authority, outputs first input authentication information until a predetermined update condition is satisfied, and sequentially performs an input authentication information update process for updating the first input authentication information to second input authentication information different from the first input authentication information, on condition that the update condition is satisfied;
The output algorithm of the verification authentication information in the control device is
a process of outputting first verification authentication information corresponding to the first input authentication information and second verification authentication information corresponding to the second input authentication information;
the authentication control unit permits the operation control on condition that the information input to the information input unit corresponds to the first authentication information for verification;
a verification authentication information update process that updates the second verification authentication information as first verification authentication information and generates new second verification authentication information, wherein, on condition that the information input to the information input unit corresponds to the second verification authentication information, the authentication control unit allows the operational control and updates the second verification authentication information as first verification authentication information and generates new second verification authentication information. 8. The security system of claim 7, wherein the update condition in the input authentication information update process is that an input authentication information generation process, which accepts input of information from the client terminal that has been authenticated as having operational control authority and generates the input authentication information based on the input information , is repeated a predetermined number of times. The security system described in claim 7, characterized in that the comparison authentication information update process is performed with one of the update conditions being that information corresponding to the second comparison authentication information is input into the information input section, and the authentication control section performs a process of allowing the operational control multiple times in succession. 10. The security system according to claim 7, wherein the input authentication information update process is performed irreversibly. 10. The security system according to claim 7, further comprising a function capable of notifying the number of times the verification authentication information update process has been performed. 12. The security system according to claim 1, wherein the algorithm generates authentication information based on identification information for identifying an individual security device. The security device ensures security regarding the opening and closing of the door,
13. The security system according to claim 1, wherein the control device controls the opening and closing of the door. 14. The security system according to claim 1, wherein the control device operates without communicating with the server and the client terminal.

Images